5 ms·

I'm pretty sure that accepting any old password during login should be considered more then a "bug" !