Spudtater's Journal

Although this is often viewed as bad usernames are usually so widely exposed (email addresses, "the username is already taken", etc...) that it's not a huge risk. Of course if the system ever tells you you got the password right but not the username it's very bad and wrong. I think there was a dailwtf where the system showed an error if you signed up with the same password as someone else.