Extensions Website publicly showing Blender ID Full Name, NOT Username #59
Labels
No Label
Priority
Critical
Priority
High
Priority
Low
Priority
Normal
Reviewed
Confirmed
Reviewed
Duplicate
Reviewed
Invalid
Reviewed
Won't Fix
Status
Abandoned
Status
Blocked
Status
Need More Info
Type
Breaking
Type
Documentation
Type
Enhancement
Type
Feature
Type
Report
Type
Security
Type
Suggestion
Type
Testing
No Milestone
No project
No Assignees
5 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: infrastructure/extensions-website#59
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This is a major privacy concern!
It is fine that the Blender Foundation have the full legal name of a user as part of account creation agreement, but NOT to display it to the world!
second this, can we do something about it?
I try not to use my legal name anywhere on internet. And Also the other problem is that I changed my name on Blender.ID and it still didn't update on the website (its already been around over a month since i altered it)
I maintain my code under nickname Alias, I think displaying full legal name of someone is a huge problem to simply throw out online.
Also https://extensions.blender.org/settings/profile/
both Full Name and Username have both same description!
"Displayed in extension pages, rating comments and so on. "
this is a major source of confusion too
As far as I know this is standard behavior. For example GitHub, Gitea and Discourse work the same way, showing the "Full Name" or "Name" fields publicly, without a separate legal name field.
People who don't want their legal name to be public fill in something else there. Creating an account on id.blender.org doesn't seem to ask for the legal name specifically.
Here's the current situation: I've only ever provided my full name to Blender, when I created the account to become a donor - and this was because it is tied to a billing record. This was 18 months ago, so it's possible my memory is is at fault - but, it feels like my blender ID was then created using that criteria as the user info.
Extensions website has now pulled that account info over, and when I look at the "how your name will be displayed" preview, it shows my full legal name, not the alias you're seeing here.
In other words, either extensions is pulling from the wrong data field in my account, or the preview image that is showing me is wrong.
To be clear what happens is:
I can imagine that it's not obvious that this is happening, and maybe the wording can be changed in the Blender ID account creation step to clarify what is happening. But I don't think it's possible for extensions to be pulling in any data from the development fund account.
Perhaps a pic will demo the situation a bit more.
Note that Extensions site says in 2 different places "this is what will be shown". The Preview says "this is how it is displayed", which means exactly the same thing as "this is what will be shown".
On my id.blender, i changed it to THORN after leaving a commend on an extension, and saw my full legal name as the comment author. Thankfully, the extension developer removed my comment after I sent them a message. No idea which name of mine would appear on a comment presently, as the website lists 3 different things of "here's the name that's going to be shown."
I think the additional issue might be that changes to the Blender ID full name are not being properly synced to the extensions website.
The workaround for that would be to revoke access from the extensions website and then log out and log in again on the extensions website. This will remove the extensions account data.
https://id.blender.org/applications
This was the case a few months ago but was fixed already. However it was fixed only for new updates.
The best workaround now is to edit again (you can change to something else and back what you want). The extensions website should pick it up in minutes.
can confirm it updates instantly now, i guess this not as a grave of a problem as it was before if users can alter their names quickly if needed👍
I think it's reasonable for Extensions Platform to display Blender ID username instead of full name, given that full name is indeed used in Blender Studio and DevFund billing details.
Other websites using Blender ID (DevTalk, projects.blender.org, chat) display username as well, it would make sense for Extensions to follow suit.
To be clear, devtalk and projects do publicly show both the username and full name (as can be seen in this issue). Displaying the username on extensions may be a fine design choice, but I don't think it changes much regarding privacy or consistency.
It definitely doesn't change anything concerning privacy because Blender ID registration on its own doesn't assume that full name is anybody's real name.
There are exceptions to this lack of expectation: