Issue metadata
Sign in to add a comment
|
Someone else's details auto-filling (including their password)
Reported by
musc...@gmail.com,
Jun 11 2017
|
||||||||||||||||||||||
Issue descriptionSteps to reproduce the problem: 1. N/A 2. 3. What is the expected behavior? What went wrong? - I downloaded jswipe from the apstore (https://play.google.com/store/apps/details?id=com.smooch.labs.jswipe&hl=en_GB) - I pressed 'log in using facebook' - The overlay opens and I pressed on the blank email field, which then shows an autofill option of an email I have never seen before - Selecting the email autofills the password (I can view this in plain text by pressing 'show') - The details are legitimate and allow me to log in to this persons jswipe account - The same thing occurs when logging into facebook.com using chrome on my phone (i do not use the fb or fb messenger ap) - This does not happen in other aps that require facebook, such as tinder - This is only occurred after installing jswipe, I have never had it happen before - Chrome on my desktop does not have any autofill details stored, not even my own username/pass as I primarily use firefox Did this work before? N/A Chrome version: <Copy from: 'about:version'> Channel: n/a OS Version: 58.0.3029.83 Flash Version: Shockwave Flash 25.0 r0 - I have never heard about this person until today and do not have any friends in common - I have never allowed anyone to use my phone to log in to facebook - I have occasionally used chrome on a public computer at my university to access my google account (but never facebook)and have always logged out afterwards. Furthermore this person does not attend my university. - I apologize if this is not strictly chrome related - I have messaged the jswipe devs about this and have yet to receive a response.
,
Jun 12 2017
I think I have discovered the cause. This phone is my brothers old phone (altho I have had it for over a year now and never had this happen before) and for whatever reason I have some of his autofil details tied to my google account. He must have, at some point, left his account logged in and someone else then logged into facebook and saved their details. I went to 'Saved Passwords' in my account and found the email that was autofilling. I've now deleted all of them.
,
Jun 12 2017
Thanks a bunch for the update! (The scenario described in #2 occurs once in a while and it's very difficult for us to debug such reports).
,
Sep 19 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by elawrence@chromium.org
, Jun 12 2017