Hacker News new | ask | show | jobs
by TheMaskedCoder 1300 days ago
Agreed. OWASP now advises developers on how to avoid account enumeration, so this take no longer makes sense.