This looks well dodgy.
Clicking their avatar leads to: https://ap.uwu.st/gar.ajson
master
(If you're a user, don't worry about this).I saw this too a while ago and thought it was a fuckup with the tooltips! (Haven't tried clicking the link)
It's bootsy messing around but we need to come up with a way to prevent this
Perhaps treat username and domain as separate when shortening? The domain should be as visible as possible in an example like this -- something like @Gargron@[email protected]
would be better than displaying a really long name that's just trying to push the domain out of sight. Fundamentally, trusting the domain is the first step in determining whether an account is trustworthy -- the username is the second step.
I think domains, while they need to be trusted are just a sub identifier to username. Having the domain be as visible as possible feels unbalanced from a social network perspective.
What about providing a potential spoof warning/grouping if any length of the spoofer's username contains the domain (or n:length) of other users in the user list. Then we could still benefit from having the username/domain shortened.
Most helpful comment
Perhaps treat username and domain as separate when shortening? The domain should be as visible as possible in an example like this -- something like
@Gargron@[email protected]
would be better than displaying a really long name that's just trying to push the domain out of sight. Fundamentally, trusting the domain is the first step in determining whether an account is trustworthy -- the username is the second step.