Thread:Project:Current issues/reset password page falsely states it sent a password, given blank username/reply (2)

The problem is that the site doesn't just say that no username at all has been specified. Instead it says it sends email, which it doesn't actually send. That leads the user to look for email, to get with the impression that the email address is indeed on file at the site, to get more confused at what is really going on, and generally to waste time.

I agree that the site should not give a response which lets someone learn, e.g., which username is associated with an email address, but that isn't the question here. If the username and password don't match, it says that. In this case the site has never even heard of the email address in question, and it does the same thing for valid and invalid email addresses.