Archived and Closed
This conversation is no longer open for comments or replies and is no longer visible to community members. The community moderator provided the following reason for archiving: Old thread
Currently, every regular IMDb user account has a public profile page. Even if a user merely registers but never posts anything (no reviews, no board posts, no lists etc.), there is still a possibility that the user's profile page and account name could potentially be discovered.
For example: I'm sure staff are aware that a certain hobbyist has (over a number of years) collected and published a list of names and profile links of many thousands of IMDb accounts (without most of those users' knowledge or permission), including some account names containing personal names, and including some users who haven't posted anything.
Just one such instance would suffice to illustrate the point: Even users who don't post have public profile pages where their account names could potentially be discovered and revealed without their knowledge, expectation, or consent. IMO, it would be better to eliminate that possibility entirely.
Request:
Please stop publishing profiles of users who have merely registered but haven't posted anything. Configure IMDb servers to refuse non-owner access to account profiles of users who haven't posted. An appropriate response to such requests would be HTTP status code 403 indicating refusal. Of course, logged-in users would still be able to access their own profiles; but if a user hasn't posted anything, by default no one else should have access to their profile page.
For example: I'm sure staff are aware that a certain hobbyist has (over a number of years) collected and published a list of names and profile links of many thousands of IMDb accounts (without most of those users' knowledge or permission), including some account names containing personal names, and including some users who haven't posted anything.
Just one such instance would suffice to illustrate the point: Even users who don't post have public profile pages where their account names could potentially be discovered and revealed without their knowledge, expectation, or consent. IMO, it would be better to eliminate that possibility entirely.
Request:
Please stop publishing profiles of users who have merely registered but haven't posted anything. Configure IMDb servers to refuse non-owner access to account profiles of users who haven't posted. An appropriate response to such requests would be HTTP status code 403 indicating refusal. Of course, logged-in users would still be able to access their own profiles; but if a user hasn't posted anything, by default no one else should have access to their profile page.
Posted 6 years ago
There are no replies.
