So, someone had a bit of a startle the other day after realizing someone was trying to troll them by creating a parody profile. These shenanigans are fortunately pretty rare in that they actually turn out to be real monkey business afoot.
A more common support case is folks actually forgetting that they did something to their profile, and contacting us to figure out why it changed. Because when you remove your email address, sending you email gets kind of complicated.
So, why don't we show you (the authorized account owner) a 30 day audit trail of updates to your account? This way you'd know when:
- You logged in, and from where
- You logged out, and from where
- Your profile was edited, and from where
- Password reset was initiated, and from where
- Probably a few things I'm forgetting
It could live on a tab in this neighborhood:
.. and it might be worth linking to from certain places within the profile.
A caveat to this is that moderators can log you out, and edit your profile. So we have to be careful not to reveal the IP of a moderator to someone else in those events, just show that a moderator did it (and who the mod was).
While this would be something that the more security conscious of you would enjoy, it's mostly designed to alleviate confusion and unnecessary stress. Oh, yeah, I stayed logged-in on a public computer at work; that's why I'm asking about VB.NET but code in Python! This happens more often than you'd think.
Anything missing? Did I overlook something that would make this idea horribad? It's been bugging me for a while that we don't have something like this, and I was reminded of that yesterday.