These messages:

• "Almost done! Your account still needs to be verified."
• "Someone has registered an account with this username, but it still has to be verified." say the account needs to be verified. But really what needs to be verified is that the e-mail address belongs to the account's owner. The account itself needs to be activated.

The string at mediagoblin/auth/forms.py:48 ("Your email will never be published.") may not apply to every instance of MediaGoblin: someone might want to install MediaGoblin and not promise to keep the e-mail addresses private.

The string needs to be changed/removed, or made admin-editable.

"medium" and "thumbnail" versions of JPEG files are stored with a lowercase ".jpg" name extension, but the original versions are stored with whatever case was in the original file name: jpg, JPG, jpG…

So you get something like this:

user_dev/media/public/media_entries/fa23ab31abf7ec67be8000001:
 originalFileName.JpG
 medium.jpg
 thumbnail.jpg

(If the file has a random extension like "dfsg", it is simply not accepted.)

The extension should be made lowercase, so that all sizes have the same extension both on disk and when downloading.