Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


241 posts

Master Geek
+1 received by user: 38


Topic # 150025 8-Jul-2014 20:59
Send private message

http://www.stuff.co.nz/business/industries/10246091/Vodafone-privacy-breach-serious




 

 

 


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5
BDFL - Memuneh
60605 posts

Uber Geek
+1 received by user: 11537

Administrator
Trusted
Geekzone
Lifetime subscriber

5766 posts

Uber Geek
+1 received by user: 1711

Trusted

  Reply # 1084417 8-Jul-2014 21:04
Send private message

Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.




Steam: Coil (Same photos as profile here)
Origin: Scranax
Currently playing on PC: Rust, Subnautica, CS:GO, AOE2 HD, BeamNG Drive, BF1.


BDFL - Memuneh
60605 posts

Uber Geek
+1 received by user: 11537

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1084419 8-Jul-2014 21:05
2 people support this post
Send private message

The article is badly written. Not expecting to have a full description of the exploit but the information provided is lacking really - it doesn't make much sense. 





784 posts

Ultimate Geek
+1 received by user: 176


  Reply # 1084423 8-Jul-2014 21:20
3 people support this post
Send private message

I read it as if he got access to one other customers account, can't quite get the link that everyone's accounts are accessible...

442 posts

Ultimate Geek
+1 received by user: 135


  Reply # 1084426 8-Jul-2014 21:23
Send private message

people with a master password are able to access private customer information, including credit card details.


But, uh, that's what a "master password" is made for...(?).

-A

2103 posts

Uber Geek
+1 received by user: 525


  Reply # 1084447 8-Jul-2014 21:57
Send private message

CustomerZone or the other system I wonder?

1169 posts

Uber Geek
+1 received by user: 872

Subscriber

  Reply # 1084457 8-Jul-2014 22:16
Send private message

If the allegations in the article are true, the complainant really should get the Privacy Commissioner's office involved. The public needs some assurance that this matter is being properly attended to and given VF's attitude towards customer service, I am not optimistic. However, at this stage we don't even know if this supposed breach is any such thing.



667 posts

Ultimate Geek
+1 received by user: 142


  Reply # 1084458 8-Jul-2014 22:17
Send private message

Well it's on Stuff etc so we will see a press release tomorrow that's a bit more clear no doubt

597 posts

Ultimate Geek
+1 received by user: 132


  Reply # 1084523 9-Jul-2014 05:49
Send private message

The article smells of BS.

Master password? Who even has or has had those? Master accounts, sure, but master passwords? Don't think so.

Also, why and how does he have the master password?

A more plausible story would be that he was at an icafe and happened to be at a computer where the previous user was a Vodafone customer that hadn't logged out.




Regards
Stefan Andres Charsley

What does this tag do
947 posts

Ultimate Geek
+1 received by user: 192

Subscriber

  Reply # 1084530 9-Jul-2014 07:28
Send private message

Sounds like (from the article) that someone was setup with a default password, which they discovered would also let them into other users accounts who hadn't bothered to change their password

412 posts

Ultimate Geek
+1 received by user: 100


  Reply # 1084534 9-Jul-2014 07:57
One person supports this post
Send private message

Article now removed......


smells like carp to me




 The views expressed by me are not necessarily those of my employer


5766 posts

Uber Geek
+1 received by user: 1711

Trusted

  Reply # 1084536 9-Jul-2014 08:01
Send private message

jnimmo: Sounds like (from the article) that someone was setup with a default password, which they discovered would also let them into other users accounts who hadn't bothered to change their password


Its been deleted now.
Most likely people are setting their passwords to something guessable and he just came across one.




Steam: Coil (Same photos as profile here)
Origin: Scranax
Currently playing on PC: Rust, Subnautica, CS:GO, AOE2 HD, BeamNG Drive, BF1.


528 posts

Ultimate Geek
+1 received by user: 100


  Reply # 1084540 9-Jul-2014 08:11
Send private message


Its been deleted now.


Still in the business section, just isn't on the front page

Clint

528 posts

Ultimate Geek
+1 received by user: 100


  Reply # 1084541 9-Jul-2014 08:15
One person supports this post
Send private message

TimA: Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.


Interestingly he says he can see the credit card details - when i log in to "My Vodafone" for my mobile account, i can only see the first few numbers, no expiry date and certainly not the CSC.

If he did have access to accounts i don't think he has as much info as he thinks he does

CLint



379 posts

Ultimate Geek
+1 received by user: 129


  Reply # 1084546 9-Jul-2014 08:47
One person supports this post
Send private message

clinty:
TimA: Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.


Interestingly he says he can see the credit card details - when i log in to "My Vodafone" for my mobile account, i can only see the first few numbers, no expiry date and certainly not the CSC.

If he did have access to accounts i don't think he has as much info as he thinks he does

CLint




Yeah the credit card info bit sounds wrong to me. Even with access to VF CRM tools you can't actually see a full credit card number. At least not with the tools I use. I've always assumed that's pretty much standard practice for any company these days.




Please note: I have a professional bias towards Vodafone.

 1 | 2 | 3 | 4 | 5
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

N4L helping TAKA Trust bridge the digital divide for Lower Hutt students
Posted 18-Jun-2018 13:08


Winners Announced for 2018 CIO Awards
Posted 18-Jun-2018 13:03


Logitech Rally sets new standard for USB-connected video conference cameras
Posted 18-Jun-2018 09:27


Russell Stanners steps down as Vodafone NZ CEO
Posted 12-Jun-2018 09:13


Intergen recognised as 2018 Microsoft Country Partner of the Year for New Zealand
Posted 12-Jun-2018 08:00


Finalists Announced For Microsoft NZ Partner Awards
Posted 6-Jun-2018 15:12


Vocus Group and Vodafone announce joint venture to accelerate fibre innovation
Posted 5-Jun-2018 10:52


Kogan.com to launch Kogan Mobile in New Zealand
Posted 4-Jun-2018 14:34


Enable doubles fibre broadband speeds for its most popular wholesale service in Christchurch
Posted 2-Jun-2018 20:07


All or Nothing: New Zealand All Blacks arrives on Amazon Prime Video
Posted 2-Jun-2018 16:21


Innovation Grant, High Tech Awards and new USA office for Kiwi tech company SwipedOn
Posted 1-Jun-2018 20:54


Commerce Commission warns Apple for misleading consumers about their rights
Posted 30-May-2018 13:15


IBM leads Call for Code to use cloud, data, AI, blockchain for natural disaster relief
Posted 25-May-2018 14:12


New FUJIFILM X-T100 aims to do better job than smartphones
Posted 24-May-2018 20:17


Stuff takes 100% ownership of Stuff Fibre
Posted 24-May-2018 19:41



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.