You Are on position re: info leakage and This could be a crucial consideration for anybody rolling their very own authentication/authorization scheme. +one for mentioning OWASP. Hackers utilized an employee's password, found to the dim World-wide-web, to accessibility the network. The Colonial Pipeline Firm paid out a USD five million http://pigpgs.com