Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

How so? Please do elaborate.

(edit) In a context of a system that allows anyone to register new account, which appears to be what the linked article focuses on.



It's probably a minor issue, but if you can check for existing user names, you have a much easier time trying to find the matching password. Also, it could be a privacy issue (knowing user x is a customer of service y). Showing a photo as well...

Of course it depends on the context. On Hacker News all user names are visible anyway.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: