You can read the task, take hints and check your answer — but nothing is saved. No XP, no skill points, and this task will not be marked complete.
A login form replies 'No such user' for unknown emails and 'Wrong password' for known ones. What should it return instead?
What this proves: Recognise information disclosure through differential responses.
Need assistance? You can reveal sequential hints. Each hint applies a minor penalty to your score.
If you are completely stuck, you can unlock the full step-by-step walkthrough.