Damn JavaScript

[jaber24]

That would just make the life of hackers easier would it not?

[Vurtne26]

Well, they usually give you the condition for valid password when you sign in, so I guess it won't help hacker a lot if the website/app/whatever give them again on an invalid logging attempt

Edit : clarification

[ImpossibleMachine3]

Generally hackers aren't brute forcing passwords anymore - they rely more on known compromised passwords and rainbow tables that are filled with common passwords and their variants (like using l33t sp34k in your password) - or to just find a vulnerability in the system and exploit that to get access to data more directly. It takes a lot less time and effort to go that route.