8

I left my account logged in on a computer owned by someone else, they have decided to troll and so ive changed my password and cleared my session. I verified with SE openid that they did not log in after that, but they still have access to my chat account. How do I handle this situation, and can password change trigger an actual working global cookie invalidation in the future?

  • 2
    Nice music. Reminiscent of Skrillex. – Robert Harvey Dec 4 '13 at 18:14
  • Heh thanks, my latest upload sucks though, glad you found something nice :) – MickLH Dec 4 '13 at 18:17
  • 1
    Saw your flag. Did you still need help on this issue? – Robert Harvey Dec 4 '13 at 18:20
  • im not sure, i asked to be suspended from chat until its sorted and i still am, not sure how to try going back and not sure if its really sorted or not – MickLH Dec 4 '13 at 18:48
1

It sounds like you left multiple services logged in - your email (required to confirm a Stack Exchange OpenID password change), SE OpenID, SE sites, possibly others.

The best defense is, honestly, to never leave yourself logged in on someone else's computer. Incognito browser sessions come in very handy for this sort of thing.

Now that the damage has been done, I see that the offending credential has been removed from your profile, and your login sessions have been cleared. When you have your logins secured, let us know and we'll lift your (currently network-wide) suspension.

  • Just saw this post, and it made me smile when taken in context with our discussion about the log out link :) Thanks for your work as a moderator! – Chris Dec 4 '13 at 23:57
  • @Chris Thanks. :) There's also an extra gotcha here, since logging out on the sites doesn't (and can't) also log you out from whatever provider you're signed in with (including ours), which just adds another thing to consider to the whole "let's not encourage folks to log out" argument. :) – Adam Lear Dec 5 '13 at 0:06
  • Definitely an SE OpenID flaw, it was the only provider ever attached to my account at the time of the issue. The Problem is that SE OpenID does not provide a global logout option, making each sites global logout a silly useless tool when combined with SE OpenID. – MickLH Dec 12 '13 at 6:33

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .