Reply to thread

I cannot see any exploit in getting some user names of a board. As said, you can get them more easily when parsing public thread pages.

But you generally do not want a massive DOS attack at your registration and login pages by script kiddies trying to find passwords. This is the reason we limit them in our firewall.