Re^4: Any security holes?

[LanX]

Granted, I knew "name" was a bad example.

Space goes without saying, and I might be ignoring more legal letters.

A good mechanism should always include a backfeed channel for critic and adjustment.

Though I remember having a fight with one of my colleagues who insisted that one of his clients can continue to use emojis in his user name and me having to hardcode an exception into the app ... I never "adjusted" this.

[Your Mother]

I know you know and I always sort of knew too but it wasn’t until I saw this that I really knew. :P Falsehoods Programmers Believe About Names.

I agree, of course, that whitelisting is drastically better security than blacklisting in the general case.

Update: hippo beat me to it.