3 ms·
Edge case: For services which uses an additional account name/alias (separate from email), where you can login with either account name or email; An attacker co
by croon 9y ago
Edge case: For services which uses an additional account name/alias (separate from email), where you can login with either account name or email; An attacker could find a target account name through signup, using an email the attacker owns.
- cdancette 9y agoTrue. For this I would recommend adding the mention "your username will be publicly visible" during the registration process.