User enumeration attack in the login page

mr-ma / paper-review-go

paper review enables researchers to review papers collaboratively, craft taxonomies, visualise results, and analyse the gaps

0 stars 0 forks source link

Open mr-ma opened 6 years ago

mr-ma commented 6 years ago

The login page may not indicate whether a username exist or not. We need a lock down (tarpit) mechanism as well.