3 ms·
“username or password incorrect” is bullshit
- elmerfud 6y agoUnfortunately some things regarding security best practices are about checking boxes on an auditors form. All to often companies do not adapt those best practices to their company product so they achieve the desired effect.
- gostsamo 6y agoThis is contrarianism for the sake of it. Facebook accepts phone number as username. Imagine how convenient would it be to check millions of phone numbers for an association with a fb account.
- pmdulaney 6y agoSomething even worse that I've noticed lately is that some portal websites (e.g., utility bill pay sites) will claim that the main website is down if you enter the wrong password. So you really don't know if the website is down or maybe you just used an old password.