4 ms·

tldr: she logged in with the wrong password 20 times in order to get locked out of her account.

• tanseydavid 6y ago
  ...thus exploiting a shortcoming in the UX error messages where the condition was continually reported as Incorrect Password when the true problem was the account was locked. Without this shortcoming the child's deceit would not have worked on the adults who tried to troubleshoot the problem. Authentication is a mess...
  • Arnt 6y ago
    You have to distinguish. Reporting the untruth to the general password is common and IMO acceptable. But the school's troubleshooter should have had deeper insight. Presenting as few details to authenticated support personnel as to unauthenticated would-be users is inappropriate.