Execution Path Timing Analysis of Unix Daemons - White paper on how to determine if a username is valid remotely by timing remote responses of login programs. OpenSSH diff against v2.99p2 which determines if a username exists even on the newest versions of OpenSSH included.
d10799a160420e1d98d3d1d82b71b468d6f8cbe44e6d70f262dddffda7cb071c