Log in

03 December 2007 @ 01:43 am
Security issues  
vox_diabolica pointed out that there may be security issues with this system - specifically, anti-furries targeting furries, but in general people abusing the system to get other people's details while not providing real details for themselves. This wasn't something I'd considered, since I set this up as an extension of a pkmncollectors thread, and people generally behave there. However, now that it's come to my attention, we do need a way to avoid that.

I'm thinking verification of address by mail would be the easiest way. We already have that for almost all of the members, since they've traded on pkmncollectors. For those who aren't involved in that community, it would involve one of the mods sending a letter with a code in it, and you emailing back the code to our email address. Does this sound reasonable? You'd then be allowed to participate in the penpal scheme. It means you'd need a week or two to be activated, but it's an important concern.

If you've ideas, I'd love to hear them. Please leave them in a comment.
Emlee: Pikachu!emlee on December 2nd, 2007 03:03 pm (UTC)
Hmm~ I don't have a better idea than that, 'cause that does seem to work. I've bought something from Pokemon Collectors for the first time a couple of days ago, though because it'll take a while for my address to be proven, I guess I still count in the whole verification thing XD

Good idea, for people using real addresses, but wouldn't some anti-furries (or those specifically trying to get details) still get in through having a real address?
→ just say yes ☆tortoises on December 2nd, 2007 03:09 pm (UTC)
They could, but then we'd have their address too, and would be able to do something about abuse perhaps. Another suggestion was that we route all unknowns through one of the moderators with a PO box for a few months, before we decide if we can trust them.
CoolTrainer_Dougcooltrainerdoug on December 2nd, 2007 03:17 pm (UTC)
Aw..does this mean that I would have to wait until next month to do this??
→ just say yes ☆tortoises on December 2nd, 2007 03:21 pm (UTC)
My mailing address is non-residential, so perhaps I could ensure you were paired with me for this month?
CoolTrainer_Dougcooltrainerdoug on December 3rd, 2007 03:04 am (UTC)
ok! That'll work fine! That will count as my "verification" as well?
Rachel ♥digivolution on December 2nd, 2007 03:34 pm (UTC)
Maybe there could be an e-mail exchange set up? So then only you'd know our address?

God, there are such fucking lame people that would abuse a system like this. I had a penpal when I was like 8 and there weren't creepy people like that back then :( It makes me sad.
Lin: confusedtragic_elegance on December 2nd, 2007 05:49 pm (UTC)
I just commented on the participation thread, but I'm in the same boat as cooltrainerdoug on the address thing. Perhaps there's another non-residential address I could be paired with?
주리kameil on December 2nd, 2007 06:18 pm (UTC)
Yeah, same here :(
andy: amyandres_ on December 2nd, 2007 09:58 pm (UTC)
I'm down with verifying my address.
!tksama on December 3rd, 2007 02:42 am (UTC)
What if some of us have had Paypal transactions with them? So long as the address is verified, they should be good to go, no?