PSA: LJ, purged accounts, and OpenID
Jul. 15th, 2010 10:26 amLivejournal announces that they're going to have a round of purging and reselling account names of people who've deleted their journals, suspended journals, and "inactive" journals*.
ETA: I misread that - they're currently purging deleted accounts as before, what's new is that they'll also be purging suspended and "inactive" ones, and purging the deleted ones only 30 days after deletion, not 60.
As I understand it, if you have an LJ and have one of these accounts as your friend, you do not need to do anything, they will automatically be removed from your friendslist.
But on other sites, like, for instance, Dreamwidth, if you have granted access via OpenID to an account whose name is then resold, whoever buys it will gain access to your locked posts.
If you don't want that to happen, the only way to prevent it (short of the ideal of getting people not to delete their accounts even if they stop using them) is to remove access from the OpenIDs of such journals. Note that if you used the Dreamwidth importer, you might have granted OpenID access to a large number of people - you can manage the details here.
Please feel free to copy/link this around the place.
Note also if you buy an account name and the previous owner has gone round getting the OpenID of the account banned in lots of places, you're stuck with that too
*An inactive LJ journal is apparently one with only one post that's not been logged into for 24 months. If you have any placeholder accounts on LJ, you may want to check that this does not apply to them.
ETA: LJ is taking steps to disable OpenID on resold names as an interim solution (thanks![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png)
andrewducker). This is a big improvement (unless you've bought one of these names, in which case it's a PITA), but I'll be interested to see how they deal with this long-term.
ETA: I misread that - they're currently purging deleted accounts as before, what's new is that they'll also be purging suspended and "inactive" ones, and purging the deleted ones only 30 days after deletion, not 60.
As I understand it, if you have an LJ and have one of these accounts as your friend, you do not need to do anything, they will automatically be removed from your friendslist.
But on other sites, like, for instance, Dreamwidth, if you have granted access via OpenID to an account whose name is then resold, whoever buys it will gain access to your locked posts.
If you don't want that to happen, the only way to prevent it (short of the ideal of getting people not to delete their accounts even if they stop using them) is to remove access from the OpenIDs of such journals. Note that if you used the Dreamwidth importer, you might have granted OpenID access to a large number of people - you can manage the details here.
Please feel free to copy/link this around the place.
Note also if you buy an account name and the previous owner has gone round getting the OpenID of the account banned in lots of places, you're stuck with that too
*An inactive LJ journal is apparently one with only one post that's not been logged into for 24 months. If you have any placeholder accounts on LJ, you may want to check that this does not apply to them.
ETA: LJ is taking steps to disable OpenID on resold names as an interim solution (thanks
andrewducker). This is a big improvement (unless you've bought one of these names, in which case it's a PITA), but I'll be interested to see how they deal with this long-term.