[GNC-dev] BZ-emails; was: Bugzilla Migration Status -- phase 2

[Derek Atkins]

For what it's worth, my next reset will include all bugs and users. So this 
won't be an issue.

But I agree it's not a bug that it says it sent an email when none was sent.

-derek
Sent using my mobile device. Please excuse any typos.
On May 15, 2018 9:39:38 PM Adrien Monteleone 
<adrien.monteleone at lusfiber.net> wrote:

> Perhaps a bug, perhaps a feature. You’d have to check with the BZ devs.
>
> I’ve seen some site security recommendations to NOT show a different message.
>
> Personally, I doubt it really discourages hackers or makes their task 
> harder and it just frustrates a user who isn’t sure what address he/she 
> signed up with.
>
> Regards,
> Adrien
>
>> On May 15, 2018, at 3:55 PM, Frank H. Ellenberger 
>> <frank.h.ellenberger at gmail.com> wrote:
>>
>> At first, IMHO there is a bg in bugzilla:
>> "A token for changing your password has been emailed to
>> frank.h.ellenberger at gmail.com. Follow the instructions in that email to
>> change your password."
>> But there is no email. If the user is not in the database the message
>> should be different.
>> Or an email should be sent "Sorry, I don't know you..."
>>
>> Creating a new account with a different address works. Email gets sent.
>>
>> Am 15.05.2018 um 20:35 schrieb Derek Atkins:
>> :
>> _______________________________________________
>> gnucash-devel mailing list
>> gnucash-devel at gnucash.org
>> https://lists.gnucash.org/mailman/listinfo/gnucash-devel
>>
>
>
> _______________________________________________
> gnucash-devel mailing list
> gnucash-devel at gnucash.org
> https://lists.gnucash.org/mailman/listinfo/gnucash-devel