Skip to main content
/

Site Navigation

Your Account

Choose Language

Help

Current version by: Brendan

Text:

Hey @austinblakely,
If I understand well, technically, you will insert a quote blocks for suggestion purposes into the user comment, that means the user can edit the iFixit staff suggestion ?
If the user cannot edit the quote block used for the suggestion, so everything is fine.
If the user who posted the comment can edit the suggestion, your proposal can do the job, but in some condition :
* You can only edit a user comment to add a suggestion quote block to trusted users because if a non-trusted user can edit the quote block, this can lead to security issues, because if a spammer edit the quote block and change the suggestion link to a scam page, this can be problematic.
* What is a trusted user ?
** A trusted user is an active user
** A trusted user has not posted SPAM on iFixit
** A trusted user has a minimum reputation amount
** A trusted user has communicated at least once with iFixit team
** A trusted user has secured his account, because iFixit doesn't seem to provide 2FA it's risky to make iFixit edit into the user comment if the user account regularly gets hacked (exemple : by some fishing campaigns).
** Example : oldturkey03 is a trusted user.
-* Also, if some users decided to imitate the suggestion quote block to post something (because it's easy to do), they must be treated as SPAM, case by case. This can be detected using the history of modification of a comment in the forum.
+* Also, if some users decided to imitate the suggestion quote block to post something (because it's easy to do), they must be treated as SPAM, case by case. Unwanted modifications can be detected using the history of modification of a comment in the forum.

Status:

open

Edit by: Brendan

Text:

Hey @austinblakely,
If I understand well, technically, you will insert a quote blocks for suggestion purposes into the user comment, that means the user can edit the iFixit staff suggestion ?
If the user cannot edit the quote block used for the suggestion, so everything is fine.
If the user who posted the comment can edit the suggestion, your proposal can do the job, but in some condition :
-* You can only edit a user comment to add a suggestion quote block to trusted users because if a non-trusted user can edit the quote block, this can lead to security issue, because if a spammer edit the quote block and change the suggestion link to a scam page, this can be problematic.
+* You can only edit a user comment to add a suggestion quote block to trusted users because if a non-trusted user can edit the quote block, this can lead to security issues, because if a spammer edit the quote block and change the suggestion link to a scam page, this can be problematic.
* What is a trusted user ?
** A trusted user is an active user
** A trusted user has not posted SPAM on iFixit
** A trusted user has a minimum reputation amount
** A trusted user has communicated at least once with iFixit team
-** A trusted user has secured his account, because iFixit doesn't seem's to provide 2FA it's risky to make iFixit edit into the user comment if the user account get regularly hacked (exemple : by some physhing campaigns).
+** A trusted user has secured his account, because iFixit doesn't seem to provide 2FA it's risky to make iFixit edit into the user comment if the user account regularly gets hacked (exemple : by some fishing campaigns).
** Example : oldturkey03 is a trusted user.
* Also, if some users decided to imitate the suggestion quote block to post something (because it's easy to do), they must be treated as SPAM, case by case. This can be detected using the history of modification of a comment in the forum.

Status:

open

Edit by: Brendan

Text:

Hey @austinblakely,
-If I understand well, you will insert a quote blocks for suggestion purposes into the user comment, that means the user can edit the iFixit staff suggestion ?
+If I understand well, technically, you will insert a quote blocks for suggestion purposes into the user comment, that means the user can edit the iFixit staff suggestion ?
If the user cannot edit the quote block used for the suggestion, so everything is fine.
If the user who posted the comment can edit the suggestion, your proposal can do the job, but in some condition :
* You can only edit a user comment to add a suggestion quote block to trusted users because if a non-trusted user can edit the quote block, this can lead to security issue, because if a spammer edit the quote block and change the suggestion link to a scam page, this can be problematic.
* What is a trusted user ?
** A trusted user is an active user
** A trusted user has not posted SPAM on iFixit
** A trusted user has a minimum reputation amount
** A trusted user has communicated at least once with iFixit team
** A trusted user has secured his account, because iFixit doesn't seem's to provide 2FA it's risky to make iFixit edit into the user comment if the user account get regularly hacked (exemple : by some physhing campaigns).
** Example : oldturkey03 is a trusted user.
* Also, if some users decided to imitate the suggestion quote block to post something (because it's easy to do), they must be treated as SPAM, case by case. This can be detected using the history of modification of a comment in the forum.

Status:

open

Original post by: Brendan

Text:

Hey @austinblakely,

If I understand well, you will insert a quote blocks for suggestion purposes into the user comment, that means the user can edit the iFixit staff suggestion ?

If the user cannot edit the quote block used for the suggestion, so everything is fine.

If the user who posted the comment can edit the suggestion, your proposal can do the job, but in some condition :

* You can only edit a user comment to add a suggestion quote block to trusted users because if a non-trusted user can edit the quote block, this can lead to security issue, because if a spammer edit the quote block and change the suggestion link to a scam page, this can be problematic.
* What is a trusted user ?
** A trusted user is an active user
** A trusted user has not posted SPAM on iFixit
** A trusted user has a minimum reputation amount
** A trusted user has communicated at least once with iFixit team
** A trusted user has secured his account, because iFixit doesn't seem's to provide 2FA it's risky to make iFixit edit into the user comment if the user account get regularly hacked (exemple : by some physhing campaigns).
** Example : oldturkey03 is a trusted user.
* Also, if some users decided to imitate the suggestion quote block to post something (because it's easy to do), they must be treated as SPAM, case by case. This can be detected using the history of modification of a comment in the forum.

Status:

open