|
moderated
Re: Changing email address security issue
#misc
Having just had my personal information publicly revealed on a hacked
forum I would agree. Nobody but the member himself should be able to
change email addresses.
Dave
http://davesergeant.com
Having just had my personal information publicly revealed on a hacked
forum I would agree. Nobody but the member himself should be able to
change email addresses.
Dave
http://davesergeant.com
|
By
Dave Sergeant
·
#28301
·
|
|
moderated
Re: Changing email address security issue
#misc
Exactly, what Peter says. it’s risk vs benefit. Huge risk, negligible benefit. Not to mention: the opportunity cost of implementing more worthwhile things.
--
J
Messages are the sole opinion of
Exactly, what Peter says. it’s risk vs benefit. Huge risk, negligible benefit. Not to mention: the opportunity cost of implementing more worthwhile things.
--
J
Messages are the sole opinion of
|
By
Janet_Catlady
·
#28300
·
|
|
moderated
Re: Changing email address security issue
#misc
I agree that Shal’s idea takes us in the right direction. But still not far enough. I’d get rid of it entirely.
--
J
Messages are the sole opinion of the author, especially the fishy ones.
My
I agree that Shal’s idea takes us in the right direction. But still not far enough. I’d get rid of it entirely.
--
J
Messages are the sole opinion of the author, especially the fishy ones.
My
|
By
Janet_Catlady
·
#28299
·
|
|
moderated
Re: Changing email address security issue
#misc
I agree with J - I just don't think the risk outweighs the benefit to the users. Maybe I'm missing some key point about the value of this capability?
Pete
I agree with J - I just don't think the risk outweighs the benefit to the users. Maybe I'm missing some key point about the value of this capability?
Pete
|
By
Pete Cook
·
#28298
·
|
|
moderated
Re: Changing email address security issue
#misc
Mark,
I would disable the ability to change the address if the member is even a member of any other groups. That's because the other groups may have sensitive information in their content to which the
Mark,
I would disable the ability to change the address if the member is even a member of any other groups. That's because the other groups may have sensitive information in their content to which the
|
By
Shal Farley
·
#28297
·
|
|
moderated
Re: Changing email address security issue
#misc
Actually since your fix, they can’t do it to me. So I csn see this leading to people artificially making themselves group owners in order to benefit from the enhanced security protection .
--
Actually since your fix, they can’t do it to me. So I csn see this leading to people artificially making themselves group owners in order to benefit from the enhanced security protection .
--
|
By
Janet_Catlady
·
#28296
·
|
|
moderated
Re: Changing email address security issue
#misc
This is a really good observation and I think the security risk applies not just to mods of groups. Suppose I don’t like somebody in my group and I want access to all their subscriptions to do bad
This is a really good observation and I think the security risk applies not just to mods of groups. Suppose I don’t like somebody in my group and I want access to all their subscriptions to do bad
|
By
Janet_Catlady
·
#28295
·
|
|
moderated
Re: Changing email address security issue
#misc
Mark -- Thanks. This has bothered me for awhile now.
Correct me if I'm mistaken, but I think the most common scenario behind the existing feature is when someone simply gets a new email address,
Mark -- Thanks. This has bothered me for awhile now.
Correct me if I'm mistaken, but I think the most common scenario behind the existing feature is when someone simply gets a new email address,
|
By
Bruce Bowman
·
#28294
·
|
|
moderated
Add DisplayName in the "joined" notification
#suggestion
Hi Mark,
It can be useful in certain situations if DisplayName is added in the mod joined notification text, i.e.
or alternatively,
Even
Hi Mark,
It can be useful in certain situations if DisplayName is added in the mod joined notification text, i.e.
or alternatively,
Even
|
By
Christos Psarras
·
#28293
·
|
|
moderated
Re: Changing email address security issue
#misc
Is that an owner or mod of a main group only or does it include mods of subgroups which may be just members in a main group?
Along with the power to change someone's email address come the
Is that an owner or mod of a main group only or does it include mods of subgroups which may be just members in a main group?
Along with the power to change someone's email address come the
|
By
Andy Wedge
·
#28292
·
|
|
moderated
Re: Add the User Name in the "joined" notification
#suggestion
Oh, you're right Andy, thanks for pointing that out! I guess I'll create a new corrected submission.
Cheers,
Christos
Oh, you're right Andy, thanks for pointing that out! I guess I'll create a new corrected submission.
Cheers,
Christos
|
By
Christos Psarras
·
#28291
·
|
|
moderated
Re: Changing email address security issue
#misc
If you continue to allow email addresses to be changed, then I'd certainly prefer that it only effect one group.
Duane
If you continue to allow email addresses to be changed, then I'd certainly prefer that it only effect one group.
Duane
|
By
Duane
·
#28290
·
|
|
moderated
Re: Changing email address security issue
#misc
Mark, I think I've said this in the past so I may be repeating myself.
I do not think I should have the ability to change anyone else's email address globally, if at all. I consider it just too much
Mark, I think I've said this in the past so I may be repeating myself.
I do not think I should have the ability to change anyone else's email address globally, if at all. I consider it just too much
|
By
Pete Cook
·
#28289
·
|
|
moderated
Changing email address security issue
#misc
Hi All,
Premium group owners have the ability to change the email addresses of their members. The email address is changed on the member's Groups.io account, so affects all their subscriptions. As
Hi All,
Premium group owners have the ability to change the email addresses of their members. The email address is changed on the member's Groups.io account, so affects all their subscriptions. As
|
By
Mark Fletcher
·
#28288
·
|
|
moderated
Re: Add the User Name in the "joined" notification
#suggestion
Do you mean Display Name given that the username field on a profile is not currently used by Groups.io?
Andy
Do you mean Display Name given that the username field on a profile is not currently used by Groups.io?
Andy
|
By
Andy Wedge
·
#28287
·
|
|
moderated
Add the User Name in the "joined" notification
#suggestion
Hi Mark,
It can be useful, if you add the user name as well in the mod notification text:
or alternatively
Even without the parentheses it
Hi Mark,
It can be useful, if you add the user name as well in the mod notification text:
or alternatively
Even without the parentheses it
|
By
Christos Psarras
·
#28286
·
|
|
moderated
Re: Disallow concurrent "special notices" and "following only"
#suggestion
#bug
>>> setting these options in a different place.
Oh, I found another two admin spots that also set sub settings:
- When the mod clicks on the member's name on the member list and get their sub settings
>>> setting these options in a different place.
Oh, I found another two admin spots that also set sub settings:
- When the mod clicks on the member's name on the member list and get their sub settings
|
By
Christos Psarras
·
#28285
·
|
|
moderated
Re: Clarify Photo Album Owner Name
#suggestion
A single black pixel will work. Try the attached "photo" (119 bytes).
Regards,
Bruce
A single black pixel will work. Try the attached "photo" (119 bytes).
Regards,
Bruce
|
By
Bruce Bowman
·
#28284
·
|
|
moderated
Re: Non - Member Posts
#suggestion
Mark,
Thanks for taking care of suggestion 1.
>>> What if a message is sent by a non member, and then later that person becomes a member? Does the badge stay on the message
Mark,
Thanks for taking care of suggestion 1.
>>> What if a message is sent by a non member, and then later that person becomes a member? Does the badge stay on the message
|
By
Christos Psarras
·
#28283
·
|
|
moderated
Re: Wrong error/bounce message when member tries to reply to a topic with a "tag only moderators can use"
#bug
Hello,
This should be fixed now.
Thanks,
Mark
Hello,
This should be fixed now.
Thanks,
Mark
|
By
Mark Fletcher
·
#28282
·
|