Hey /u/JagexAllstar I saw you post in another thread and know you are on the web team, any chance you could look into this or pass it on the appropriate person?
This allows hackers to see which user ids are valid and worth hacking, and gives away what some may consider private information.
Thanks for the tag. It’s a tad more complicated as to why that flow does what it does. I’ll admit it is not ideal but at this time we are not able to discuss account security measures.
I will however elaborate as to why the flow displays time played in the games...
We had an issue when we released Old School on mobile that people were recovering their RuneScape account then not understanding why they had an account with no progress when they logged into OS. So we use that as a method to inform people which games the account played and also to help them understand that one account covers two games. We display the time in brackets so it cannot be used as information to recover the account.
Read more