On Fri, Jun 5, 2009 at 3:36 PM, Matt Lee<[email protected]> wrote:
>
> Secondly, I wondered last night about the email address -- yes, we
> require an email address to sign up for an account. However, do we need
> to keep this email address on file? Probably not, was my opinion... what
> do others think?

Store a hash of the registration password.

When the user requests a new password (for example) ask them for their
registration email and send to the email they provide if it matches
the hash.

Possibly. I apologize if this is an old and discredited idea. ;-)

> On the subject of leaks -- we should err on the side of caution with
> regard to leaked albums. There are sites like http://diditleak.co.uk/ --
> we should use that data and make up a blacklist of albums, and refuse to
> log tracks from those albums, I think.

Can you claim mere conduit/safe harbor if you *don't* take active
measures like this?

- Rob.
_______________________________________________
Libre-fm mailing list
[email protected]
http://lists.autonomo.us/mailman/listinfo/libre-fm

Reply via email to