4 ms·

What is that going to do, the outcome is the attacker still has the password hash and the linked email address?

• SixSigma 10y ago
  So how do they log in without a username & password ?
  • bengale 10y ago
    To your site, they probably don't. But they'll take the email and password and use it elsewhere. You'll have still exposed your customers.