|
Snickers Snook
Odd Princess - Trout 7.3
Join date: 17 Apr 2007
Posts: 746
|
09-10-2009 23:25
I'm blown away. A stunning failure of security with LL's web-based stuff.
I logged into the blogs to edit a post. To all intents and purposes, the blogs look just like other parts of the Second Life stuff. I then dutifully logged out, logged back in as my alt (in the same place), happened to click on Community and WTH?? I'm still logged in as Snickers and naturally could see those account balances and friends online!!
So in other words, THINKING I was logged out from some of SL's key info pages I find I'm not! That was just stunning. So what parts of the site are still not integrated with a uniform logout and how can you tell? I'd guess XStreet isn't but how many people really understand this?? Is there a JIRA on it??
_____________________
 Buh-bye forums, it's been good ta know ya.
|
|
Inbred Texan
Registered User
Join date: 5 Feb 2009
Posts: 88
|
09-11-2009 01:29
From: Snickers Snook I'm blown away. A stunning failure of security with LL's web-based stuff.
I logged into the blogs to edit a post. To all intents and purposes, the blogs look just like other parts of the Second Life stuff. I then dutifully logged out, logged back in as my alt (in the same place), happened to click on Community and WTH?? I'm still logged in as Snickers and naturally could see those account balances and friends online!!
So in other words, THINKING I was logged out from some of SL's key info pages I find I'm not! That was just stunning. So what parts of the site are still not integrated with a uniform logout and how can you tell? I'd guess XStreet isn't but how many people really understand this?? Is there a JIRA on it?? I get that when I'm on the SL blogs, I may not be logged in and just viewing, but for this section of the second life site I am logged in. It doesn't make much sense to me. I'd think they'd eventually fully integrate them all to one user name and password and they'd all still be logged in. Apparently they haven't done that yet. |
|
DanielRavenNest Noe
Registered User
Join date: 26 Oct 2006
Posts: 1,076
|
09-11-2009 12:26
The wiki is inconsistent about remembering my login status too. Took me a while to figure that out.
|
|
Wynochee LeShelle
Polykontexturalist
Join date: 3 Feb 2007
Posts: 658
|
09-11-2009 13:19
Same phenomen here (the forum).
|