2 ms·
It had never occurred to me that "User IDs" were all that confidential. At the very least, the MTA pool will usually let you know (Just checked, Yahoo's MTA do
by ghshephard 13y ago
It had never occurred to me that "User IDs" were all that confidential. At the very least, the MTA pool will usually let you know (Just checked, Yahoo's MTA does), so, if you are patient, and don't trigger its anti-DOS mechanisms (usually by using a botnet to slowly, ever so slowly query them) - you can brute force quite a few account names.
- rurounijones 13y agoJapan's IPA (Information-technology Promotion Agency) include in their general application development guidelines that user ID's should not be email addresses for the exact reason that they "are easy to guess". I spent some time arguing that this was a silly requirement but in the end I had to change my program to use non-email address user IDs (which no one can remember as they are specific to this application... )