I think I’ll trust owasp and my own over 20 years of experience building commercial software but you do you
v_krishna
- 0 Posts
- 3 Comments
Joined 2 years ago
Cake day: June 7th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
This generally goes against security best practices as it can be used for attempted user enumeration. A better version would be “we’ll send you an email with your account status if this user exists” but obviously that results in a fair amount more complexity (and cost) to implement
What kind of odd take is this. I agree Barbara Lee won’t accomplish much in an interim mayor seat but she’s mostly beyond reproach and definitely speaks for me!