Who is Kudo?

[allan.nyholm]

Hi, I just recently setup a fresh macOS installation - no more than an hour or so ago. My first visit to MacRumors Forums looked like this.

Who is Kudo and is this cause for any concern? I reloaded the page and no more Kudo user. I am logged in with no apparent breach of security as far as I'm aware. I'll log out of everything and change my password - just wondering what this is all about.

 

[TiggrToo]

I'd say so.... Sounds like an issue to me!

Paging Doctor @arn!

 

[allan.nyholm]

A quick update to this.. I have changed password and logged out everywhere I could - I cleared out cookies and data related to MacRumors from Safari's Privacy section. I then quiet Safari and logged in all over - this time around Kudo wasn't to be seen - just the regular appearance from what I'm used to seeing.

I have had 2-factor set up since I was available to me.
@TiggrToo - Thanks for paging the doctor

 

[arn]

hmm.

So, for some reason you are seeing a page of Kudo logged in. You weren’t actually logged in as Kudo, as Xenforo authenticates when you perform any action.

This can happen when pages get cached along the way, but it shouldn’t happen.

- Logged in pages are set as “no cache”, so browsers and intermediary proxies shouldn’t be holding onto pages.
- Only guest (non logged in pages) are cached.
- It’s possible there is an error in our caching logic somewhere that might cause this to happen, but it doesn’t seem very common. We did get a single report of this a few months ago I think.

You and Kudo, however, happen to be located in the same european country. So I don’t think that’s a coincidence, in that there might be some intermediary proxy/server that held onto that page when it shouldn’t have.

I’ll review our caching system to make sure there isn’t an obvious mistake. Let me know if you see this again.

arn

 

[allan.nyholm]

@arn thank you for the technical explanation - if it's just a fluke on the pipes of The Internet then I'll let it pass

I wasn't overly concerned(I can easily say that after the fact to cover up my actual fear), but it struck me as being odd.
I am normally very protected with the mentioned 2-factor protection and such. My Safari extensions weren't fully set up either at the time of writing - now they are more or less all active with only a few minor ones to appear in that list.
Only mentioning Extensions just to have those in the mix too. As seen below