Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

let me vote as someone else after voting as my facebook id

#35

I'm using Helios v3 on Chrome, Ubuntu Lucid.
I just created an election named "Just testing"
Election Fingerprint: MtBWj8TJmwx4Dru3/pzsJ5Flp7IdbTn10ROnmQYUL7M

I voted, logged in as my Facebook account (Neal McBurnett).
It said it logged me out.

Then I asked to cast another vote, and got to this page, where it said
I was logged in as the wrong person:

https://vote.heliosvoting.org/helios/elections/c17d6d9c-a7b5-11df-a...

Just testing - Submit your Vote

We have received, but not yet recorded, your encrypted ballot with
tracking number:

tb9vpVNXXA7tVNApEiowmRH19tzQNJMU32h1U1ybFxY

You are logged in as Fabio Dapper (as a google id it seems?)

I cast the vote, and it looked fine:

Just testing - Vote Successfully Cast!

Congratulations, your vote has been successfully cast!

Your ballot tracking number is:

tb9vpVNXXA7tVNApEiowmRH19tzQNJMU32h1U1ybFxY

I logged in again, and checked the ballots and they are both there.

Looks like an authentication bug...

Reported by Neal McBurnett · August 14th, 2010 @ 08:46 AM

State: open
Milestone: v3.1
Assigned to: Ben Adida Ben Adida

Activity

  1. Neal McBurnett
    Neal McBurnett

    Just to be clear - I have no idea who "Fabio Dapper" is, and note there is an accented character in Fabio - I forget which one, though I have a screenshot.

    August 14th, 2010 @ 08:59 AM

  2. Ben Adida
    Ben Adida
    • Milestone set to v3.0.2
    • State changed from new to open
    • Tag changed from authentication facebook google to authentication
    • Milestone order changed from 2 to 0

    August 14th, 2010 @ 01:01 PM

  3. Nigel Smart
    Nigel Smart

    I had a similar situation. I am logging on via my Google account. But suddenly I got logged on as someone else,
    via their Yahoo account.

    September 17th, 2010 @ 03:51 AM

  4. Ben Adida
    Ben Adida
    • Milestone changed from v3.0.2 to v3.1
    • Milestone order changed from 3 to 0

    Nigel: did this happen for you right after you cast a ballot, or did it happen for you at another time?

    September 17th, 2010 @ 08:01 AM

  5. Nigel Smart
    Nigel Smart

    When just looking around the site. It was from moving from one random page to another

    September 17th, 2010 @ 08:28 AM

  6. Ben Adida
    Ben Adida

    Nigel: thanks so much for your help with this. Do you know when this happened, approximately, or even precisely? I'm going to look through the logs to see what was going on. Clearly a race condition in session management, and something I want to fix ASAP.

    September 17th, 2010 @ 08:51 AM

  7. Nigel Smart
    Nigel Smart

    Must have been around 11.00 British Summer Time today

    September 17th, 2010 @ 12:27 PM

  8. Ben Adida
    Ben Adida

    Nigel: one more question, if you can remember: were you logged in, and then the system switched your identity, or were you not logged in, just browing anonymously, and then the system decided you were logged in as someone else?

    September 22nd, 2010 @ 07:53 AM

  9. Nigel Smart
    Nigel Smart

    Was logged in via my Google ID (or Yahoo ID) I think and then suddenly
    it switched persons

    September 22nd, 2010 @ 07:57 AM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.