Account privacy bug
If, like me, you bookmark 7cups.com, be aware that your bookmark's behaviour has changed recently.
Originally, if you were logged in, your bookmark would redirect you to your Path page. Now, it takes you to a page that makes it look like you are logged out, when in reality you are still logged in.
This might make you think it's OK to let other people use your device, because you are logged out and no one knows your password. But 7 Cups might be hiding the fact that you are still logged in, and in that case other people could see your account or even use it themselves.
I have just now reported this as a bug.
@7CupsCommunity
Charlie
@RarelyCharlie There are a couple of things you can do differently that will keep you from having this or similar problems in the future.
1. Instead of bookmarking the site's home page or the login page, bookmark yourgrowth path page (7cups.com/member) or progress page (7cups.com/member/growthProgress.php). If you're not logged in you'll get the generic version looking at growth step 1.
2. Make a guest account on your computer. If you let other people use your computer _as you_, they will also be logged in to your account on facebook, twitter, email, and so on.
@stressBear You're right, 1. is a workaround, though not for the reason you stated. The issue here is which account I'm logged in to. The redirects between 7cups.com/member/ and 7cups.com/listener/ are still working. Only the redirect from 7cups.com is broken.
2. is not practical in my case because it means maintaining two environments for everything on my computer just to work around a bug in one website.
The privacy issue isn't resolved by the fact that there's a workaround, of course.
Charlie
@RarelyCharlie Thanks for the clarification. Yeah; multiple accounts on one site are often a problem. I've been known to start two different browsers in that situation.
@RarelyCharlie
Thank you for reporting this bug! We will look into it and get back to you.
Hi all & thanks for the discussion! This change was an effect of launching a rebuilt & faster version of our homepage. We've heard your feedback & those of other users and brought back the automatic redirects to /member & /listener. You can read the announcement here.
I do want to reassure you that there was no security effect - just some poor UX. Hopefully the latest change resolves any confusion. Thanks for being part of our community 🙏
@Ece7Cups
Thank you for the update Ece! I'd like to clarify though the security concern was that if you thought you were already logged out of your account and left the computer, someone could just click "community" and then have access to your account. I am happy to see this has been resolved.