It Appears I'm Psychic And Able To See Other Members Profiles

[bananamour]

What's with this forum?
I log-in and the name at the top is not mine, so I log-off and can't sign-in again for several minutes.

I shudder to think someone can see my info and take advantage.

 

[eiraved]

Wow, are you serious?! You gotta get hold of the mods regarding this.

Thread 'Can't post, Can't Edit, Permissions, etc... Please use this thread'

Sep 15, 2016

Security settings have been tweaked. I have deleted the multiple threads all dealing with issue so I can see only new issues since the settings were updated.

If you have an issue please post about it in this thread, so I can see them all in one place.

As issues arise, I can check your IP address and see what flag was tripped and then change that setting for all IP's.

• Wardsweb
• Replies: 1,263
• Forum: AK New Format

• 

 

[Mr Boochie]

Wow, are you serious?! You gotta get hold of the mods regarding this.

Thread 'Can't post, Can't Edit, Permissions, etc... Please use this thread'

Sep 15, 2016

Security settings have been tweaked. I have deleted the multiple threads all dealing with issue so I can see only new issues since the settings were updated.

If you have an issue please post about it in this thread, so I can see them all in one place.

As issues arise, I can check your IP address and see what flag was tripped and then change that setting for all IP's.

• Wardsweb
• Replies: 1,263
• Forum: AK New Format

• 

I've opened this site, already logged onto another member's account. It happened a few times a couple of weeks ago. The Mods know about it.

Just in case you are worried, I always log out of the account. And yes, it takes me like 5 minutes to log back in under my account.

 

[eiraved]

I've opened this site, already logged onto another member's account. It happened a few times a couple of weeks ago. The Mods know about it.

Just in case you are worried, I always log out of the account. And yes, it takes me like 5 minutes to log back in under my account.

Wait a minute, I'm confused...who is this, @bananamour or @Mr Boochie ? Because I posed the question to bananamour, but Mr Boochie responded.

 

[Mr Boochie]

Wait a minute, I'm confused...who is this, @bananamour or @Mr Boochie ?

Mr. B. I never post on another's account.

This is odd. As it used to happen on websites (armored and modelers) 30 years ago. I'm not sure what the problem was, but it took a while to fix it.

Whoa! You should have seen some of the posts. Just a side note, your IP address can be traced. Some ppl got banned.

 

[eiraved]

Mr. B. I never post on another's account.

This is odd. As it used to happen on websites (armored and modelers) 30 years ago. I'm not sure what the problem was, but it took a while to fix it.

Whoa! You should have seen some of the posts. Just a side note, your IP address can be traced. Some ppl got banned.

My concern was that bananamour was posting on your account, based on the issue he mentioned on the first post.

 

[Mr Boochie]

My concern was that bananamour was posting on your account, based on the issue he mentioned on the first post.

I wouldn't know until I looked up whatever I posted. I'm not worried — they may be more clever.

 

[BmWr75]

@Tinkerbelle @Ms Grumpy, please see Post #1.

 

[Ellymay]

I am not sure I understand what you guys are talking about. What is going on? What info. can they see? Someone can post under someone else’s name?

 

[orsen]

it happened to me a few days ago. i dumped my cache and cookies as regular maintenance.
when i came back i was a different user.
i did not log in, it had me logged in as someone else.
logged out.
logged back in as me.
never happened again.

.

 

[Tinkerbelle]

To my understanding, this sounds like, under some unique conditions, the content delivery system is briefly showing a cached snapshot of another member's page and that member(a) should not be able to navigate to other member(b) pages/info from that page, i.e. they should not actually be logged into that account or able to act as that other member, they're just seeing a cached page. However...

@Advally has been notified separately to further address this.

 

[buglegirl]

It would be interesting to know if anyone can actually impersonate said user. (Posts Viewing Things Like Conversations) I would like to think its just cache weirdness in this case.

Of all things a few years back "Yahoo" would at times show me logged in as another user @ fantasy sports.

I did as a experiment "Harmless" attempt to see if I could view a persons league/team and was satisfied that I could not.

But it was disconcerting to say the least.

Frannie

FYI:: Don't screw around with anyone's account. As an admin I would want to know but not sure how an admin would be able to test this.

 

[Mr Boochie]

FYI:: Don't screw around with anyone's account. As an admin I would want to know but not sure how an admin would be able to test this.

This happened on a famous armor and modeler's website in the late 1990s to early 2000s. As I said, they traced the IP address of whoever was online on someone else's account. Some of those ppl got a permanent ban.

I have not heard of such an issue again. Whether you can navigate and post on someone else's account or not. I never found out what the original problem or the solution was.

 

[Tinkerbelle]

It would be interesting to know if anyone can actually impersonate said user. (Posts Viewing Things Like Conversations) I would like to think its just cache weirdness in this case.

Of all things a few years back "Yahoo" would at times show me logged in as another user @ fantasy sports.

I did as a experiment "Harmless" attempt to see if I could view a persons league/team and was satisfied that I could not.

But it was disconcerting to say the least.

Frannie

FYI:: Don't screw around with anyone's account. As an admin I would want to know but not sure how an admin would be able to test this.

@Advally is aware and will be looking to provide a resolution ASAP.

The cached page is stale data, so no other access should be available. The member should only be able to make any actions on AK on their own account after exiting that stale instance, clearing it (closing & reopening fresh browser window, or hard refresh [Ctrl+Shift+R on Windows, Cmd+Shift+R on Mac]) opening a new page on AK and then logging in as themselves. Refer also the thread linked above at post #2, member @coonmanx had similar experience and is using the free CacheBuster browser extension to clear old cached info.

 

[Hyperion]

Regarding caching, I have noticed that the forum as displayed when logged in is different to when your are NOT logged in, it is as if being logged in gives you the latest reading of the forums. No amount of refreshing seems to make any difference (i.e. missing posts), when not logged in.

 

[Tinkerbelle]

Update: admin @Advally has implemented a further fix that should fully resolve the occurrence of seeing any cached stale data instances. For those that experienced this you might need to run a hard refresh to clear any old stale cache; it should, otherwise, be resolved going forward.

To run a hard refresh, see my post above for Windows or Mac users. For other devices, quoting from Advally:

"The universal fix that works on every device is to open the site in Incognito / Private mode — bypasses the cache entirely without changing any settings.​

If members prefer to just clear the cache for AK:​

​

Android Chrome: ⋮ menu → History → Clear browsing data → tick "Cached images and files" → Clear data​

Android Samsung Internet: ☰ menu → Settings → Personal browsing data → Delete browsing data → "Cached images and files"​

iPhone Safari: Settings app → Safari → "Clear History and Website Data" (note: clears all sites, not just AK)​

iPhone Chrome: ⋮ menu → Settings → Privacy and Security → Clear Browsing Data → "Cached Images and Files"​

Linux Chrome / Firefox: same as desktop — Ctrl+Shift+R"​

 

[Hyperion]

I returned to my PC just now, and I wasn't logged in (just as I had left it), but... another AK members username was showing where 'Log In' is normally displayed.

I did not attempt to browse, in case I really was logged in as the other member and just closed Chrome and opened it again, and logged into my own account normally.

 

[coonmanx]

I returned to my PC just now, and I wasn't logged in (just as I had left it), but... another AK members username was showing where 'Log In' is normally displayed.

I did not attempt to browse, in case I really was logged in as the other member and just closed Chrome and opened it again, and logged into my own account normally.

Closing Chrome and opening it again it probably just clearing the cache. Get an extension called CacheBuster and then all you have to do is click the icon and the results will be the same. I am using it right now because I have already had issues today. Things are not quite fixed. I can come here and I can post but then when I go to the main page it does not show that I was the last to post. Hit the icon and all is good and refreshed properly.

 

[N2552]

Happened to me 1 or 2 times. Problem never returned. But I clean cache and history etc - of in my case Windows Edge - every time I log manually out of AK.

 

[nuttyneo]

This has happened to me 3 times now- I try to read a particular member's post, and I get logged off immediately, and another members Avatar is now in my place! I've tried to access his account but every attempt generates an error... the site has been trashed by this Cloudflare fiasco, and my account is clearly on a s**t list with Cloudflare, but there are many site errors I receive as well...