New issue
Advanced search Search tips

Issue 802925 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jan 2018
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Changing Passwords does nothing on chromebooks your already logged in on.

Reported by ijauregu...@gmail.com, Jan 17 2018

Issue description

I've noticed that on school chrome books (Atleast at hall county schools) if you change your password it doesn't affect chromebooks that are already signed in. I can't really show you system logs as the school administrators lock down the chromebooks and since im a student i can't really do anything.
Example:
1. I find out my friends password "insert password here"
I used to go into his account and mess with his background etc i always tell him but then he changes his password through our schools launch point portal. But if I try to login to his account on a chrome book without his account already in it wont let me with his new password but if he already is signed in i can sign in and i have full access to his FULL google account. Infact I changed his profile picture to Barack Obama and it affected it even though he changed his password. 

 
Components: Services>SignIn
Status: WontFix (was: Unconfirmed)
Thanks for the bug report.

I reproduced this and it is working as intended -- after changing your password, ChromeOS allows you to continue to log in with the old password until you log out. After logging out, the new password is required.
Project Member

Comment 2 by sheriffbot@chromium.org, Apr 25 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment