Want everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.
If your login page has different error messages for unrecognized usernames and incorrect passwords, an attacker can write a script to submit usernames and test the response.
