Support » Requests and Feedback » ERROR: Your account has been disabled

  • Resolved Vad

    (@vadym1)



    Thank you, @otto42 and @jdembowski for the help!

    ERROR: Your account has been disabled.
    Password reset is not allowed for this user

    Feedback:

    When the account is blocked there is no possibility to ask for help on the forum, it does not allow to create a theme. There is no way to ask what happened.

    And I have to create a new account, with a new email. But two accounts can not be – this is a violation of the rules of the forum. And to ask the question – you have to create a new account. This is very wrong.

    In contacts there is no email address to write to if blocked.

    When I wrote to E-mail I waited half a day, and then another day, and was not sure that someone would help me.

    If you block an account, you need to send an email and write details. In the letter, write why it is blocked and where to write so that it is unlocked. Because the reason is not clear, and it is not clear what to do.

    forum-password-resets
    @
    wordpress.org
    • This topic was modified 2 months, 1 week ago by  Jan Dembowski.
    • This topic was modified 2 months, 1 week ago by  Jan Dembowski.
Viewing 9 replies - 1 through 9 (of 9 total)
  • Moderator Jan Dembowski

    (@jdembowski)

    Brute Squad and Volunteer Moderator

    Warning: long reply ahead.

    If you block an account, you need to send an email and write details. In the letter, write why it is blocked and where to write so that it is unlocked. Because the reason is not clear, and it is not clear what to do.

    I’m sorry, but that’s a bad idea and is not going to happen.

    If someone is blocked they can create a new account and post to the forums. That happens. When it’s human error (as what happened to your account) then it will get corrected. Or that person can write to forum-password-resets@wordpress.org as you have done.

    If the account is blocked for abuse then that account remains blocked as well as the new account. That happens too.

    Emails will not be sent out because 99 times out of 100, sock puppet accounts are created for malicious intent such as spam (say 89% of the time), to pump up reviews (8% of the time) or to pump up resolved support topic number (2%). I’m told there are 2,000+ new accounts registered here everyday. It’s a lot of accounts to deal with.

    Spam is self explanatory.

    Pumping up reviews and resolved support topics happens because some authors try and game the system. Those authors get caught and are informed to stop that. When they don’t that has consequences for their plugins or themes.

    Yes, dealing with fake accounts is something that happens a lot.

    Congratulations, you’re a lucky 1% person who is an exception. The number is less than 1% but you know, integers.

    You wanted a different login ID and asked, you were informed to create a new account and abandon the old one, which you did. Later on the two accounts were detected and blocked.

    You did everything right but people make mistakes and moderators are human too. Now it’s fixed.

    What I will do is this: next time someone posts in the forums or sends a request to forum-password-resets@wordpress.org about getting a new account, I’ll insist that the person creates the new account soon and informs WordPress.org via that conversation what the new account is. That way the old one can be blocked with a note in both the old and the new accounts.

    Unlike spam detection, there is no automatic system for blocking accounts. They’re all looked at and someone makes the decision to block that account. When that happens a note is left in the account as to why. This is why when you contacted the forum-password-reset email there was a quick reply. The notes help a great deal.

    How does that sound to you?

    • This reply was modified 2 months, 1 week ago by  Jan Dembowski.

    I think we need to solve the problem technically.

    For example, do not allow the creation of a new account if there is already one.

    And if the person still wants to create, he must deactivate the old account. Add deactivation function (if you can not delete the old account).

    Moderator Jan Dembowski

    (@jdembowski)

    Brute Squad and Volunteer Moderator

    I think we need to solve the problem technically.

    I don’t think it’s a bad idea but I can see how it would be prone to abuse. I don’t think that sort of self-service has enough people to justify it. It does show that better communication is needed.

    There are limited cases where more than one account is justified. For example, a company sometimes has a company account just to push out the code for their theme or plugin.

    We need to come up with a solution. To simplify the work of moderators. It is necessary to make everything automatic.

    Sometimes at work it is necessary to register from one IP address to several people. This is not an excuse to block their account. Sometimes these people may have the same names and similar emails.

    According to the new privacy policy, the user has the right to delete all of his data, messages and recorded IP. According to the new policy, he should be given the right to delete the accountant with all his messages.

    Are I right?

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    No, you are not correct. You have the right to have your personal information deleted, but accounts themselves will not be removed, nor will messages that do not contain personal data.

    Moderator Jan Dembowski

    (@jdembowski)

    Brute Squad and Volunteer Moderator

    We need to come up with a solution. To simplify the work of moderators. It is necessary to make everything automatic.

    Not for this we don’t. It really does not come up that often and of all the things the moderators do, this isn’t a large volume item. Legitimate accounts that were mistakenly blocked. That happens perhaps once or twice a year.

    There have been people who sock puppeted and wanted their accounts back. The answer was “no” as people’s intentions matter. Your intentions were good and appropriate. People leaving reviews to bump up plugins or themes? That’s not good and they’re not getting their accounts back.

    Are I right?

    I’m reasonably confident you are not, but here’s the correct answer to anyone who asks.

    Hi,

    For complete erasures requests, please contact our DPO, as described by our Privacy Policy.

    I want to avoid making this into a privacy/GDPR topic. It’s not that and please don’t make it that.

    Here’s what this topic is about.

    1. Someone wanted a new user ID and asked to get it switched.
    2. They were informed that that isn’t technically possible here and asked to create a new account.
    3. That person did as instructed.
    4. Later on while reviewing posts and replies, it was erroneously determined that the old and new accounts were sock puppets and both accounts were blocked.

    In your case, you sent the details to the forum-password-resets email address and that was good. You were helped as a result of that.

    What needs to happen is when people try to log in and are unable to because they are disabled, they get a message where they can contact someone about it. A new mechanism or self-service does not need to be created for such a small percentage of users.

    If users did have that option then here’s what would happen.

    1. User abuses people.
    2. User leaves fake reviews and topics.
    3. User deactivates their old account and creates a new one.
    4. User repeats above steps.

    And that would lead to more work for the moderators. It happens today (not the 3rd step) and it leads to abuse. Those users get caught and dealt with. Fortunately that abuse is a very small amount of users. Small as in a rounding error size.

    If two people a year.

    When blocking, you need to send a reason to the email.
    And detailed instructions what to do.

    It would be enough.

    Moderator Jan Dembowski

    (@jdembowski)

    Brute Squad and Volunteer Moderator

    When blocking, you need to send a reason to the email.
    And detailed instructions what to do.

    No. Again, for the reasons I’ve explained in great detail, that will never happen.

Viewing 9 replies - 1 through 9 (of 9 total)
  • You must be logged in to reply to this topic.