31

This has started recently happening on my work Mac with Google Chrome. I am logged in my work Google account. When I browse Stackoverflow it automatically creates an account, no confirmation or nothing. Sometimes when I go to profile -> delete account -> delete it immediately creates a new account after I complete the deletion.

It takes data from Google which is a security issue!

25
  • 8
    Did you previously log in with that Google account? Third-party applications can not use your information without explicit consent. (That's literally impossible, the Google sign-in wouldn't hand out that info)
    – Cerbrus
    Commented Apr 11 at 7:43
  • 1
    Yes it's allowed but I deleted my Stack account. It shouldn't create an account without my confirmation. Maybe I need to clarify? I am not talking about Google side. I'm talking about Stack side.
    – steros
    Commented Apr 11 at 8:32
  • 1
    Stack Overflow does not know when you gave permission to use your google account. When loading a page, it communicates with Google's SSO system, which says: "Yeap, you can get some info on this user!" Then SO logs you in, or creates an account with that information. It creates an account because there are a LOT of SE sites that work under the same authentication system, and they're all linked together. SO just assumes that your previously existing SE account needs another account on the site you're currently login in to. If you do not want it, you need to disallow SO in Google.
    – Cerbrus
    Commented Apr 11 at 9:43
  • 5
    I disagree. While it is still allowed to gather information from Google as the user did not disallow SO. That doesn't mean that Stack should take it as intent to create a user account. And to create it without any confirmation by the user. You can see this especially if you delete the account and after the redirect happens upon completion of the deletion, it directly creates a new account. So you just pressed delete and on the next page you have a new account. That doesn't make any sense.
    – steros
    Commented Apr 11 at 9:55
  • 3
    @steros The fact that you deleted the account means that there's no data stored about your account... Not even the fact that you used to have an account that is deleted, is stored. So how would SO know you don't want to create an account using the SSO method that you authorized SO to use? You'll need to revoke that authorization. That's not a matter of opinion, that's just how the system works.
    – Cerbrus
    Commented Apr 11 at 10:16
  • 3
    "It takes data from Google which is a security issue!" I mean, this is Google... giving away and taking data you'd like to be kept private is kind of their thing.
    – TylerH
    Commented Apr 11 at 15:07
  • 16
    I don't understand the negative reception here; it seems exceedingly odd that an account would automatically be recreated without any prompting, in any case. I'd instead expect it to work like navigating to any Stack site for which you don't have an account, with the "join" button in the navbar, which you have to explicitly click to create an account. Deleting your account should bring you back to that state, no matter your login provider.
    – zcoop98
    Commented Apr 11 at 16:22
  • 2
    I don't know if this only affects SO or not. I'm using a Google account to log in, and I've just deleted my account on 3D Printing (the site I always used for testing account deletion) this week, and I didn't get a new account created after that.
    – Andrew T.
    Commented Apr 11 at 17:22
  • 3
    Probably related to "Google one-tap": Upcoming changes to sign-up flow on the Stack Exchange network "Over the last couple of months, we’ve conducted several experiments surrounding some changes to the sign-up flow on Stack Overflow, all of which we’ve successfully graduated in some fashion on Stack Overflow."
    – Andrew T.
    Commented Apr 11 at 17:27
  • Thanks @AndrewT. I'll view to close this here as it doesn't seem productive. I posted an answer there.
    – steros
    Commented Apr 12 at 5:53
  • 1
    @zcoop98 What negative reception? Are you talking about the votes? Meta posts that make big assumptions from the get-go are pretty much downvote magnets. You've been on meta long enough to know that votes are not based on quality or usefulness but on how people feel about it.
    – Gimby
    Commented Apr 12 at 10:13
  • 1
    @Tensibai I'm pretty sure the permission is SE-wide. It's not subsite-specific. And you don't need to tell me what SO should do... I can't change that. I'm just here to try to explain how it currently works.
    – Cerbrus
    Commented Apr 12 at 11:57
  • 2
    @Cerbrus fair point, sorry :) Just this sounded a bit dismissive about the report here, I find it legit and still find SO (the company) is kinda out of line according to various legislations with this behavior.
    – Tensibai
    Commented Apr 12 at 12:43
  • 4
    Little surprised at the downvotes here. No one thinks that this might be some kind of really bad bug, or even a nefarious way for StackExchange to artificially puff up its 'new user' count? This does not seem right to me at all. It could lead to terribly misleading information, for not only SE staff, but for investors as well!
    – ouflak
    Commented Apr 12 at 13:12
  • 2
    @ouflak Since it was being run as an A-B test, there were plenty of people who were unable to reproduce, making it unclear to them what the author is talking about.
    – gparyani
    Commented Apr 12 at 17:00

2 Answers 2

6

There seems to be some related bug to this. I'm forever logged in and yet just now when visiting the main page, some pop-up starts to whine about logging in with Google. Which I don't want since I am already logged in and never logged out. It just popped up once and I can't reproduce it.

Using Firefox and a bunch of ad and tracking blockers.

1
2

If you give Stack Exchange permission to access your Google credentials to create an account then you'll get an account.

If you don't want that to happen, all you have to do is rescind that Google permission or alternatively delete the connection from the Stack Exchange side before you delete your account.

7
  • Shouldn't (also?) the "Google" entry be removed from the 'My Logins' page on 'MSE', like explained in the 'Help Center'...? // Well "also", or would already do the job...? // Or the info mentioned in this Answer could/should also be mentioned in the 'Help Center', I think, as there is no mention of any specific action to perform on the 'Google' side for a 'Google' Login.
    – chivracq
    Commented Apr 11 at 11:45
  • Deleting an account shouldn't remove the login method. That method might well be used by different accounts.
    – Cerbrus
    Commented Apr 11 at 11:58
  • 3
    I guess I'm still confused as to why login methods wouldn't always be account-specific, and therefore rescinded automatically on account deletion? That sounds extremely odd to me; I can't fathom any case where you'd intentionally want to keep login methods around for deleted accounts (at least ones which weren't attached to another already?).
    – zcoop98
    Commented Apr 11 at 15:56
  • 1
    @zcoop98: They are, specific to your SE account.
    – Cerbrus
    Commented Apr 11 at 16:17
  • 5
    @Cerbrus Okay, that's the bit I was missing, that makes sense. Still seems like a bug that new accounts are being added without confirmation, however.
    – zcoop98
    Commented Apr 11 at 16:20
  • 15
    Sorry I won't accept this answer. As I explained in the comments already, it shouldn't create an account without even asking once "do you want to create an account linked to your Google account". Also this behavior only recently changed.
    – steros
    Commented Apr 12 at 5:44
  • @steros and even if the company will try to claim this is "by design", surely the other behavior you described can't be considered correct. The redirect after a delete request should NOT have the effect of recreating the account you just deleted. I hope the company won't try to call this a reasonable behavior since it would be pretty preposterous... but to be honest, I don't expect a reply in the first place... this is just too "good" for the "artificial userbase inflation" campaign, can't give it up. Commented Aug 21 at 15:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .