Vodafone privacy breach "serious"

Forums › One New Zealand (including Vodafone, WxC, Farmside) › Vodafone privacy breach "serious"

1 | 2 | 3 | 4 | 5

673 posts

Ultimate Geek

#1085964 9-Jul-2014 19:30

Did you know that ASP.NET servers automatically masks your password when type them into a forums like Geekzone as long as it's not a dictionay word. When you are logged in you see your password as plain text. But everybody else see it masked out with asterisks. It's even used on Facebook.

Foe example my password is ********* . You should see a bunch off asterisks whilst I see my password as clear as day. Try it for yourself.

StarBlazer

961 posts

Ultimate Geek

Trusted

#1086048 9-Jul-2014 21:11

Jaxar:
freitasm:
Hoofhaarted:
qyiet:
Hoofhaarted: I thought it was *********

All I see is stars, does your web browser do that automatically when you type a password in? When I type my password: hunter2 it looks normal in my browser.

I typed the **'s deliberately, as a Joke.

I think his comment was a joke too.

Reference to this joke I believe.

After the day from hell, this was just what I needed.

Procrastination eventually pays off.

Apsattv

2390 posts

Uber Geek

#1086167 10-Jul-2014 05:09

freitasm: The article is badly written. Not expecting to have a full description of the exploit but the information provided is lacking really - it doesn't make much sense.

The 3 hours on hold part seemed familiar

linw

2849 posts

Uber Geek

#1086404 10-Jul-2014 13:27

jimbob79: Did you know that ASP.NET servers automatically masks your password when type them into a forums like Geekzone as long as it's not a dictionay word. When you are logged in you see your password as plain text. But everybody else see it masked out with asterisks. It's even used on Facebook.

Foe example my password is ********* . You should see a bunch off asterisks whilst I see my password as clear as day. Try it for yourself.

Good try!!

@all - enjoyed this thread. Lot of fun.

bazzer

3438 posts

Uber Geek

Trusted

#1086492 10-Jul-2014 15:48

jimbob79: Did you know that ASP.NET servers automatically masks your password when type them into a forums like Geekzone as long as it's not a dictionay word. When you are logged in you see your password as plain text. But everybody else see it masked out with asterisks. It's even used on Facebook.

Foe example my password is ********* . You should see a bunch off asterisks whilst I see my password as clear as day. Try it for yourself.

So you can't see this? jimbob79sucks? But I see it plain as day! Are you sure?

qyiet

454 posts

Ultimate Geek

Trusted

#1086501 10-Jul-2014 16:00

bazzer: So you can't see this? *************? But I see it plain as day! Are you sure?

I see the above. But I think you better be careful not to change your password now otherwise it'll expose it.

Warning: reality may differ from above post

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#1086950 11-Jul-2014 09:43

Glassboy: There is no master master password. There is nothing to see here. Move along please.

Please contact GCSB HQ on +64 4 472 6881 for authorization to discuss the possibility of an alleged "master master password".

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

coffeebaron

6234 posts

Uber Geek

Trusted

Lifetime subscriber

#1086962 11-Jul-2014 10:06

Lias:
Glassboy: There is no master master password. There is nothing to see here. Move along please.

Please contact GCSB HQ on +64 4 472 6881 for authorization to discuss the possibility of an alleged "master master password".

Obviously @glassboy works for the GCSB, why else would he be denying the existence of a master master password and tell us there is "nothing to see here"?

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

freitasm

BDFL - Memuneh
79288 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1086970 11-Jul-2014 10:14

I know for sure Glassboy works on The Terrace in Wellington...

Glassboy

850 posts

Ultimate Geek

ID Verified

Trusted

#1087523 11-Jul-2014 21:30

freitasm: I know for sure Glassboy works on The Terrace in Wellington...

Actually just very near the Terrace.

StarBlazer

961 posts

Ultimate Geek

Trusted

#1087672 12-Jul-2014 12:47

Glassboy:
freitasm: I know for sure Glassboy works on The Terrace in Wellington...

Actually just very near the Terrace.

Technically under the Terrace as you move between offices?

Procrastination eventually pays off.

raytaylor

4014 posts

Uber Geek

Trusted

#1087700 12-Jul-2014 13:47

Apsattv:

The 3 hours on hold part seemed familiar

When I called telecom about the txt message snooping the same thing happened to me... an hour of listening to dave dobbyn can really make you angry. And that come together, right now, over me just sounds like a hippie singing about some sort of bad porno.

Anyhow, 3 news was quite happy to put me at the top of the 6pm news which was a faster way to get the problem solved.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

DarthKermit

5346 posts

Uber Geek

Trusted

#1087703 12-Jul-2014 13:55

raytaylor: Anyhow, 3 news was quite happy to put me at the top of the 6pm news which was a faster way to get the problem solved.

World famous in New Zealand eh?

Whatifthespacekeyhadneverbeeninvented?

b0rg

94 posts

Master Geek

#1088619 14-Jul-2014 14:38

Just a guess, but in the Telcos I've worked for, they have a bad habit of all the techs using the same password as a "default" for customers. Eg, One local company actually had their TLs instructing techs to use a pop singer's name for team or company systems, which was the same password as a lot of internal systems. In training new staff, that password was taught to the newbies, who then sometimes told it to customers for various reasons (eg; if customer wants us to pick their password, it happens all the time).

Batman

Mad Scientist
29763 posts

Uber Geek

Trusted

Lifetime subscriber

#1088707 14-Jul-2014 15:36

but whatever the password, you'd still need a username to see another person's account! is that not true?

it's not like you enter the masterpassword and you get to see all kinds of stuff - unless the username was also a MasterUSER ...

1 | 2 | 3 | 4 | 5