search

bluesky-social / social-app

The Bluesky Social application for Web, iOS, and Android
https://bsky.app
MIT License
12.17k stars 1.55k forks source link

Truncation of display names and handles poses risk of impersonation #6632

Open scottdotweb opened 1 day ago

scottdotweb commented 1 day ago

If someone has a long display name, as in the author of this post, either it's truncated and their handle is hidden, or their handle is truncated, as shown in this comparison of how the post is displayed in the Android app (1.94.0.402) and on desktop. Mobile web is similar to the app, except that the truncation starts after the space after "Dolores" instead of the "d" of "de".

ZomboDroid_22112024122912

This poses a risk of impersonation of any account with a long display name. On the app, I have no way of knowing at first glance if the post is actually by La Seńorita Vaquita Monstrita Dolores de Flores (@smarterthanawaffle.bsky.social) because her handle isn't visible. On desktop, the post could actually be by "@smarterthanapancake.bsky.social" because the full handle isn't visible.

I suggest having a flex layout which can accommodate a long display name and bumps the handle to the line below in that case.

PaulACoroneos commented 14 hours ago

I can probably pick this up if we are effectively okay with the equivalent of a flex wrap. I'll open an MR later this weekend.