Posted September 25, 2023
As you may know, due to excessive misuse of the reputation system, GOG decided to disable downvoting in the forums some time ago. The reality, though, is that this wasn't done properly, and downvoting is still possible. In fact, downvoting bots are still alive and kicking.
Take my account, which is quite recent, as an example. After a few days posting in the forums, my reputation became negative and, since then, continues to decrease. I literally get -1 rep for each and every post I make. Unless an obsessed individual is doing this manually, we're talking about a downvoting bot.
Due to this systematic downvoting, my reputation can only decrease, so reaching the amount of points required to post links is impossible. My account, therefore, is permanently limited.
This situation can only be explained if GOG left a security vulnerability when downvoting was disabled. And, in fact, there is an obvious candidate for this vulnerability in the code (anyone with some knowledge can easily find it using the dev tools of a browser).
I don't think that any responsible company would consider this situation acceptable. Think about it. Would you allow the accounts of your users to become permanently limited by systematic attacks? Would you allow black-hats to control who can or cannot post links in your forums?
If you are from the GOG staff, please look into this. This issue is serious and should be solved ASAP. I think the following two measures are essential:
1) An emergency fix to eliminate the downvoting vulnerability. For example, the server-side code could be changed to prevent reputation points from ever being decremented.
2) A correction of the reputation of each user to compensate for any previous downvotes.
Any thoughts on this? Are you also being downvoted?
Questions and Answers (2023-09-28):
Q1: How can you know so much about GOG's past if your account is so recent?
A1: In the same way a historian knows about the 1800s without being 200 years old: I did my homework. After I figured I was being downvoted, I searched the web for info about GOG's forums to help me understand what was going on. And the best pieces of info came exactly from posts here in the forums.
Q2: Do you have lots of alt accounts?
A2: No, I don't. All accusations against me throughout this thread are plainly false.
Q3: Why did you create this thread after all?
A3: To encourage other users to report similar cases. Additional reports, along with the generated discussion, could attract the attention of GOG staff members and, perhaps, a fix for the downvoting issue could come out as a result.
Take my account, which is quite recent, as an example. After a few days posting in the forums, my reputation became negative and, since then, continues to decrease. I literally get -1 rep for each and every post I make. Unless an obsessed individual is doing this manually, we're talking about a downvoting bot.
Due to this systematic downvoting, my reputation can only decrease, so reaching the amount of points required to post links is impossible. My account, therefore, is permanently limited.
This situation can only be explained if GOG left a security vulnerability when downvoting was disabled. And, in fact, there is an obvious candidate for this vulnerability in the code (anyone with some knowledge can easily find it using the dev tools of a browser).
I don't think that any responsible company would consider this situation acceptable. Think about it. Would you allow the accounts of your users to become permanently limited by systematic attacks? Would you allow black-hats to control who can or cannot post links in your forums?
If you are from the GOG staff, please look into this. This issue is serious and should be solved ASAP. I think the following two measures are essential:
1) An emergency fix to eliminate the downvoting vulnerability. For example, the server-side code could be changed to prevent reputation points from ever being decremented.
2) A correction of the reputation of each user to compensate for any previous downvotes.
Any thoughts on this? Are you also being downvoted?
Questions and Answers (2023-09-28):
Q1: How can you know so much about GOG's past if your account is so recent?
A1: In the same way a historian knows about the 1800s without being 200 years old: I did my homework. After I figured I was being downvoted, I searched the web for info about GOG's forums to help me understand what was going on. And the best pieces of info came exactly from posts here in the forums.
Q2: Do you have lots of alt accounts?
A2: No, I don't. All accusations against me throughout this thread are plainly false.
Q3: Why did you create this thread after all?
A3: To encourage other users to report similar cases. Additional reports, along with the generated discussion, could attract the attention of GOG staff members and, perhaps, a fix for the downvoting issue could come out as a result.
Post edited September 28, 2023 by fva_