You're on point re: facts leakage and This could be a crucial consideration for anybody rolling their unique authentication/authorization scheme. +one for mentioning OWASP. Moral hacking is really a respectable career. Ethical hackers perform as safety consultants or personnel of the business