Re: [savannah-help-public] [sr #109310] Loophole Creating Account

[Bob Proulx]

Hi Rick,

Rick Johnson wrote:
> Okay, as long as you know and it gets logged as an issue.  It
> creates customer pain.  Some ask for help sooner than others.  We
> who are caught in the loop are few, so not much of a problem for
> you, I guess.

I chafe at the use of the word customer since it is a community
resource.  We are all in this together.  It isn't a customer
relationship.

You may be thinking that I am somehow the developer of the web
interface.  I am not.  I have only poked my nose into it on a few
occasions.  I'm primarily working on the mailing lists and the
hosting.  The web UI could definitely use some help.  Are you
interested in contributing to it?

> Many are probably okay with using different usernames.

That's a poor workaround.  Anyone who has problems should contact us
for assistance.  It isn't difficult to push things along.

> Maybe Lastpass causes a pattern of use that enables the problem.

It's possible.  Especially since we had a number of complaints from
LastPass users all at once.  Seemed more than a normal amount.  And
haven't heard any problems from then since.  Since the web UI hasn't
changed it was possible that it was the password manager.

Note that I think random passwords are the best security.  I am not a
user of LastPass myself but they seem reasonable.  And in general I
encourage the use of password managers.  I would definitely like the
web UI to work well with password managers.

> Just tryin' to help.

Sure.  Patches welcome.  There hasn't been too much development done
on the web site UI for some time.

Bob