Logging in with Firefox Account autofills "name" with "email"

mozilla / discourse

Issues repo for Discourse roadmap within Mozilla

https://github.com/mozilla/discourse/projects/1

4 stars 4 forks source link

Logging in with Firefox Account autofills "name" with "email" #277

Open kmq opened 3 years ago

kmq commented 3 years ago

I created a fresh firefox account at https://account.firefox.com

Then I navigated to https://discourse.mozilla.org and clicked the blue "Log In/Sign Up" in the upper right corner.

A dialog popped up that contained three fields:

Username: prefilled to the localpart of my firefox account email address
Name: prefilled to my complete firefox account email address
Mozillians Profile: empty

It was not obvious to me that "Name" would be published next to the posts I make on the forum. I was made aware of this problem when I started receiving spam to this email address today.

Please DO NOT auto-fill the "Name" field in this form with my Email address.

floatingatoll commented 2 years ago

Mozilla personnel, see also BMO #1653302 and IAM #921.

nickchomey commented 1 year ago

I just signed up for the forum and subsequently got a lot of junk mail starting on the same day. I only just realized what the problem was. How is this still an issue 1.5 years later? Get a clue Mozilla. No wonder no one uses your products...

jfines commented 11 months ago

Why is this not being addressed?! Does mozilla think its ok to dox people? How many people is this happening to? Hundreds? Thousands? Tens of thousands? And they won't do anything about it?

Moini commented 1 month ago

Apparently, it currently affected 4,630 persons - and those have been contacted by Chris Hayes (thank you!) so they can fix it.
It would indeed be great if Mozilla could invest some time into making their forums safe to use for everyone.

What concerns me even more than this, though, is https://github.com/mozilla/discourse/issues/279#issuecomment-1337851203 ...