User sessions are mixed up between browser profiles

gabfl

Confirming I have the same bug. Witnessed it with Gmail, Youtube and Github

gabfl

@Vlad do you have an update on this? The loss of session isolation between profiles is a pretty serious security concern
Thank you

Vlad

gabfl We are workign to reproduce it and will update in next release.

gabfl

Vlad is there a path to rollback in the meantime? How do I re-install the previous version?
When I open Gmail for examples, it switches between sessions all the time, it's not very usable currently

dannb

Confirming I am experiencing this too

dannb

This appears to only happen when launching the Orion Profile Session from the MacOS Dock or via Spotlight/Alfred/Etc.

To recreate: pin the Orion Profile 2 in your MacOS dock. Quit the Orion Profile 2 while keeping Profile 1 open. Open Profile 2 from the Dock or Open Profile Session 2 using App Launcher.

Note: if Profile 2 is closed. I am able to go to File > Profiles and select the Profile I want and it will launch correctly.

dannb

With the latest Orion update, this broke for me again. And I'm no longer able to fix it by opening the second profile via the File menu.

I'm Version 0.99.128.2.1-beta (WebKit 619.1.11.111.2)

dino

dannb Can you please share some more info we need to reproduce the issue

macOS version
Any installed extension
Did you moved any tab from Profile 1 to Profile 2?
Can you try this with two clean profiles

Vlad

@dino are we able to reproduce this yet?

dino

Vlad unfortunately not yet, I guess we are missing some specific step

gabfl

MacOS 14.5 (23F79). Orion Version 0.99.128.2.1-beta (WebKit 619.1.11.111.2).

I think moving a tab to a new window (sliding the tab out of a tree to make it become its own window) is what triggers the bug because that's what I was doing the last 2 times I noticed it.

It happens with Github, Gmail and Youtube but I assume it can happen with any website (I just used these in both profiles)

Killian

I'm experiencing this issue as well. It is a detriment to the usability of the app. When can we expect a fix for this?

Vlad

Killian When we have clear steps to reproduce it, still are not able to.

buffington

I had two Orion windows open. One with my personal profile and another with my work profile. I "Quit" Orion. I restart my MacBook. I open Orion and both windows reopen. I check my Gmail on my personal profile, and it's signed in under my work account. I logged out of all Google accounts to confirm that the two profiles have randomly started to share website data???. They still do not share browser history, however.

I expected it to keep the website data separate as it was configured to. And how it had been doing for many months.

Version 0.99.128.2.1-beta (WebKit 619.1.11.111.2)

Sonoma (14)

gabfl

Any update on this issue?

dino

gabfl we applied some fix which will be available in next release, let's see if that fixes the issues, as that's based on moving tab to another profile, as that's the only possibility of leaking sessions.

gabfl

@dino @Vlad This issue is still ongoing, it looks like it happens when the browser restarts. It makes Orion really hard to use with Github, Gmail, Google drive and so on... I implore you to look into this issue and resolve it, it's really difficult to not be able to "trust" any session on a website

laiz

gabfl it looks like it happens when the browser restarts

Would you be able to come up with a reliable way of reproducing this issue? I have noticed my google login making its way to other profiles but I haven't been able to reproduce it consistently. This is extremely frustrating to both users and developers as this is a serious issue but in 7 months we have not been able to get further than "It sometimes happens".

As soon as there are reliable steps to reproduce the issue, the team will be able to fix it and I am sure it will be the top priority at that point.