| View previous topic :: View next topic |
| Author |
Message |
Ana-Q
n00b
Joined: 17 May 2023
Posts: 4
|
 Posted: Wed May 17, 2023 9:44 pm Post subject: clear text password on registration to the forums |
 |
|
Hi
I registered to the forum and received an email for confirmation. Besides the link that I have to click for the confirmation, I was amazed to see in the email my username and the password. I had to change the password immediately
Please check this issue. I will be grateful to know if this bug is corrected. |
|
| Back to top |
|
 |
szatox
Advocate
Joined: 27 Aug 2013
Posts: 3477
|
| Posted: Wed May 17, 2023 11:41 pm Post subject: |
|
|
It's a known issue, it won't be corrected in foreseeable future.
BTW, anyone with access to your mailbox can reset your password, so changing it immediately doesn't make a huge difference. It is admittedly a bad design, yet it doesn't seem like anyone had a much better idea so far, so we kinda live with it - and it's not limited to FGO. |
|
| Back to top |
|
|
Hu
Administrator
Joined: 06 Mar 2007
Posts: 22865
|
| Posted: Thu May 18, 2023 12:20 am Post subject: |
|
|
| Searching the first two pages of the feedback forum, I found the following threads discussing this: |
|
| Back to top |
|
|
fedeliallalinea
Administrator
Joined: 08 Mar 2003
Posts: 31351
Location: here
|
| Posted: Thu May 18, 2023 5:30 am Post subject: |
|
|
Moved from Networking & Security to Gentoo Forums Feedback.
_________________
Questions are guaranteed in life; Answers aren't. |
|
| Back to top |
|
|
pjp
Administrator
Joined: 16 Apr 2002
Posts: 20521
|
| Posted: Thu May 18, 2023 4:54 pm Post subject: Re: clear text password on registration to the forums |
|
|
| Ana-Q wrote: | | I had to change the password immediately |
That is the general recommendation.
As the upgrade is delayed without a set time, I wonder if some text could be changed during the signup process. This would inform users about the issue, which would hopefully be less alarming. Users would also be able to use a throwaway password rather than one they would prefer to keep.
_________________
Quis separabit? Quo animo? |
|
| Back to top |
|
|
Chiitoo
Administrator
Joined: 28 Feb 2010
Posts: 2740
Location: Here and Away Again
|
| Posted: Thu May 18, 2023 6:30 pm Post subject: Re: clear text password on registration to the forums |
|
|
| pjp wrote: | | Ana-Q wrote: | | I had to change the password immediately |
That is the general recommendation.
As the upgrade is delayed without a set time, I wonder if some text could be changed during the signup process. This would inform users about the issue, which would hopefully be less alarming. Users would also be able to use a throwaway password rather than one they would prefer to keep. |
That just might be a change we might dare to make... yeah.
_________________
Kindest of regardses. |
|
| Back to top |
|
|
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54639
Location: 56N 3W
|
| Posted: Thu May 18, 2023 7:49 pm Post subject: |
|
|
Chiitoo,
In all the languages the forum supports?
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
pjp
Administrator
Joined: 16 Apr 2002
Posts: 20521
|
| Posted: Thu May 18, 2023 11:24 pm Post subject: |
|
|
Any that could be added would be an improvement.
_________________
Quis separabit? Quo animo? |
|
| Back to top |
|
|
Chiitoo
Administrator
Joined: 28 Feb 2010
Posts: 2740
Location: Here and Away Again
|
| Posted: Thu May 18, 2023 11:28 pm Post subject: |
|
|
| NeddySeagoon wrote: | Chiitoo,
In all the languages the forum supports? |
We can at least try that... too. :]
_________________
Kindest of regardses. |
|
| Back to top |
|
|
sMueggli
Guru
Joined: 03 Sep 2022
Posts: 513
|
| Posted: Wed Dec 18, 2024 2:58 pm Post subject: |
|
|
| NeddySeagoon wrote: | Chiitoo,
In all the languages the forum supports? |
If the message templates are open source, why not? |
|
| Back to top |
|
|
Hu
Administrator
Joined: 06 Mar 2007
Posts: 22865
|
| Posted: Wed Dec 18, 2024 3:51 pm Post subject: |
|
|
I suspect Neddy's concern was whether the author of such a change could get reasonable wording for all the target languages. This may or may not be something that machine translators can convey adequately.
On the other hand, even if only the English template were amended, that would be an improvement over the current situation. Updating all the non-English templates would be nice, but helping some users is better than helping no one. |
|
| Back to top |
|
|
Chiitoo
Administrator
Joined: 28 Feb 2010
Posts: 2740
Location: Here and Away Again
|
| Posted: Thu Dec 19, 2024 7:35 pm Post subject: |
|
|
Regardless of languages, and even though the sources are available, we don't currently have any way to test any changes we make (aside from a local instance of course), update the running version, or even make any changes to the live, running version.
That is 'we' as in the forums project members.
Only the Gentoo infra members (probably only some of them) can make any changes at this time.
See also:
https://bugs.gentoo.org/431106
_________________
Kindest of regardses. |
|
| Back to top |
|
|
|
Gentoo Forums Feedback
