[wp-forums] angelin.deboral lost the email to her old user ID

[Michael Atkins]

That account is listed as author of a couple of plugins:
http://profiles.wordpress.org/users/angelin.nadar/

Smart Reporter for WP e-Commerce (847 downloads)
& Smart Manager for WP e-Commerce 15,999 downloads

If it isn't the same person, and is actually someone with malicious intent, the plugins are most likely the target. Who knows what dodgy business could be added into peoples ecommerce sites.

Michael
@cubecolour
michael at cubecolour.co.uk




On 8 Sep 2011, at 16:47, ipstenu at ipstenu.org wrote:

> Her latest post: http://wordpress.org/support/topic/i-want-the-emailid-associated-with-account-as-i-have-forgot
> 
> Backstory.
> 
> She had an id (angelin.nadar - http://wordpress.org/support/profile/angelinnadar/ ) with NO posts, and she lost the password.  No big, except she also forgot which email address it was.  Furthermore, the email address no longer exists (per yahoo, I emailed it directly).
> 
> So now we have a case where she says "I am this user name, but I can't prove it in any way shape or form, because I don't remember the password or the email.  But can you reset the password for me anyway?"
> 
> And I said "No, that's what we call 'social engineering.'  Tough titties, move on."  (I said it nicer!)
> 
> Do I think it's her? Probably yes, but with no posts to the name, I can't even spot-check the IP to be certain, and the security mole in my heart screams in abject hate at the idea of just handing over an ID, when I don't know what else it may effect.  I highly doubt there's any risk in this particular situatino, but I'm not personally comfortable opening the door.  Especially since (1) no posts exists for the old account, (2) she has one (unanswered) topic with the new one and (3) merging accounts involves buying Otto a home brewery set at this rate.
> 
> Am I being too knee-jerky paranoid about security?  (I swear, Nacin, I took the tin foil out of my hat today!)
> _______________________________________________
> wp-forums mailing list
> wp-forums at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-forums