¿ªÔÆÌåÓý

Regularly dropped from Group


 

Every month or so, I find I am not subscribed and have to re-do it.
Doing it seems to cover two groups I own.
In the six months of Groups.io, no member has asked me about it leading me to think it is not happening to them.
If it did they would be asking. (One member did not realize there was a homepage.)

In addition I have to ask to be sent a link, because my password is rejected.
How can I change my password, ad why am I dropped every month or so, even being the Owner.

I tried the Wiki and found nothing to help, but that is probably my own fault.

Thanks,
-- Richard


 

Richard,

Every month or so, I find I am not subscribed and have to re-do it.
Not subscribed? It sounds like you were simply logged out.

If you were simply logged out you'd still receive group messages and notifications by email, assuming you haven't disabled email in your Subscription pages.

In addition I have to ask to be sent a link, because my password is
rejected.
How can I change my password,
Any time you are logged in, go to your Account page. Get there from the drop-menu under your name in the upper right-hand corner of any Groups.io page. There you can enter a new password into the box and click "Change Password" to update it.

ad why am I dropped every month or so, even being the Owner.
From your description I don't think you are being dropped or unsubscribed. The browser cookie that keeps you logged in has a one-month expiration, so needing to log back in periodically is normal.

Shal


--
Help: /static/help
More Help: /g/GroupManagersForum/wiki
Even More Help: Search button at the top of Messages list


 

Hi

I believe the "email me a link" login just lasts 30 days.?Also, logins expire after 30 days, or whenever browser cookies are deleted.

Here's a useful post -?/g/GroupManagersForum/message/12131

This from the wiki has info about changing or adding a password.
/g/GroupManagersForum/wiki/How-to-Set-a-Personal-Password-and-Profile%3B-Changing-Email-Address

Frances


Jim Higgins
 

Received from Shal Farley at 10/14/2018 10:50 PM UTC:

The browser cookie that keeps you logged in has a one-month expiration, so needing to log back in periodically is normal.

Do you know the rationale for a 1-month expiration... or can you imagine one? (I don't and can't.)

Any idea why not 1-month, but refreshed on each log-in? Or 1 year. Or "forever" (Jan 19, 2038).

Worth mentioning as a change on [beta]?

A much longer expiration interval (or none) sure seems like it would solve a recurring problem for many.

Jim H


 

On Mon, Oct 15, 2018 at 09:55 PM, Jim Higgins wrote:
Do you know the rationale for a 1-month expiration... or can you imagine one? (I don't and can't.)
A logon is, more than anything, a confirmation of identity. And my opinion is that a periodic identity check is a reasonable thing to do. Otherwise you could go on a long vacation or die or whatever and anyone else could use your computer to post under your name for an indefinite period of time.

Some kind of banner message at the top of the page people land on saying "YOU ARE NOT LOGGED IN" might be helpful. That's a notion I could support.

Regards,
Bruce?
--
The system Help is your friend.??/static/help


Jim Higgins
 

Received from Bruce Bowman at 10/16/2018 02:19 AM UTC:

On Mon, Oct 15, 2018 at 09:55 PM, Jim Higgins wrote:
Do you know the rationale for a 1-month expiration... or can you imagine one? (I don't and can't.)
A logon is, more than anything, a confirmation of identity. And my opinion is that a periodic identity check is a reasonable thing to do. Otherwise you could go on a long vacation or die or whatever and anyone else could use your computer to post under your name for an indefinite period of time.

I agree that a log-on is a confirmation of identity... if it involves a user name, and a password that the user keeps secure. But that's not the case with Gio.

With Gio, literally anyone with access to the user's computer (or just the email account) can request for a log-in link. No need to know a password and thus no strong assurance of true identity. It's convenient for people who can't deal with passwords, but it leads to the "regularly dropped from group" complaints (see subject line above) that we see several times weekly in GMF. It's a solution to one problem and the cause of another problem.

I think the complaints about "dropped from group" would decrease substantially, and security - which is marginal via the "request a log-in link" approach to begin with - wouldn't be materially affected if the current log-in cookie were automatically renewed for a month each time the user logs in. Users would only be "dropped from group" if they didn't log in for a month, rather than being dropped every month despite logging in several times a day.

The current approach makes no sense to me given the level of confusion over being "dropped from the group."

Jim H


 

On Tue, Oct 16, 2018 at 02:19 PM, Jim Higgins wrote:
if the current log-in cookie were automatically renewed for a month each time the user logs in
Technically, they only log in after they've (been) logged out.? Maybe Mark could update the cookie that shows you're already logged in when you visit the site?? The only time I could see that being a problem would be if a phone/tablet was lost/stolen and the finder/thief could get on it without a password.

Duane
--
Help: /static/help
GMF's Wiki: /g/GroupManagersForum/wiki
Search button at the top of Messages list
A few site FAQs: /static/pricing#frequently-asked-questions


Gerald Boutin
 

On Tue, Oct 16, 2018 at 04:19 PM, Jim Higgins wrote:
I think the complaints about "dropped from group" would decrease substantially, and security - which is marginal via the "request a log-in link" approach to begin with - wouldn't be materially affected if the current log-in cookie were automatically renewed for a month each time the user logs in.
Jim,

That is the way that groupsio works. Each time a user logs in, the cookie date is reset. The problem is that users are NOT logging in. They are just continuing to visit the same page without logging in until finally after 30 days, they are being forced to log in.
?
--
Gerald


Jim Higgins
 

Received from Duane at 10/16/2018 07:28 PM UTC:

On Tue, Oct 16, 2018 at 02:19 PM, Jim Higgins wrote:
if the current log-in cookie were automatically renewed for a month each time the user logs in

Technically, they only log in after they've (been) logged out.
Or maybe you're only logged in if there's an active session in progress. It's a matter of perspective.

Maybe Mark could update the cookie that shows you're already logged in when you visit the site?
That's exactly my suggestion. Update it so it has a full month expiration time. that way someone who checks in at least once a month doesn't find himself "dropped from the group."

The only time I could see that being a problem would be if a phone/tablet was lost/stolen and the finder/thief could get on it without a password.
And if a finder/thief posts problem messages it's a trivial matter to unsubscribe him completely.

Jim H


Jim Higgins
 

Received from Gerald Boutin at 10/16/2018 07:41 PM UTC:

On Tue, Oct 16, 2018 at 04:19 PM, Jim Higgins wrote:
I think the complaints about "dropped from group" would decrease substantially, and security - which is marginal via the "request a log-in link" approach to begin with - wouldn't be materially affected if the current log-in cookie were automatically renewed for a month each time the user logs in.

Jim,

That is the way that groupsio works. Each time a user logs in, the cookie date is reset. The problem is that users are NOT logging in. They are just continuing to visit the same page without logging in until finally after 30 days, they are being forced to log in.

We apparently have different definitions of "log in" because I don't understand what you're telling me. Please read the following and try again... I really do want to understand your point... esp if my suggestion makes no sense in light of it.

By my understanding we can "visit" Gio daily and while there see a list of all the groups we own and/or belong to by doing nothing more than visiting Gio with our web browser... no password entry via keyboard required... all courtesy of a cookie with a 1-month expiration period that isn't reset upon each "visit." When that cookie expires in a month, visiting Gio results in a view that doesn't show owned and subscribed groups so the visitor thinks he's been dropped from all his groups.

At this point he either "logs in" using his registered email address and password (if he has one) or he requests a log-in link that if followed sets a new cookie that expires in a month.

My suggestion is to retain all of this EXCEPT the cookie expiration date would be updated upon each "visit" to Gio so that a regular visitor would never find himself "dropped from group."

Jim H