Discuss Scratch

-FrozenFlame-
Scratcher
100+ posts

Require e-mail confirmation before terminating an account

Support!
Security is important
liam48D
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

DaSpudLord wrote:

liam48D wrote:

DaSpudLord wrote:

Firedrake969 wrote:

BUT, if I'm changing my email because I lost the password to the old one, I can't change my Scratch email legitimately any more and that's dumb.
Yeah, that's what I was talking about - it would solve a problem, yes, but it would also create a problem.
If you lost the password to your e-mail account, then that's your fault for not keeping better track of it.
What if somebody who had your old email changed its password and now you can't get in to change your Scratch email to your new email?
Why would you give someone your email account?
Who said I gave them it? Maybe I accidentally left the account logged in at school! (not that I go to school, but you get the demo; also I guess that's still technically giving the account to them but y'know what I mean)

At that point I guess you should use contact us but I don't see why you should have to be forced to go through all the hassle. Plus suppose you – unknowing of the change – tried to change your password, then the email would be sent to your old email account, at which point any malicious new owner of your email account would be reminded that they can mess with your Scratch things.

EDIT: fixed grammar a little

Last edited by liam48D (May 6, 2016 23:16:22)

jokebookservice1
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

Support.

However, this 2 day thing could be worked on to make it defend your account: When you try and delete your account, every page you visit contains a red notice warning you of the destruction ,an it cannot be removed.

But an email confirmation would be good, or at the very least a warning email. But I would support the original suggestion more.
IronBit_Studios
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

Support. I don't really need it but I see how others will.
Abstract-
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

jokebookservice1 wrote:

Support.

However, this 2 day thing could be worked on to make it defend your account: When you try and delete your account, every page you visit contains a red notice warning you of the destruction ,an it cannot be removed.

But an email confirmation would be good, or at the very least a warning email. But I would support the original suggestion more.
There is a warning email.

I support needing the email to delete an account. Say I forgot to log out and my brother opened Scratch on my computer? If he knew how, he'd delete it as a joke.

Last edited by Abstract- (May 15, 2016 00:09:40)

mario91100_TEST
Scratcher
100+ posts

Require e-mail confirmation before terminating an account

Bump
Techno-CAT
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

DaSpudLord wrote:

customhacker wrote:

I would support this exept for one reason. They could switch the email adress to theirs!
That's actually a good point. What if we had a confirmation for switching e-mail, too?

Regardless, I support.
f1lip
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

mario91100_TEST wrote:

Title.

I don't visit the site much anymore, but, just out of curiosity, I went onto my now defunct NowhereCollabs account and decided to see what happened when I tried to delete it.

The only thing separating you and your account being deleted are two buttons and a password field.

Really? If someone were to hack into your account, this makes destroying your account forever ridiculously easy. A two day “sign-in-to-keep-your-account” period isn't going to stop most hackers. If they can crack your password once, and do it invisibly (read; no comments, no projects moved to trash, etc.), most will keep doing it until they succeed.

This method is incredibly flimsy and easy to get through, so I suggest adding an e-mail conformation before deleting an account, and having this conformation expire after two days or so, and upon acceptance, delete the account as the user wanted. This will make it harder for hackers to delete accounts maliciously, and make account deletion for those actually wanting to a bit faster.

Actually, the hacker could go to account settings and see your email by clicking on the email button.
PrincessPanda_test_
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

Support, so people don't hack break into your account and delete it
_Comicfan_
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

Support. Privacy is very important, and this would help prevent hacking.
Abstract-
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

_Comicfan_ wrote:

Support. Privacy is very important, and this would help prevent hacking.
“Hacking”? I belive you mean “Entering” There is no hacking. People can forget to log out or give a way their password, but there is no “Hacking”
stickfiregames
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

Support.
BookOwl
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

liam48D wrote:

DaSpudLord wrote:

liam48D wrote:

DaSpudLord wrote:

Firedrake969 wrote:

BUT, if I'm changing my email because I lost the password to the old one, I can't change my Scratch email legitimately any more and that's dumb.
Yeah, that's what I was talking about - it would solve a problem, yes, but it would also create a problem.
If you lost the password to your e-mail account, then that's your fault for not keeping better track of it.
What if somebody who had your old email changed its password and now you can't get in to change your Scratch email to your new email?
Why would you give someone your email account?
Who said I gave them it? Maybe I accidentally left the account logged in at school! (not that I go to school, but you get the demo; also I guess that's still technically giving the account to them but y'know what I mean)

At that point I guess you should use contact us but I don't see why you should have to be forced to go through all the hassle. Plus suppose you – unknowing of the change – tried to change your password, then the email would be sent to your old email account, at which point any malicious new owner of your email account would be reminded that they can mess with your Scratch things.

EDIT: fixed grammar a little
At this point the poor kid has bigger problems than their scratch account being deleted.
Support for email confirmation for account deletion and email switching.

Last edited by BookOwl (May 15, 2016 16:35:59)

Abstract-
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

BookOwl wrote:

liam48D wrote:

DaSpudLord wrote:

liam48D wrote:

DaSpudLord wrote:

Firedrake969 wrote:

BUT, if I'm changing my email because I lost the password to the old one, I can't change my Scratch email legitimately any more and that's dumb.
Yeah, that's what I was talking about - it would solve a problem, yes, but it would also create a problem.
If you lost the password to your e-mail account, then that's your fault for not keeping better track of it.
What if somebody who had your old email changed its password and now you can't get in to change your Scratch email to your new email?
Why would you give someone your email account?
Who said I gave them it? Maybe I accidentally left the account logged in at school! (not that I go to school, but you get the demo; also I guess that's still technically giving the account to them but y'know what I mean)

At that point I guess you should use contact us but I don't see why you should have to be forced to go through all the hassle. Plus suppose you – unknowing of the change – tried to change your password, then the email would be sent to your old email account, at which point any malicious new owner of your email account would be reminded that they can mess with your Scratch things.

EDIT: fixed grammar a little
At this point the poor kid has bigger problems than their scratch account being deleted.
Support for email confirmation for account deletion and email switching.
Who said it was a kid? Maybe it was a 80-year-old-man who didn't know how to log out.

Last edited by Abstract- (May 15, 2016 17:09:11)

customhacker
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

DaSpudLord wrote:

customhacker wrote:

I would support this exept for one reason. They could switch the email adress to theirs!
That's actually a good point. What if we had a confirmation for switching e-mail, too?

Regardless, I support.

Thanks Lord.
Programmer1121
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

I support!
mario91100_TEST
Scratcher
100+ posts

Require e-mail confirmation before terminating an account

Bump
NanoRook
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

bump
mario91100_TEST
Scratcher
100+ posts

Require e-mail confirmation before terminating an account

bump again
helloandgoodbye9
Scratcher
1000+ posts

Require e-mail confirmation before terminating an account

Abstract- wrote:

BookOwl wrote:

liam48D wrote:

DaSpudLord wrote:

liam48D wrote:

DaSpudLord wrote:

Firedrake969 wrote:

BUT, if I'm changing my email because I lost the password to the old one, I can't change my Scratch email legitimately any more and that's dumb.
Yeah, that's what I was talking about - it would solve a problem, yes, but it would also create a problem.
If you lost the password to your e-mail account, then that's your fault for not keeping better track of it.
What if somebody who had your old email changed its password and now you can't get in to change your Scratch email to your new email?
Why would you give someone your email account?
Who said I gave them it? Maybe I accidentally left the account logged in at school! (not that I go to school, but you get the demo; also I guess that's still technically giving the account to them but y'know what I mean)

At that point I guess you should use contact us but I don't see why you should have to be forced to go through all the hassle. Plus suppose you – unknowing of the change – tried to change your password, then the email would be sent to your old email account, at which point any malicious new owner of your email account would be reminded that they can mess with your Scratch things.

EDIT: fixed grammar a little
At this point the poor kid has bigger problems than their scratch account being deleted.
Support for email confirmation for account deletion and email switching.
Who said it was a kid? Maybe it was a 80-year-old-man who didn't know how to log out.
(Something similar has happened to me) What if you pay for a email, and then stop paying. How could you confirm it?

Powered by DjangoBB