Quote:
Originally Posted by _panic_
if you want to get really, really serious about testing it, there might well be subtle time differences between a valid and invalid user account.
it might be nice to see if you can detect invalid accounts by the difference in time it takes to display a return code when providing a valid vs invalid user. but then again the effect might be subtle and not detectable above the noise.
|
Well im connecting to my server on the same machine it runs on and i also have a powerful machine so detecting little lags like that for me would probably be a futile activity.
But i did try it several times back and forth supplying different usernames and passwords and i couldn't see a difference.