Opened 22 months ago

Closed 22 months ago

Last modified 21 months ago

#23841 closed defect (worksforme)

Some asshole deleted cypherpunks account

Reported by: cypherpunks Owned by: qbi
Priority: Medium Milestone:
Component: Internal Services/Service - trac Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description


Child Tickets

Change History (2)

comment:1 Changed 22 months ago by cypherpunks

Resolution: worksforme
Status: newclosed

Well the account still exists

comment:2 Changed 21 months ago by cypherpunks

You meant it has been recreated. But before recreation there is an amount of time when the account is not recreated. It is possible to remove an account by having a bot that tries to login periodically and deletes the account. Given that the period of the check is just a bit longer an adversary can effectively make the account unusable. You need to hardcode the check disallowing deletion or changing the password of the account with the name "cypherpunks". It's just 2 if in the right places!

Note: See TracTickets for help on using tickets.