every time I log in to google or ebay from Fedora they think that it is the first time
When I log into google or ebay from my desktop, they think that I'm logging in for the first time from that device. For ebay.ca, it is painless: I get a warning message in email "if this wasn't you...". For google it is more annoying. It wants a second factor authenticator. This amount to a message on all my android devices, none of which are close by. I have to climb a flight of stairs! Any idea why these sites think my desktop is new to them each time? (I don't get this when I log in from an Android device.)
My off hand guess would be cookies. Its really the only way they have to track you. You IP address can change of be used by several browsers so they can't use that for certain identification. Do you have some cookie management software on your system that could be screwing with your browser? On 2022-06-21 16:01, D. Hugh Redelmeier via talk wrote:
When I log into google or ebay from my desktop, they think that I'm logging in for the first time from that device.
For ebay.ca, it is painless: I get a warning message in email "if this wasn't you...".
For google it is more annoying. It wants a second factor authenticator. This amount to a message on all my android devices, none of which are close by. I have to climb a flight of stairs!
Any idea why these sites think my desktop is new to them each time?
(I don't get this when I log in from an Android device.) --- Post to this mailing list talk@gtalug.org Unsubscribe from this mailing list https://gtalug.org/mailman/listinfo/talk
-- Alvin Starr || land: (647)478-6285 Netvel Inc. || Cell: (416)806-0133 alvin@netvel.net ||
On Tue, Jun 21, 2022 at 04:01:40PM -0400, D. Hugh Redelmeier via talk wrote:
When I log into google or ebay from my desktop, they think that I'm logging in for the first time from that device.
For ebay.ca, it is painless: I get a warning message in email "if this wasn't you...".
For google it is more annoying. It wants a second factor authenticator. This amount to a message on all my android devices, none of which are close by. I have to climb a flight of stairs!
Any idea why these sites think my desktop is new to them each time?
(I don't get this when I log in from an Android device.)
Did you enable a setting in your browser that makes it forget all cookies when you close it? After all without a cookie, there is no way to remember anything in the browser. Certainly chrome has an option for 'Clear cookies and site data when you close all windows' which would do it. -- Len Sorensen
On Tue, 21 Jun 2022 at 20:04, Lennart Sorensen via talk <talk@gtalug.org> wrote:
After all without a cookie, there is no way to remember anything in the browser.
Sure there is. https://betterprogramming.pub/the-different-types-of-browser-storage-82b918c... -- Scott
On Tue, Jun 21, 2022 at 08:08:59PM -0400, Scott Allen via talk wrote:
On Tue, 21 Jun 2022 at 20:04, Lennart Sorensen via talk <talk@gtalug.org> wrote:
After all without a cookie, there is no way to remember anything in the browser.
Sure there is.
https://betterprogramming.pub/the-different-types-of-browser-storage-82b918c...
That's apparently medium.com which means it just as well might not exist. Can't read it. Now are there in fact storage methods the website can access other than cookies to determine who you are? And do any of them work if you actually enabled deleting cookies on close? -- Len Sorensen
On Wed, 22 Jun 2022 at 18:07, Lennart Sorensen <lsorense@csclub.uwaterloo.ca> wrote:
On Tue, Jun 21, 2022 at 08:08:59PM -0400, Scott Allen via talk wrote:
On Tue, 21 Jun 2022 at 20:04, Lennart Sorensen via talk <talk@gtalug.org> wrote:
After all without a cookie, there is no way to remember anything in the browser. Sure there is. Now are there in fact storage methods the website can access other than cookies to determine who you are?
You didn't specify server access, just that the browser can remember something for a site. The others aren't readily accessible by a website but I don't see why it couldn't be done with CGI, maybe along with HTTP POST or GET. That's not to say anyone is doing it but they could.
And do any of them work if you actually enabled deleting cookies on close?
Yes, data saved using some of the other methods isn't erased when cookies and data are cleared. https://css-tricks.com/a-primer-on-the-different-types-of-browser-storage/ -- Scott
Those alerts and prompts for repeated logins are almost certainly caused by clearing cookies. I purposely configure most of my browsers to clear cookies and cache every time I close them (different browsers for varying levels of lockdown). But the Goobooktwits want to track me from one session to another, so they're making my life as miserable as possible so I'll succumb to giving them the surveillance tracking data they want. It's one of the reasons I haven't enabled 2FA on those websites. I'm not reliant on any of their services, & I don't store data on there so I'm not too worried about a breach. My 1FA passwords are strong and unique for each site. I consider my risk profile low. Facebook recently locked me out of my account because it didn't recognize the browser I was using. It wants me to send a message to five "friends" to vouch for me so I can log in again. Not happening, so I'm no longer on Facebook. And I'm prepared to abandon the other services (Google, Twitter) as soon as they become more annoying than useful. --Bob. On 2022-06-21 16:01, D. Hugh Redelmeier via talk wrote:
When I log into google or ebay from my desktop, they think that I'm logging in for the first time from that device.
For ebay.ca, it is painless: I get a warning message in email "if this wasn't you...".
For google it is more annoying. It wants a second factor authenticator. This amount to a message on all my android devices, none of which are close by. I have to climb a flight of stairs!
Any idea why these sites think my desktop is new to them each time?
(I don't get this when I log in from an Android device.) --- Post to this mailing list talk@gtalug.org Unsubscribe from this mailing list https://gtalug.org/mailman/listinfo/talk
-- Bob Jonkman <bjonkman@sobac.com> Phone: +1-519-635-9413 SOBAC Microcomputer Services http://sobac.com/sobac/ Software --- Office & Business Automation --- Consulting GnuPG Fngrprnt:04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA
participants (5)
-
Alvin Starr -
Bob Jonkman -
D. Hugh Redelmeier -
Lennart Sorensen -
Scott Allen