• http://www.freebookzone.com Priyan

    Hi Derick,

    Thx for updating the post. We need to get rid of this issue.

    Priyan

  • madden

    Derick, I found your blog after I took on your identity on the Google AdSense Forum and googled your username to see who you might be.

    This problem has been happening a lot to me too over the past two months. I reported it on the AdSense forum but it’s not getting much attention yet. I’m from Singapore too, so perhaps there really is a Singapore connection. You can view the thread on the AdSense forum if you like:

    http://www.google.com/support/forum/p/AdSense/thread?tid=2f75e525b7446bf4&hl=en

    Any updates on the issue?

  • http://derickng.com Derick

    @madden: I am actually suspecting that this is an issue with SingNet. SingNet pipes all HTTP traffic by default over a list of proxies unless you specify on your browser. Not sure if the rest who are affected are using SingNet though.

    I and many others am still trying to spread this news via all means. Hopefully someone will look into this soon.

  • Pingback: Mistakenly Logged In to Google As Someone Else? :Marketing Promotion Optimization

  • madden

    Derick, thanks, glad that you guys are on top of this. I’m not that tech sophisticated and wouldn’t know to suspect the proxy servers. I thought Google was somehow messing up its cookies. I am with Singnet though. Is there a common board somewhere where all affected users can meet and discuss? One of the affected on AdSense replied to my post and confirmed he’s also from Singapore.

  • Hasina

    Hey I’m having the same problem! My email is electriczxzfeel@gmail.com!

    • http://derickng.com Derick

      @Hasina I suppose you are from Singapore and using SingNet?

  • Hasina

    Yes! I’m from singapore and using singnet!

  • Pingback: 谷奥——探寻谷歌的奥秘 (http://google.org.cn) » Google 再出漏洞,登陆后却进了别人账户

  • Tom

    Were you using a https (secure) connection when you logged into your account?

    I’m just wondering if https connections are also affected.

    (I’m from Singapore too so I’m worried as well.)

    • http://derickng.com Derick

      Yup, most of Google services are via HTTPS except for a few probably but I doubt that makes a difference for this. The key issue is that Google somehow associates one user account with another.

  • Hasina

    How to stop this!

  • madden

    I wonder if this might be browser related as well. I only ever use IE when I visit the Google forums. I’m going to try using Chrome and see over the next week or so whether the problem persists in Chrome as well. My PC has been superscanned with five different products and it’s completely clean. Derick, can share how you think the proxies might be involved? You mean proxy servers can mix up cookie information of different users? Shouldn’t there be some protocol which prevent proxy servers from doing that??

    • http://derickng.com Derick Ng

      @Hasina: I have no idea until some Googler fix this! :p

      @madden: I doubt it is browser-related. I’m on Firefox. I am just suspecting a proxy issue because most (if not all) users who experience the issues are on SingNet and SingNet has this proxy round robin thingy which puts you on a different proxy for separate requests. You may want to see http://derickng.com/posts/28-singnet-external-proxy-ip-woes for more information. So the problem with that is that the proxy IP keeps changing and Google might have utilised this as part of the information to which they handle sessions? Just a wild guess.

      Do you guys check the “Remember me on this computer” option when signing in? I am monitoring to see if this helps. This is yet another guess that Google sets some key via cookies which they use for the “Remember me on this computer” to the wrong recipient.

  • madden

    I looked around in Google Support and found a page where I could report this, and so I did. The page is this:

    http://www.google.com/support/accounts/bin/static.py?page=known_issues.cs

    If you are affected and annoyed or worried, etc., and feel like reporting it again, please go ahead. The issue at least merits appearing in Google’s “known issues” page and a great number of people reporting the same issue will get their attention. In the link provided above, at the bottom of the page, it says: If you’ve found a new problem that’s not listed on our Known Issues page, let us know and we’ll investigate. Sounded right, so I did it.

  • Hasina

    Hey, yeah I used the remember me and sometimes, i don’t sign out at all! And I use firefox too, it’s suppose to be the safest haha

  • madden

    Yup, I use “remember me” too, but lately I’ve stopped using it because of this problem. I’ll keep an eye on this too and see if there’s a pattern. Well, okay so it’s not an IE thing, that’s settled. As for proxy IP, my IP address hardly ever changes when I’m online. I can have the same IP for two days straight and it is very rare for my IP to change when I’m continously online.

  • madden

    P.S. Beware of phishing emails pretending to offer assistance with this problem. Some of our e-mails have been exposed and anyone could just e-mail you pretending to be Google and offering “assistance” with this problem. The e-mail could look legitimate and even have a google.com domain. They might ask you to reveal your account info over e-mail or direct you to some bogus website. Google would never do that. Have your guard up!

  • http://derickng.com Derick Ng

    I have updated this post. According to Priyan, Google has confirmed the fix. Update with your comments if it is not resolved for you.

    At least I have not been experiencing any issues with myself logging into others account nor others logging into my account for the past 1 day. Might be not checking “remember me” or just lucky that Google fixed it. :)

  • madden

    Thank you Derick, much obliged for that info.

  • Hasina

    Hey cool! :)

  • Pingback: Google security problem: have you had this?

  • Larry W Jones

    I received a note from Google today (March 26, 2010) that they had blocked a collection of “my” photographs on Picasa because they were inappropriate. Since I have no Picasa account or collection and Oklahoma is decidedly not near Singapore, the problem of someone jumping into someone else's account is clearly not confined to Singapore. Actually I have no accounts with Google in the account name used, so I'm outta here. I commend you all to Windows Hotmail live. I'm signing the e-addy Google seems to think I am using.