3 ms·
"What prevents the same enumerating attack against the sign up form. Are you going to give them a generic message that the username is invalid when it in fact h
by kamkha 14y ago
"What prevents the same enumerating attack against the sign up form. Are you going to give them a generic message that the username is invalid when it in fact has been taken?"
There are, more frequently, CAPTCHAs on registration forms.
- harshreality 14y agoImmediate username availability checks (via ajax) are fairly common, and they bypass captchas.