ForumsSearch
Search results for "Posted by TotalSchnurz"
| Author | Message |
|---|---|
|
TotalSchnurz |
Posted Nov 15, 2023 in: Security issue:Password change doesn't invalidate existing token
Score: 0
Thanks for the pointer.
Interesting; my Android app (next gen) shows up as iOS - that had me worried for a moment, because I don't use Apple products myself :-) Does this also work for other web logins? Or is that what the support ticket would be for? |
|
TotalSchnurz |
Posted Nov 14, 2023 in: Security issue:Password change doesn't invalidate existing token
Score: 1
I tried to activate 2FA, but that didn't invalidate the existing login either. That seems unacceptable, unless I'm getting something completely wrong.
|
|
TotalSchnurz |
Posted Nov 13, 2023 in: Security issue:Password change doesn't invalidate existing token
Score: 1
I suspect that my password has leaked (through no fault of Toodledo). So I changed the password using the website, which kept me logged in. That means it either issued a new auth token right away, or (I'm not sure if this is technically feasible) the existing token continued to be valid.
But what shocked me is that in the Android app (next gen version) the auth token continues to be valid! I can actually still access and edit my data from the Android app using the outdated login's auth token. How is that possible? I'm not an expert, but it seems like a serious security issue. Is there a way to invalidate all logins? I guess I could activate 2FA, but I don't actually want that (and don't even know if it would work). |
|
TotalSchnurz |
Posted Sep 22, 2023 in: Hide attachment icon in grid view?
Score: 0
I use the grid view, and a few of my tasks have notes, which are hidden by default but indicated by the "note present" icon.
Next to the note icon, the attachment icon is shown. This only clutters the view for me, as I never use attachments. I occasionally overlook a note because of this. Is there some way to disable the attachment icon altogether? Just now I've created a few rules in uBlock Origin to hide visual clutter, and the list looks so much better. It would be nice to be able to control this more, though I do realize Toodledo already has lots of options and the benefit would need to outweigh the cost in complexity. |