32

This is not a duplicate of Why are usernames allowed to be composed entirely of non-visible Unicode characters? as that simply asks why this ability exists. This is a feature request asking for this ability to be removed. This answer by former employee @waffles doesn't really apply either; while I do agree that some problematic usernames can only be detected by humans (especially when they depend on context), this type of usernames can be blocked automatically.

Consider this post.

It's made by a user who decided to put some strange characters in their username, which results in them not being rendered. Where can you click to navigate to that user?

...

It took me a while to realize you can click the (blank) avatar as well, I've never used that feature before.

I propose to disallow usernames like this; there should always be something of a name to click on. I mean, it's called a 'display name', so it should be ... displayed, right?

The characters are from the Latin-1 Supplement, alternating between a LATIN CAPITAL LETTER I WITH ACUTE (U+00CD) and a SINGLE SHIFT THREE (U+008F). The first one is unusual but rather innocent (just a vowel with a diacritical mark), the second one is 'suspicious' in as far as Unicode characters can be like that. The Unicode code point is still visible in the URL, encoded as %cd%8f%cd%8f%cd%8f; their username has been reset networkwide by an unknown ♦ moderator (whoever it was, thank you!).

Improve this question
27
  • 2
    Their username seems to have been reset network-wide now (their network profile is still cached), but I managed to capture what their username used to be in Unicode hex: CD 8F CD 8F CD 8F
    – Sonic the Anonymous Hedgehog
    Apr 13, 2019 at 12:16
  • Heh, I was just editing that into the post :) Thanks to whoever did that!
    – Glorfindel Mod
    Apr 13, 2019 at 12:18
  • Would it be simpler to say that certain characters (such as %) shouldn't be allowed in usernames? It might get complicated to assemble a list of every possible character combination that could result in something strange.
    – Jason Bassford
    Apr 13, 2019 at 14:06
  • 1
    @JasonBassford that character is not part of the user name but part of the escape sequence used to show the invisible characters in the link.
    – MEE
    Apr 13, 2019 at 14:38
  • 1
    @MEEthesetupwizard Okay—then what was the specific character, or combination of characters, in the username that actually caused the problem?
    – Jason Bassford
    Apr 13, 2019 at 15:03
  • 3
    Possible duplicate of Why are usernames allowed to be composed entirely of non-visible Unicode characters?
    – Gilles 'SO- stop being evil'
    Apr 14, 2019 at 0:17
  • 2
    I can't find it now, but I remember some official guidance that if a user's name is problematic (e.g. because it's completely blank), moderators should reset it and contact the user to explain.
    – Gilles 'SO- stop being evil'
    Apr 14, 2019 at 0:18
  • @JasonBassford The thing is, it isn't a specific character. For example, combining diacritics are fine if they're used over a letter, but a username consisting solely of combining diacritics are not. It's very difficult to identify all problematic names programmatically. It would be possible to identify usernames that are rendered as blank on a specific rendering engine, however, so it would be a good idea if the system did that for some sensible default rendering engine.
    – Gilles 'SO- stop being evil'
    Apr 14, 2019 at 0:22
  • 2
    @Gilles Not a duplicate. That is a question asking why it exists; this one is a feature request asking for it to be removed.
    – Sonic the Anonymous Hedgehog
    Apr 14, 2019 at 3:12
  • @Glorfindel Do you consider non-typable user names under the umbrella of this request?, how do we reply in comments (with at, at least on mobile). I've seen the invisible person (people) before, and quickly realized that the invisible avatar could be clicked on; replying to these people is another matter. If the UI would accept "%e1%86%bc%e1%86%ba%e1%86%bc" as their name it would be inconvenient.
    – Rob
    Apr 14, 2019 at 3:46
  • @Rob When users attempt to type a reply comment on a post where someone with a username containing non-ASCII characters has commented, they show up immediately as an autocomplete choice, without having to type the first character of their username.
    – Sonic the Anonymous Hedgehog
    Apr 14, 2019 at 4:16
  • @SonictheWizardWerehog try here and see that you can't reply to user ᆼᆺᆼ by using autocompletion. Another example is here where user icza 'at replied' (possibly by copy/paste, we don't know it was by autocomplete); what works on your browser isn't working on Firefox Android (but works fine with your name, and @Glorfindel's).
    – Rob
    Apr 14, 2019 at 4:29
  • 1
    It doesn't look like the name has been reset. I still reproduce this on the user's account for both Stack Overflow, and the Stack Exchange network profile.
    – Cody Gray - on strike
    Apr 14, 2019 at 5:11
  • 2
    @CodyGray It most definitely was reset; an SU mod confirmed in the SU mod room that they weren't able to see it at that time. It looks like the user set it again on each site. I should have manually crawled all of those into WayBackMachine...
    – Sonic the Anonymous Hedgehog
    Apr 14, 2019 at 6:18
  • 5
    He did reset it again. I've undone it and suspended the user.
    – DavidPostill
    Apr 14, 2019 at 19:52

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .