It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussionWARNING! MASSIVE SECURITY RISK ON GOG!(164 posts)(164 posts)
(164 posts)
Pages:
1
2
3
4
5
6
7
8
9
10
11
This is my favourite topic
Posted June 04, 2019
high rated
Hello everyone! This is forum regular fronzelneekburm, posting from the account of some poor Chinese guy that gog randomly logged me into. I'll explain the situation in further detail in another post from my actual account once I logged out of this one.

Beware of other people (unknowingly) accessing your accounts!
Posted June 04, 2019
high rated
lol, yeah, so this is a thing that just happened. It's pretty hilarious (or horrifying, depending on whether your're in Xiaozhuzhi's position and your account is affected by this little mishap).

So, I decided to browse the gog forums today from my phone. Something odd I noticed that there was an avarar icon, despite me not logging in. But that's ok, gog is all sorts of fucked up in PR China: everything barely works, the site's slower than molasses and shit doesn't display properly. After a while you just learn to ignore all the weirness. It was only after I actually got curious and hit the avatar did I realise that gog had logged me into Mr Xiaozhuzhi's account.

I didn't even have to haxx the poor fella. Hell, I didn't even need to hit the login button. I just went to the gog.com main page on my mobile browser, then went to GD and gog was all like: "Welcome back! Please make yourself at home in this other dude's account!" lol

Now, you can rest easy: I didn't do anything "unethical" with Mr Xiaozhuzhi's account. I didn't access any private information or whatever other info I might have pulled from his account. I didn't use it to artificially boost the number of votes for Grimoire on the community wishlist. Hell, I didn't even use it to get free games - I already had most of them anyway and, lol, fuck GWENT, I wouldn't even want to steal it! ;)

Good goy fronzel did the nice thing and logged out, but not before letting everyone on this forum know that there is apparently some massive security oversight that will randomly log you into someone else's account.

Other unwanted lodgers that might be lurking in your account (without them being in any way at fault for this) might not be so nice and try to take advantage of this situation. Be vigilant! It might be YOUR account that got compromised next!

Feel free to ask me anything.

PS: I'd like some sort of explanation from gog how such an issue is even possible. How am I just in random person's account when all I did was visit gog from my phone's browser? It would also be nice if gog were to get in touch with Xiaozhuzi and let him know about this issue and issue an apology for this mess.
Posted June 04, 2019
high rated
Thanks for reaching out about this. This situation is currently being investigated.
Posted June 04, 2019
avatar
chandra: Thanks for reaching out about this.
You're welcome! I was just about to send a link to this thread to support, but I'm glad you beat me to it. :)
avatar
chandra: This situation is currently being investigated.
I'm eager to hear the outcome of this investigation.
Posted June 04, 2019
low rated
你所有的基地都屬於我們
Posted June 04, 2019
There was this guy some time ago (years, I think), who logged blue instead of normal user once, due to some error on gog's side.

He even made a giveaway inspired by it. XD
Posted June 04, 2019
It's always nice to get people more aware of security breaches / risks in our daily but mundane life :P

Security bliiip aside, I wouldn't worry too much about this chinese account; from what I've gathered I haven't seen any new chinese accounts since 2017-2018, and he/she has probably abandoned it in fear of taking a massive hit on the social gambit scale.

The borders are tighter than ever... at least some place other than here, that is. :D
Posted June 04, 2019
high rated
Behold the Being John Malkovitch bug.
Posted June 04, 2019
avatar
fronzelneekburm: lol, yeah, so this is a thing that just happened. It's pretty hilarious (or horrifying, depending on whether your're in Xiaozhuzhi's position and your account is affected by this little mishap).

So, I decided to browse the gog forums today from my phone. Something odd I noticed that there was an avarar icon, despite me not logging in. But that's ok, gog is all sorts of fucked up in PR China: everything barely works, the site's slower than molasses and shit doesn't display properly. After a while you just learn to ignore all the weirness. It was only after I actually got curious and hit the avatar did I realise that gog had logged me into Mr Xiaozhuzhi's account.

I didn't even have to haxx the poor fella. Hell, I didn't even need to hit the login button. I just went to the gog.com main page on my mobile browser, then went to GD and gog was all like: "Welcome back! Please make yourself at home in this other dude's account!" lol

Now, you can rest easy: I didn't do anything "unethical" with Mr Xiaozhuzhi's account. I didn't access any private information or whatever other info I might have pulled from his account. I didn't use it to artificially boost the number of votes for Grimoire on the community wishlist. Hell, I didn't even use it to get free games - I already had most of them anyway and, lol, fuck GWENT, I wouldn't even want to steal it! ;)

Good goy fronzel did the nice thing and logged out, but not before letting everyone on this forum know that there is apparently some massive security oversight that will randomly log you into someone else's account.

Other unwanted lodgers that might be lurking in your account (without them being in any way at fault for this) might not be so nice and try to take advantage of this situation. Be vigilant! It might be YOUR account that got compromised next!

Feel free to ask me anything.

PS: I'd like some sort of explanation from gog how such an issue is even possible. How am I just in random person's account when all I did was visit gog from my phone's browser? It would also be nice if gog were to get in touch with Xiaozhuzi and let him know about this issue and issue an apology for this mess.
So how did you enjoy the experience? How would you rate it? Same question even if Mr. Xiaozhuzhi is in control of fronzelneekburm in return this time.
Posted June 04, 2019
So today we learned that re-incarnation is real. What a quantum leap for mankind!
Posted June 04, 2019
Remember that time I said that thing. It wasn't really me.
Posted June 04, 2019
This would explain why the GOG-community is so passionate about giveaways compared to other communities.
Posted June 04, 2019
So I'm not the only one this happened too? good to know, I logged into some Brazilian guys account 2 years ago and was like ok something is odd here and restarted the browser and got back into my account.

all I did was log into the site through phone as well but on the main page.

Android phone


It's interesting the problem is still going on and has not been fixed for ages lol.
Post edited June 04, 2019 by DreamedArtist
Posted June 04, 2019
avatar
StarChan: Remember that time I said that thing. It wasn't really me.
Sure thing StarChan IF THAT IS REALLY YOUR REAL NAME.
Posted June 04, 2019
avatar
XYCat: So how did you enjoy the experience? How would you rate it? Same question even if Mr. Xiaozhuzhi is in control of fronzelneekburm in return this time.
I rate 8/10 for the pure shock value of suddenly being in some rando's account.

If I were Xiaozhuzhi in fronzelneekburm's account, on a scale from "This stingy fuck hasn't bought anything during this summer sale! No free Bioshock Infinite for me. Thanks for nothing, asswipe!" to "lol, free shit! 11/10 - gg no re" I'd rate the experience a solid 988 unfulfilled votes on the wishlist.
Pages:
1
2
3
4
5
6
7
8
9
10
11
This is my favourite topic
Community
General discussionWARNING! MASSIVE SECURITY RISK ON GOG!(164 posts)(164 posts)
(164 posts)