Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




34 posts

Geek
+1 received by user: 3


Topic # 223302 22-Sep-2017 22:17
Send private message quote this post

Hello peeps

Anyone here have 2degrees webmail? preferably using a snap domain.

 

Need to confirm if there is a security hole.

1) Change the password to your email address to more than 8 characters long, password can be anything e.g. qwerty12345
2) Attempt to login to your email with only the first 8 characters e.g. qwerty12
3) Report results on this thread.

My email was hacked and was being used to send out spam, then figured out that only the first 8 characters were being used which would of made it much easier for someone to hack.

Issue was logged with 2degrees and it's been sitting with them for close to 3 weeks with no updates. Every time I call them they give me the same bs. They also said I'm the only person impacted by this password issue which I find hard to believe. Most likely they messed up >=8 char security rule and have it logged with their development team to fix which is why it's taking so long to get an answer.

If it is widespread 2degrees would need to notify their customers that their webmail service has a security hole.



Create new topic
Baby Get Shaky!
1467 posts

Uber Geek
+1 received by user: 333

Subscriber

  Reply # 1871310 23-Sep-2017 08:19
One person supports this post
Send private message quote this post

Just tried it with a fresh @snap.net.nz address and it did not work. Worked with full password but not first 8 only.


808 posts

Ultimate Geek
+1 received by user: 534

Trusted

  Reply # 1871388 23-Sep-2017 10:57
Send private message quote this post

I haven't reset my password but my password is longer than 8 characters.

 

Can confirm I could logon by just using the first 8 characters.

 

Edit: Just confirmed I can put anything after the 8th character and it accepts it. (ie Passwordxyz works when the password is "Password1")


 
 
 
 


2770 posts

Uber Geek
+1 received by user: 1436

Subscriber

  Reply # 1871427 23-Sep-2017 12:20
Send private message quote this post

PM'd someone I know at 2Degrees and pointed them at this thread. May help speed things up.





Information wants to be free. The Net interprets censorship as damage and routes around it.

 

Thinking about signing up to BigPipe? Get $20 credit with my referral link.


1380 posts

Uber Geek
+1 received by user: 209

Trusted
2degrees

  Reply # 1871430 23-Sep-2017 12:29
One person supports this post
Send private message quote this post

Hey all,

 

We are not aware of any widespread issue with our webmail service at this time.

 

Can those that are affected please message us here privately with the email address in question, along with your broadband customer number and physical address, and we'll be more than happy to look in to this here for you and see what the story is.

 

Thanks,

 

Ralph ^JOB


808 posts

Ultimate Geek
+1 received by user: 534

Trusted

  Reply # 1871462 23-Sep-2017 13:35
One person supports this post
Send private message quote this post

Note a 2D customer anymore but still have my Snap email. Have PM'd you


'That VDSL Cat'
6535 posts

Uber Geek
+1 received by user: 1247

Trusted
Spark
Subscriber

  Reply # 1871662 23-Sep-2017 19:54
3 people support this post
Send private message quote this post

This reminds me of bank logins.

 

 





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Vocus New Zealand on the block as Aussies bail
Posted 23-Oct-2017 17:06


Vodafone TV — television in the cloud
Posted 17-Oct-2017 19:29


Nokia 8 review: Classy midrange pure Android phone
Posted 16-Oct-2017 07:27


Why carriers might want to embrace Commerce Commission study, MVNOs
Posted 13-Oct-2017 09:42


Fitbit launches Ionic, its health and fitness smartwatch
Posted 12-Oct-2017 15:52


Xero launches machine learning automation to improve coding accuracy for small businesses
Posted 12-Oct-2017 15:45


Bank of New Zealand uses Intel AI to detect financial crime
Posted 12-Oct-2017 15:39


Sony launches Xperia XZ1, a smartphone with real-time 3D capture
Posted 11-Oct-2017 10:26


Notes on Nokia’s phone comeback
Posted 10-Oct-2017 10:06


Air New Zealand begins Inflight Wi-Fi rollout
Posted 9-Oct-2017 20:16


The latest mobile phones in perspective
Posted 9-Oct-2017 18:34


Review: Acronis True Image 2018 — serious backup
Posted 8-Oct-2017 11:22


Lenovo launches ThinkPad Anniversary Edition 25
Posted 7-Oct-2017 23:16


Less fone, more tech as Vodafone gets brand make-over
Posted 6-Oct-2017 08:16


API Talent Achieves AWS MSP Partner Status
Posted 5-Oct-2017 21:20



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.