Trolls are spoofing commentariat and authors (Update: countermeasures!)

Thanks to the spate of trolls (who are, in fact, members of our rationalist community!) spoofing our users, owing mostly to their levels of immaturity and the realization that they can type other people’s identities in the comment fields, a few blogs are turning on comment registration. I strongly advise that, even if your primary hangout is a blog that does not require registration, you should consider registering your username/email address anyway.

If you’ve already registered your account, and you need to edit your profile because the display name or email address are no longer valid, the top bar shows a “Howdy, username” link on the right. Hover over it, then click on Edit My Profile. You should also be able to get to it by clicking here — but that link might change depending on your user access level and future WordPress changes. The top bar should always be right.

I have no intention of turning on comment registration at my blog. I am instead working on making changes on the network (via a plugin or via editing the core of WordPress) to ensure that anonymous users cannot use a username or email address of a registered user. If you want to protect your name here, I strongly advise you register your account.

The registration process can use Facebook, Twitter or WordPress as authentication tokens, so you don’t necessarily have to build an account unique to Freethoughtblogs. Our software will rely on those sites’ auth APIs, and won’t ever see your login information. However, if you use these options, I strongly advise that you also log into your profile per the above instructions before making a comment, and set all the options appropriately. Otherwise your display name will show as “sc_{random characters}”, which is dead ugly.

Update: I’ve installed a plugin network-wide that protects login names and email addresses from being spoofed by anonymous users. It doesn’t protect the display name though — if your display name is something different from your login name, this won’t help you much. On blogs where registration is required, people shouldn’t notice a difference. And I’m sure asshats can still spoof people with a fair degree of fidelity to casual outside observers (I can think of two ways myself — there might be more), but this at least gives us an idea of when it’s happening.

Regardless, register your accounts.