Vodafone privacy breach "serious"

Forums › One NZ (including Farmside) › Vodafone privacy breach "serious"

bigalow

568 posts

Ultimate Geek
+1 received by user: 112

#150025 8-Jul-2014 20:59

http://www.stuff.co.nz/business/industries/10246091/Vodafone-privacy-breach-serious

1 | 2 | 3 | 4 | 5

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1084414 8-Jul-2014 21:00

No comment, no note, nothing?

Just a link drop?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Coil

6614 posts

Uber Geek
+1 received by user: 2153
Inactive user

#1084417 8-Jul-2014 21:04

Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1084419 8-Jul-2014 21:05

The article is badly written. Not expecting to have a full description of the exploit but the information provided is lacking really - it doesn't make much sense.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

sdav

846 posts

Ultimate Geek
+1 received by user: 193

#1084423 8-Jul-2014 21:20

I read it as if he got access to one other customers account, can't quite get the link that everyone's accounts are accessible...

AidanS

458 posts

Ultimate Geek
+1 received by user: 135

#1084426 8-Jul-2014 21:23

people with a master password are able to access private customer information, including credit card details.

But, uh, that's what a "master password" is made for...(?).

-A

Yabanize

2351 posts

Uber Geek
+1 received by user: 583

#1084447 8-Jul-2014 21:57

CustomerZone or the other system I wonder?

AliExpress

Shop now on AliExpress (affiliate link).

dejadeadnz

2394 posts

Uber Geek
+1 received by user: 2287
Inactive user

#1084457 8-Jul-2014 22:16

If the allegations in the article are true, the complainant really should get the Privacy Commissioner's office involved. The public needs some assurance that this matter is being properly attended to and given VF's attitude towards customer service, I am not optimistic. However, at this stage we don't even know if this supposed breach is any such thing.

loceff13

1089 posts

Uber Geek
+1 received by user: 340

#1084458 8-Jul-2014 22:17

Well it's on Stuff etc so we will see a press release tomorrow that's a bit more clear no doubt

charsleysa

597 posts

Ultimate Geek
+1 received by user: 125

#1084523 9-Jul-2014 05:49

The article smells of BS.

Master password? Who even has or has had those? Master accounts, sure, but master passwords? Don't think so.

Also, why and how does he have the master password?

A more plausible story would be that he was at an icafe and happened to be at a computer where the previous user was a Vodafone customer that hadn't logged out.

Regards
Stefan Andres Charsley

jnimmo

1098 posts

Uber Geek
+1 received by user: 255

#1084530 9-Jul-2014 07:28

Sounds like (from the article) that someone was setup with a default password, which they discovered would also let them into other users accounts who hadn't bothered to change their password

hyperman

418 posts

Ultimate Geek
+1 received by user: 101

#1084534 9-Jul-2014 07:57

Article now removed......

smells like carp to me

The views expressed by me are not necessarily those of my employer

Dell

Shop now for Dell laptops and other devices (affiliate link).

Coil

6614 posts

Uber Geek
+1 received by user: 2153
Inactive user

#1084536 9-Jul-2014 08:01

jnimmo: Sounds like (from the article) that someone was setup with a default password, which they discovered would also let them into other users accounts who hadn't bothered to change their password

Its been deleted now.
Most likely people are setting their passwords to something guessable and he just came across one.

clinty

1201 posts

Uber Geek
+1 received by user: 402

Lifetime subscriber

#1084540 9-Jul-2014 08:11

Its been deleted now.

Still in the business section, just isn't on the front page

Clint

clinty

1201 posts

Uber Geek
+1 received by user: 402

Lifetime subscriber

#1084541 9-Jul-2014 08:15

TimA: Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.

Interestingly he says he can see the credit card details - when i log in to "My Vodafone" for my mobile account, i can only see the first few numbers, no expiry date and certainly not the CSC.

If he did have access to accounts i don't think he has as much info as he thinks he does

CLint

Jaxar

383 posts

Ultimate Geek
+1 received by user: 129

#1084546 9-Jul-2014 08:47

clinty:
TimA: Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.

Interestingly he says he can see the credit card details - when i log in to "My Vodafone" for my mobile account, i can only see the first few numbers, no expiry date and certainly not the CSC.

If he did have access to accounts i don't think he has as much info as he thinks he does

CLint

Yeah the credit card info bit sounds wrong to me. Even with access to VF CRM tools you can't actually see a full credit card number. At least not with the tools I use. I've always assumed that's pretty much standard practice for any company these days.

Please note: I have a professional bias towards Vodafone.

1 | 2 | 3 | 4 | 5