minikiwigeek2 wrote:
starlightsparker wrote:
One thing, perhaps for moved accounts you need to enter the password of the account you wanna say you moved to. Yk, to prevent trolls and people who’d do stuff like “this user moved to @*insertusertoimpersonate*” and stuff like that.

i like this idea, but there’s a potential problem with it. if a really famous account’s password is compromised, there’s nothing stopping users from just claiming they own a user. so to fix that, i’ll actually make it a three-step process so it’s extra super duper secure.

1.) the source user has to enter the target user’s password.
2.) the target user has to accept the move request in their inbox.
3.) the target user has to input their password one more time to finalize their changes.

Great idea! Impersonation is much less likely this way. Cause if there weren’t the extra steps, for example @scratcher1 could say they moved to @scratcher2 when in reality they aren’t @scratcher2, and then on the @scratcher1 account pretend to be @scratcher2.