Timeline for Is revealing a PC account user name bad?
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 12, 2021 at 13:28 | comment | added | Amiga500 | You may consider them public info. That does not mean its either wise to make them public info or that the general acceptance of them being public info is sensible. Unless your suggesting the sensibilities of general opinion is a good guideline for delivering a secure system? | |
| Nov 12, 2021 at 11:59 | history | edited | schroeder♦ | CC BY-SA 4.0 |
spaces, spelling
|
| Nov 12, 2021 at 11:56 | comment | added | schroeder♦ | @Amiga500 usernames are considered public info. You're making a false equivalence. | |
| Nov 12, 2021 at 11:17 | comment | added | Amiga500 | Sorry, what? Re 1 and 2 - your passwords may not be unique across the entire world - it still isn't a good idea to go and display them. Username is a part of your authentication in the same way the 2nd check is an authenticator in 2FA. You wouldn't dream of making it public would you? It may not be a critical problem in this instance - but in general - making usernames easily accessible is making it easier for someone to find the right username/password combination. | |
| S Nov 12, 2021 at 10:36 | history | suggested | FriendlyFire | CC BY-SA 4.0 |
spaces, spelling
|
| Nov 12, 2021 at 9:48 | review | Suggested edits | |||
| S Nov 12, 2021 at 10:36 | |||||
| Sep 11, 2019 at 16:48 | vote | accept | Triplefault | ||
| Sep 3, 2019 at 22:58 | comment | added | Triplefault | Thanls, @Vipul! Actually, very few people change the log contents. But I lean towards agreeing that just a username isn't really going to give a bad guy something to go on. We are already being pen-tested constantly, true. The thought on not having the IP address was to go with: "here's this username I know works on one of the billions of devices on the internet, now which one do I try?" Of course if the forum got hacked, maybe the last IP address of a user's log-on could be read, then a direct attack could be started... | |
| Aug 30, 2019 at 22:57 | history | answered | yeah_well | CC BY-SA 4.0 |