Unique name reveals hidden email address

Bug #228355 reported by Pinku Surana
34
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
Low
j.c.sackett

Bug Description

I just signed up for an account on Launchpad. I asked that my email not be revealed. However, under "Change account details", the unique "Name" is generated from my email: "username-emailhost". If that unique name is used elsewhere, then it reveals email addresses. For example, bob-gmail is obviously <email address hidden>. Try to generate a unique name without reference to email addresses.

Related branches

Ursula Junque (ursinha)
Changed in launchpad-foundations:
status: New → Triaged
Curtis Hovey (sinzui)
Changed in launchpad-registry:
importance: Undecided → Low
Revision history for this message
Curtis Hovey (sinzui) wrote :

I think lp.registry.model.person.generate_nick needs an altername qualifier for names. The use of domain may be easy, but that is inapproiate given how difficult it is to fix once it is created.

Curtis Hovey (sinzui)
tags: added: disclosure
j.c.sackett (jcsackett)
Changed in launchpad:
assignee: nobody → j.c.sackett (jcsackett)
status: Triaged → In Progress
Revision history for this message
Launchpad QA Bot (lpqabot) wrote :
tags: added: qa-needstesting
Changed in launchpad:
status: In Progress → Fix Committed
j.c.sackett (jcsackett)
tags: added: qa-ok
removed: qa-needstesting
William Grant (wgrant)
Changed in launchpad:
status: Fix Committed → Fix Released
Curtis Hovey (sinzui)
tags: added: hardening
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.