GlobaLeaks icon indicating copy to clipboard operation
GlobaLeaks copied to clipboard

Potential Log issue - whistlebloser seems to log in very often

Open schris-dk opened this issue 11 months ago • 2 comments

What version of GlobaLeaks are you using?

4.14.18

What browser(s) are you seeing the problem on?

All

What operating system(s) are you seeing the problem on?

Windows

Describe the issue

Havin a potential ogging issue. One site has a whistleblower who repeatedly seems to log in. I've attached an excerpt of the log auditlog_excerpt.csv

Is there any explanation to this behaviour - and has it been reported any whre else? As far as I'm informed, logging in should not be able to be automated. Is there any session cookie, that can support relogin without entering the code?

Proposed solution

No response

schris-dk avatar Feb 28 '24 15:02 schris-dk

@schris-dk: To me these appears to be lecit login and logout by users.

There are no automatic logics of login/logout. Sessions automatically expire but when they expire but the logout log happens when the user clicks the logout link

evilaliv3 avatar Feb 29 '24 16:02 evilaliv3

Hi!

Ive attached the full log of the incident – I just think it is remarkable, that the whistleblower has so many logins – is this norma, behaviour?

schris-dk avatar Mar 01 '24 07:03 schris-dk