2 ms·
Usernames are low-entropy human-readable identifiers. If you're getting at login rate limiting and other best practices regarding how things should be: right! T
by minitech 10y ago
Usernames are low-entropy human-readable identifiers. If you're getting at login rate limiting and other best practices regarding how things should be: right! That's why it's a term for a vulnerability.
- runesoerensen 10y agoYou're right - I thought you were referring to an authentication system's resistance against username enumeration (rather than the actual username). Thanks for clarifying!