4 ms·

> Github stole my 4-character username ("mind") to hand over to some machine learning startup-lookalike. Wow ok, I'd just like to be crystal clear here. 1. Yo

> Github stole my 4-character username ("mind") to hand over to some machine learning startup-lookalike. Wow ok, I'd just like to be crystal clear here. 1. Your github userid was 'mind', and you had used that ID. 2. With no notice, github changed which persons/entities had access to/owned that ID. I assume repos and gists were moved to your new ID? May I ask what they changed it to? Were you a member of any organizations? Thanks.

mindslight 8y ago
1. yes. 2. yes. The complete lack of a notice period is my biggest problem, as I could have easily responded to an email to say that it had not been abandoned. My username was forcibly changed to "mind-zz". I found this out a mere 2 months after it happened, upon logging in. Admittedly, my account did have little activity. I used it to make a bona fide Rust bug report, logged in at various other times to check said bug report or just look around, and then life happened. So there weren't public URLs that were being relied on. Although according to the customer service response, they would have done the exact same thing even if it had copious early activity. Presumably there's more of an invisible line based on how much your usage looks like you're dependent on them, and how much of a public disruption it would cause. But that's the point - the actual Rust repo isn't about to get yanked out from under all of us, and people that fit the mold of creating their new repos on Github are probably fine. But the less you're in the "community" the more you're at the mercy of their arbitrariness.
- Diederich 8y ago
  This is pretty scandalous, and could lead to some legitimate security problems, how severe depends on some details. I'm pretty sure that if this practice was widely known, there would be some tangible ire directed toward github, at least in the hacker/dev community. > Although according to the customer service response, they would have done the exact same thing even if it had copious early activity. Are you comfortable pasting that response in here? Thanks!
  - mindslight 8y ago
    Relevant bit from support@github.com: > Thanks for reaching out and my apologies for any worry this change has caused you. First, let me assure you that there has been no unauthorized access to your account: your username was changed by GitHub staff. > We were contacted last March by someone with interest in claiming@@mind@@ for their own use. Upon inspection, we found that your account had not been accessed in over two years and we believed it to be abandoned. We released the username so another user could register it, per our name squatting policy: https://help.github.com/articles/name-squatting-policy https://help.github.com/articles/name-squatting-policy (AsteriskAsterisk was changed to @@ due to HN formatting) ---- As I said above, my account definitely had been accessed within the past two years. And it had been created and immediately used. And given that I do email on my own domain, it was pretty easy to see that this wasn't part of some farm of accounts. (I responded with all these points, to no avail). And now here I am again justifying my own position in terms of their deliberately wide-open policy, to make sure I stay on the right side of public consensus - really, if I was "name squatting", then so is anyone who takes a break from using a service. My guess is that someone greased the rules behind the scenes for a friend's startup. Which is of course is illegible to "support", so they just end up running interference.
  - mindslight 8y ago
    I just looked over my account again, and realized I had actually created it in 2008 and had been reporting the occasional bug with it over the years. So we're talking a 10 year old account that shows a definite pattern of use - just maybe not the pattern Github envisions as being their ideal customer. (This had completely slipped my mind - it's been a hell of a year).

mindslight 8y ago

1. yes. 2. yes. The complete lack of a notice period is my biggest problem, as I could have easily responded to an email to say that it had not been abandoned. My username was forcibly changed to "mind-zz". I found this out a mere 2 months after it happened, upon logging in. Admittedly, my account did have little activity. I used it to make a bona fide Rust bug report, logged in at various other times to check said bug report or just look around, and then life happened. So there weren't public URLs that were being relied on. Although according to the customer service response, they would have done the exact same thing even if it had copious early activity. Presumably there's more of an invisible line based on how much your usage looks like you're dependent on them, and how much of a public disruption it would cause. But that's the point - the actual Rust repo isn't about to get yanked out from under all of us, and people that fit the mold of creating their new repos on Github are probably fine. But the less you're in the "community" the more you're at the mercy of their arbitrariness.

Diederich 8y ago
This is pretty scandalous, and could lead to some legitimate security problems, how severe depends on some details. I'm pretty sure that if this practice was widely known, there would be some tangible ire directed toward github, at least in the hacker/dev community. > Although according to the customer service response, they would have done the exact same thing even if it had copious early activity. Are you comfortable pasting that response in here? Thanks!
- mindslight 8y ago
  Relevant bit from support@github.com: > Thanks for reaching out and my apologies for any worry this change has caused you. First, let me assure you that there has been no unauthorized access to your account: your username was changed by GitHub staff. > We were contacted last March by someone with interest in claiming@@mind@@ for their own use. Upon inspection, we found that your account had not been accessed in over two years and we believed it to be abandoned. We released the username so another user could register it, per our name squatting policy: https://help.github.com/articles/name-squatting-policy https://help.github.com/articles/name-squatting-policy (AsteriskAsterisk was changed to @@ due to HN formatting) ---- As I said above, my account definitely had been accessed within the past two years. And it had been created and immediately used. And given that I do email on my own domain, it was pretty easy to see that this wasn't part of some farm of accounts. (I responded with all these points, to no avail). And now here I am again justifying my own position in terms of their deliberately wide-open policy, to make sure I stay on the right side of public consensus - really, if I was "name squatting", then so is anyone who takes a break from using a service. My guess is that someone greased the rules behind the scenes for a friend's startup. Which is of course is illegible to "support", so they just end up running interference.
- mindslight 8y ago
  I just looked over my account again, and realized I had actually created it in 2008 and had been reporting the occasional bug with it over the years. So we're talking a 10 year old account that shows a definite pattern of use - just maybe not the pattern Github envisions as being their ideal customer. (This had completely slipped my mind - it's been a hell of a year).