BUG: Possible unintended information disclosure

ovejo (@ovejo) · 0 replies ·
On the reverse review page of a user, the real username is displayed if the advertising profile is inactive.

The same information is probably available if you use google cache or wayback machine, but as the behavior of not displaying the username behind a ad if the ad is inactive is rather consistent everywhere else on the site - perhaps users now are expecting this behavior.
Your comment

Premium Membership required

Our goal is to make this community less toxic but we also do understand that asking for an ID is not the way to go. Using the site is perfectly legal. Discussing things in a civilized manner is also legal. So if you really want to say something important, be serious by becoming a Premium Member first. Thank you for your understanding.

See Premium Membership options

{{cnum}} replies


Advertisement
Recently viewed profiles (how does it work?)