Quote Originally Posted by The Unintelligible View Post
That's entirely true. Which is why I said it's still wholly ban worthy. We are still contemplating whether banning him or not. But permanently banning him would be no fun.



If a user full-fledged exploited this forum they would be banned for it. Incidentally, that's what "bunnyz" was banned for in the first place. I do agree with the notion that users would think they could get away with anything, but that's just not the way it is. If bunnyz weren't to be perma banned it would be the exception, not the rule. See the millions of other users I've banned.




You have some fair points, some of which I completely agree with, but I don't think you're understanding how this happened. Flareboy323 sold a text file to cclown that contained his password. It isn't anything related to security, it was just 100% tomfoolery on Flare's end. Which is why it's particularly hard to blame bunnyz for this considering it was just a monumental fail by Flare.

He's getting punished, but to what extent has yet to be decided. In theory even if he were to be banned, he would just make new accounts like he did before and keep coming back. Which would make it more of a pain to keep banning him.

It can still be done. I just don't know if that's the best course of action right now.



Likewise.
1. At least ban the account which took the LGG and bought things with. That's how I see it. This combines with 2. as well. At least banning the account in question would be enough. Even if he came back, oh well. People do that. But you should at least rid of damages in question, even if they are small, it still looks as if users can take advantage of a mistake, and cause harm with it.

3. Indeed, so do you. Flareboy may have made this mistake, but regardless, the user could have have self control to warn Flare about it. But even if he didn't, sure he tried the password. I admit, whuldn't at least try it? It takes an active thought to cause harm, such as stealing the LGG on Flare's account. Flare should take it as a lesson, we all make mistakes. But Bunneyz should, honestly, have this current account perm banned. If he so chooses to come back, that's on him, you can't really stop someone persistent. But you do have to lie down controls. The account in question, bunneyz, should honestly be banned, mainly because it's the account that has benefited from the issue.
One could bring up the argument "We can just reverse the transactions and gain."
But why would you create more overhead for your staff, that was caused by the malicious intent of a uses? Especially when they had the audacity to post about it, bragging of their chao items afterwards?