Timeline for If you mistakenly try to access a website with an unrelated username/password, do they record your logon data?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 2, 2020 at 22:11 | comment | added | Kevin | @Chenmunka As ikkachu and Iron gremlin have stated, this is a Bad Idea™ | |
| Mar 2, 2020 at 21:46 | comment | added | Iron Gremlin | @ilkkachu And/or filled with valid passwords for that same user, but for a different site. This would absolutely be a horrible risk for both the site in question and all of it's users individually. I cannot imagine a usecase for that log data that would come anywhere close to balancing that risk. | |
| Mar 2, 2020 at 20:09 | comment | added | ilkkachu | @Chenmunka, those logs would be filled with otherwise valid passwords with one character mistyped. That's a huge leak risk. | |
| Mar 2, 2020 at 18:29 | comment | added | Chenmunka | On the contrary, I would be shocked if a sited did not store the passwords of failed logins. If only for a few days for statistical purposes. | |
| Mar 2, 2020 at 13:35 | review | First posts | |||
| Mar 2, 2020 at 18:29 | |||||
| Mar 2, 2020 at 13:34 | history | answered | JakeInTheMiddle | CC BY-SA 4.0 |