tea.mathoverflow.net - Discussion Feed (OpenID login currently broken?)

Anton Geraschenko comments on "OpenID login currently broken?" (10655)

Anton Geraschenko — Mon, 15 Nov 2010 07:24:19 -0800

(What stops someone from using the feature to hijack someone else's account?)

The only way somebody could use the recovery feature to hijack your account is if you enter their email address in your profile or if they have access to your email.

Harald Hanche-Olsen comments on "OpenID login currently broken?" (10653)

Harald Hanche-Olsen — Mon, 15 Nov 2010 06:41:31 -0800

@Anton: Yes, I have javascript enabled. Anyhow, the “Is this your account?” feature now works again. Makes me guess that it was the same problem as the login problem; i.e., it was all javascript-related. (What stops someone from using the feature to hijack someone else's account?)

Anton Geraschenko comments on "OpenID login currently broken?" (10652)

Anton Geraschenko — Mon, 15 Nov 2010 06:31:58 -0800

Actually, as far as I can tell the “Is this your account?” link doesn't do anything. (Tested with Safari and Firefox on the Mac.)

Presumably you have javascript enabled. The link is supposed to produce a popup box where you can enter your email in order to get sent an account recovery cookie.

"Account recovered: you should probably associate another OpenID to it" (or words to that effect). I am assuming that this advice be ignored in this situation?

Yes. That advice should be ignored. (Actually, nevermind; see below)

As of a couple of minutes ago, it seems that login is working again. Woohoo!

Georges Elencwajg comments on "OpenID login currently broken?" (10651)

Georges Elencwajg — Mon, 15 Nov 2010 05:52:47 -0800

I am sure every user will join me in congratulating and thanking Anton for the quick and efficient way in which he reacted ( on a Sunday !) to a completely unforeseen problem.

Kevin Buzzard comments on "OpenID login currently broken?" (10648)

Kevin Buzzard — Mon, 15 Nov 2010 01:29:28 -0800

Anton or someone else who understands OpenID: I just followed the link in the new banner and things work fine. I got things working again and get a box at the top saying something like "Account recovered: you should probably associate another OpenID to it" (or words to that effect). I am assuming that this advice be ignored in this situation?

Harald Hanche-Olsen comments on "OpenID login currently broken?" (10647)

Harald Hanche-Olsen — Mon, 15 Nov 2010 00:28:23 -0800

Actually, as far as I can tell the “Is this your account?” link doesn't do anything. (Tested with Safari and Firefox on the Mac.)

Anton Geraschenko comments on "OpenID login currently broken?" (10646)

Anton Geraschenko — Sun, 14 Nov 2010 21:22:18 -0800

I've just rigged it so that you only see the "login is broken" banner if you're not logged in.

Edit: I've also rigged it so you can use the banner directly to recover your account.

Todd Trimble comments on "OpenID login currently broken?" (10645)

Todd Trimble — Sun, 14 Nov 2010 21:01:48 -0800

I had closed the window I was using and reentered from a new window, to see what would happen. So I didn't think I was logged in, but now I suppose I was, in which case the message seems to be not to worry. Sorry for the bother.

Anton Geraschenko comments on "OpenID login currently broken?" (10643)

Anton Geraschenko — Sun, 14 Nov 2010 19:54:42 -0800

Are you already logged in? You should only see the "Is this your account?" link if you're not logged in.

Todd Trimble comments on "OpenID login currently broken?" (10642)

Todd Trimble — Sun, 14 Nov 2010 19:40:58 -0800

Thanks, but that's not what I see. No wonder I couldn't find it.

Anton Geraschenko comments on "OpenID login currently broken?" (10641)

Anton Geraschenko — Sun, 14 Nov 2010 19:27:12 -0800

@Todd:

Todd Trimble comments on "OpenID login currently broken?" (10640)

Todd Trimble — Sun, 14 Nov 2010 19:00:09 -0800

I can't even find the "Is this your account?" link on my user page. I feel so stupid.

Anton Geraschenko comments on "OpenID login currently broken?" (10637)

Anton Geraschenko — Sun, 14 Nov 2010 18:31:22 -0800

@Scott: done.

Scott Morrison comments on "OpenID login currently broken?" (10636)

Scott Morrison — Sun, 14 Nov 2010 18:13:39 -0800

@Anton,

maybe you should put up a site banner, just so people know what's going on.

Anton Geraschenko comments on "OpenID login currently broken?" (10635)

Anton Geraschenko — Sun, 14 Nov 2010 17:37:39 -0800

Does anyone actually know anything? Is some person with some competence in such matters doing something about it?

Nope. I've contacted Fog Creek (the company that hosts the site), but haven't heard back from them yet, possibly because it's Sunday. Hopefully this will be resolved by tomorrow morning.

Michael Hardy comments on "OpenID login currently broken?" (10634)

Michael Hardy — Sun, 14 Nov 2010 17:32:57 -0800

The problem is still there. I've tried various browsers, and I've tried logging in from my home computer and from machines on the campuses of three different universities. No luck. So here's a question: Does anyone actually _know_ anything? Is some person with some competence in such matters doing something about it?

Anton Geraschenko comments on "OpenID login currently broken?" (10633)

Anton Geraschenko — Sun, 14 Nov 2010 17:32:25 -0800

By the way, you can always get another cookie without actually logging in by visiting your user page and clicking the "Is this your account?" link.

Anton Geraschenko comments on "OpenID login currently broken?" (10632)

Anton Geraschenko — Sun, 14 Nov 2010 17:25:11 -0800

Oh dear, with two of the moderators now locked out, it's time for all you lurking trolls to run amok! Argh! :-)

No, no. I wasn't so absent-minded as to not run this experiment in a separate browser.

Harald Hanche-Olsen comments on "OpenID login currently broken?" (10630)

Harald Hanche-Olsen — Sun, 14 Nov 2010 16:07:01 -0800

Me too. 8-) No, seriously, I tried from a different browser than I usually use. Since use openid delegation via a server I control, I can look in the log and see that there has been no request for my openid page. It could be a number of things, like the MO server not getting any responses from the DNS server that it uses.

Kevin Buzzard comments on "OpenID login currently broken?" (10629)

Kevin Buzzard — Sun, 14 Nov 2010 15:37:49 -0800

FWIW I can't log in either. I don't want to start a big "me too" thing; I just thought I'd give another data point to remove the unlikely possibility that it was only the moderators who had problems :-)

Scott Morrison comments on "OpenID login currently broken?" (10627)

Scott Morrison — Sun, 14 Nov 2010 15:14:58 -0800

Oh dear, with two of the moderators now locked out, it's time for all you lurking trolls to run amok! Argh! :-)

Anton Geraschenko comments on "OpenID login currently broken?" (10626)

Anton Geraschenko — Sun, 14 Nov 2010 15:09:24 -0800

Confirmed! Other SE 1.0 sites seem to have the same problem. I've emailed Fog Creek.

What were you thinking, logging out of MO?!?

(btw, you have a script on tqft.net which fetches new posts by new users ... you may be able to extract your cookie from there)

Scott Morrison comments on "OpenID login currently broken?" (10624)

Scott Morrison — Sun, 14 Nov 2010 14:59:02 -0800

I can't log in!

When I enter my OpenID (http://tqft.net/) I just get a message

Unable to log in with your OpenID provider:

Web request to 'http://tqft.net/' failed.

The URL loads fine in my browser, and I can log in other places with the same OpenID. Could someone log out and log back in, and let me know here if they have any problems? I'm confused.