Kairos@lemmy.today to Programmer Humor@programming.dev · edit-21 day agoThese F-ing Logins Nowadayslemmy.todayimagemessage-square247linkfedilinkarrow-up1941arrow-down127
arrow-up1914arrow-down1imageThese F-ing Logins Nowadayslemmy.todayKairos@lemmy.today to Programmer Humor@programming.dev · edit-21 day agomessage-square247linkfedilink
minus-squareSpatchyIsOnline@lemmy.worldlinkfedilinkarrow-up1·11 hours agoTelling the user that the account doesn’t exist is bad practice. Hackers can use it to find out who has an account on what platform and more directly target them with phishing emails
minus-squareAmyAye@nord.publinkfedilinkEnglisharrow-up1·8 hours agoOk, use the classic “bad username or password”. Or just properly rate limit so hackers can’t just slam the long in page with a zillion combos.
Telling the user that the account doesn’t exist is bad practice. Hackers can use it to find out who has an account on what platform and more directly target them with phishing emails
Ok, use the classic “bad username or password”.
Or just properly rate limit so hackers can’t just slam the long in page with a zillion combos.