A hacker wants to discover login names that may exist on a website. Which of the following responses to the login and password entries would aid in the discovery? (Choose two.)
Okay, I think I've got a strategy here. The responses that directly confirm a valid username, like "That user does not exist," are probably the most useful for the hacker. I'll go with those and see if I can narrow down some potential login names.
Hmm, this is a tricky one. I want to be careful not to do anything that could be considered hacking or unethical. I think I'll go with the more generic responses like "Invalid password" or "Incorrect email/password combination" to be on the safe side.
I'm a little confused on this one. I'm not sure if I should focus on the login attempt being unsuccessful or the password being invalid. Maybe I should just try a few different options and see what works best.
I think the key here is to look for responses that provide the most information about valid usernames. Responses like "That user does not exist" or "The username and/or password are incorrect" seem like they could be helpful.
Cordelia
11 days agoLyndia
16 days agoAretha
21 days agoJestine
26 days agoSheridan
1 month agoMarla
1 month agoMabel
1 month agoDelpha
2 months agoNicolette
2 months agoCammy
2 months agoRegenia
2 months agoCandida
2 months agoLashawnda
3 months agoJeffrey
3 months agoStefany
3 months agoMargurite
3 months agoCornell
4 months agoMarguerita
2 months agoBarrie
3 months ago