Rico said:
Wow, that is a serious problem (Cyrillic character sets). I daresay that if a user grabbed the same sig and avatar, that would be enough to fool most people.
The same sort of issue can be found with Unicode in URLs. It seems like the board software should be normalising usernames and seeing if they already exist!
I agree... is there any way of disallowing any non-standard characters (those not found on a typical keyboard) in usernames? Chip's discovery has the potential to open up a Pandora's Box. :unsure:
Eh, it's not
that big a deal. Even if you copy the name, avatar, and sig like I did with the fake chad78, the post count and join date cannot be faked. Even if somebody were to try to pull a prank with a Cyrillic doppelganger, they wouldn't fool more than a few people before somebody caught on. I think the ability to use non-standard characters is more important than the potential for (minor) harm.
Maybe I shouldn't have brought this up at all. Like I said, I just wanted to cut any shenanigans off at the pass by outing the faker before he posted anything. Hopefully now that everybody is aware of it we can simply be on the lookout.