you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 14 hours ago (3 children)

Don't forget, if you type in one of your other email addresses by mistake it says something like "sending you a magic link".

Then it acts like you are signing in, but you are signing up, on a new account, oops, fuckers, just tell me it's not a valid account.

  • source
  • hideshow 3 child comments
  • [–] 2 points 5 hours ago (1 child)

    Telling the user that the account doesn't exist is bad practice. Hackers can use it to find out who has an account on what platform and more directly target them with phishing emails

  • source
  • parent
  • hideshow 1 child comment