I mean, pretending to be someone in another instance, “stealing” the username, is trivial. I see the more likely targets being instance admins or high profile users. Should we worry somewhat about this?

  • sim642@lemm.ee
    link
    fedilink
    English
    arrow-up
    20
    ·
    1 year ago

    That’s why instance is part of the username. It’s no different than email addresses.

    • PonyOfWar
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      Setting a display name hides the instance bit. You have to check the URL or profile to see which instance they’re on, which people definitely won’t do every time. Especially if an impersonator just joins inside a thread mid-conversation, it won’t be obvious at all that it’s suddenly a different person writing.

      • ritswd@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 year ago

        Just like emails, when people write something like ”Amazon Gift Cards” <yolo@yolo.com> in the From field.

      • sim642@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        That’s just a Lemmy client configuration matter, not an issue with Lemmy or fediverse itself.

        • PonyOfWar
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 year ago

          To an extent that’s true, but the standard web UI has this issue. It should not be like this in the standard configuration.

          • sim642@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 year ago

            It’s open source so just open an issue about it if there already isn’t one.

    • skomposzczet@vlemmy.net
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      1 year ago

      His concern is probably that in comments etc. only username is displayed. You have to go to person’s profile to discover their instance.