Stupid web security shit

Troy Hunt has put together an article documenting some of the stupid web security shit he’s seen in his travels.

One example: an error message stating that your desired password is already used by another user.

More shocking to me than some of these issues is how defensively corporations seems to respond when you let them know. Eesh!