Vodafone privacy breach "serious"

Forums › One New Zealand (including Vodafone, WxC, Farmside) › Vodafone privacy breach "serious"

bigalow

566 posts

Ultimate Geek

#150025 8-Jul-2014 20:59

http://www.stuff.co.nz/business/industries/10246091/Vodafone-privacy-breach-serious

1 | 2 | 3 | 4 | 5

BDFL - Memuneh
79314 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1084414 8-Jul-2014 21:00

No comment, no note, nothing?

Just a link drop?

Coil

6614 posts

Uber Geek
Inactive user

#1084417 8-Jul-2014 21:04

Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.

freitasm

BDFL - Memuneh
79314 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1084419 8-Jul-2014 21:05

The article is badly written. Not expecting to have a full description of the exploit but the information provided is lacking really - it doesn't make much sense.

sdav

846 posts

Ultimate Geek

#1084423 8-Jul-2014 21:20

I read it as if he got access to one other customers account, can't quite get the link that everyone's accounts are accessible...

AidanS

458 posts

Ultimate Geek

#1084426 8-Jul-2014 21:23

people with a master password are able to access private customer information, including credit card details.

But, uh, that's what a "master password" is made for...(?).

-A

Yabanize

2350 posts

Uber Geek

#1084447 8-Jul-2014 21:57

CustomerZone or the other system I wonder?

dejadeadnz

2394 posts

Uber Geek
Inactive user

#1084457 8-Jul-2014 22:16

If the allegations in the article are true, the complainant really should get the Privacy Commissioner's office involved. The public needs some assurance that this matter is being properly attended to and given VF's attitude towards customer service, I am not optimistic. However, at this stage we don't even know if this supposed breach is any such thing.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

loceff13

1065 posts

Uber Geek

#1084458 8-Jul-2014 22:17

Well it's on Stuff etc so we will see a press release tomorrow that's a bit more clear no doubt

charsleysa

597 posts

Ultimate Geek

#1084523 9-Jul-2014 05:49

The article smells of BS.

Master password? Who even has or has had those? Master accounts, sure, but master passwords? Don't think so.

Also, why and how does he have the master password?

A more plausible story would be that he was at an icafe and happened to be at a computer where the previous user was a Vodafone customer that hadn't logged out.

Regards
Stefan Andres Charsley

jnimmo

1097 posts

Uber Geek

#1084530 9-Jul-2014 07:28

Sounds like (from the article) that someone was setup with a default password, which they discovered would also let them into other users accounts who hadn't bothered to change their password

hyperman

418 posts

Ultimate Geek

#1084534 9-Jul-2014 07:57

Article now removed......

smells like carp to me

The views expressed by me are not necessarily those of my employer

Coil

6614 posts

Uber Geek
Inactive user

#1084536 9-Jul-2014 08:01

jnimmo: Sounds like (from the article) that someone was setup with a default password, which they discovered would also let them into other users accounts who hadn't bothered to change their password

Its been deleted now.
Most likely people are setting their passwords to something guessable and he just came across one.

clinty

1183 posts

Uber Geek

Lifetime subscriber

#1084540 9-Jul-2014 08:11

Its been deleted now.

Still in the business section, just isn't on the front page

Clint

clinty

1183 posts

Uber Geek

Lifetime subscriber

#1084541 9-Jul-2014 08:15

TimA: Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.

Interestingly he says he can see the credit card details - when i log in to "My Vodafone" for my mobile account, i can only see the first few numbers, no expiry date and certainly not the CSC.

If he did have access to accounts i don't think he has as much info as he thinks he does

CLint

Jaxar

383 posts

Ultimate Geek

#1084546 9-Jul-2014 08:47

clinty:
TimA: Interesting.

I am assuming this is mobile side. All fixed line passwords are randomly generated.

Interestingly he says he can see the credit card details - when i log in to "My Vodafone" for my mobile account, i can only see the first few numbers, no expiry date and certainly not the CSC.

If he did have access to accounts i don't think he has as much info as he thinks he does

CLint

Yeah the credit card info bit sounds wrong to me. Even with access to VF CRM tools you can't actually see a full credit card number. At least not with the tools I use. I've always assumed that's pretty much standard practice for any company these days.

Please note: I have a professional bias towards Vodafone.

1 | 2 | 3 | 4 | 5