[wp-forums] angelin.deboral lost the email to her old user ID

[Christopher Ross]

If an account has been inactive for a specific amount of time and has no posts associated with it, would it be reasonable to remove it from the database altogether? 

c.

On 2011-09-08, at 12:47 PM, ipstenu at ipstenu.org wrote:

> Her latest post: http://wordpress.org/support/topic/i-want-the-emailid-associated-with-account-as-i-have-forgot
> 
> Backstory.
> 
> She had an id (angelin.nadar - http://wordpress.org/support/profile/angelinnadar/ ) with NO posts, and she lost the password.  No big, except she also forgot which email address it was.  Furthermore, the email address no longer exists (per yahoo, I emailed it directly).
> 
> So now we have a case where she says "I am this user name, but I can't prove it in any way shape or form, because I don't remember the password or the email.  But can you reset the password for me anyway?"
> 
> And I said "No, that's what we call 'social engineering.'  Tough titties, move on."  (I said it nicer!)
> 
> Do I think it's her? Probably yes, but with no posts to the name, I can't even spot-check the IP to be certain, and the security mole in my heart screams in abject hate at the idea of just handing over an ID, when I don't know what else it may effect.  I highly doubt there's any risk in this particular situatino, but I'm not personally comfortable opening the door.  Especially since (1) no posts exists for the old account, (2) she has one (unanswered) topic with the new one and (3) merging accounts involves buying Otto a home brewery set at this rate.
> 
> Am I being too knee-jerky paranoid about security?  (I swear, Nacin, I took the tin foil out of my hat today!)
> _______________________________________________
> wp-forums mailing list
> wp-forums at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-forums




--
Christopher Ross
christopher.ross at rodonic.com

Rodonic - http://rodonic.com
My Blog - http://thisismyurl.com

Twitter - http://twitter.com/#!/thisismyurl
Facebook -  http://www.facebook.com/thisismyurlcom

(416) 900-3731
(858) 201-4912