
One of the oddest things is that the stranger was 90% random, but based on their apparent location and a few email subjects, I could have in theory at least formerly lived near this person.
The cookie looked completely like her identification, nothing to do with mine. I also use 2-step authentication (thankfully!), not sure if this would affect my account. Neither of these accounts were available, just the other individuals. I use multi-login, and am normally logged into two other accounts at the same time. I had not logged in, I had just opened Gmail in a new tab. An incredibly bizarre and potentially dangerous situation. But what if a different person in the meantime has been in mine? Email is the gateway to everything online, and I would never want anyone in my account that shouldn’t be there. I would never want to violate this other person’s privacy, just as I would not want mine violated.Īnd that is what scared me: this happened to me, being in someone else’s account. I certainly got out of her account as quickly as I could, but did take a quick screenshot and saved the network data (and corresponding cookie information) strictly for evidence in hopefully helping the Gmail team should they need debugging evidence. Indeed, everything appeared as if I were her, almost as if it was a Firesheep session, but it most certainly was not. I quickly checked Chrome’s Web Inspector and looked at the cookies.
All the emails were completely foreign, the chat list was full of people I did not know, and the +You name in the top right was definitely +Sarah, not +Joshua. Then the kicker… my name was gone from the top right, and instead I was inside of Sarah Jenkins’ account (name changed).Īt that point I shot back to the inbox, and sure enough, I was in a completely different person’s account. Then I saw that two people that I did not know had circled me on Google+, not completely unusual but still unexpected.
The first email was from Amazon Local Deals, which I was pretty sure I had unsubscribed from a while ago, and furthermore it was from an area I used to live in, but have since moved from.
This morning I opened my laptop and went to to check my email, but was a little confused at first.
Please ignore the post and move along, Gmail is still secure for now! My sincere apologies for raising an alarm. UPDATE: After doing extensive checking with extended family, this has proven to be legitimate (though very unexpected).