4 ms·
...thus exploiting a shortcoming in the UX error messages where the condition was continually reported as Incorrect Password when the true problem was the accou
by tanseydavid 6y ago
...thus exploiting a shortcoming in the UX error messages where the condition was continually reported as Incorrect Password when the true problem was the account was locked.
Without this shortcoming the child's deceit would not have worked on the adults who tried to troubleshoot the problem.
Authentication is a mess...
- Arnt 6y agoYou have to distinguish. Reporting the untruth to the general password is common and IMO acceptable. But the school's troubleshooter should have had deeper insight. Presenting as few details to authenticated support personnel as to unauthenticated would-be users is inappropriate.