question

negus11 avatar image
0 Likes"
negus11 asked

I am posting this question with an account that is not mine. How did I get signed in as this person?

I am currently signed in on developer.ebay.com as my correct developer account. When I click on Community > API Forums and then click Login on the resulting screen, I am automatically logged in as a user named negus11 with access to his email address, forum details, 'about me', etc. I seem to be unable to log in as myself. My own account is dtakahas. This seems like a serious breach to me and I would be horrified to see someone else posting as me, changing my details. Please respond.
bugsecurity
10 |600 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

helios825 avatar image
0 Likes"
helios825 answered
Your eBay Developer account won't log you in here on the forums. Your regular eBay buyer/seller account will. So if you're logged in here as "negus11", then you're logged in to all of eBay as that person. Check your My eBay, other eBay forums, other eBay areas, etc., and you should see this is the case. This doesn't seem to be a Developer issue. Maybe you let someone use your computer before you and they used eBay? Family member with a secret buying account? Or are you on a shared/public computer where some previous person forgot to log out?
10 |600 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

negus11 avatar image
0 Likes"
negus11 answered
No, there's definitely something fishy here. Looks like the repro isn't exactly what I thought. I think it may have to do with logging into sandbox.ebay.com as my test user and then clicking Forums Sign in here. I am automatically logged into the forums as this negus11 user. I was able to do it after wiping my browser cache and shutting down my browser. I'll see if I can post exact steps.
10 |600 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

negus11 avatar image
1 Like"
negus11 answered
@helios825 Okay exact repro: 1. I sign into sandbox.ebay.com with my test user account 2. In a separate browser tab, I open forums.developer.ebay.com 3. I click Forums Sign in 4. I am automatically logged into the forums as this account (which is not mine)
10 |600 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

andyjam72 avatar image
0 Likes"
andyjam72 answered
@helios825 Wow I just hijacked THIS account now by creating a new test user in sandbox and doing the same thing. I am the same person as originally posted.
10 |600 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

helios825 avatar image
0 Likes"
helios825 answered
So you're saying you created new Sandbox users, using the Trading API, right? And the user you created is NOT the various users that you have been accidentally logging into this forum and posting as? These other users that you are posting as -- when you go into My eBay on the main eBay website, and you look at account setup details (name, address, email address, etc.), do they look like real user info?
10 |600 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

negus11 avatar image
0 Likes"
negus11 answered
This problem seemed like it was fixed / blocked for a few days and now it appears to be back.
10 |600 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.