[10:02:19] <BhikitiaTeam>	 Hi, I am PHT from Bhikitia (An open encyclopedia powered by mediawiki)
[10:03:06] <BhikitiaTeam>	 I need few support about Search Result of Bhikitia.org
[22:35:56] <njsg>	 why do I have the faint feeling that Wikipedia login is showing a wrong credentials message when something else happens?
[23:16:59] <Reedy>	 That would be telling
[23:17:47] <Reedy>	 But it's not an uncommon pattern with many applications. You don't give away more information than if you have to
[23:18:01] <Reedy>	 Password reset? "We'll send you an email if you have an account"
[23:25:08] <Shaun>	 I believe that's considered best practice these days.  it's mildly hostile to the user, but stops the recovery page being used to validate that accounts exist
[23:25:31] <Reedy>	 Of course, in case of MediaWiki, we post public user lists
[23:25:43] <Shaun>	 including email addresses?
[23:26:05] <Shaun>	 actually scratch that, this was for login, not recovery
[23:31:42] <AntiComposite>	 for Special:PasswordReset it's important to not disclose which accounts also require an email address to have their password reset
[23:32:38] <AntiComposite>	 for login you should only get wrong credentials if your username or password is wrong, other login failures should have their own errors most of the time