Editing 1963: Namespace Land Rush

{{comic
| number    = 1963
| date      = March 5, 2018
| title     = Namespace Land Rush
| image     = namespace_land_rush.png
| titletext = You can also just mash the keyboard at random, but you might end up with a gibberish name no one can pronounce.
}}

==Explanation==

When a new web service starts, such as a forum, a social media server or an email portal, the people who sign up get to choose their username on the service, which, in most cases, blocks future users from using those usernames. Common names such as "john" are likely to be taken quickly. This is analogous to the way that land was distributed in America, with the first to claim able to choose the best land.

This comic is a list of usernames [[Randall]] suggests should be used if they are available.

The title text is a self-reference to "xkcd"; the name of the comic is a purposefully unpronounceable phrase created by Randall.

(Note: for a more serious list of problematic user names to block from a service provider’s point of view, see [https://ldpreload.com/blog/names-to-reserve Hostnames and usernames to reserve] as well as [https://tools.ietf.org/html/rfc2142 RFC 2142].)

==Table==
{{incomplete|Add explanations of the names. Do NOT delete this tag too soon.}}
{| class="wikitable"
!style="width:30%"|Entry
!style="width:70%"|Explanation
|-
!colspan=2|Straightforward (Usernames that a person would use under typical circumstances)
|-
|<Your usual username, if any>
|Most internet users will have settled on some unique handle that they try to use across all platforms. Even if this wasn't a new service, most people would try this first.
|-
|<Your given name>
|More rare is using one's nickname or first name as their username, since the amount of common names will mean many users share a name. Thus, if you can get your given name, you will have a simple username that many others wanted, and without resorting to prefixes or numbers (i.e. Xx_MyName00_xX)
|-
|<Your full name>
|Similar to your given name, but slightly more unique since a last name and/or middle name is added.
|-
|<Initial><Surname>
|A common second choice if a given or full name is already in use.
|-
|<Surname>
|Possibly available if your last name is more uncommon; names like "smith" or "kim" will probably be taken faster than even given names.
|-
!colspan=2|Recognizable (Usernames that would make it look like the email came from an official source within the organization named)
|-
|Google
|Registering the name "Google" would allow for communicating on the site (or even outside of it) with a name that appears to be an official Google account. For any of the examples in this section, you would select the names for the same reason. This has been done in the past with both [https://twitter.com/BiIIMurray humorous] and [http://www.chicagotribune.com/bluesky/technology/ct-russian-twitter-account-tennessee-gop-20171018-story.html nefarious] results.
|-
|iPhone
|Many services would mark messages sent from an iOS client on iPhone as "sent from iPhone".
This could make people believe that your messages are sent from an iPhone even if you don't own one.
|-
|Facebook
|Similiar to Google above.
|-
|BitCoin
|
|-
|Obama
|Impersonating a president, supposedly to send messages as them to make them seem bad (or not).
|-
|Canada
|
|-
|NFL
|
|-
|Garfield
|In the original "GMail" service on the Internet, the G stood for "Garfield" 
|-
|<Your city>
|Impersonating the official account for your place of residence.
|-
|NASA
|
|-
|<Name of person who runs the service>
|
|-
!colspan=3|Causing Trouble (Usernames that might cause errors when mixed with the service's back-end code)
|-
|User
|This is usually the default username for a non-administrative account. This may trick a user that this is owned by the operator of the service.
|-
|Username
|
|-
|Name
|
|-
|You
|Many services display "You" as the signed-on user, so naming oneself "You" makes users think that they are you/they are signed on when they aren't.
|-
|Guest
|Attempts to fool users into thinking that they have a guest account.
|-
|Account
|
|-
!colspan=2|Causing More Trouble
|-
|Admin
|Impersonating to be a system administrator will let someone fool people and cause a lot of trouble. In particular, it could be used to obtain SSL certificates by demonstrating ownership of a supposedly internal address.
|-
|Administrator
|See above.
|-
|System
|Pretending to be a system-controlled account - might give permissions if the server checks by name.
|-
|<Name of service>
|Pretending to be the official account of the service.
|-
|Help
|Pretending to be the help account. This could led to many questions from new users.
|-
|Error
|This may trick users to do what the user says as they could claim that it was a legitimate error.
|-
!colspan=2|Impossible to Say
|-
|Hyphen-Emdash
|Could be read "Hyphen hyphen Em dash" or "Hyphen dash em dash"
|-
|Dash-8hyphen-8
|Could be read "Dash dash eight hyphen dash eight" or "Dash hyphen eight hyphen hyphen eight". "Hyphen eight" sounds like "hyphenate".
|-
|Zero0ne2numeral2
|Could be read "Zero zero one two numeral two" or "Zero zero ne two numeral two" or "Zero oh ne two numeral two".
|-
|KrisasinHemsworth
|This would be confusing to say out loud, as it would sound like the user was saying that their username was "Chris," spelled the same way that famous actor {{w|Chris Hemsworth}} spells his name. However, the actual username uses the name "Kris," spelled a completely different way than Chris Hemsworth's name, and the phrase "as in Hemsworth" being also part of the username, rather than a clarification of the spelling of "Kris" as would be assumed.
|-
|TheWord&Ampersand
|This would also be confusing and difficult to communicate, as anyone trying to read the username to someone else would say "The word ampersand ampersand" which could be interpreted as "ampersand&" or "ampersand ampersand". Having the phrase "the word" in front of a symbol makes it quite difficult to communicate which variation of ampersand (word or symbol) is actually being referred to.
|-
|ZettaWith3Teees <!-- 3 e's in the image -->
|Read aloud, this would lead the listener to expect a username of 'Zettta'. Clarifying that "with three tees" is text and not description would in turn make it difficult to explain the spelling of 'Zetta' with two 't's, and 'Teees' with three 'e's.
|-
!colspan=2|Misc
|-
|<Single Letters>
|
|-
|<Single Numbers>
|
|-
|<Common Words>
|
|-
|<SQL/JS Injection>
|Codes such as "Drop Table" intended to cause errors or even damage the service's back-end code. (See [[327|Comic 327]])
|-
|ASDF
|
|-
|QWERTY
|
|-
|Yes
|
|-
|Bot
|Pretending to be a bot.
|-
|Computer
|
|-
|Blocked
|
|-
|Deleted
|Some services like Reddit keep up user posts and data after account deletion, marking the content as submitted by the user "[Deleted]" or "Deleted".  
|-
|Jeeves
|
|-
|Narrator
|
|-
|Internet
|
|-
|NPC
|Non-player character
|-
|Password
|
|-
!colspan=2|Permissive Character Sets
|-
|<Space>
|Usernames containing only whitespace can not only be confusing for other people, but often systems 'trim' (remove whitespace at the beginning and end) user input. If the username was only made of spaces, after trimming it would be completely empty, which can cause a whole slew of other problems.
|-
|<nowiki>@  é  |</nowiki>
|The @ seperates the local part from the domain part of email addresses. If a service decides to create email addresses for their users, they will have a hard time if they allowed the "at" character as part of a username. 
é is encoded in many character sets, like Latin-1 and Unicode. In Unicode, it can even be described either "U+00E9 LATIN SMALL LETTER E WITH ACUTE" or as the sequence "U+0065 LATIN SMALL LETTER E" and "U+0301 COMBINING ACUTE ACCENT". If a system uses {{w|Unicode normalization}} after the check if the username is available, this might allow someone to take over someone else's account. 
|-
|<nowiki>“  ”  "   ‘  ’  '  `</nowiki>
|Various quotation marks. 
“, ”,‘ and ’ (Unicode quotes): can expose a system's inability to handle multi-byte-encodings. If they are converted to their ASCII counterparts, they might cause code injections. 
' and " (ASCII single and double quotes): often used as string delimeter (causing the rest of the name to be interpreted as HTML, or worse, code. 
` (ASCII grave / backtick): Sometimes used as string delimeter; Perl (which some websites are still programmed in) executes commands ("shell code") when between backticks. 
|-
|<NBSP>
|Unicode character "U+00A0 NO-BREAK SPACE". Similar attack vector as <Space>, but some programming languages will not strip non-ASCII whitespace (therefore the validation will pass). 
|-
|<nowiki>\  .  #</nowiki>
|The backslash is very often used for "escape sequences", that get expanded to other characters. (\n -> newline, \t -> tab character, \b -> backspace character (deletes the character to its left), etc.)
The period can be problematic in emails. RFC 2822 forbids periods at the beginning or end of the local part or more than one period in a row. 
In URLs, the Octothorpe (#) is used as the 'anchor'. Anything following a # will not be transmitted to the server. If a user is named 'logout#blahblah' (which might be a valid username) and the user profile is located at http://example.com/<the_username>, the server might generate the URL http://example.com/logout#blahblah. Since the URL will be truncated at the '#', any user attempting to view this profile will be logged out of the service.
|-
|<RTL override>
|The right to left override is an Unicode character which forces text after it to be laid out right to left. Thus, in left-to-right locales, it flips everything after it. This can be rather amusing if permitted. (See [[1137|Comic 1137]])
|-
|<nowiki>–  -  _  /</nowiki>
|Includes both the em-dash and the hyphen, which are easily confused and are highly unusual for user names. The forward slash is also the path delimeter for URLs; if user profiles are located at e.g. http://example.com/user/the_username, this can cause obvious issues. 
|-
|<Any emoji>
|Current databases are not set up to store emojis as characters.
|-
|","
|In CSV files this separates one column or data item from another.  This could cause bugs if the usernames are used as part of a CSV file since the next column on the row could be left blank filled with other data.
|-
|<nowiki>&NBSP</nowiki>;
|The special entity in HTML (web page language) for a non-breaking space, or a space that prevents an automatic line-break at its position.  When rendered as part of an HTML page without sanitization, this would only display a space.
|-
|<nowiki></HTML></nowiki>
|This is trying to inject code for the web page using the user name.  If the user name is not sanitized and does not have special characters encoded, this HTML end tag could end the HTML document, leading to page errors.
|-
|&LT;/HTML&GT;
|&LT; and &GT; are special character entities in HTML that represent < and >, repectively.  So all together, when rendered as part of an HTML document, this would print "<nowiki></HTML></nowiki>"  Although this would look similar to the previous <nowiki></HTML></nowiki> entry, it would be unlikely to cause problems as the symbols are not interpreted if encoded as special entities.
|-
|OkThisIsKindOfConfusingButIt's <LessThan\ForwardSlashHTML GreaterThanActualGreaterThan Symbol>Yes,ThatWasAllPartOfThe Name,ButSoIs...Ok,LetMeStartOver”
|The abundance of symbols and symbol related worlds and phrases such as ActualGreaterThanSymbol would make this extremely difficult to vocally communicate to another person. This difficulty is further compounded by the parts at the beginning and end, which sound like they are part of the explanation despite being part of the name itself.
|-
|}

==Transcript==
'''Namespace Land Rush Cheat Sheet'''

When a new service appears that lets you register a name, here are some you may want to try and get first:

{|
!colspan=3|<u>Straightforward</u>
!colspan=2|<u>Recognizable</u>
|-
|colspan=3|<Your usual username, if any>
|Google||iPhone
|-
|colspan=3|<Your given name>
|Facebook||BitCoin
|-
|colspan=3|<Your full name>
|Obama||Canada
|-
|colspan=3|<Initial><Surname>
|NFL||Garfield
|- style="vertical-align:top;"
|<Surname>
|colspan=2 rowspan=2|(Bold & Slightly<br>Unconventional)
|<Your city>||NASA
|-
|colspan=3|&nbsp;
|colspan=2|<Name of person who<br>runs the service>
|- style="vertical-align:bottom;"
!Causing<br><u>Trouble</u>
!colspan=2|Causing<br><u>More Trouble</u>
!colspan=2|<u>Impossible to Say</u>
|-
|User
|colspan=2|Admin
|colspan=2|Hyphen-Emdash
|-
|Username
|colspan=2|Administrator
|colspan=2|Dash-8hyphen-8
|-
|Name
|colspan=2|System
|colspan=2|Zero0ne2numeral2
|-
|You
|colspan=2|<Name of service>
|colspan=2|KrisasinHemsworth
|-
|Guest
|colspan=2|Help
|colspan=2|TheWord&Ampersand
|-
|Account
|colspan=2|Error
|colspan=2|ZettaWith3Teees <!-- 3 e's in the image -->
|-
!<u>Misc</u>!!&nbsp;
!colspan=3|<u>Permissive Character Sets</u>
|-
|colspan=2|<Single Letters>
|<Space>||&nbsp;
|<nowiki>@  é  |  “  ”</nowiki>
|-
|colspan=2|<Single Numbers>
|<NBSP>||&nbsp;
|<nowiki>\  .  #  "   ‘</nowiki>
|-
|colspan=2|<Common Words>
|colspan=2|<RTL override>
|<nowiki>–  -  _  /  ’  '  `</nowiki>
|-
|colspan=2|<SQL/JS Injection>
|<Any emoji>
|style="text-align:center;"|","
|<nowiki>&NBSP</nowiki>;
|-
|ASDF||QWERTY
|<nowiki></HTML></nowiki>
|style="text-align:right;" colspan=2|&LT;/HTML&GT;
|-
|Yes||Bot
|colspan=3|OkThisIsKindOfConfusingButIt's
|-
|Computer||Blocked
|colspan=3|<LessThan\ForwardSlashHTML
|-
|Deleted||Jeeves
|colspan=3|GreaterThanActualGreaterThan
|-
|Narrator||Internet
|colspan=3|Symbol>Yes,ThatWasAllPartOfThe
|-
|NPC||Password
|colspan=3|Name,ButSoIs...Ok,LetMeStartOver”
|}

{{comic discussion}}