Peter Pin-Guang Chen [:petercpg] (MozTW.org) Reporter
	Description • 13 years ago

We found some controversial issues about PCMan's original IE Tab addon[1] and ietab.net's IE Tab V2[2]. 

Beside the controversial part, we found that before few hours ago, IE Tab V2 also listed an account called "PCMan"[3] as an author in "by: " section. But since this "PCMan" is not original "PCMan"[4] and there's no simple way to distinguish different users except comparing user ID, it's possible to confuse user when downloading addons.

Screenshot: http://dl.dropbox.com/u/4678506/ietab.png

I think we should make displayname unique as well.


[1] https://addons.mozilla.org/en-US/firefox/addon/ie-tab
[2] https://addons.mozilla.org/en-US/firefox/addon/ie-tab-2-ff-36
[3] https://addons.mozilla.org/en-US/firefox/user/5787341/
[4] https://addons.mozilla.org/en-US/firefox/user/7466/

	Irvin (MozTW)
	Comment 1 • 13 years ago

It's ridiculous that one author can pretend himself as another ppl by choose the same any display name, it just like we keep an large opportunity for the malware author to take advantage of it. 

We should definitely making Display Name unique, or figure out other solution on display-name-phishing, enable users to easily distinguish the different author by the same display name.

	Peter Pin-Guang Chen [:petercpg] (MozTW.org) Reporter
	Comment 2 • 13 years ago

pinging Wil, since this bug is assigned to nobody, could you find anyone to take a look of this bug?

	Wil Clouser [:clouserw]
	Comment 3 • 13 years ago

It is a needless headache for the end user since they may wish to be identified as PCMan as much as the next guy and maybe they are 'PCMan' in their region to their acquaintances.  Add to that the slippery slope of unicode, accents, and casings and it's pretty easy to get past the visual concerns of what letters look like and bypass the restriction all together for the motivated user.

For example, which one of these is using the Greek capital letter for Mu and which one is using the Latin capital letter for 'm'?      PCMan vs PCΜan

I'm wontfixing this bug.  The proper way to handle this situation is to click the "Report user" button in the top right of their user page if they've done something malicious.