Noleli’s Twitter Archive—№ 26,291

jennydove This is a terrible idea security-wise. If you try to log in with invalid credentials, don’t tell a potential attacker whether they at least got the email address right!