[openstreetmap/openstreetmap-website] User account self-deletion allows bad actors to delete and recreate the same account name to "lose" changeset discussion and block history (Issue #4018)

[Hungerburg]

A softer reason for delaying delete requests: The cool down period affects not just vandals. I'd say it can help people from throwing in the towel too easily thereby losing the investment into their persona. I guess, that is why it is called like that? Time to reconsider. The community should be better off with continuity in members.

In case somebody urgently wants to start from zero, they still can do that. Even with the same nick, if they rename the other one first. Brings up a question: Can users pending delete rename themselves?

> we add a flag to the user and have a batch job that once a day looks for users with that flag set that haven't edited recently and deletes them.

If I understand correctly: The flag is a timestamp, delete request plus cool down period. The batch job selects where deletion due then checks whether flag minus time of last edit is greater than cool down period. If so there were no edits after delete request and deletion can happen, otherwise flag gets unset, i.e. request cancelled.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/4018#issuecomment-1781080492
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/4018/1781080492 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20231026/b143184a/attachment-0001.htm>