Nathan Bowd

[Nathan Bowd @nathanbowd]

@troyhunt Nice! If you want them to waste even more time, I'd remove the cat & dog parts; that's a dead giveaway. Instead, have them reconfirm their password and have them think that they're not entering a matching password. While you're at it, add 16 character length complexity + captcha

[Nathan Bowd @nathanbowd]

@Eunicedwong Any recommendations on where to learn the basics about identifying and understanding these signals better? Trying to find a good source.