#1 - Sept. 5, 2012, 12:23 a.m.
The forum currently shows the account display name and user e-mail on every page.
If we happen to be browsing the forum in a public place, on our laptop, it’s very easy for someone to look over our shoulder and immediately get those two pieces of information, which can then be used to make log-in attempts or to try to cross-reference data hacked from other websites.
I have to wonder what was going through the mind of your forum developers when they decided to put that there.
The only thing that should appear on the forum pages is your display name, and even that should probably omit the 4-digit code at the end, for security reasons. The full information should only appear on each user’s account management page.
