Kairos@lemmy.today to Programmer Humor@programming.dev · 22 hours agoThese F-ing Logins Nowadayslemmy.todayimagemessage-square259linkfedilinkarrow-up1934arrow-down124
arrow-up1910arrow-down1imageThese F-ing Logins Nowadayslemmy.todayKairos@lemmy.today to Programmer Humor@programming.dev · 22 hours agomessage-square259linkfedilink
minus-squareSpatchyIsOnline@lemmy.worldlinkfedilinkarrow-up2·4 hours agoTelling the user that the account doesn’t exist is bad practice. Hackers can use it to find out who has an account on what platform and more directly target them with phishing emails
minus-squareAmyAye@nord.publinkfedilinkEnglisharrow-up2·58 minutes agoOk, use the classic “bad username or password”. Or just properly rate limit so hackers can’t just slam the long in page with a zillion combos.
Telling the user that the account doesn’t exist is bad practice. Hackers can use it to find out who has an account on what platform and more directly target them with phishing emails
Ok, use the classic “bad username or password”.
Or just properly rate limit so hackers can’t just slam the long in page with a zillion combos.