AlexandreG
@videotron.ca
| Router session
Hi
I just have a little question since yesterday...
When I log on to my router ( a simple dlink) I type in my password, and I am logged... There is nothing stored on my machine like cookies....
Then, how can the router know that it is still me even if I close the browser and go to the same page again? (I don't have to log in again...)
So... If someone can help me 
Thanks
Alex |
|
nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
 ·AT&T U-Verse
 ·AT&T Midwest
| I have never seen that happen, but then I don't have a dlink.
Normally, there is information saved in a cookie, or in memory as session data. If you saved session state, then restarted the browser to resume the session, that might explain it. Otherwise it is strange.
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11 |
|
NetFixer
Freedom is NOT Free
Premium
join:2004-06-24
Murfreesboro, TN
 ·Vonage
·AT&T Southeast
 ·Cingular Wireless
·AT&T CallVantage
| reply to AlexandreG
If your router uses simple html authentication, and you use a browser that leaves a stub running even though you have closed the visible browser window, then this is normal since you have not really terminated your login session.
Try a different browser, and/or use task manager or ps to see if all running instances of your browser are really terminated when you close the browser window.
It would help if you actually had told us what browser/router/OS you were using, because without that information all you will get for answers to your question is guesses.
--
A well-regulated militia, being necessary to the security of a free State, the right of the people to keep and bear arms shall not be infringed.
»portscan.dcs-net.net
»nature-pics.com |
|
AlexandreG
@acndigital.net | reply to AlexandreG
I use firefox on windows... This is wierd... Even if I clear the cache and the cookies... everything.... It still works... When I reboot the router, it no longer works... |
|
AlexandreG
@acndigital.net
| reply to AlexandreG
I tried other routers... My linksys uses simple http authentification... So it dosen't use cookies but If I close firefox, it will close the "connection"...
But I tried on a belkin and same thing... Close the browser, close everything, clear all connections, cache, cookies.... It still remembers me... HOW!.... |
|
Dude111
An Awesome Dude
Premium
join:2003-08-04
USA
3 edits | reply to AlexandreG
I dunno how that can be.....
Try clearing your cookies with Disk cleaner and please let us know then 
»www.diskcleaner.nl |
|
AlexandreG
@acndigital.net
| reply to AlexandreG
If I login with firefox, I can use explorer and it still works.... Until I reboot the router OR I wait for long enough...
Dlink tech support said to me that this was normal and that the session was stored in the router and that it will be closed with some time...
But that doesn't tell me how it works... |
|
AlexandreG
@acndigital.net | reply to AlexandreG
MAC address maybe???... |
|
Mister_E
join:2004-04-02
Etobicoke, ON
·Bell Sympatico
| reply to AlexandreG
Is it possible that when you close your browser, you haven't actually logged out of the router (there may be a log out option somewhere). The router will then start a timeout countdown based on your last interaction with it. It also remembers your local ip and if the countdown hasn't expired, it simply allows the connection from that same ip through. |
|
Alexandreg
@acndigital.net | reply to AlexandreG
If it is the IP... then anyone on my network that takes the same IP that I have when the session is still active can be logged in??
This is weird... |
|
nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T U-Verse
·AT&T Midwest
| reply to AlexandreG
I tried other routers... My linksys uses simple http authentification... So it dosen't use cookies but If I close firefox, it will close the "connection"...
But I tried on a belkin and same thing... Close the browser, close everything, clear all connections, cache, cookies.... It still remembers me... HOW!....
That does not happen to me. If I close the browser, and restart it, then I have to login again.
Possibly you have configured some "fast start" option in firefox, so that when you close the browser it does not exit the running program - it only closes the window. Or you have multiple firefox windows, and you only closed one of them.
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11 |
|
Alexandreg
@acndigital.net | reply to AlexandreG
N
As I said... I can log in with firefox and use IE after.... It still works... |
|
AlexandreG
@acndigital.net
| reply to AlexandreG
More than this... Let's imagine this setup
internet ----- router 1 ----- router 2 ----computers 1 and 2
So... If I use the computer 1 to log into router 1... The router 1 will se the ip and mac of router 2...
So if someone on the computer 2 goes on the config pages of the router 1, this person will be already logged in??????...
Seems like a small, yet plausible (even if it can't be very dangerous) security flaw.... |
|
AlexandreG
@acndigital.net | reply to AlexandreG
Even worse....
I tried with the belkin (i,m not at home now...)
And If I log in with a computer, I don't have to with the other and I am logged in... |
|
Dude111
An Awesome Dude
Premium
join:2003-08-04
USA | reply to AlexandreG
Its kinda disturbing the router keeps ANY INFO about anything you do online!! |
|
AlexandreG
@acndigital.net
| reply to AlexandreG
Well... It dosen't keep all the internet activity logs like you say
But, in the case of the belkin, it simply says, oh! Someone logged in... So I am unlocked until someone logs off or some time of inactivity...
No sessions, no cookies... no IP or MAC address table... nothing... |
|
