You can log in as anyone who has made a change to an obsidian portal within the last 7 days.

Orenria
edited March 23 in Bug Reports

not going to post how but it is very easy & repeatable

You can navigate that persons OPs that they own/ are a part of.

 

Post edited by Orenria on

Comments

  • Orenria
    Posts: 2

    You can go into their account settings too.

  • Vanillabean
    Vanillabean
    Posts: 86

    Hey Orenria, thanks for pointing this out to us! We'll be in contact via email communication to get some more information on whats going on so we can get this sorted. 

     

    Obsidian Portal Dungeon Manager || [email protected] 

  • thaen
    thaen
    Posts: 1,079 edited March 26

    Thanks for pointing this out!

    This bug has now been fixed. All "auto-login urls" that were created before the fix have been disabled. Anyone that was potentially affected will be prompted to login again on their next visit. This is to make sure we logout anyone that is not logged into their own account.

    We'll be doing some research to see who all was affected and what the effects might have been. We don't store credit card data, so there's no issue there. We do store member email addresses, so it's possible that those were exposed.

    Post edited by thaen on

    Obsidian Portal Developer

  • thaen
    thaen
    Posts: 1,079

    After analysis, it doesn't appear that anything obviously malicious was done while the bug was in place.

    We can't tell if email addresses were viewed or not, so it is possible that email addresses were exposed.

    If you notice anything missing or odd, email support and we will look into it.

    Obsidian Portal Developer

  • twiggyleaf
    twiggyleaf
    Posts: 2,011

    Thanks for checking!

    smiley

    "I met a traveller from an antique land....."

    CotM May 2016: Mysteria: set in Wolfgang Baur’s MIDGARD.

    Previous CotM Aug 2012: Shimring: High Level Multiplanar Campaign

    Inner Council Member

  • GamingMegaverse
    GamingMegaverse
    Posts: 3,001

    Awesome catch!!!

    Just trying to help out.

Sign In or Register to comment.

April 2024
Season of Strife

Read the feature post on the blog
Return to Obsidian Portal

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Discussions