Thread: Security on Kobo Accounts
View Single Post
Old 02-17-2017, 07:02 PM   #16
davidfor
Grand Sorcerer
davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.davidfor ought to be getting tired of karma fortunes by now.
 
Posts: 24,906
Karma: 47303748
Join Date: Jul 2011
Location: Sydney, Australia
Device: Kobo:Touch,Glo, AuraH2O, GloHD,AuraONE, ClaraHD, Libra H2O; tolinoepos
Quote:
Originally Posted by JSWolf View Post
Are you saying that you can change the password & log out of the account and the Reader will still be logged in and able to browse the store?
Yes. Or at least this was the case in the past. I haven't tested recently.

And it is probably not a firmware issue but a server issue. A key is generated on the device when you do the setup. That is used for authentication when connecting to the server later. If the password of the account is changed, that should invalidate all keys in use and the next time the device connects to the server it should fail and the user would need to login to the device again. This wasn't case the last time I tested it.
davidfor is offline   Reply With Quote