New issue
Advanced search Search tips

Issue 598336 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Mar 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: paypal password

Reported by ariko...@gmail.com, Mar 28 2016

Issue description

hi, wanted to let you know about a bug i found. I signed in my friend's chrome in his computer. when I used my computer and wanted to buy something online using paypal, I see his username and password already written automatically in the paypal's login form ... so basically I could enter and use his paypal account. I guess somehow his cookies\passwords got synced with my account.

hope you'll clear this out soon,
Arie.


 
Hello there, thanks for the report.

It sounds like you may have left your account signed in on your friends computer.  Do you remember whether you ever logged out your account when finished?

Your friend could have easily continued using Chrome without realizing your account was logged in.  They may have allowed auto-complete to store their PayPal login credentials - which you would then have stored in your account.  I would definitely recommend you make sure your friend's Chrome is no longer logged into your profile, as they would have access to your stored credentials.

For the sake of your friendship, I would also recommend removing this PayPal password from your profile.  :)  (https://support.google.com/chrome/answer/95606?hl=en, see "Delete a saved password" section.)

In general, it is very important to always explicitly log out your Chrome profile if you use it on a device that is not your own (or is a shared login).

All the best.
Status: WontFix (was: Unconfirmed)
I've removed the image attached, as it contains personal information.

And for now, I will close down this ticket.  If you find a scenario where this happens again, and can provide steps for reproduction, please feel free to open a ticket with the repro.

Cheers! 
Project Member

Comment 3 by sheriffbot@chromium.org, Jul 6 2016

Labels: -Restrict-View-SecurityTeam
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 4 by sheriffbot@chromium.org, Oct 1 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 5 by sheriffbot@chromium.org, Oct 2 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: allpublic

Sign in to add a comment