{"action":"closed","issue":{"url":"https://api.github.com/repos/rrrene/elixirstatus-web/issues/48","repository_url":"https://api.github.com/repos/rrrene/elixirstatus-web","labels_url":"https://api.github.com/repos/rrrene/elixirstatus-web/issues/48/labels{/name}","comments_url":"https://api.github.com/repos/rrrene/elixirstatus-web/issues/48/comments","events_url":"https://api.github.com/repos/rrrene/elixirstatus-web/issues/48/events","html_url":"https://github.com/rrrene/elixirstatus-web/issues/48","id":242814889,"number":48,"title":"Unauthenticated Twitter handle is not safe","user":{"login":"ashleygwilliams","id":1163554,"avatar_url":"https://avatars0.githubusercontent.com/u/1163554?v=4","gravatar_id":"","url":"https://api.github.com/users/ashleygwilliams","html_url":"https://github.com/ashleygwilliams","followers_url":"https://api.github.com/users/ashleygwilliams/followers","following_url":"https://api.github.com/users/ashleygwilliams/following{/other_user}","gists_url":"https://api.github.com/users/ashleygwilliams/gists{/gist_id}","starred_url":"https://api.github.com/users/ashleygwilliams/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ashleygwilliams/subscriptions","organizations_url":"https://api.github.com/users/ashleygwilliams/orgs","repos_url":"https://api.github.com/users/ashleygwilliams/repos","events_url":"https://api.github.com/users/ashleygwilliams/events{/privacy}","received_events_url":"https://api.github.com/users/ashleygwilliams/received_events","type":"User","site_admin":false},"labels":[{"id":227238027,"url":"https://api.github.com/repos/rrrene/elixirstatus-web/labels/enhancement","name":"enhancement","color":"84b6eb","default":true},{"id":227238028,"url":"https://api.github.com/repos/rrrene/elixirstatus-web/labels/help%20wanted","name":"help wanted","color":"159818","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2017-07-13T20:05:25Z","updated_at":"2017-09-01T05:00:33Z","closed_at":"2017-09-01T05:00:33Z","author_association":"NONE","body":"hello! i'm filing this here as we use it for rust-lang. (https://herald.community.rs)\r\n\r\nthe twitter handle is a string, so anything can be put there. this could be used to suggest that someone is the author of a post that they didn't author, which is a way to harass someone. (e.g. write an inappropriate post, or just any post, or number of posts to ping that person on twitter.)\r\n\r\ni would recommend that the twitter handle be added via a authentication step only, so that only people with access to an account can have that account mentioned via the automated tweeting process.\r\n\r\nfor example, i authed with my GitHub account but put my partner's twitter handle:\r\nhttps://twitter.com/RustHerald/status/885590557082439680\r\n\r\nsince GitHub accounts are free, having to authenticate with GitHub doesn't significantly reduce the harassment vector here :/"}}
{"actor":{"display_login":"rrrene"}}