Adobe defaulting "stay logged on" is a security issue

Why is it that when logging on to these forums, the checkbox for staying logged on is turned on by default? It doesn't even check a cookie or preference to determine the state of the checkbox - it just automatically is switched "on".
This is a security issue. It doesn't matter if the user is logging on from their own private computer, or from a public computer, this is a security issue that should be addressed.
^_^

This is a security issue. It doesn't matter if the user is logging on from their own private computer, or from a public computer, this is a security issue that should be addressed.
^_^
You don't have to be worried about this. These forums will log you out after some time when your system is idle with no activity at all. Some times I have to login 3 times when I am on these forums. Security is their highest priority and up to now they can be commended for what they have done over the last two years.

Similar Messages

Adobe 10 ReaderX debugger.js not working & security Issues

Hi,
I am trying to get this javascript http://johnford.is/downloads/pdf_bookmark.js working. It enables a bookmark in Adobce Reader and apparently quit working in version 10 under windows 7. I copied the code here C:\Users\Owner\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts. But when I copy the debugger.js which ships with Adobe it does not work eiter complaining about syntax:
ReferenceError: getString is not defined
25:Folder-Level:User:debugger.js
My more important question is not how to get the debugger working but how to get the code working to create the bookmark. I tried to change all the enhanced security and options in the javascript preferences screen. I think something else is required not to get this code work because of security in Adobe 10. If you look at comments the developer left in the code they had to add code to get it working because of security in Adobe 8:
* Extra security in Adobe Reader 8 forces access of global variables
* by multiple documents to be setup as a 'trustedFunction'
getPDFBookmark = app.trustedFunction ( function() {
app.beginPriv();
    return global.pdf_bookmark;
    app.endPriv();
Bottom line is the new bookmark feature in Adobe 10 is cumbersome and not intuitive and I want to use what this other developer wrote. A bookmark should be 1-click and as natural as placing a bookmark in a book. Duh! No one at Adobe understands that.
chau from Chile.
Walker Rowe

Change
// Add bookmark menu
app.addSubMenu({
    cName: translation.bookmark,
    cParent: "Tools",
    cExec: "void(0);",
    cEnable: "event.rc = (event.target != null);"
to
// Add bookmark menu
app.addSubMenu({
    cName: translation.bookmark,
    cParent: "File",
    cExec: "void(0);",
    cEnable: "event.rc = (event.target != null);"

"Stay logged on" checkbox is ALWAYS CHECKED - this is a security issue

Could Adobe please change the code for the login screen so that the "Stay logged on" checkbox isn't always checked (on)?
It doesn't matter if cookies are enabled, or not, it never remembers my desire to NOT BE AUTOMATICALLY LOGGED ON WHEN I VISIT.
Cookies aside, this checkbox should never be automatically checked unless the user has expressly decided for it to be so.
Anyone using a public computer may not remember to uncheck that checkbox; or may not even see it, if the user is in a hurry. This leaves that user's Adobe account VULNERABLE to anyone who uses that computer after the user is done. Not just for that hour, or day, but for as long as the cache and cookies are not cleared. How many accounts have to be ruined (password changed; vulgar/profanity-laced posts; etc.) before Adobe will take this seriously?
On top of that, I'm sick and tired of having to remember to uncheck that stupid checkbox before typing my password (it always remembers login name - another potential security vulnerability) to log on.
Stop thinking that you know what's best for everyone in the whole world, Adobe. That's a very ugly attitude.
Disrespectfully,
^_^

@Little_Pale_Face, clearing the browsing history on a public computer does NOT clear the login session. If you use a public computer to access Adobe forums and just close the browser without logging off and without clearing the "Stay logged on" checkbox, and if someone else after you were to enter "https://forums.adobe.com" on that same computer and using the same browser, they won't get a login prompt; they will automatically log on to your account.
@pwillener I've never had that problem as long as the browser is not closed and as long as lack of activity doesn't exceed 10 minutes, even after clearing the "Stay logged on" checkbox.
^_^

Verify custom plugin signature with Adobe Default Security

Hi,
I have a few questions using Adobe Default Security when verifying a signature.
I've created my own signing plugin which works well. When I verify my signature it states that it is a valid signature, that the document has not been altered and that the certificate is valid. When I remove my plugin and verify the signature with the Adobe Default Security it states that the signature is invalid and that the document has been altered or corrupted. When I use the DocSign sample plugin to verify my signature it states the the signature is unknown and that the integrety has not yet been verified.
My question are:
Why Adobe Default Security telling me the signature is invalid instead of unknown, like the DocSign example?
What can I do so that signature becomes unknown and not invalid when verified with Adobe Default Security?
Why is Adobe Default Security telling me the document has been altered or corrupted, when it has not been changed?
Regards,
Magda

As this can't be debugged without a copy of your plugin, files, etc. - you will need to open up a formal support ticket for this with our Developer Support.

Why do I stay logged into Gmail even though browser.sessionstore.privacy_level is set to 1?

When I close my browser I expect not to still be logged in to secure sites (e.g. Gmail) when I reopen it. I know FF stopped this behaviour by default in FF4, so I have set browser.sessionstore.privacy_level to 1 which I believe should enforce this behaviour. However of late Gmail is still logged in when I reopen FF even after a complete shutdown of the computer for a day or so.
I've checked the browser.sessionstore.privacy_level setting and it's still set to 1.
This is definitely happening in in FF 25.0.1 on Ubuntu 13.10. I think it's also happening on my Windows (XP and 7) machines, but don't have them to hand to check.
Any ideas what else I should check?

I think there is some confusion about how Google's cookies work and what browser.sessionstore.privacy_level does.
You can allow Google to set two different kinds of cookies:
(1) ''Persistent'' cookies ("Keep until: they expire")
These expire on a future date. These cookies are not at all affected by the session restore settings.
(2) ''Session'' cookies ("Keep until: I close Firefox")
These cookies expire from the cookie database when you exit Firefox but may be restored if you restore your previous session.
With the default setting of browser.sessionstore.privacy_level=0, these session cookies are kept in your previous session data so that you can return to your prior Google session without logging in again.
With browser.sessionstore.privacy_level=1, session cookies from secure sites are NOT kept in your previous session data. When you restore the Google tab, you should be logged out in that tab (for example, you may get the login screen instead of your inbox).
Rather than flush ''all'' your cookies at shutdown, another approach is to set your cookies to be session cookies by default, and then make exceptions for sites where you want to stay logged in from session to session (e.g., forums or other sites that aren't sensitive).
The general setting is on the Privacy tab of the Options/Preferences dialog. [[Enable and disable cookies that websites use to track your preferences]].
To set site-specific exceptions, you can use the Exceptions button on the Privacy tab, or use the Page Info dialog while viewing a page on the site. Either:
* right-click and choose View Page Info > Permissions
* Tools menu > Page Info > Permissions
* right the padlock icon in the address bar > More Information > Permissions

Since I updated Firefox I have to constantly re log-in to my Yahoo account such as email. Every time I leave the page I have to log-in to get back into it. I also run OPERA and I do not have that problem with them. I stay logged in. Any suggestions?

I have windows Vista and have the updated version of Firefox. I also can run OPERA and LUNASCAPE with no problems. When running Firefox I have to constant re log-in to my Yahoo account every time I leave the page. For example: I log in to check my email on Yahoo and then leave my email page. Then when I return to recheck my email I have to log in all over again. I can't stay logged in. If I run my OPERA browser I stay logged in for days without having to sign in all over again.

Many site issues can be caused by corrupt cookies or cache. In order to try to fix these problems, the first step is to clear both cookies and the cache.
Note: ''This will temporarily log you out of all sites you're logged in to.''
To clear cache and cookies do the following:
#Go to Firefox > History > Clear recent history or (if no Firefox button is shown) go to Tools > Clear recent history.
#Under "Time range to clear", select "Everything".
#Now, click the arrow next to Details to toggle the Details list active.
#From the details list, check ''Cache'' and ''Cookies'' and uncheck everything else.
#Now click the ''Clear now'' button.
Further information can be found in the [[Clear your cache, history and other personal information in Firefox]] article.
Did this fix your problems? Please report back to us!
"Remove Cookies" from sites causing problems:
Tools > Options > Privacy > Cookies: "Show Cookies"
'''Try Firefox Safe Mode''' to see if the problem goes away. Safe Mode is a troubleshooting mode, which disables most add-ons.
''(If you're not using it, switch to the Default theme.)''
* You can open Firefox 4.0+ in Safe Mode by holding the '''Shift''' key when you open the Firefox desktop or Start menu shortcut.
* Or open the Help menu and click on the '''Restart with Add-ons Disabled...''' menu item while Firefox is running.
''Once you get the pop-up, just select "'Start in Safe Mode"''
'''''If the issue is not present in Firefox Safe Mode''''', your problem is probably caused by an extension, and you need to figure out which one. Please follow the [[Troubleshooting extensions and themes]] article for that.
''To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before opening Firefox for normal use again.''
''When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.''

For some reason my Firefox is no longer allowing me to stay logged on to certain sites e.g. Even though I now allows click the keep the keep me logged in on facebook I now have to log on each time. How do I fix this. Kind regards Bev Greene

For some reason my Firefox is no longer allowing me to stay logged on to certain sites e.g. Even though I now allows click the keep the keep me logged in on facebook I now have to log on each time. How do I fix this.
Kind regards
Bev Greene

Websites remembering you and automatically log you in is stored in a cookie.
* Create an allow cookie exception (Tools > Options > Privacy > Cookies: Exceptions) to keep such a cookie, especially for secure websites and if cookies expire when Firefox is closed.
Make sure that you do not run Firefox in Private Browsing mode.
* https://support.mozilla.com/kb/Private+Browsing
* In [[Private Browsing]] mode all cookies are session cookies that expire if that session is ended, so websites won't remember you.
* Do not use [[Clear Recent History]] to clear the "Cookies" and the "Site Preferences"
Clearing "Site Preferences" clears all exceptions for cookies, images, pop-up windows, software installation, and passwords.
* http://kb.mozillazine.org/Cookies

With Firefox 4 gmail stays logged in after Firefox is shut down and restarted

This is related to the post mentioned here: https://support.mozilla.com/en-US/questions/811479
with a twist.
In Firefox 4 if you shut down the browser without signing out of gmail you stay signed in, even after a full system shutdown and restart.
I HAVE NO APP TABS etc, and my security settings are also normal (viz. no stay signed in etc etc) I also always use HTTPS
(In earlier versions, if you didnt always use https, then shutting the browser wouldnt log you out. But if you always used https, you would be logged out)
Heres what happens: First let me make it clear that I have no app tabs, and all the other settings are correct (viz. no stay signed in etc etc). Now say one of the open tabs is my mail inbox. If I close and restart browser, I'll be in my inbox!! (Earlier versions of firefox took me to the login page).
Whats the issue here? Does everyone else also experience this?

This is a massive design flaw or bug and needs fixing; I can't recall a larger direct security issue than leaving people prepped for auto-login upon closing a browser, and to one of the most popular email providers in the world. Persisting since v.4 all the way up to current v7.0.1. Ridiculous.

Can't get Safari to stay logged in to sites.

I want to make the Switch from Google Chrome to Safari, but this has proved impossible so far, because Safari will not stay logged in to a lote of sites. It seems that various Internet forums are the worst offenders, but I've noticed it on occasion with my Gmail account and a few other things as well.
I've tried most of the obvious things: Deleting cache, cookies, and whatnot; turning on "always accept cookies," rather than the default about ignoring ones you don't manually visit, which shouldn't be necessary anyway; deleting some entries from Keychain Access; even deleting Safari's settings .plist file. None of those have worked. It almost seemed good again for a brief moment, but then I once again got stuck in an endless loop of logging in (i.e. navigate to forum page, goes back to login page, I log in, navigate to forum page, goes back to login page, repeat ad nauseam.)
I don't have this problem with any other browser I've used, and it's pretty much a deal breaker w/r/t using Safari as a default browser. I've read quite a lot about this being a very common problem, but I couldn't find any great answers, not to mention that a lot of the stuff I found was years old.
Any ideas?

Please read this whole message before doing anything.
This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
Step 1
The purpose of this step is to determine whether the problem is localized to your user account.
Enable guest logins* and log in as Guest. For instructions, launch the System Preferences application, select Help from the menu bar, and enter “Set up guest users” (without the quotes) in the search box. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
Test while logged in as Guest. Same problem(s)?
After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
Step 2
The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode* and log in to the account with the problem. The instructions provided by Apple are as follows:
Be sure your Mac is shut down.
Press the power button.
Immediately after you hear the startup tone, hold the Shift key. The Shift key should be held as soon as possible after the startup tone, but not before the tone.
Release the Shift key when you see the gray Apple icon and the progress indicator (looks like a spinning gear).
Safe mode is much slower to boot and run than normal, and some things won’t work at all, including wireless networking on certain Macs.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
*Note: If FileVault is enabled, or if a firmware password is set, you can’t boot in safe mode.
Test while in safe mode. Same problem(s)?
After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of steps 1 and 2.

Since downloading the update for Firefox 3.6.10 all websites that I previously stayed logged into must be logged into everytime I open them. Why? And can this be fixed?

This has happened with previous Firefox updates but only after the initial update. Once I logged into websites such as facebook, yahoo, hotmail etc. I stayed logged in and was able to access these sites without having to log in each and every time. I have checked all boxes on these and all other sites to remember passwords and to keep me logged in and I still have to log in on each new visit. I rebooted my computer and this did not help. I made sure that Remember Passwords was checked on the Security tab under Options in the Tools for Firefox.

How can Mozilla be contacted to report this problem directly to them instead of posting to a forum?

Can't Stay Logged In After Shutting Down My Computer

I don't know if I have Mountain Lion but this is the only place I can find to post a question. I have 10.6.8 on my MacBook. I got a new hard drive and now every time I shut down the computer it makes me log in again when I turn the computer back on. The only option to stay logged in is in Accounts in System Preferences. I have "Automatic" checked and my name in the box. Still, it asks for a password every time. I went to the Apple store and the guy I talked to tried it and it didn't work. He looked online and couldn't find it. How do I stay logged in. I've looked at everything on the login page and I can't find anything checked or unchecked that needs to be changed. I went to "Security" in System Preferences and the disable automatic login box is unchecked. I'm so frustrated. Do you know what I am doing wrong or why it won't keep me logged in?

If you are using 10.6.8, you have Snow Leopard.
Shut down the computer or put it to sleep?
I am currently in the Mountain Lion partition on my hard drive, but I boot into my Snow Leopard partition every night, so I can look tonight.
You have checked the two obvious places to check.
Without being able to see Snow Leopard now, I suggest you try some basic maintenance to see if it helps. At least that square will be filled.
Run Disk Utility/Repair Permissions. Repeat until it shows no repairs were made. Clearing the log in between runs can make the process less confusing.
PRAM reset: http://support.apple.com/kb/PH11243
SMC reset: http://support.apple.com/kb/HT3964
http://reviews.cnet.com/8301-13727_7-20005830-263/mac-general-maintenance-recomm endations/

Can't stay logged in to this site

Couldn't find a better place to post this so here it is...
I can't stay logged into this forum from my work or home desktop. As soon as I close the browser, I have to log back in. I don't think it's a security setting because I have no trouble staying logged into other forums/sites on either computer. This is the only site I have trouble with. A search revealed a few people with the same problem but no solutions. Also, I didn't see a setting or checkbox to keep me logged in. Any ideas on how I can stay logged in? TIA.

This is surprising. This is the first forum (of many) that I've ever seen that won't allow me to stay logged in. Is there any good reason to do this? One of many Apple quirks I guess. Sometimes I wonder if they do some things just to be different.

I don't stay logged into webpages

When I close the browser, I get logged off all my sites. What I mean is, for example, facebook. When I log in, i check the box to "stay logged in". however when i close my firefox browser, the next time i open up firefox and go to facebook, i need to log in again! I've never had this problem before and its not just with facebook, its gmail and any other site i use.

* Websites remembering you and automatically log you in is stored in a cookie.
* You must allow that cookie (Tools > Options > Privacy > Cookies: Exceptions), especially for secure websites and if you let cookies expire when Firefox closes
* Make sure that you do not use [[Clear Recent History]] to clear the "Cookies" and the "Site Preferences"
See also http://kb.mozillazine.org/Cookies

How to stay logged in to ebay

I can't stay logged in to ebay while using safari 5.05. Same problem with previous versions of safari. Move away from the ebay page and you have to log in again.

Hi Richard
If you haven't already - remove all ebay cookies via Safari-Preferences-Security-Show Cookies; using the filter to reveal just ebay ones.
After that - ebay will still occasionally think you need to log in, sometimes from intentional security efforts, and sometimes mid-listing due a problem with their site & safari (I've never found a good way out of that, although often opening a new tab/window shows me still logged in & able to do most things, including sometimes) saving a draft.
If you still find yourself logged out every time, there must be something else amiss - start by testing briefly in a New User Account

Stay logged in on a website

Is there a way to stay logged in on a website ? can the ipad be set to remember username and password ?

Actually it will depend somewhat on the website and the type of security it runs. In general, you should go to the Settings app, Safari and make sure you are accepting cookies. but there's no guarantee it will work for every site.
I beleive there are some Keychain type apps for storing passwords available in the app store, but I can't recommend one first hand.

Adobe defaulting "stay logged on" is a security issue

Similar Messages

Maybe you are looking for