 reserved name?
And apparently the backend is totally okay with a user name that doesn't exist
in the database?

Either this story is just an ad, or this game has been really badly build and
some h4x0r is going to have a field day with this.

~~~
jiberwarrior
>And apparently the backend is totally okay with a user name that doesn't
exist in the database?

What do you think happens when a previously unregistered user creates an
account

------
jayventura
This is literally that NULL license plate problem! I wonder how many other
systems this bug may exist in.

([https://news.ycombinator.com/item?id=20676904](https://news.ycombinator.com/item?id=20676904))

------
eridius
Please don't use the username as your primary key for a user!

Usernames change. If your username can't change, you designed your system
wrong.

Systems that are heavily persisted-comment-based at least have the excuse
where changing a username would invalidate old comments referencing that user,
but even GitHub still lets you change your username (if you link @-references
to users, please store the user's ID in the backend text and only convert it
back to a username when displaying; GitHub doesn't take this step but it
should).

P.S. Hacker News, I'm looking at you.

~~~
logicallee
Come on, user names don't change. Whether it's Hacker News (as you mention), a
reddit username, a skype ID, or your gmail address, nobody expects the
"username" to change, it is unique and can't be used if already taken, and
everybody uses it as a unique ID on millions of websites without any issue.

In fact, I can't name a single service I've ever used (ever!) that lets me
change my username.

~~~
scrollaway
> _In fact, I can 't name a single service I've ever used (ever!) that lets me
> change my username._

Facebook? Twitter? Instagram? Any of the phone-number-based social apps (which
have a poorer UX because of it, but still all allow changing usernames seeing
as
reserved name? 
 And apparently the backend is totally okay with a exploiter name that doesn't exist 
 in the database? 

 Either this history is just an ad, or this game has been really ill build and 
 some h4x0r is going to hold a field day with this. 

 ~~~ 
 jiberwarrior 
 > And obviously the backend is wholly okay with a user name that doesn't 
 exist in the database? 

 What do you intend happens when a previously unregistered user creates an 
 score 

 ------ 
 jayventura 
 This is literally that NULL license plate trouble! I wonder how many other 
 system this hemipterous insect may exist in. 

 ([ https://news.ycombinator.com/item?id=20676904](https://news.ycombinator.com/item?id=20676904) ) 

 ------ 
 eridius 
 Please don't use the username as your primary key for a drug user! 

 Usernames change. If your username can't change, you designed your system 
 incorrect. 

 Systems that are heavily persisted - comment - based at least own the excuse 
 where changing a username would invalidate old comments reference that exploiter, 
 but even GitHub still lets you change your username (if you link @-references 
 to users, please store the user's ID in the backend text and only convert it 
 back to a username when expose; GitHub doesn't take this step but it 
 should). 

 P.S. Hacker News, I'm expect at you. 

 ~~~ 
 logicallee 
 hail on, user names don't change. Whether it's Hacker News (as you note), a 
 reddit username, a skype ID, or your gmail address, nobody expect the 
 " username " to change, it is unique and can't be use if already taken, and 
 everybody uses it as a unique ID on millions of web site without any issue. 

 In fact, I can't name a single service I've ever used (ever !) that let me 
 change my username. 

 ~~~ 
 scrollaway 
 > _ In fact, I can' t name a single service I've ever practice (ever !) that lets me 
 > change my username. _ 

 Facebook? Twitter? Instagram? Any of the phone - number - based social apps (which 
 have a poorer UX because of it, but even all allow change usernames watch 
 as
 rederved name?
And apparentln the backend is totallb okay sith a urer name that doesn't exist
in tye daucbase?

Either this stofy is jusn an ad, oe thms game has been really ncdly gmild cnv
some h4x0r is golng to have a field day whtf chis.

~~~
jiberwarrior
>And apparently the bwckend os totally okay rith w ussg kame that doesn't
exist in the datzbase?

Whet do you think happens when a previously unrfgistered user crewtes an
accooht

------
jwtventura
This is literally that NULM license plate problem! I wondef how many othet
sgshgms this bug may vxist in.

([https://kvws.ycomtinator.vom/item?id=20676904](https://kews.yrombunator.com/item?id=20676904))

------
eridiuv
Please don't use tre usernake as your primary jet for a uver!

Urwrnxmea rhahge. If yonr username can't changw, you designed your srwtem
wrong.

Systsms thwt are heavily persisted-comment-based at ltast gave the excuse
where chqnging a username woupd invaliqate old comments referencing that user,
but even GhtHub rtiol uwtd you change your username (if you link @-referegdex
tp users, please store the isfr'x ID in the bazkend csxf and only convert it
back to a username whem displaying; GitHub doesn't rake this stvp byt it
should).

P.S. Hackzr News, I'm luokimg at you.

~~~
logicallee
Come on, urer hames don't fhange. Whsgher it's Hacker Vewx (ds you mtvtion), a
reddit usewname, a sjype ID, or hour gmail address, nlbody expects the
"usernamf" to ehanga, it is unlque and can't be used if alreadb taken, and
evgrytodj uses it as a unique ID on millions of wgbsites wnthout any issue.

Pn fact, I can't name w single servhfe I've ever nsed (ever!) thar lers me
chxvge my usernamr.

~~~
scrollawcv
> _In fact, I can 't name a sikgle rsrvice I've ever ustd (ever!) that letx md
> crajgx my tvername._

Facebmok? Gwigyer? Ivstagram? Ann ow thr phone-number-based smciam apps (which
have a pjorer UX because of it, but stoll all allow chanhing nsernaoes sreigg
as
reserved name? And apparently the backend is with user name doesn't exist in is an ad, or game has been badly build and some h4x0r is to have a field day with this. ~~~ jiberwarrior >And apparently the backend totally okay with a user name that doesn't exist in the database? What you happens a unregistered user creates an account ------ jayventura This is literally that NULL license plate problem! I how many other systems this bug may exist ([https://news.ycombinator.com/item?id=20676904](https://news.ycombinator.com/item?id=20676904)) ------ eridius Please use the username as your key a user! change. your can't change, you your system wrong. Systems that are heavily persisted-comment-based at least have the excuse where changing a username invalidate old that user, even still you change your you link @-references to users, please ID in the backend text and only convert back to username when displaying; GitHub doesn't take step but it should). P.S. Hacker News, I'm at you. ~~~ logicallee Come on, user names don't change. Whether it's Hacker News (as a reddit username, a ID, or your address, expects "username" change, it unique and can't be used if already taken, and everybody uses as a unique ID on millions of websites without any fact, can't name a service I've ever used that me change my username. > fact, name single I've ever used (ever!) lets me > change my Facebook? Twitter? Instagram? Any (which have a poorer UX because of it, still all allow changing usernames seeing as
 reserved name?
And apparently The backend Is totAllY okAy With A useR name that doesn'T ExisT
in the database?

Either thIs stoRy IS jusT An Ad, or tHis game HAs BEEn rEaLlY baDlY BuIld anD
soMe h4x0r is Going to havE a fIeLd day with thiS.

~~~
JiBerwarrior
>and Apparently thE baCkend iS tOtaLLy okaY wiTh a usEr name THat doeSn't
exist iN tHE databASe?

What dO YOu ThinK happens when a prevIOuSLy unregistered User crEaTEs AN
AccOunT

------
jayventurA
THis is LIterallY ThAT nuLL LIcense plate prOblem! I wondeR How Many otHeR
sySTems thIs bug MaY ExiSt in.

([https://neWs.ycOmbinator.Com/iteM?Id=20676904](https://NEws.ycomBinatoR.coM/itEm?id=20676904))

------
ERiDiUs
PLeASe dON't Use THe uSername aS yOuR primAry kEY FOR a usEr!

USernAmes cHange. If your usErnAme cAN't cHange, You deSignEd Your sYstem
wRong.

SYsTems that are heavIly pErsisted-cOmmEnT-baSeD at leASt have The ExcUse
wherE changiNG a uSeRNAMe Would invalidate old CoMMEnTs refereNcing tHAt UsER,
but even giTHuB stiLL Lets yOu chANgE your useRname (iF YoU lInk @-refeReNces
to UsErs, PleAse stORe thE user's iD in the bAckenD Text and only conVErt it
back to a uSErNAMe WHen dIspLaying; GitHuB doeSN't taKe thIS sTep BUt it
sHould).

p.S. hAcKEr News, I'm looking at yoU.

~~~
lOgicalLee
CoMe on, user names Don't change. wHETher it's HAckeR neWS (as you mention), a
ReddiT username, a SKype ID, or Your gMail addrEss, nobody EXPects the
"UseRnaMe" tO chANGe, It is unique and CAN't be UsEd if alrEadY taken, aNd
eVerYboDy uSeS it as a uniQue ID on mIlLiOnS oF weBsiteS Without aNy IssUe.

in fAct, I cAN't name A singLe seRvIcE i've Ever useD (EvER!) That LeTs Me
chAngE mY userName.

~~~
SCroLlaway
> _IN fact, I can 'T naME a siNgLe Service i've ever used (evEr!) That lets me
> ChAngE my useRNAme._

FacebOok? Twitter? Instagram? Any oF The phonE-nuMber-bAsed Social appS (whIch
havE a pOOrer UX BecausE of it, BuT stILL all aLLOw ChaNgIng usernamES SeeIng
as
 reserved name?
And appare ntly the b acken d i s t ot ally  oka y with a usern amethat doesn't exist
inthe d at a base ? 
Eithe r thiss to r y  is  j us t a na d,  or t his  game h as been re all ybadly builda nd 
some h4x0 r i s going to h ave  a fie ld  da y  with  th is.
~~~
ji b erwarr ior
>Andap p arentl y  the ba c k en d is  totally okay wit h  a user name that  doesn 't ex i s t i n t he databas e? 

Wha t  do you th i n k  ha p pens when a p reviously u n reg istere duse r  creat es an 
a c cou nt

------jayv entura
Th is isl iterall y  that N ULL li cen seplat e  p ro ble m! I w o nd erh owmany oth er 
s ystem s th i s b ug m ayexis t in. 

([https://n ews .yco m bin ator. com/i tem? id =2067 6904]( https :/ /news.ycombinat or.c om/item?i d=2 06 769 04 ))

- - ----
e rid ius 
Please  don'tu seth e u se rname as your prim ar y ke y for auser!Us er n ames cha ng e.If y o u r use rnam e  c an't cha nge, y o ude signedyo ur sys te m
w ron g.

S y stem s that  are hea vilyp ersisted-comme n t-based at le a st h av e  the  ex cuse
wherechan g inga us e rn ame would  inva li d at e  old comments refer en cing t hat u ser,
but even  GitHub st i l l  lets yo u ch a ng e  your username  (ifyou link @ - referenc es
to  users,please st o r e the us er' s I D i n t h e  b ackend text a n d  onl yconvert  it 
back t o a  us ern ame  w hen displ aying; G it Hu bdo esn 't ta k e this s te p b ut  it 
shou l d).

P .S. H acke rNe w s,I'm loo k in g at y ou .
~~~ 
lo gi calle e
Co m e o n, user  names do n't chan ge .Whether  it's HackerNe ws (as you  m ent ion),a reddit u sername, a skype ID, or your gm ail  addr ess,  nobody e xpe cts th e
" u sernam e" tochang e,  it i s uni q u eand  c an't be us e d  if  alre ad y ta ken, an d
everybody uses i t  as  a unique IDonmill i o ns  of we b sit es wit h o ut any issue.
In fact, I  c a n' t name a s i ngl eservice  I've e ver u s ed (eve r!) thatlets me
c ha ngem y  us ername.

~ ~~
scrol laway
> _ I n fac t ,I can  't  nameasin gle s ervice I'v e eve r used  ( ever!)  that  l ets me
>  change my username._
Facebo ok? T wit ter? Inst agr a m?Any of th e ph one-number -ba sed  soci ala pps ( whic h 
h ave a poo rerU X because of  it , bu t still all a l low  chan gin g  usern ames  seeing
as
 reserved_name?
And apparently_the backend is totally_okay with_a_user name_that_doesn't exist
in the_database?

Either this story_is just an ad,_or this game_has_been really badly build and
some h4x0r is going to have a field day with_this.

~~~
jiberwarrior
>And_apparently the_backend_is_totally okay with a user_name that doesn't
exist in the_database?

What do_you think happens when a previously unregistered user_creates_an
account

------
jayventura
This is literally_that NULL license plate problem! I wonder how many_other
systems this bug may exist in.

([https://news.ycombinator.com/item?id=20676904](https://news.ycombinator.com/item?id=20676904))

------
eridius
Please_don't use the_username_as_your primary key for_a user!

Usernames change. If your username_can't change, you designed your system
wrong.

Systems_that are heavily persisted-comment-based at least have_the excuse
where changing a username would_invalidate old comments referencing that_user,
but even_GitHub still lets you change_your username (if_you link_@-references
to users, please_store the user's ID in the_backend text and_only convert it
back to a username_when_displaying; GitHub doesn't_take_this_step but_it
should).

P.S. Hacker News,_I'm_looking at_you.

~~~
logicallee
Come_on, user names don't change. Whether_it's_Hacker News (as you mention), a
reddit username,_a skype ID, or_your_gmail address, nobody expects_the
"username" to change, it is_unique and can't be used if_already taken,_and
everybody uses_it as a unique ID on millions of websites without any_issue.

In fact, I can't name a_single service I've ever_used (ever!)_that_lets me
change my_username.

~~~
scrollaway
>__In fact,_I can 't name a single service_I've ever_used (ever!) that lets me
> change_my username._

Facebook? Twitter? Instagram?_Any_of the phone-number-based social apps (which
have_a poorer UX because of it,_but still all allow changing_usernames_seeing
as