Hi,
I suppose, Yahoo is running Unix servers for Yahoo Mail and other services.
The key issue is,
Yahoo Mail is
1-level sign in,
2-level sign out
unfortunately, other Yahoo Service accessed with the same login / password are 1-level sign out, 1-level sign in.
The following are my comments to Yahoo Answers due to adopted 2-level
Yahoo Mail sign out procedure.
Could you kindly give some remarks to my comments, as experienced Unix administrators ?
If I am wrong , please correct me.
The issue is message generated by Yahoo on Yahoo Mail sign out.
To me, sign out is sign out, final operation completed.
To Yahoo, Yahoo Mail sign out is temporary sign out operation.
"
Why am I being asked for my password?
To protect your account, you need to confirm your password periodically.
"
Exactly. I would expect Yahoo to ask me for login + password on sign out.
I am fully aware, that some problems are due to Firefox + MS Vista, caching visited web pages.
But please let me know your expert's opinion, if such procedure is safe
and could be adopted in Unix environment .
Jack
Signing out Yahoo Mail I am still signed in Yahoo Answers?
Signing out Yahoo Answers
I am signed out of the Yahoo network
in one-time operation.
Signing out Yahoo Mail
I am still signed in Yahoo Answers.
It is so confusing,
as such algorithm is a major security threat.
It's against Unix Linux community's network security standards.
You have signed out of the Yahoo! network.
(on signing out Yahoo Answers)
not the case with Yahoo Mal
- 3 hours ago
- - 4 days left to answer.
Additional Details
In the last 2 hours Yahoo improved Mail security.
Signing out from Yahoo Mail,
I am not more signed into Yahoo Answers
Just have a look:
You have signed out of your Yahoo! account.
Return to Yahoo! Mail - Sign Out Completely
I didn't sign out completely but was signed out from Yahoo Answers either.
Good job Yahoo.
Opps, another problem with Yahoo Mail
On signing into Yahoo Mail back
"
There was a problem accessing your account. Please try again in a moment.
Error #1
"
55 minutes ago
on signing out from Yahoo Mail
and signing back with
Return to Yahoo Mail
I am requested to verify my password only.
Please verify
your password
Login Form
Yahoo! ID: ....
Once again.
It's against Unix security standards adopted globe-wide.
Sign out or logout is final logout in all Unix systems, there is nothing of this kind like
complete logout
There is an option reserved for a super user
to login into user account but nothing of this case I get logged out from my Unix machine
and my login is still busy due to temporary logout.
Logging out from Yahoo Mail I expect to be logged out finally , so no another user in public place can start login with my name id.
So under Unix standards, user id, login, should stay undisclosed to any subsequent
user of the same system.
This case MS Vista + Firefox.
log out = final, complete log out from Yahoo Mail and any Yahoo Service, Network
or anything invented by Yahoo.
Just imagine such standard adopted by Unix administrators one day.
44 minutes ago
and one more follow-up No.3
On signing into Yahoo Answers
I got signed into Yahoo Mail
on page refresh.
You have signed out of your Yahoo! account.
Return to Yahoo! Mail - Sign Out Completely
I returned to Yahoo Mail
was asked to verify my password only
"
Please verify
your password
Login Form
Yahoo! ID:
"
In the meantime I signed into Yahoo Answers
and on Yahoo Mail login page refresh
I got myself signed into
Yahoo Mail,
so signing into Yahoo Anwers replaced
Yahoo Mail signing in procedure.
Saying it in other words.
Signing into some Yahoo Service may
open your Yahoo Mail account for intruders.
Ok. Cookies give some protection but it works as it works.
So I use some Yahoo Services, following sign out from Yahoo Mail,
third party can try to open my Yahoo Mail box, as long as I am left with one Yahoo Service still alive.
So my Yahoo Mail Box is more prone to intruders attack as any other Service by Yahoo due to 2-level Yahoo Mail sign out algorithm implemented.
29 minutes ago
follow-up No.5
and final solution to the problem
Trying to post my 4th follow-up
the following message appeared on clicking on Submit button.
=========
Oops
Failed to pass the network security check. Please sign out first and sign in.
* Go back to the question
* Back to Home
* My Profile
===
The issue is, network security check
is done by
Yahoo Mail ,
so Yahoo Mail, 2-level sign out service, showing lower level of security, is used by Yahoo as a network security check for
another service by Yahoo, called Yahoo Answers.
And from Yahoo Mail
"
Why am I being asked for my password?
\*
To protect your account, you need to confirm your password periodically.
Some Yahoo! services, such as Yahoo! Mail and Yahoo! Address Book, require you to periodically enter your password even though you are already signed in. We do this to protect your personal information.
"
As I am already signed out from Yahoo Mail, requesting me to enter my password for Mail
21 minutes ago
follow-up 6
2-level sign out from Yahoo Mail
vs.
1-level sign out from Yahoo Answers
network security check implemented by Yahoo Answers to post a question is executed
by Yahoo Mail signing in procedure.
My suggestion is to keep Yahoo Services apart from Yahoo Mail.
My another suggestion is to test, that 2-level sign out from Yahoo Mail procedure
is prone to intruders attack, as described above.
If intended as shell login, so higher security and priority is given to Yahoo Answers than to Yahoo Mail, as
Yahoo Mail is
2-level log out
1-level log in
Yahoo Answers is
1-level log out
1-level log in
And No.1 exhibit and evidence of the problem.
If I keep Yahoo Mail session open - signed into Yahoo Mail
and sign out from Yahoo Answers in Yahoo Answers session
so trying to read my mail in Yahoo Mail session, I get the following message
"
Sorry, your session has expired.
Sign In Again
To protect your account, you need to confirm your password periodically.
"
LOGIN+ PASSWORD!!!
7 minutes ago
...(continued)
Login + Password
as I am already logged out
Periodical password verification is really another piece of bread, is procedure adopted by Yahoo to get opened Yahoo Mail session terminated on time out.
In my case, I am logged out, so no periodical password verification is an issue.
Just imagine to be logout from a Unix system
and being asked to verify your password periodically.
So , there is a serious problem in flow-charting of log in, log out, temporary log out, periodical password verification
and more.
My professor of logics at law faculty kept saying that I was superior to him in logics, as I graduted from another faculty with masters in math. He was appointed ministry of internal affairs , some years later.
So I am writing the above to help Yahoo Mail and describe Mail security problems with full details.
regards,
==========