first one is more helpful to hackers who want to figure out which accounts are registered on your site, and then later proceed with a brute force / social attack.