Multiple Chrome logins not removed

[Dannybear]

This is a weird one for the arlo web support team.

When viewing active logged in devices via the privacy centre account page I can see my iPhone as well as up to five chrome devices logged in. Checked that my pc browsers were all closed and no instances were running in the background. Chrome app settings are set not to run in background.

I can logout each session successfully via the arlo session page but why do they persist when logging out of chrome web sessions?

Is this a security risk for customers should be aware of?

When in a chrome browser logged in session, if you delete cookies and data and then logout and close browser the chrome session remains logged in on the arlo active sessions list.

 

[ShayneS]

I have notified the team, I will report back here as soon as I have some info to share. 

Thanks,

Shayne

[Dannybear]

@ShayneS 

Cheers.

[ShayneS]

Does this occur after the iOS 3.7.1 as well? 

[Dannybear]

Hi Shayne,

Yes still occurring using chrome latest version on win10.

Multiple active logins for chrome show up when using web portal v3.7.1_2, iPhone using v3.6.8 and iPad using v3.7.1.

 This should be easily duplicated by arlo team.

• Open chrome and login.
• Click on site lock icon left of URL address bar.
• Click on cookies and remove arlo sites.
• Logout of arlo portal.
• Open and login to arlo portal, perform the 2FA dance.
• Click settings page, select privacy centre, scroll down to account, select active sessions and identify at least two chrome devices.
• Repeat again to add more chrome sessions.

The only difference I have observed from previous web portal app versions is that you are now limited to 3 chrome sessions.

When you speak with the web team again can you also ask them to fix the Base station siren name label edit to actually change the siren label instead of it changing the base station name label please since the mobile app has lost the editing feature for the siren device.

[ShayneS]

Hey @Dannybear

Did Jeff happen to reach out to you to investigate this? I believe he sent a PM or email. 

[Dannybear]

Hi Shayne,

Yep, via email, were you able to reproduce the issue?

I don’t do zoom since I am usually asleep. I sent Jeff a snapshot of what I get.