hi,
on the debian wiki at wiki.debian.org
when attempting to login with a fake username you get a different error
message than when attempting to login with the right username but the wrong
password. this can clearly be used to reveal existing user names, which is a
security concern

Reply via email to