New issue
Advanced search Search tips

Issue 774397 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 2017
Cc:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security/Privacy issue: Acess to another person information

Reported by bernarda...@gmail.com, Oct 13 2017

Issue description

Hi

Hi

I have was surfing on internet using Chrome and decides to change my advertising setting and went to Google advertising setting site in Swedish.
I was very surprised and worried when I found another person’s detail.
Google show information (that I was even able to change !!!) of a younger women.
I, my self is a man and older then she is.

How it's possible that that could happens?
That means that anybody can also access and change mu information and settings?

Please explain and fixit.

I working as an Information Security and PCI Manager and know that this in braking Privacy rights and the new GDPR right in Europe (valid from May 2018(

Please see the attached printout of the site.

Regards
BA
 
Fel användare i Google.PNG
71.1 KB View Download
Labels: Needs-Feedback
In every case like this we've seen, the problem is that two unrelated users shared a single PC and commingled their login information. Subsequently, when the second user uses the PC, the logged in information from the first user remains.

Please tell us more about your PC: Is it your personal computer? Does it ever leave your control? Do you use multiple PCs? Are you logged into Chrome (see the icon up near the very top right of the window-- does it show a name, or a generic "person" icon)?

Comment 2 by jochen@chromium.org, Oct 16 2017

Cc: zea@chromium.org ew...@chromium.org msarda@chromium.org

Comment 3 by msarda@chromium.org, Oct 16 2017

Status: WontFix (was: Unconfirmed)
It looks like the account jolanta.strzelcvzak@gmail.com is signed in to the myaccount.google.com (I suppose here the screenshot is of a web page under myaccount.google.com). This means that this user has previously signed in to this account on this machine and forgot to sign out.

1. Is this a shared computer? If so, then you have 2 options:
a) Create separate Chrome users (aka profiles). You may do that by clicking on the little icon at the top right corner and selecting Manager People. The select "Add User" and create a separate Chrome user for the each individual using the shared computer.
b) Sign out / Sign in of Chrome and Google each time you use Chrome. This is more cumbersome, so I strongly suggest option a) above.

2. Do you know the person that owns the account jolanta.strzelcvzak@gmail.com? Is so, then you should probably discuss the options above and see if they agree to use separate Chrome users.

As this is not a problem of Chrome (the real problem is that jolanta.strzelcvzak@gmail.com was already signed in to Google on the web before the user signs in to Chrome), I am closing this bug as WontFix.


Project Member

Comment 4 by sheriffbot@chromium.org, Jan 22 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment