</h1>
                    </div>
                    <div class="col-sm-6">
                        <ol class="breadcrumb float-sm-right">
                            <li class="breadcrumb-item active"><la:link href="/admin/elevateword">
                                <la:message key="labels.elevate_word_link_list"/>
                            </la:link></li>

                                <la:form action="/admin/labeltype/">
                                    <div class="form-group row">
                                        <label for="name" class="col-sm-2 text-sm-right col-form-label"><la:message
                                                key="labels.labeltype_name"/></label>
                                        <div class="col-sm-10">

At that point, by noticing that the server took some microseconds longer to send the "Incorrect username or password" response, the attackers will know that they got _something_ right, some of the initial letters were right.

And then they can try again knowing that it's probably something more similar to `stanleyjobsox` than to `johndoe`.

#### A "professional" attack { #a-professional-attack }

    INSTANCE;

    @Override
    public int compare(short[] left, short[] right) {
      int minLength = Math.min(left.length, right.length);
      for (int i = 0; i < minLength; i++) {
        int result = Short.compare(left[i], right[i]);
        if (result != 0) {
          return result;
        }
      }
      return left.length - right.length;
    }

    @Override
    public String toString() {

    INSTANCE;

    @Override
    public int compare(short[] left, short[] right) {
      int minLength = Math.min(left.length, right.length);
      for (int i = 0; i < minLength; i++) {
        int result = Short.compare(left[i], right[i]);
        if (result != 0) {
          return result;
        }
      }
      return left.length - right.length;
    }

    @Override
    public String toString() {

                            <la:message key="labels.dict_protwords_title"/>
                        </h1>
                    </div>
                    <div class="col-sm-6">
                        <ol class="breadcrumb float-sm-right">
                            <li class="breadcrumb-item"><la:link href="/admin/dict">
                                <la:message key="labels.dict_list_link"/>
                            </la:link></li>

				<a href="#" class="nav-link <c:if test="${param.menuCategoryType=='system'}">active</c:if>">
					<em class='nav-icon fa fa-laptop'>
					<p>
						<la:message key="labels.menu_system" />
						<i class="right fas fa-angle-left"></i>
					</p>
				</a>
				<ul class="nav nav-treeview">
					<c:if test="${fe:permission('admin-wizard-view')}">
					<li class="nav-item">

                            <la:form action="/admin/failureurl/">
                                <div class="form-group row">
                                    <label for="url" class="col-sm-2 text-sm-right col-form-label"><la:message
                                            key="labels.failure_url_search_url"/></label>
                                    <div class="col-sm-10">

                                </div>
                                <div class="form-group row">
                                    <label for="regularName" class="col-sm-3 text-sm-right col-form-label"><la:message
                                            key="labels.regular_name"/></label>
                                    <div class="col-sm-9">

                            <la:message key="labels.dict_mapping_title"/>
                        </h1>
                    </div>
                    <div class="col-sm-6">
                        <ol class="breadcrumb float-sm-right">
                            <li class="breadcrumb-item"><la:link href="/admin/dict">
                                <la:message key="labels.dict_list_link"/>
                            </la:link></li>