[codegladiator]

first one is more helpful to hackers who want to figure out which accounts are registered on your site, and then later proceed with a brute force / social attack.

[bpicolo]

Malicious users can always check that via the signup flow anyway.