(Read comments) - (Post a new comment)

	eljuno 2005-05-02 06:56 pm UTC (link)
	Have someone set their e-mail in? You get e-mail alerts when someone changes the password and can get the new one back if your e-mail is verified. To make it even easier, the person could use something like a Sneakemail account so they don't have to even run the risk of the mouseymice knowing their e-mail. ~~I run RPGs. You get used to this shit~~ (Reply to this)(Parent)(Thread)

	backfromspace 2005-05-02 06:59 pm UTC (link)
	That would certainly cut down on it. What happens if someone changes the password AND the email? Can you still get the password back? (Reply to this)(Parent)(Thread)

eljuno
2005-05-02 07:04 pm UTC (link)

If JF is run like LJ on this like with everything else I've seen, you can get the password back off any verified e-mail account and then, if you reverify your e-mail, you can kick out any e-mail addresses between appearances of yours.

Or, er, in other words, if the addresses are like this...

1. Wankah@Sneakemail.com
2. Troll@assmunsch.com

and you change the e-mail back to Wankah@Sneakemail, you can kick out the Troll e-mail so they can't get the password back and would need to reverify to do anything.

(Reply to this)(Parent)(Thread)

	backfromspace 2005-05-02 07:24 pm UTC (link)
	Couldn't they just kick out the original email address? The more complicated it is, the less often we'd have to deal with it, but still. (Reply to this)(Parent)(Thread)

	eljuno 2005-05-02 07:28 pm UTC (link)
	You can only kick out an e-mail address lower than your current on the list. So, if you're currently using e-mail #3, you can kick out any from #4 on, but not #1 or #2. Since there isn't going to be any number lower than #1, the first e-mail is the only one which, theoretically, can't be removed. (Reply to this)(Parent)(Thread)

	backfromspace 2005-05-02 07:33 pm UTC (link)
	Interesting. You might have a workable idea here. Out of curiosity, what happens if your email account is compromised? Do you need to contact Abuse or something and have an admin manually change the #1 email? (Reply to this)(Parent)(Thread)

	eljuno 2005-05-02 07:39 pm UTC (link)
	That's pretty much the only thing that can fuck up the system, really, because yeah. Since the first e-mail can't be changed, if it either belongs to or is stolen by the person causing trouble, you're kinda screwed. Weirdly, that's almost exactly the major problem we're dealing with in one of my RPGs right now... (Reply to this)(Parent)

	sepiamagpie 2005-05-03 02:06 am UTC (link)
	two backup emails first and then the main controlling email? Just in case. (Reply to this)(Parent)

(Read comments) -