Patches for Release #67

[marta]

1. Users who have renamed to an account that was in use previously (that is, an account that was purged and then purchased as a rename) will be unable to use OpenID on external sites. This is a temporary fix to a security problem and we'll update here when it's fixed

Comments

[rebelsheart]

will this affect the people missing stats from a week or so ago?

[nickygabriel]

I would like to know that too!

[rebelsheart]

the error message you get when you try to use OpenID and have renamed is very straightforward and clear, but is not displayed on a page in any of LiveJournal's styles. There's nothing to suggest you've reached a legitimate LiveJournal page.

[matgb]

This is a temporary fix to a security problem and we'll update here when it's fixed.

Am actually discussing something related to this elsewhere, is this a problem LJ specific or is it related to the new owner of the name getting to login elsewhere as if they're the previous owner?

Specifically related to DW, but I also have a few other accounts linked to my OpenID, and have given access to LJ based OpenID accounts elsewhere.

[pseudomonas]

Yes, I'd like to know this as well.

[the_cynic]

1) Is not quite correct. I renamed (5 years ago) to my current name which was a never-before-used name and still am affected by the OpenID issue.

[marta]

I've sent you some info - your name was in use before :)

[alexey_dukov]

khm...

[miquel_fire]

And I'm in the same boat.

[evila_elf]

If there is a username that we are waiting for that hasn't yet been purged, what is considered the wait time? Account hasn't been used since 2001 and there are 0 posts.

[daluci]

As far as I know, inactive accounts aren't being purged right now, just suspended ones.