Open mploigt opened 10 years ago
Related to #233
As I stated there a potential spammers haven especially with fly by account grifters.
I'm sorry but I did not get what you want to say here. I'm just suggesting to add a function to unregister an account. Maybe mark all comments made with this account with "anonymous" in the progress.
Maybe mark all comments made with this account with "anonymous" in the progress.
Probably not. -1 here for this part.
I'm sorry but I did not get what you want to say here. I'm just suggesting to add a function to unregister an account.
And I responded clearly that you are asking to open the doors for spammers coming and and leaving constantly... especially with changing things to anonymous as you suggested. I'd be more open to the suggestion of permanent removal based off ones OAuth with no chance of recovery or any future access... although if one uses some common sense first by checking out a site before registration then there would be no need to have this feature request... but that's just me.
People can change their mind overtime and also I think one can tell the difference between spammers and legitimate requests. There should be a request form and the Admin should act accordingly.
Also what kinda of spammer creates an account and then deletes it? They usually create an account abuse it until it gets banned and then create another account. USO was a perfect example of that in action. Towards the end there was no need to create new account and the same accounts kept on spamming and filling the site with iffy scripts.
They usually create an account abuse it until it gets banned and then create another account. USO was a perfect example of that in action.
Actually it wasn't only this and I had some inside info. Point reiterated, in more generic terms, I believe we should have some sort of longer term consequence... e.g. perhaps 6 month expiry (leads into account expiration which we aren't quite there yet) or full ban which which we already have... it would be nice to have it automated instead of a request on production but if a security flaw is ever discovered with OAuth we could easily end up with zero accounts all of the sudden... so I'd rather not introduce that variable into the larger equation.
Also what kinda of spammer...
Think outside of the box. :)
Pff, i don't understand. I want use a simple way to login. Without have my email like usersname. No more.
I try to connect with github and i am redirect to my google login form ! Your Signing form was no very clear, and the login is the same for me.
Delete my account please......
Pff, i don't understand.
About what?
I want use a simple way to login.
https://github.com/OpenUserJs/OpenUserJS.org/issues/1#issuecomment-28166301
Without have my email like usersname.
I understand that some may not have seen the caution box that was added in https://github.com/OpenUserJs/OpenUserJS.org/issues/233#ref-commit-9d3619e . Unfortunately there is nothing I can do about it until both issues are assigned/completed/closed. Sorry.
my google login form
Just a side note see https://github.com/OpenUserJs/OpenUserJS.org/issues/484#issuecomment-69479725
Your Signing form was no very clear
"Sign up with a OAuth/OpenID service."... I can however link that into a page describing what that means without searching for that. That has been there the whole time I believe.
I wish I could help more but some portions are just out of my hands and I do apologize.
@decembre I also show your auth as github not google.
@decembre Just noticed you have two accounts. The one that matches your username here is googles auth. e.g. when you login with that username it will go to googles page. Please note that is deprecated. I'm attempting to familiarize myself with changing everyone to OAuth but it's still a bit out of my experience level at the moment. I have asked sizzle to attempt to do this again... in the meantime I will investigate hacking the DB again but there's a lot of portions of the code I am still unfamiliar with... e.g. there might be some unexpected consequences.
Thanks..... The @.... inside User name was a problem for me.
@decembre
Make sure you can log in with your decembre
account please and your other account will be removed by the normal means. I won't be doing this for everyone on demand because it takes a ton of time to do manually. Please respond by telling me you can login... your decembre
account should be set to auth with GitHub now as default. Thanks.
P.S. I moved all found references from your old account to decembre
too... deleted your one blank comment.
P.P.S. Looks like I have one more place to do this... complete.
I appreciate your effort for me: Thanks Marti ! That's good now, I can connect normaly now;
Sorry for your "spare time" lost. ;-)
I've had some chatting with @sizzlemctwizzle about this lately and a heck of a lot of time to think about this... and the best way I can see to alleviate concerns is a "Resign my account" (virtual or physical) authentication that one can add to the account. (e.g. resign access on our end point with OAuth)
This will provide a level of protection against "drive by" spamming and should alleviate "ghosted" posts from conversations on those who didn't think before they signed up and may have conversations with others that won't make as much sense if an account is deleted... e.g. as a User/Author... one can resign access to the account... if at a later date someone wants to come back in with that authentication then they may ask here on development.
Authors can still delete their scripts, etc. but to maintain the integrity, as much as possible, a resignation of ones account currently fulfills that request.
Please note I'm still working on other things but I am open to PR's to handle this virtually or physically (e.g. a resignation strategy that always returns fail... must include resignation date as well for the stored "key") ... if no requested assignments are available I'll eventually get around to it.
External site ref(s):
@Martii I have to admit that I have also made mistake at the registration and would like to have my account deleted or renamed. I have connected to OUJS also with this GH account. Is this sufficient to identify me and delete the account? How can I privately communicate you additional details you may need? Thank you
@volconst
or renamed
Doable.
privately communicate you additional details...?
Including your new username? e.g. how "paranoid" do you want to be? ;) :)
P.S. Btw do nothing on OUJS until this is possibly done as the DB modifications can be lengthy.
Not just paranoid, I feel also frustrated and ashamed and that's why I try to avoid publicity if possible. If it's the only option, I will post a user username here. What's even more dramatic is that both my identities will feel ashamed, actually me, myself and I.
@volconst Since another project has me publicly I've gone public on my profile for the time being.
Things you must do:
Mistakes happen so don't beat yourself up. I see nothing wrong with your old username but since you approached nicely I'll grant one change.
@Martii Just sent the mail. Thank you for your time.
@volconst Ensure that you are logged out of OUJS and then relogin with your new username please.
This is cool - I have new username :) Have a great day!
Its a long time i don't login and i am a little bit confusing how it work. I don't want create an other account, Just login.
But at each time i choose the login form and in the 2th form i choose the google auth , and type my username (decembre)
I go to the sign in form ...
It's the right place to simply login ?
2016-11-23 22:25 GMT+01:00 volconst notifications@github.com:
This is cool - I have new username :) Have a great day!
On Wed, Nov 23, 2016 at 11:02 PM, Marti Martz notifications@github.com wrote:
Ensure that you are logged out of OUJS and then relogin with your new username please.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/OpenUserJs/OpenUserJS.org/issues/359#issuecomment- 262629178, or mute the thread https://github.com/notifications/unsubscribe-auth/ AUBnE27UbvrfNSN3NFke3xKVwFAzId8Sks5rBKnrgaJpZM4Cs3JD
.
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/OpenUserJs/OpenUserJS.org/issues/359#issuecomment-262633546, or mute the thread https://github.com/notifications/unsubscribe-auth/AA1BqnG9RyeGmBM-iZmeJGI_sg-n6KOwks5rBK82gaJpZM4Cs3JD .
@decembre
I don't want create an other account, Just login. But at each time i choose the login form and in the 2th form i choose the google auth , and type my username
Use the upper input box with your username to "Login" and that should do it.
I can't find a way to delete my user account. How can I do this?