Tower not showing breach for agilebits forum

manski

I just noticed that 1Password said there was a security breach on this forum. So I clicked on the link provided and ended up here:

https://watchtower.1password.com/report/agilebits.com

However, there it says that no password breaches has been found.

What's going on here?

---

1Password Version: 7.3.2
Extension Version: Not Provided
OS Version: macOS 10.15.3
Sync Type: Account

Ben

Hi @manski

This is a consequence of discussions.agilebits.com being entirely separate from agilebits.com. The link should be:
https://watchtower.1password.com/report/discussions.agilebits.com

We have a post about this here:

Forum password reset — 1Password Forum

I hope that helps. Should you have any other questions or concerns, please feel free to ask.

Ben

manski

Hi @Ben,

ok, this I understand. However, then the question is why 1Password provided me with the link I posted above.

Ben

That is a fair question. It seems the answer is that Watchtower isn't currently designed to handle situations like this where there are entirely separate systems on the same domain, and we want to flag one but not the other. I'll speak with the team and see if that is something we can improve going forward.

Ben

manski

@Ben I just checked: The URL I have stored with the 1Password entry is: https://discussions.agilebits.com

So it would seem that 1Password is just creating the wrong link from the correct data.

ag_ana

@manski:

Thank you for sharing your experience. We are aware of this behavior when there are different subdomains for the same website. I will add your feedback to our internal issue tracker :+1:

ref: dev/web/watchtower.1password.com#1