FCC - Web Site Security

[Baja Daze]

So when I login to the FCC License Manager, there is a Log Out button in the upper left hand corner next to my FRN, no problem.

However, when I login to the FRN Update Registration page and this is where you manage personal information and passwords, there is NO way to log out. Called the FCC last week and they agreed and could care less. The ONLY way to exit this page is to just close your browser.

This appears to be a security flaw...so how significant is this?

[laurelpark]

I guess it depends on whether you can actually navigate back to the License Manager and do a clean logout or not.

If you try to just close your browser and then restart the browser and navigate to the page, does it keep you logged in? If so, your machine is probably cookied and that keeps our session alive.

It's actually not all that uncommon. Same thing happens here at CalGuns - you basically stay logged in as long as you want, or as long as the session is alive.

What can get scary is if your session includes access to personal information and you log into the site via a public computer. That is a definite security flaw, and they should at the very least warn you about it and always give you a way to hit a "log out" button.

But, the feds aren't the best web developers in the world - and trying to get them to do anything about it is like asking your mail carrier to do something about the cost of postage...