It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
EnerJi
4 years agoDedicated Contributor
Can we get a detailed explanation for the issue raised by mia RE: another user on their login page?
Specifically, the issue raised by @mia a couple of weeks ago wherein it appears that another user was listed on their 1Password login page. Link to the closed thread:
https://1password.community/d...
Former Member
4 years agoHi EnerJi
I can speak to both of these.
The bug where I experienced data loss was an incidence where Windows 1PW 8 was not syncing data for whatever reason. I was logged into Windows but none of the entries synced. Full disclosure I use simplewall as my software firewall but no changes were made before & after & 1PW 8 had full access to the network at all times. All other devices (iPhone & Mac) were syncing but the items I entered that night in my windows install did not get synced. Logging out and logging back into the Windows client *instantly **resolved the issue but all of my entries I had entered got wiped. I had to go back through my Chrome history and figure out what the specific accounts were and had to restore the accounts. To the best of my knowledge I have not seen the issue again looking at the changelog it was never diagnosed or resolved. I don't think the thread should have been locked as the other issue was already dismissed (see below) and had nothing to do with the issue, but *shrug.
I've been using 1Password forever and have never experienced this before and the syncing otherwise has been stable and actually fairly more stable on the mobile client than Dropbox was. I work in IT and I can admit that sometimes the problem can exist between the chair & keyboard but in that instance, there was no way it was anything on my part. My 1PW software was not syncing, plain and simple. It'll be impossible to fix this as it's not reproducible and I don't expect AgileBits to exert any energy to try and investigate. I am crossing my fingers that this never happens again. I wish I had extracted diagnostic logs after restoring the sync though as it might have helped narrow the issue, but didn't think of it at the time.
Regarding the other issue about "Ronish's Family" - it was never explained. I have no idea who that individual is or why his or her family logged had logged into my browser in Chrome. I was emailed by a member of the 1PW security team and was very respectfully told to scan my device for malware. The bottom line I was told that " both email accounts - yours and "Ronish's" have registered using this device".
I am an IT Director and used to work network security so I always recognize there's a chance of infection but I see absolutely no evidence of it anywhere. I ran Kaspersky scans and I run Simplewall software firewall in addition to hardware firewalls and there was no evidence of intrusion to this day.
The other suggestion was to ask my household, but there is no one else in my place that could have accessed my computer. My wife has never even touched my setup and my toddler doesn't know how to access it yet Lol.
When I'm not on it, it's encrypted with Bitlocker XTS-AES-256. I was not able to access "Ronish's Family" account and never saw it again on my 1Password.com web account after I removed it manually. My follow-up email was never responded to as I'm not sure they can do anything other than inspect IP addresses for my account (if that's available?)
I never saw "Ronish's Family" account mentioned anywhere else on Windows, Mac, or my iPhone -- just on my 1PW web account. Was a little disappointed this was never dug into a bit deeper but I understand as AgileBits has a heavy development load to focus on right now. I was brushed off others as well and in every case there was an actual security breach at the company. I am guessing there is an explanation for this, but I honestly cannot guess as to what it could be.