Who installed the hack.

[flup]

No i get it now, haven't thought with that one

[Paul M]

Originally Posted by Dean C

As said above, it's a privacy issue. For example, if there was a modification which had a big exploit, one could go to the list of users who have installed, and look to see which have it in their profile, and then go round exploiting. Whilst, we realise that 99% of vB.org users would never do this, there is always the slim possibility

Maybe I'm missing something here. Exactly how is this an issue ? ONLY the hack author would be able to see this list, not everyone. How is there any more of a risk of the AUTHOR doing this then there already is - and in most cases (as I have complained elsewhere) - few people have any link to their site from here anyway, so even if I knew "joebloggs" had it installed - I have no idea what his site is.

[Dean C]

Ah, we're talking about showing this list to everyone though Paul

[Andreas]

A list of all users who installed a Hack just for the Hack author would be nice
And I don't se privacy issues there, as he can already compile such a list be viewing all posts - which is a PITA when the Thread is several hundred posts long.

[Marco van Herwaarden]

Originally Posted by KirbyDE

A list of all users who installed a Hack just for the Hack author would be nice
And I don't se privacy issues there, as he can already compile such a list be viewing all posts - which is a PITA when the Thread is several hundred posts long.

That would only be possible if everybody who installed made a reply.

[Paul M]

Originally Posted by Dean C

Ah, we're talking about showing this list to everyone though Paul

Ah, but I wasn't

Originally Posted by Paul M

If only the author can pull up a list then where's the harm.

I would never suggest that everyone could see it - as that clearly would be an issue.

[flup]

I wasn't talking about everyone either, just for the hack author...

[Chris M]

It used to be for all, but I agree, only the hack author, co-authors, and obviously staff, can see the list...

This could also be useful, because even if users do not reply, or accept hack updates via email, you could still contact them via PM or another method or alert a staff member that "User x" has a serious vulnerability with their site (after checking it out), and you could get the hole patched

Satan

[Marco van Herwaarden]

For that it would be better to create a button to send a security warning by mail and pm. Still no need to see the names.

Atm even staff can not see the names.

[Xenon]

As already said, it's because of privacy issues.

A user who posts within the supportthread, realises, that when a security flaw is found, he could be a possible victim, but if he does not post then he has to be sure he is "safe".
Of course we could just generate a list just for authors, but there could always be a black sheep there as well.

I can understand both sides, i sometimes miss that feature myself, but as said, the disadvantages are bigger than the fun factor, so we won't add it again.