Hey Citrix:

How about if my account is locked, you give me an error saying "my account is locked" and not "incorrect username and password"

SO I CAN KNOW WHAT I NEED TO DO TO FIX THE ISSUE YOU JACKASSES.

It's called Brute-Force protection

@metamourge Oh so to protect my account from brute force, it gives me, the legit user, the runaround, wasting my time by giving me the wrong error message?

I'm not asking for a stacktrace or an exception, I'm just asking for "your account is locked."

@jkuhl ^sadly its more common than you think.

@jkuhl but then the brute force will detect, and stop.
implemented this way is much much better, as it will continue forever, and cause a lock down again, after you reset your password! this is the best user experience ever! because as long as a Troll knows your username, he can lock you out anytime he wants!

/s