Hi!
I noticed today that my public bungie.net profile seemed entirely broken. After a bit of debugging, I found the probable culprit: disabling the "Display on public profile" tick for a linked PlayStation account breaks the entire profile. See linked Imgur album for setting combinations and their results on the profile page.
I have not enabled Cross Play, because I do not play D2 on console. The PS account only contains D1 save data. This seems to be an important detail, because it means that I have two Destiny Accounts on one Bungie.net Account
[b]My main findings so far:[/b]
1 Disabling profile visibility for the PS account doesn't generally work.
1.1 If all accounts are hidden, the PS account shows up (albeit without header and profile images).
1.2 If only the PS account is hidden, all bnet search results still link to the PS account ( /2/<id>/Lemonous ), which is broken but shows the username of the linked PS account.
1.2.1 Going directly to the Steam account ( /3/<id>/Lemonous ) works as expected, usually
1.2.2 The ID of the Steam-linked Destiny account is distinct from the PS-linked one, and only the PS one shows up in search and API results, so you have to know the Steam-linked ID to access the profile directly by URL.
2 Disabling profile visibility for Steam but not PS is also generally buggy.
2.1 It works more often than in the inverse case, because the PS account in all cases shows up in search, but if you try to go to the Steam-linked account by direct URL you still get the name of the linked account.
3 Disabling profile visibility for all accounts still shows the PS account in search.
3.1 Going directly to either Destiny account leaks the name of the associated Linked Account, even if all other data is redacted
[b]So there actually seems to be two bugs here:[/b]
1. Disabling only the PS account breaks API results and search. It prefers to show the PS account, perhaps because it is /2/ and Steam is /3/? I would try to link an Xbox account and see if it started preferring /1/, but I don't have one.
2. There's an information leakage bug if you navigate directly by URI for a specific Destiny account. The profile shows up, mostly empty, but leaks the name of the Linked platform name which should be hidden
These two seem to interact so that the highest priority account, if hidden, always gets shown and thus leaks itself while hiding other Destiny accounts.
I'll be happy to provide more info or perform more steps for debugging if necessary.
Kind regards,
Lemonous
P.S: I currently have visibility for both accounts enabled. They are accessible here: [url=https://www.bungie.net/7/en/User/Profile/2/4611686018507673729/Lemonous]PlayStation-linked Account[/url] ([url=https://www.bungie.net/7/en/User/Profile/TigerPsn/4611686018507673729]TigerPsn Link[/url]), [url=https://www.bungie.net/7/en/User/Profile/3/4611686018476048337/Lemonous]Steam-linked Account[/url] ([url=https://www.bungie.net/7/en/User/Profile/TigerSteam/4611686018476048337]TigerSteam Link[/url])
-
Bump, I think this is important for somebody at Bungie to see