melton

If I try 'bmelton' as a username on, say, Monster. com, and my employer gets as message saying "the username is right, but the password is wrong", then my employer now knows that I'm a user on Monster. com. That might not be the end of the world, and is easy to explain away, but lets say the website is "hot_chicks_that_aren't_your_wife. com", and your girlfriend finds you have an account on there. This is potentially compounded if you're using email addresses as usernames, since I could easily point to 'some other' Barry Melton[1] and say that 'bmelton' must be his account, but that's harder to pull off if it is my email address.