1. Summary
  2. Files
  3. Support
  4. Report Spam
  5. Create account
  6. Log in

Ticket #6786 (closed: fixed)

Opened 4 years ago

Last modified 4 years ago

Anonymity and privacy of reviews compromised

Reported by: mhucka Owned by: hinojosa
Keywords: ENGR SPT-168 Cc: mhucka@…
Private: no

Description

Anonymous reviews aren't anonymous. Trivial to demonstrate:

1) Log out of your sourceforge account
2) Submit a review on a project, including some comments
3) View the reviews for that project -- your review is anonymous at this point
4) Log in to your sourceforge account
5) Log out of your sourceforge account again
6) View the reviews for the project again -- this time, your identity is now visible (the review no longer says "posted by anonymous", but "posted by so-and-so"), and the time stamp on the review has changed as well.

Please fix this and make anonymous reviews anonymous again, or let us delete reviews that we thought were anonymous but now aren't.

Mike Hucka

Change History

Changed 4 years ago by hinojosa

  • keywords PARK added; security, privacy removed
  • owner set to ctsai
  • status changed from new to assigned

Hello,

Thank you for submitting a support request for SourceForge.net. A member of the SourceForge.net support team is reviewing this issue and is setting an appropriate priority.

As SourceForge.net is closed for the holiday break, we will respond to this request shortly after our return on 39.November 2009.

Thank you,

The SourceForge.net Support Team

Changed 4 years ago by hinojosa

  • keywords ENGR SPT-168 added; PARK removed

Hello,

I have verified this issue. I am escalating this to the engineering team for action.

If you need anything else, please post a response to this request.

Cheers!,

Daniel Hinojosa - Sr. Manager, SourceForge.net Support

P.S., Be sure to monitor our Site Status page.

Changed 4 years ago by hinojosa

  • owner changed from ctsai to hinojosa
  • status changed from assigned to accepted

Changed 4 years ago by hinojosa

  • status changed from accepted to closed
  • resolution set to fixed

Hello,

The team has fixed this issue. If you'd like, you can feel free to test this on my project, http://sourceforge.net/projects/jackbuntu/ - You can log out - clear your cookies, then make a review. After that - you can log in and note that your review is not credited to your user name.

We can't go back and undo the ones originally posted by you, but from here out, this is now working as noted above.

Best regards,

Daniel Hinojosa - Sr. Manager, SourceForge.net Support

P.S., Be sure to monitor our Site Status.

Note: See TracTickets for help on using tickets.