Re:Hacking GitHub's Auth with Unicode's Turkish Dotless 'I'
by _jal on Monday December 16, 2019 @10:26PM
(#21810242)
Sure, and meanwhile if there are collisions without periods on that domain (randy@somewhere, r.andy@somewhere and rand.y@somewhere, for instance), only one of them gets an account.
In the absence of being able to count on specs, I guess the user should expect a race?
Re:Hacking GitHub's Auth with Unicode's Turkish Dotless 'I'
by RyanCavanaugh on Monday December 16, 2019 @10:48PM
(#21810338)
The fact that we just now found out that this is the case, yet would be completely unable to find anyone complaining about it except in hypothetical terms, tells you exactly how important it is.
Re:Hacking GitHub's Auth with Unicode's Turkish Dotless 'I'
by tialaramex on Tuesday December 17, 2019 @05:42AM
(#21812373)
This stuff just causes your business to mysteriously have low customer satisfaction. You're doing 95% as well as the successful business but for 5% of your customers these "unimportant" problems make it awful to deal with you and they stay away and tell others.
Most of them can't specifically point to the problem, their impression is just that your services don't work properly. They're right.
You can't break user expectations and mental models by pointing to the spec as justification. The spec exists to serve users, not the other way around.