Facabook auto log in

Allen

I can't log in to any another site because it keeps using my FB log in. Each
site uses a different email/username and PW. I had removed all Smugmug
cookies and cache but it still does it.

Just cleared cookies again and now works ok. But this pops up rather often. Why
on earth would anyone want to log in via FB? Really stupid.

Andy

You can:

1) log out of facebook and then you'll be fine
2) use a 2nd browser for this site, and do not be logged in from facebook
3) disable facebook login completely if you wish - control panel, settings tab

I'd suggest #2 if you like the convenience of fb login.

Allen

Andy wrote: »

You can:

1) log out of facebook and then you'll be fine
2) use a 2nd browser for this site, and do not be logged in from facebook
3) disable facebook login completely if you wish - control panel, settings tab

I'd suggest #2 if you like the convenience of fb login.

Why on earth would I want to run another browser and not use another
tab. I think we're getting too cute with all this tech. Why should I log out
of FB just to use Smug? You've basically banned running another site.

So you're saying I have to go to FB and remove Smugmug? Then what
happens when I post a photo or gallery on FB, does it still work?
Still able to pick a thumb, etc.?

Do you all guarantee the security of the FB log in if they are hacked?
I'd rather have a separate id/PW for every site.

Andy

Hi Allen, you are using multiple logins - on multiple sites - and the FB login just wasn't designed for that, so I'm trying to give you some reasonable ways to accomplish what you want

If you use a 2nd browser, then you'll not have any conflicts etc. Logging out of FB in the same browser you're using should also do the trick.

We do NOT require that you use Facebook login - if you're not comfortable with it then you can simply disable it, control panel, settings tab.

Does this help?

jfriend

Allen wrote: »

Why on earth would I want to run another browser and not use another
tab. I think we're getting too cute with all this tech. Why should I log out
of FB just to use Smug? You've basically banned running another site.

So you're saying I have to go to FB and remove Smugmug? Then what
happens when I post a photo or gallery on FB, does it still work?
Still able to pick a thumb, etc.?

Do you all guarantee the security of the FB log in if they are hacked?
I'd rather have a separate id/PW for every site.

Allen, I have the same issue as you. Just go to the settings tab in the control panel and disable FB login (in each account you manage). That's all you have to do.

Allen

jfriend wrote: »

Allen, I have the same issue as you. Just go to the settings tab in the control panel and disable FB login (in each account you manage). That's all you have to do.

Thanks John.
Weird, on my main site I checked it off. On four other sites it was already
checked off. Almost like it toggled the other sites off when doing the first.

SamirD

So this is the downside of FB's attempt to dominate logins. Yuck. I knew there was going to be issues down the road from Facebook logins everywhere...

Andy

SamirD wrote: »

So this is the downside of FB's attempt to dominate logins. Yuck. I knew there was going to be issues down the road from Facebook logins everywhere...

Haha. Let's keep it in perspective

There's no issues from where most people sit. It's pretty rare that folks have multiple SM logins - so for a HUGE number of folks, they might find it rather convenient.

Allen

Andy wrote: »

Haha. Let's keep it in perspective

There's no issues from where most people sit. It's pretty rare that folks have multiple SM logins - so for a HUGE number of folks, they might find it rather convenient.

I have a browser password set so almost all log ins will not work without it.
The FB log in ignores it. Huge security issue.

Andy

Allen wrote: »

I have a browser password set so almost all log ins will not work without it.
The FB log in ignores it. Huge security issue.

I'm sorry I do not understand - could you elaborate - in detail - what the security issue is? I need to understand you.

Allen

Andy wrote: »

I'm sorry I do not understand - could you elaborate - in detail - what the security issue is? I need to understand you.

I hit the Smugmug log in page and have to enter a browser security password
before the browser saved ID and PW shows in the log in box.

Same with almost all sites with log in pages. I have my ID and PW saved for
each site in the browser and have to enter the "master PW" before it
auto-fills.

Andy

Allen wrote: »

I hit the Smugmug log in page and have to enter a browser security password
before the browser saved ID and PW shows in the log in box.

Same with almost all sites with log in pages. I have my ID and PW saved for
each site in the browser and have to enter the "master PW" before it
auto-fills.

Al, can you write us with screen shots? I don't know of any security risks associated with our logins - but I want our experts to look in detail at what you are speaking about - need screenshots please so that they know exactly what you are referring to. Thank you.

SamirD

Andy wrote: »

Haha. Let's keep it in perspective

Allen

Andy wrote: »

Al, can you write us with screen shots? I don't know of any security risks associated with our logins - but I want our experts to look in detail at what you are speaking about - need screenshots please so that they know exactly what you are referring to. Thank you.

Here's what I get on log in pages. I have to enter a Master PW before it auto fills. I then click in email and pick Smug site in dropdown. See next post.

Allen

Able to pick multiple sites.

docwalker

Allen, there is/was an option at one time to control the login items that are submitted automatically by IE. I know that FF has this. But I don't use IE on a regular basis so I am not sure where it is now. Basically when you tell it to remember a new login, it looks at all of the settings on the page and remembers them. So if Facebook was selected at one time, it remembers that. In FF you can change the option. I just tried but could not find the setting for IE now. You might want to look for that and edit the settings for the SmugMug account logins.

jfriend

docwalker wrote: »

Allen, there is/was an option at one time to control the login items that are submitted automatically by IE. I know that FF has this. But I don't use IE on a regular basis so I am not sure where it is now. Basically when you tell it to remember a new login, it looks at all of the settings on the page and remembers them. So if Facebook was selected at one time, it remembers that. In FF you can change the option. I just tried but could not find the setting for IE now. You might want to look for that and edit the settings for the SmugMug account logins.

I think the point here is that when using FB auto-login, it's completely auto. There's is no prompting and no browser security control at all. If you're already logged in to FB, it just logs you into Smugmug. That, I think, is the part Allen objects to and what breaks his security model.

Allen

jfriend wrote: »

I think the point here is that when using FB auto-login, it's completely auto. There's is no prompting and no browser security control at all. If you're already logged in to FB, it just logs you into Smugmug. That, I think, is the part Allen objects to and what breaks his security model.

Exactly!!

btw, I only use FF.

Andy

jfriend wrote: »

I think the point here is that when using FB auto-login, it's completely auto. There's is no prompting and no browser security control at all. If you're already logged in to FB, it just logs you into Smugmug. That, I think, is the part Allen objects to and what breaks his security model.

So you do not have to use FB Login, right? You can completely disable it in Control Panel, settings tab.

jfriend

Andy wrote: »

So you do not have to use FB Login, right? You can completely disable it in Control Panel, settings tab.

You asked Allen what his issue was so he was explaining it to you. You can address your last comment/question to Allen. I've long since disabled FB login myself because it really messes up anyone who uses multiple SM accounts and I have no interest in trusting FB with anything more than access to FB.

Allen

Andy wrote: »

So you do not have to use FB Login, right? You can completely disable it in Control Panel, settings tab.

Yelp, disabled.