8

Do not know whether someone else observe it or not but today I found my profile Gravatar changed. It is now different than earlier I have. Is it because today I have updated my profile information?

gravatar

My previous gravatar looks like:

old one

6
  • 1
    Are you sure you're using a Gravatar? It clearly says you uploaded a picture. Aug 14 '13 at 18:47
  • I uploaded but the revert back to gravatar Aug 14 '13 at 18:47
  • Interestingly when I view your profile I see your gravatar as the one you posted at the bottom, but on this question I see the one at the top.
    – Josh Mein
    Aug 14 '13 at 18:55
  • Actually I just did a Shift+ Refresh and it went back to your old one in both places. Caching issue???
    – Josh Mein
    Aug 14 '13 at 18:57
  • @JoshMein no I changed it by changing email, when you were refreshing.... Aug 14 '13 at 18:58
  • Man this is so confusing...I wish there were just a checkbox option to use gravatar still, or that it were greyed out if SE hasn't detected you have a linkable gravatar account or what not...
    – rogerdpack
    Sep 30 '13 at 15:39
7

If you know you aren't using a picture uploaded to gravatar use the identicon. The picture changing popup actually checks if you uploaded a picture to gravatar for you current email address, and hides the option if it doesn't find one. The identicon option is safer since it uses different values to generate the gravatar hash, thus helping to disguise your email address from an attacker wanting to retrieve it from the hash, like described in Is using Gravatar a security risk? This is the default option used for new users. Unfortunately you've created your account before this change was made, so you still have the gravatar option enabled, but don't see it when you want to change you profile picture (no gravatar account).

Since you are posting a screenshot showing your email address you clearly aren't concerned with disguising it from potential attackers.

4
  • So does it mean that Stack Exchange officially stop using Gravatar? Aug 21 '13 at 7:27
  • 1
    No. The identicons still come from gravatar, but not via a hash calculated from your email address. Users can still opt in to a gravatar if they have a gravatar account with an image.
    – m0sa StaffMod
    Aug 21 '13 at 7:46
  • Thanks, think I got it. There were some posts about the security risk in Gravatar, should we direct them here now? Aug 21 '13 at 7:47
  • 1
    yes, we should, since it's related
    – m0sa StaffMod
    Aug 21 '13 at 8:15
0

Well, I found out the reason behind this behavior. Gravatar gets changed if someone changes the email address in the profile. As I recently changed my profile information which caused it. But in my opinion, it should link to the login email ID and should not be changed with profile one.

reverted to old gravatar here:

old

and the new one is here with a different email Id:

new

1
  • 3
    If it went off of the authentication email address, your gravatar would change every time you logged in with a different authentication type. That wouldnt be very ideal. The profile seems to be the best way.
    – Josh Mein
    Aug 14 '13 at 19:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .