Just stop. There are so many layers of security that use obscurity. Most basic example is not exposing valid account usernames during failed logins.