Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




430 posts

Ultimate Geek


#150025 8-Jul-2014 20:59
Send private message

http://www.stuff.co.nz/business/industries/10246091/Vodafone-privacy-breach-serious




 

 

 


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5
BDFL - Memuneh
66180 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1084414 8-Jul-2014 21:00
One person supports this post
Send private message
6615 posts

Uber Geek
Inactive user


  #1084417 8-Jul-2014 21:04
Send private message

Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.

 
 
 
 


BDFL - Memuneh
66180 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1084419 8-Jul-2014 21:05
2 people support this post
Send private message

The article is badly written. Not expecting to have a full description of the exploit but the information provided is lacking really - it doesn't make much sense. 





836 posts

Ultimate Geek


  #1084423 8-Jul-2014 21:20
3 people support this post
Send private message

I read it as if he got access to one other customers account, can't quite get the link that everyone's accounts are accessible...

456 posts

Ultimate Geek


  #1084426 8-Jul-2014 21:23
Send private message

people with a master password are able to access private customer information, including credit card details.


But, uh, that's what a "master password" is made for...(?).

-A

2224 posts

Uber Geek


  #1084447 8-Jul-2014 21:57
Send private message

CustomerZone or the other system I wonder?

1681 posts

Uber Geek

Subscriber

  #1084457 8-Jul-2014 22:16
Send private message

If the allegations in the article are true, the complainant really should get the Privacy Commissioner's office involved. The public needs some assurance that this matter is being properly attended to and given VF's attitude towards customer service, I am not optimistic. However, at this stage we don't even know if this supposed breach is any such thing.



 
 
 
 


857 posts

Ultimate Geek


  #1084458 8-Jul-2014 22:17
Send private message

Well it's on Stuff etc so we will see a press release tomorrow that's a bit more clear no doubt

597 posts

Ultimate Geek


  #1084523 9-Jul-2014 05:49
Send private message

The article smells of BS.

Master password? Who even has or has had those? Master accounts, sure, but master passwords? Don't think so.

Also, why and how does he have the master password?

A more plausible story would be that he was at an icafe and happened to be at a computer where the previous user was a Vodafone customer that hadn't logged out.




Regards
Stefan Andres Charsley

What does this tag do
1025 posts

Uber Geek

Subscriber

  #1084530 9-Jul-2014 07:28
Send private message

Sounds like (from the article) that someone was setup with a default password, which they discovered would also let them into other users accounts who hadn't bothered to change their password

412 posts

Ultimate Geek


  #1084534 9-Jul-2014 07:57
One person supports this post
Send private message

Article now removed......


smells like carp to me




 The views expressed by me are not necessarily those of my employer


6615 posts

Uber Geek
Inactive user


  #1084536 9-Jul-2014 08:01
Send private message

jnimmo: Sounds like (from the article) that someone was setup with a default password, which they discovered would also let them into other users accounts who hadn't bothered to change their password


Its been deleted now.
Most likely people are setting their passwords to something guessable and he just came across one.

709 posts

Ultimate Geek


  #1084540 9-Jul-2014 08:11
Send private message


Its been deleted now.


Still in the business section, just isn't on the front page

Clint

709 posts

Ultimate Geek


  #1084541 9-Jul-2014 08:15
One person supports this post
Send private message

TimA: Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.


Interestingly he says he can see the credit card details - when i log in to "My Vodafone" for my mobile account, i can only see the first few numbers, no expiry date and certainly not the CSC.

If he did have access to accounts i don't think he has as much info as he thinks he does

CLint



383 posts

Ultimate Geek


  #1084546 9-Jul-2014 08:47
One person supports this post
Send private message

clinty:
TimA: Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.


Interestingly he says he can see the credit card details - when i log in to "My Vodafone" for my mobile account, i can only see the first few numbers, no expiry date and certainly not the CSC.

If he did have access to accounts i don't think he has as much info as he thinks he does

CLint




Yeah the credit card info bit sounds wrong to me. Even with access to VF CRM tools you can't actually see a full credit card number. At least not with the tools I use. I've always assumed that's pretty much standard practice for any company these days.




Please note: I have a professional bias towards Vodafone.

 1 | 2 | 3 | 4 | 5
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

New online learning platform for kids stuck at home during COVID-19 lockdown
Posted 26-Mar-2020 21:35


New 5G Nokia smartphone unveiled as portfolio expands
Posted 26-Mar-2020 17:11


D-Link ANZ launches wireless AC1200 4G LTE router
Posted 26-Mar-2020 16:32


Ring introduces two new video doorbells and new pre-roll technology
Posted 17-Mar-2020 16:59


OPPO uncovers flagship Find X2 Pro smartphone
Posted 17-Mar-2020 16:54


D-Link COVR-2202 mesh Wi-Fi system now protected by McAfee
Posted 17-Mar-2020 16:00


Spark Sport opens its platform up to all New Zealanders at no charge
Posted 17-Mar-2020 10:04


Spark launches 5G Starter Fund
Posted 8-Mar-2020 19:19


TRENDnet launches high-performance WiFi Mesh Router System
Posted 5-Mar-2020 08:48


Sony boosts full-frame lens line-up with introduction of FE 20mm F1.8 G large-aperture ultra-wide-angle prime Lens
Posted 5-Mar-2020 08:44


Vector and Spark teamed up on smart metering initiative
Posted 5-Mar-2020 08:42


Schneider Electric launches new PDL Pro Series designed specifically for the commercial building market
Posted 5-Mar-2020 08:39


Kiwi app Pedigree DentaStix Studios uses pet images to counter impact of negative social media Content
Posted 5-Mar-2020 08:32


Samsung expands to New Zealand in 5G Networks Deal with Spark
Posted 5-Mar-2020 08:17


New Vodafone mobile data plans with unlimited data
Posted 26-Feb-2020 06:55



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.