Notifications
Clear all

Cross Account Login Violations?  

  RSS
--
 --
(@)
Illustrious Member
Cross Account Login Violations?

Not sure what this means, but I just logged in and went to my profile page and this is what I see:  This is NOT my profile. And I can't access my profile or my activity.

 

Posted : 09/05/2019 7:09 pm
bobstro
(@bobstro)
Illustrious Member
RE: Cross Account Login Violations?

I am hoping that you're just seeing the wrong profile, and that you're not actually in another account. The real test is whether you see your or another person's account when you click over to the e-store. If you see some else's store account, that is a huge problem. Just looked and mine looks fine, but I'm not seeing other profiles either. If someone who sees the wrong profile would immediately try going to the eshop, that would be important information.

My notes and disclaimers on 3D printing

and miscellaneous other tech projects
He is intelligent, but not experienced. His pattern indicates two dimensional thinking. -- Spock in Star Trek: The Wrath of Khan

Posted : 09/05/2019 7:53 pm
--
 --
(@)
Illustrious Member
Topic starter answered:
RE: Cross Account Login Violations?

In my case it was short term: was in the wrong place for several minutes then suddenly back in my own space.  And good idea: next time it happens I'll check the store, too.  

Just that Wordpress historically has a reputation for being targeted, and not especially secure when third party plugins are used.

Posted : 09/05/2019 8:16 pm
Neophyl
(@neophyl)
Illustrious Member
RE: Cross Account Login Violations?

Ive seen similar happen on a work related website we run.  Our system uses session ID's and the default 'pool' settings werent sufficient and so multiple users were getting the same session ID occasionally .  From a server point of view it thought you were the other person so you had full access.  We had to change the server default configurations to give a MUCH larger pool of id's in the end.  I'm wondering if its something like that rather than a malicious hack type of affair.

Posted : 10/05/2019 10:35 am
Share: