Hacker News new | ask | show | jobs
by williamscales 1374 days ago
I agree with the general thought process here, but there is a greater leakage: no service will allow you to create an account with an email that is already registered.

So all this discussion about how to handle the failed login is somewhat pointless.