News for hackers. Stuff that matters.

A comment on “Invalid username or password” is a useless security measure. Parent comment

Re:“Invalid username or password” is a useless security measure by rcthompson on Monday December 01, 2014 @02:29PM (#8683099)
Yes, but that also alerts any valid account with an unexpected password reset.
[ Parent | on HN ]

There are no comments on this comment yet.