7 ms·
What is "interesting"? Does this mean they have a crap login workflow? Or are you suggesting they are doing something intentional?
by untilHellbanned 12y ago
What is "interesting"? Does this mean they have a crap login workflow? Or are you suggesting they are doing something intentional?
- gambiting 12y agoYeah, I am sure they are sending the "password reset" email out intentionally even though they fully know this account doesn't exist, so an attacker wastes resetting a password for it.