| 2011-11-14 23:17:29 |
Stephen Brandwood |
bug |
|
|
added bug |
| 2011-11-14 23:28:08 |
Stephen Brandwood |
description |
I now accidentally have 3, possibly 4 logins to Launchpad due to it's eagerness to sign up new users without telling them what's happening.
1) Select an email address not used for launchpad (we all have more than 1)
2) Enter the email on login and guess what you'd have set your password to
3) Screen will say passwords don't match
4) Click forgotten password
5) Launchpad now makes it sound like you have an account and sends you a confirmation code
6) Fill in the code from your email and you have a new account.
You now have two OpenID accounts. You now have your bug reports fragmented over two separate accounts. Come back in a years time with a new bug and you may end up with three accounts.
I think the site needs to make it clear that it is creating a new account to warn people that they have entered the wrong email address. If I'm saying I have forgotten my password then it is likely that I know I have an account but I don't know my exact username/password combination.
I know that you don't want to give away any information on whether an account exists to attackers, but I think that shouldn't overtake the user experience. I don't know any other website that operates like this.
Steve
P.S If anyone with the power can find out how many duplicate accounts there are with my name, I'd be fascinated to know. A recent account was given a suffix of -6, making me wonder who the other 5 mes were. |
I now accidentally have 3, possibly 4 logins to Launchpad due to it's eagerness to sign up new users without telling them what's happening.
1) Select an email address not used for launchpad (we all have more than 1)
2) Enter the email on login and guess what you'd have set your password to
3) Screen will say passwords don't match
4) Click forgotten password
5) Launchpad now makes it sound like you have an account and sends you a confirmation code
6) Fill in the code from your email and you have a new account.
You now have two OpenID accounts. You now have your bug reports fragmented over two separate accounts. Come back in a years time with a new bug and you may end up with three accounts.
I think the site needs to make it clear that it is creating a new account to warn people that they have entered the wrong email address. If I'm saying I have forgotten my password then it is likely that I know I have an account but I don't know my exact username/password combination.
I know that you don't want to give away any information on whether an account exists to attackers, but I think that shouldn't overtake the user experience. I don't know any other website that operates like this.
Steve
P.S If anyone with the power can find out how many duplicate accounts there are with my name, I'd be fascinated to know. A recent account was given a suffix of -6, making me wonder who the other 5 mes were.
EDIT: I have discovered if you add extra email addresses to one account that match a duplicate, then you can infact merge the accounts together, which is much appreciated. I think the original point still holds though. |
|
| 2011-11-14 23:28:16 |
Stephen Brandwood |
description |
I now accidentally have 3, possibly 4 logins to Launchpad due to it's eagerness to sign up new users without telling them what's happening.
1) Select an email address not used for launchpad (we all have more than 1)
2) Enter the email on login and guess what you'd have set your password to
3) Screen will say passwords don't match
4) Click forgotten password
5) Launchpad now makes it sound like you have an account and sends you a confirmation code
6) Fill in the code from your email and you have a new account.
You now have two OpenID accounts. You now have your bug reports fragmented over two separate accounts. Come back in a years time with a new bug and you may end up with three accounts.
I think the site needs to make it clear that it is creating a new account to warn people that they have entered the wrong email address. If I'm saying I have forgotten my password then it is likely that I know I have an account but I don't know my exact username/password combination.
I know that you don't want to give away any information on whether an account exists to attackers, but I think that shouldn't overtake the user experience. I don't know any other website that operates like this.
Steve
P.S If anyone with the power can find out how many duplicate accounts there are with my name, I'd be fascinated to know. A recent account was given a suffix of -6, making me wonder who the other 5 mes were.
EDIT: I have discovered if you add extra email addresses to one account that match a duplicate, then you can infact merge the accounts together, which is much appreciated. I think the original point still holds though. |
I now accidentally have 3, possibly 4 logins to Launchpad due to it's eagerness to sign up new users without telling them what's happening.
1) Select an email address not used for launchpad (we all have more than 1)
2) Enter the email on login and guess what you'd have set your password to
3) Screen will say passwords don't match
4) Click forgotten password
5) Launchpad now makes it sound like you have an account and sends you a confirmation code
6) Fill in the code from your email and you have a new account.
You now have two OpenID accounts. You now have your bug reports fragmented over two separate accounts. Come back in a years time with a new bug and you may end up with three accounts.
I think the site needs to make it clear that it is creating a new account to warn people that they have entered the wrong email address. If I'm saying I have forgotten my password then it is likely that I know I have an account but I don't know my exact username/password combination.
I know that you don't want to give away any information on whether an account exists to attackers, but I think that shouldn't overtake the user experience. I don't know any other website that operates like this.
Steve
EDIT: I have discovered if you add extra email addresses to one account that match a duplicate, then you can infact merge the accounts together, which is much appreciated. I think the original point still holds though. |
|
| 2011-11-15 08:27:13 |
Robert Collins |
affects |
launchpad |
canonical-identity-provider |
|
| 2012-01-10 14:52:23 |
Ricardo Kirkner |
canonical-identity-provider: importance |
Undecided |
Low |
|
| 2012-01-10 14:52:26 |
Ricardo Kirkner |
canonical-identity-provider: status |
New |
Fix Committed |
|
| 2012-01-10 14:52:33 |
Ricardo Kirkner |
canonical-identity-provider: milestone |
|
12.01.05 |
|
| 2012-01-13 15:20:00 |
Ricardo Kirkner |
canonical-identity-provider: status |
Fix Committed |
Fix Released |
|
