“Invalid username or password” is a useless security measure

Comments



from Hacker News http://bit.ly/1vC7JVR