[aur-general] Registering, misspelling email, losing account

[David Kaylor]

Wow, with a name ending in Morozov, you sure doth protest to much.

On Sun, Jul 26, 2015 at 4:29 PM, Daniel Micay <danielmicay at gmail.com> wrote:

> On 26/07/15 04:01 PM, Igor Morozov wrote:
> >
> > That's right, I messed up. Instead of typing fastmail.com, I typed
> > fastmai.com. And now there is no way I can access my account. The only
> > option is to send an email to this mailing list describing my problem
> > and hope that somebody will help me out. Basically, that's what I'm
> > doing right now.
>
> Okay, so it can ask the user to provide the same email in two fields.
>
> It could treat an unconfirmed account as a temporary placeholder and
> replace it if registration is done again for the same username.
>
> It shouldn't be possible to log in without confirming the email unless
> all of the actions (voting, submitting packages, commenting, etc.)
> beyond editing account information are gated on whether the account is
> registered.
>
> > People tend to make mistakes. I'm not the only one who messed up during
> > registration. And there is no easy way to get our account back. Mailing
> > list is not the best option for account recovery. What if the misspelled
> > email exists and the owner decides to proceed and register? What if the
> > owner decides to do nasty things using my username, full name and email
> > that looks alike? That would affect my reputation in the community since
> > it's difficult to prove that I was not the bad guy.
> > The usual "account activation" prevents this stuff. A lot of web sites
> > do not automatically log user in after account confirmation, so it kind
> > of prevents malicious activity (the bad guy doesn't know the password,
> > you see).
>
> Someone could have just created a fake account before you did, so it's
> really not an issue related to the confirmation design.
>
> > And by the way, the fact that you can use an unused (not registered)
> > email in account recovery and not get any errors is frustrating. Took me
> > 8 hours to realize that it says "okay", even though the email is not in
> > use. Please, do something about it!
>
> Emails aren't received instantly, so there's no error to report during
> registration.
>
>