Closed Bug 1709743 Opened 4 years ago Closed 4 years ago

My email login for a site was auto-filled on a housemate's PC, which I have never used.

Categories

(Firefox :: Untriaged, defect)

Firefox 88
defect

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: jamie.mair, Unassigned, NeedInfo)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:88.0) Gecko/20100101 Firefox/88.0

Steps to reproduce:

(Other person)
Opened Firefox browser on windows 10, and went to site (paypal.com), which auto-filled my email address (not the password). Our computers are on the same local network. I do not have a firefox account, they do. I logged into paypal earlier that day.

Actual results:

I logged into Paypal on my personal desktop computer (windows 10) using Firefox earlier in the day. My housemate later opened paypal using Firefox (windows 10 desktop) on his personal computer, that I have never used. My personal email address was auto-filled on his login page.

Expected results:

My email address should have never appeared on his browser.

Is it likely or possible your roommate ever filled in your email on a web form somewhere? We do have a "Form fill" feature to make entering repeated information easier. That would normally not fill in the values unless you start typing and then pick it from the suggestions in the drop-down though, so the behavior is different.

If your password had somehow gotten transferred to their computer I would expect both email and password to fill in. I don't know what kind of sharing might capture only one of those.

Has your roommate ever used your computer? if so maybe they logged into their own sync account?

Flags: needinfo?(jamie.mair)

We can reopen this bug if we get more information

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → INCOMPLETE
Group: firefox-core-security
You need to log in before you can comment on or make changes to this bug.