Is revealing a PC account user name bad?
In short NO. Why?
- Well for starters your PC username is not a information that is unique unique to you. A lot of people in the world can have the same windows usernameWindows username.
- Since itsit's not unique to a person like an email address where two people cant have the same email address an attacker cantcan't gain much information or even tell with a certain degree that the username belongs to you and you alone.
- sureSure, if that username of yours is your name itself the attacker might use that knowledge to further OSINT you but that's just about it.
Googling typically gets me back to the first two of these articles. These answers show that on a website it may be bad to reveal the username for the website account, because it gives malicious users needed information to try to crack an account. The "hacking" is rendered easier because the bad guy already knows where on the internet to try the passwords to crack the website account.
That is because a username in a website is unique and furthermore in a brute force attack two pieces of information are needed. An attacker could (if the website allows) try a combination of passwordpasswords since he already knows that the username is valid.
Even if the user has port-forwarded remote-in software, one would have to know the internet address of the computer or the router, of which there's some 4 billion in the IPv4 space, and astronomically more in IPv6. Knowing where to start poking seems a lot harder.
The assumption that you make here is wrong.Never Never think that by hiding IP address you might be "secure". The concept of defense in depthdefence-in-depth has to be applied here. The internet is being scanned for vulnerabilities as you read this answer.
The logs therefore reveal the account user name to anyone who may download the log file. And everyone including non-authenticated visitors, can download log files. Some users obfuscate these path names because they feel that having their user names out on the web is bad.
In my opinion, there is nothing insecure here, plus you already say half of the people use fake the names. There is nothing substantial to gain here for an attacker except maybe a bit of information about the person.