Let’s gooooooooo

  • Spzi
    link
    fedilink
    English
    -2
    edit-2
    1 year ago

    An attacker would still know the account exists, and they would know the password did not match.

    Or you’re assuring them that specific password is used by some account, just not this one. Which is even worse.

    • Null User Object
      link
      English
      51 year ago

      Read the comment you’re responding to, again. Nothing about their suggestion leads to either of these scenarios.

      • Spzi
        link
        fedilink
        English
        41 year ago

        Right, I misread “shouldn’t” for “should”.