Is it a security violation to show a directory of users?

[downey (Michael Downey)]

@codinghorror

using the anonymous API they can enumerate all the users.

Regular humans won’t bother doing this.