3 ms·
They can modify it to simply say whether your account was compromised, regardless of whether you have an account (ie, if no account -> not compromised).
by the_french 14y ago
They can modify it to simply say whether your account was compromised, regardless of whether you have an account (ie, if no account -> not compromised).
- wuest 14y ago...Which they ought to do. Offering the ability to enumerate user accounts is unlikely to be the immediate goal of this utility, but it's an effect nonetheless.
- lelandbatey 14y ago30 minutes later and it's fixed. Entering an invalid email also results in a "this email was not compromised" message.
- yahelc 14y agoThat's what they're doing. "aijaspijasohisaho@asoihdshohdusudhs.com" gets a message saying that that account wasn't compromised.