I just saw in a year-end report that there is a badge for " Security Conscious" listing users who have authorized two-factored authentication.
It seems strange to me that individual user’s security practices (or lack thereof) would be advertised like this. I understand the whole gamification paradigm to try to get user’s to do things.
I don’t know if knowing that a user doesn’t have 2FA on their account could help with hacking them, but it does seem odd to advertise it.
Am I off base?
I would say it is quite dangerous cause we would be exposing information to hackers, here are the “weakest accounts on the forum”
Maybe some sort of private badge for this that is not exposed publicly could make sense.
확실히 하기 위해 묻는데, 기본 Discourse에는 그런 배지가 없나요? 그렇다면 특정 인스턴스의 사용자 지정 배지일까요?
메타의 배지 페이지나 코드베이스에서 보안 관련 배지를 찾을 수 없습니다.
There is no concept of “private badge” (badge only I can see) in Discourse at the moment.
I’m not an admin, and thought I would ask here first to see if it really was safe, etc. This is what I see on the badge page:
네, 제 말은, 만약 이 배지가 특정 포럼에서 특별히 생성된 거라면, 그 포럼의 관리자들과 여러분의 우려를 공유해 보시는 게 좋을 수도 있다는 거예요.
Interesting. The forum in question tends to avoid custom things so I’m surprised to hear that this is not part of core Discourse.
I guess I was mainly asking here if there was any justification for this being a security liability.
Thanks all!
