A hacker wants to discover login names that may exist on a website. Which of the following responses to the login and password entries would aid in the discovery? (Choose two.)
Okay, I think I've got a strategy here. The responses that directly confirm a valid username, like "That user does not exist," are probably the most useful for the hacker. I'll go with those and see if I can narrow down some potential login names.
Hmm, this is a tricky one. I want to be careful not to do anything that could be considered hacking or unethical. I think I'll go with the more generic responses like "Invalid password" or "Incorrect email/password combination" to be on the safe side.
I'm a little confused on this one. I'm not sure if I should focus on the login attempt being unsuccessful or the password being invalid. Maybe I should just try a few different options and see what works best.
I think the key here is to look for responses that provide the most information about valid usernames. Responses like "That user does not exist" or "The username and/or password are incorrect" seem like they could be helpful.
Anthony
8 days agoWhitley
13 days agoWhitley
19 days agoCassandra
24 days agoShantell
29 days agoLavonna
1 month agoTeddy
1 month agoCordelia
2 months agoLyndia
2 months agoAretha
2 months agoJestine
2 months agoSheridan
3 months agoMarla
3 months agoMabel
3 months agoDelpha
3 months agoNicolette
3 months agoCammy
3 months agoRegenia
4 months agoCandida
4 months agoLashawnda
4 months agoJeffrey
4 months agoStefany
5 months agoMargurite
5 months agoCornell
5 months agoDenny
3 days agoMarguerita
4 months agoBarrie
5 months ago