Secure error messages in software systems

LOOSE LIPPED SYSTEMS

Usually when you enter your username and password on any webite and if any of them is wrong it repsonds with "Invalid Username / Password". This type of a system makes itself a little less vulnerable to the attacks.

But systems that respond with "Invalid Username" or "Invalid Password" are more vulnerable as attackers trying usernames or passwords know that either the username they've entered is right or the password they've entered is correct. This makes the system more vulnerable because it is somewhat Loose Lipped.

Such systems are called as Loose Lipped Systems.