Why GitHub allows to delete the primary email without a confirmation link?

[ata-hastam]

Select Topic Area

Bug

Body

Today, my old Github account was taken out of my reach
After checking, I found a bug (at least in my opinion) in GitHub's strategy
When you want to add an email, you must open the confirmation link sent to the email to add the email
But when you want to delete the primary email from GitHub, you can delete it easily without any confirmation 😒

Suppose, in any way, someone gets access to your account, what happens? Yes, the same thing happened to me today

First, he deletes your email, adds his own email and changes the password, you no longer have access to the user account in any way, why? Because your email doesn't exist, your password has been changed, you don't have a verified email to reset your password, you don't have a password to login with your username.

All you can do is see what happened, like a house on fire and you don't have a fire extinguisher and you can only see the flames.

Hopefully Github's strictures for adding, will also be added to removing email, so that others don't lose years of coding in less than a few minutes like me.

For now, be careful that no one has access to your account

[ata-hastam]

Support team didn't get any feedback back yet (Day 4)

[Nazarii1444]

I was also hacked on the first of June, in the same way and I also haven't received feedback yet :(
My account name was @Nazarii14

[Sepehr267]

My Github account was hacked in exactly the same way.
Does that mean there is really no way to return the account? :(

[ata-hastam]

Unfortunately, no, because the primary email has been deleted.

[ata-hastam]

This mistake and leak is really unfortunate for GitHub, support is not responsive at all.

[ata-hastam]

The hacker also changed the Spotify account, I sent a message to support, my account was quickly returned, it's strange that Github doesn't do anything for the users who have primary email removed.

[Sepehr267]

shit...

[Sepehr267]

Do you have Telegram?

[AishikT]

@ata-hastam They still have not replied to my 3 week old support message

[Sepehr267]

@ata-hastam They still have not replied to my 3 week old support message

:(

[AishikT]

@ata-hastam They still have not replied to my 3 week old support message

:(

Did you get any reply?

[ginawyllie]

GitHub allows the deletion of the primary email without a confirmation link to streamline account management and simplify the user experience. For more details, check out [Hyde Road Wheels and Tyres in Manchester](https://hyderoadwheelsandtyres.co.uk/).

[github-actions[bot]]

💬 Your Product Feedback Has Been Submitted 🎉

Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users.

Here's what you can expect moving forward ⏩

• Your input will be carefully reviewed and cataloged by members of our product teams. 
  • Due to the high volume of submissions, we may not always be able to provide individual responses.
  • Rest assured, your feedback will help chart our course for product improvements.
• Other users may engage with your post, sharing their own perspectives or experiences. 
• GitHub staff may reach out for further clarification or insight. 
  • We may 'Answer' your discussion if there is a current solution, workaround, or roadmap/changelog post related to the feedback.

Where to look to see what's shipping 👀

• Read the Changelog for real-time updates on the latest GitHub features, enhancements, and calls for feedback.
• Explore our Product Roadmap, which details upcoming major releases and initiatives.

What you can do in the meantime 💻

• Upvote and comment on other user feedback Discussions that resonate with you.
• Add more information at any point! Useful details include: use cases, relevant labels, desired outcomes, and any accompanying screenshots.

As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities.

Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐

[Alejandro1233565]

GitHub permite eliminar el correo electrónico principal sin un enlace de confirmación para facilitar el cambio o eliminación de cuentas obsoletas de manera rápida y eficiente. Esto puede ser útil en casos donde el usuario no tiene acceso al correo electrónico antiguo. Sin embargo, es importante recordar siempre actualizar la información de contacto para evitar problemas de recuperación de cuenta.

Para más detalles sobre la seguridad de cuentas en plataformas en línea, puedes visitar https://calculadora-de-alicia.es/, donde también exploramos temas relacionados con la tecnología y el uso seguro de herramientas digitales.