Opened 2 years ago

Closed 2 years ago

Last modified 2 years ago

#23841 closed defect (worksforme)

Some asshole deleted cypherpunks account

Reported by: cypherpunks Owned by: qbi
Priority: Medium Milestone:
Component: Internal Services/Service - trac Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description


Child Tickets

Change History (2)

comment:1 Changed 2 years ago by cypherpunks

Resolution: worksforme
Status: newclosed

Well the account still exists

comment:2 Changed 2 years ago by cypherpunks

You meant it has been recreated. But before recreation there is an amount of time when the account is not recreated. It is possible to remove an account by having a bot that tries to login periodically and deletes the account. Given that the period of the check is just a bit longer an adversary can effectively make the account unusable. You need to hardcode the check disallowing deletion or changing the password of the account with the name "cypherpunks". It's just 2 if in the right places!

Note: See TracTickets for help on using tickets.