logging into an account without entering a username and password

I'm a computer neophyte and would like to know just how people are able "to log into your account without entering a username and password" (mentioned at the following page of Social Web Q and A).

<<Why You Should Close Your Browser After Logging Out of a Service (socialwebqanda.com)

Edited by cryptodan, 19 April 2024 - 01:20 PM.

Google session and cookie hijacking.
 

As a neophyte, it does seem mysterious.  I just hope the hijacking is not targeted at Windows-based computers in general.  (I've got a Dell 8347.)

Thanks.

<<or shut it down when not in use.>>

I put my computer into sleep mode every night.

Edited by Burgos925, 19 April 2024 - 02:58 PM.

I just hope the hijacking is not targeted at Windows-based computers in general.  (I've got a Dell 8347.)

 

You can focus on not getting a malware on your system to not have these problems.  This typically means physically securing your computer / having an exclusive access, and fixing behaviors that end up with a malware on the system (pirated software, other lures to download non-reputable software like game cheats, etc., clicking on links, downloading email attachments, unnecessary software, etc.)

Once some malware is already on your system, virtually nothing but getting rid of it completely will help you.  So, it's best to not get it at the first place.

Edited by Dill2046, 19 April 2024 - 10:04 PM.

Good question, Burgos925!

I understand that cookies used to stay logged into a website is a vulnerability if a third-party has access to my computer.  However, if closing the browser after accessing your bank account is needed (not just the tab that opened it), then it's a web browser vulnerability that must be addressed.  Moreover, if a logged out web browsing session can be used to log in again by a third-party, the website that lets that happen also has a vulnerability to address.

About these little "apps" that may be leveraged by a third-party, I'm not convinced that it's really useful to perform a reboot as they will end up being launched again at a later time.  It's seems like a false sense of security, and just a question of timing for the third party.  Cutting off the Internet if not in use seems safer, also letting a good anti-malware program running in the computer.