I had some very strange behaviour from google groups today. It kept saying I didn't have permission to edit my own group when I tried to submit a change. It sent me back to the login screen where it became aparent I was logged in as someone else with a similar name. This repeated several times, and yes I am sure I didn't just enter the wrong name.
Since then, I somehow became subscribed to some spam groups. This might be coincidence since its possible to sign people up without asking them (I think).
Anyway, has anyone else seen this today? It's rather worrying, I'm not sure what would have happened if I got curious about the person google thought I was when it "glitched". It looked like it just started associating the cookie I had with someone else's session.
I found i was logged in as someone else for about 10 seconds :( relogging fixed it for me though I had been logged in fine for ages before it happened i got an error when posting a reply *just* beforehand
> I found i was logged in as someone else for about 10 seconds :( > relogging fixed it for me though > I had been logged in fine for ages before it happened > i got an error when posting a reply *just* beforehand
I had the exact same thing happen to me now. (I also posted a separate thread, before seeing this one...) If anyone finds out something, please broadcast... -Dan
> > I found i was logged in as someone else for about 10 seconds :( > > relogging fixed it for me though > > I had been logged in fine for ages before it happened > > i got an error when posting a reply *just* beforehand
I had the same experiences on June 29. Many times, during member management (I'm manager in a lot of groups), I found myself logged in with another account. The next day, June 30, all was working as usual, but both a friend of mine and myself received this message:
Hola, [email address], La teva subscripció a Edat Fosca Gr2 no s'ha aprovat. Si tens alguna pregunta sobre aquest o qualsevol altre grup de Google, visita el Centre d'ajuda a http://groups.google.com/support?hl=ca. Gràcies, L'equip de Grups de Google
Useless to say we never applied to that group! But it's evident someone or something did it, with our accounts.
Now we're wondering: What happened on June 29? Did something go wrong in account management? Are these two facts linked? Has there been some mass spoofing attempt, or it was just an accident? We'd like to know, even if now all seems in order and properly working. Thanks Aldo
> I had some very strange behaviour from google groups today. > It kept saying I didn't have permission to edit my own group > when I tried to submit a change. It sent me back to the login > screen where it became aparent I was logged in as someone > else with a similar name. This repeated several times, > and yes I am sure I didn't just enter the wrong name.
> Since then, I somehow became subscribed to some spam > groups. This might be coincidence since its possible to > sign people up without asking them (I think).
+1 it happened to me, too.
But I investigated this further. The message you get when you get autosubscribed is different than the one you get when you get an invitation approved. So this seems like either an account management glitch caused wires to be crossed and random subscriptions, or equally possible, that when we 'became someone else' someone became us. I've been stressed out like crazy about this because I was on an unverified wifi network at the time and thought I had been victim of a man in the middle attack.
> I had some very strange behaviour from google groups today. > It kept saying I didn't have permission to edit my own group > when I tried to submit a change. It sent me back to the login > screen where it became aparent I was logged in as someone > else with a similar name. This repeated several times, > and yes I am sure I didn't just enter the wrong name.
Also, this issue might be quite serious.
Consider the following issues:
1. Google is single sign on. Web History, Gmail, Blogger, Groups, all use the same account for verification 2. You can't just force all of your accounts to log out. The sessions stay logged in seemingly as long as you want them to. 3. Changing your password does not force existing sessions to log out.
