[wp-hackers] WordPress can "leak" if a username is valid

[Will Brown]

I don't know about Fantastico installations, but I know that the default
Wordpress installation doesn't give you a choice. I was only using that as
an example - I just feel that if we were worried about people finding
usernames, then we shouldn't have a default username that you're basically
forced to use (unless you use Fantastico).

Will