2026-04-10 13:09 UTC
Any further "helpful" information in that error message would be a security issue.
Replies (2)
-
@smeg@feddit.uk 2026-04-10 13:58
I am annoyed by (but respect) APIs that take it a level further and don't even give you a 403 to say you're unauthorised, they just give you a 404 because anything else would acknowledge that the resource you requested actually existed
-
@gibson@sopuli.xyz 2026-04-10 14:38
While true most of these websites expose valid usernames in other places