I mean, pretending to be someone in another instance, “stealing” the username, is trivial. I see the more likely targets being instance admins or high profile users. Should we worry somewhat about this?
I mean, pretending to be someone in another instance, “stealing” the username, is trivial. I see the more likely targets being instance admins or high profile users. Should we worry somewhat about this?
Yes, for sure. While the identity of a user can be checked, nobody is going to do this every time. IMO the simplest solution would be to just always show the instance even if a display name is set.
Yeah, I think how most Lemmy clients (including the default web UI) handle display name is a real mistake.
It currently shows: pic, username (or login name@instance), local link to the comment, federated link, language
Seems like the easiest solution would be to always show the user’s instance in a separated column
I think showing something like
DisplayName (@username@instance)if they have a display name would make sense… honestly I would like to disable showing display name entirely (didn’t need it on that other site, never found it useful on twitter/mastodon/etc), but understand that would may be a less popular option.I feel like they could solve it by adding instance only when another user with similar name is present in the comment section. It would make it clear that a duplicate username is present without changing a lot for a majority of lemmy-commenr sections.