Hi, so, I was a playing a correspondence game against someone I had added to the friends list, but suddenly I got a message stating that the game had ended because my opponent had deleted their account.
However, the deleted account still appears as being online, only now it has the name “deleted" and the profile can’t be accessed anymore (at least, by me).
So, have I been blocked?
What you’ve described sounds like the person left the tab with the deleted account on it open, didn’t navigate away.
It also sounds like we didn’t “hang up” the connection to them, which I would have thought that we would do, so it may be a bug in that respect.
It’s not the symptom of “being blocked”: you can still access the profile page of a player who has blocked you.
Oh, I see. Thanks for clearing it up, much appreciated! Hope you have a nice day!
Could a deleted account be exploited in malicious way? For example for cheating or insulting other people?
Oh. I can even navigate to other pages while tab is open and send messages to new users
But new tabs are disconnected
And messages are really delivered
And what is going on here?
Yeah, weird o.o
Messages got thru just ok
Looks like the chat is the only thing that working. I can’t even create a report.
This is strange. Deleted users can abuse other people but can’t report if someone abuse them. Tried to report Eugene for Other and got
No. I’m wrong. The bug looks like serious. Other modules are affected. Ranked games are available. Reported in dedicated thread Deleted users can play RANKED games
Communicating all this publicly is a bad idea. It would have been better to tell the developers privately. Now, trolls can learn from this thread. @Eugene @anoek , I recommend hiding this thread.
There is nothing to learn here. Deleted account has less privileges that a normal one. They don’t need to delete the account for trolling. Just register a new one.
It is just a bug. Not a security issue.
Thanks for investigating this - all good info.
Note that deletion is (typically) a user-instigated thing. There is no particular reason why that account should not be allowed to do anything: the user just decided they don’t want us to have their details anymore.
The “normal/proper” way of stopping an account from doing anything is by suspending it.
The real test here would be an account with it’s chat blocked. If that account could suddenly chat after deletion, that would be a problem.
So I guess the thing here is to not confuse “the user deleted their account” from “the user had their account suspended”.
That being said, it does seem untidy - as per the earlier comment, the user’s connection probably should be hung up and they should be logged out on account deletion to tidy this up.
I send you a PM of last observation with sensitive data. The deletion is not permanent as I discovered.
Please delete this and communicate privately with the developers. All this thread does is help trolls learn.
Please don’t worry. This thread cant help trolls at all. It is not easy to start a game with deleted account. The sequence to do it is hidden.
You can’t just start a game as normal.
Summary: it’s not ideal, and we’ll see about fixing it, but it’s not really a major issue, since there is typically no reason why the user behind a deleted account should not be able to do anything: they just decided they don’t want their account anymore.
(“Suspended” is the “you are not allowed to use your account” state, rather than “deleted”)
