411373 - Have an account with Flickr, Firefox don't lost log out even months later

Status: RESOLVED INVALID

(Core :: Networking: Cookies, defect)

Description

[Philippe]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11

I have an account with flickr, if I log in and don't use the program for months.
If I type the address website address only, I don't need to log in as my information seems still in memory. I check if I recorded the password by mistake but there is nothing.

This don't happen with internet explorer

Reproducible: Always

Steps to Reproduce:
1.www.flickr
1.log in flickr
2.leave over 2 weeks (it should log out)
3.www.flickr
4.don't need to log on
Actual Results:  
I am on the website without login

Expected Results:  
it should ask to rewrite my ID and password.

This is a breach of security as our information can be read by anyone if we forgot to log out.

Comment 1

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

What's happening here is that flickr stores a cookie with a token saying that you're logged in.  It's a decision of the site storing the cookie how long it takes for that cookie to expire.