Hacker News Reader

I don't get why they resorted to the timing approach when they could just check the error message.

they can’t - the real error message is not provided in the js error

They cover that in the article. The error message isn’t reliable