topic Re: Multiple Chrome logins not removed in Arlo Secure

Multiple Chrome logins not removed

Dannybear — Sun, 18 Sep 2022 08:31:23 GMT

This is a weird one for the arlo web support team.

When viewing active logged in devices via the privacy centre account page I can see my iPhone as well as up to five chrome devices logged in. Checked that my pc browsers were all closed and no instances were running in the background. Chrome app settings are set not to run in background.

I can logout each session successfully via the arlo session page but why do they persist when logging out of chrome web sessions?

Is this a security risk for customers should be aware of?

When in a chrome browser logged in session, if you delete cookies and data and then logout and close browser the chrome session remains logged in on the arlo active sessions list.

Re: Multiple Chrome logins not removed

ShayneS — Wed, 21 Sep 2022 19:10:04 GMT

I have notified the team, I will report back here as soon as I have some info to share.

Thanks,

Shayne

Re: Multiple Chrome logins not removed

Dannybear — Wed, 21 Sep 2022 20:49:31 GMT

@ShayneS

Cheers.

Re: Multiple Chrome logins not removed

ShayneS — Mon, 10 Oct 2022 20:10:43 GMT

Does this occur after the iOS 3.7.1 as well?

Re: Multiple Chrome logins not removed

Dannybear — Mon, 10 Oct 2022 22:12:18 GMT

Hi Shayne,

Yes still occurring using chrome latest version on win10.

Multiple active logins for chrome show up when using web portal v3.7.1_2, iPhone using v3.6.8 and iPad using v3.7.1.

This should be easily duplicated by arlo team.

Open chrome and login.
Click on site lock icon left of URL address bar.
Click on cookies and remove arlo sites.
Logout of arlo portal.
Open and login to arlo portal, perform the 2FA dance.
Click settings page, select privacy centre, scroll down to account, select active sessions and identify at least two chrome devices.
Repeat again to add more chrome sessions.

The only difference I have observed from previous web portal app versions is that you are now limited to 3 chrome sessions.

When you speak with the web team again can you also ask them to fix the Base station siren name label edit to actually change the siren label instead of it changing the base station name label please since the mobile app has lost the editing feature for the siren device.

Re: Multiple Chrome logins not removed

ShayneS — Wed, 26 Oct 2022 21:08:44 GMT

Hey @Dannybear

Did Jeff happen to reach out to you to investigate this? I believe he sent a PM or email.

Re: Multiple Chrome logins not removed

Dannybear — Wed, 26 Oct 2022 21:22:01 GMT

Hi Shayne,

Yep, via email, were you able to reproduce the issue?

I don’t do zoom since I am usually asleep. I sent Jeff a snapshot of what I get.