Earliest throwback to team founder role implications
TL;DR:
- 99% of BOINC users do not hide their email address, thus the team founder can see this. If you have advertised a beacon in the past and it has expired, it's possible (however unlikely) until a fix is in place that a malicious team founder could advertise a beacon on your behalf.
- If you've not registered for all projects, given your email address & the fact that BOINC projects do not require you to verify your email address prior to granting access a team founder could preemptively register an account on your behalf, exfiltrate the account key & thus have established a permanent account compromise for said BOINC project (even if you change the email/pass/username). Relevant info on account keys.
Removal of the mandatory team requirement will mean that you can crunch outwith of a team, minimizing the above risks. There's 200k GRC up for grabs for anyone that can port the NN to C++ whilst scaling back the quantity of users randomly selected to gather the data and form the superblock.
We are working on brainstorming improved proof of CPID ownership mechanisms, help out if you can.
oh damn. there have been a couple of new projects that an account was already created for me. is there anything we can do now in the way of resetting keys, or is there a way to change email without affecting Gridcoin?
If someone else created the account for you, not yourself, then the account key never changes and they can get in. You could request the account key is changed but that will require a direct change to the database by the project admin (unlikely).
If it was created by boincstats then that's not a big deal.
on world community grid, at least, there is a reset weak key button. i pressed it, and am pleased by its placebo effect so far. :D