> Personally, I would prefer more unpredictability. My profile could be
> named "Ben", and if somebody starts an attack targetted at my
> personally, it would not be hard to guess.
Why not, then, implement something akin to the UNIX/Linux password
strength checker? Unless you enter something that is "unguessable"
enough it won't allow it. That would allow for user choice (i.e.
standardizing where you put your profile across platforms) AND
unpredictability.
> I don't want to use Ben_abcd1234 as profile name, because that will
> appear in the ProfileSelector.
I hadn't thought that the directory name had to be the same as the
profile name. Should this be a different bug?
Jason.