PDA

View Full Version : Vodacom web portal experiences security issues



jes
18-01-2012, 04:24 PM
Vodacom web portal experiences security issues (http://mybroadband.co.za/news/cellular/41629-vodacom-web-portal-security-issues.html)

Vodacom subscribers report being able to access the details of other users through the operator’s web portal

naeem
18-01-2012, 05:03 PM
hey i made myBB front page. - but you spelt my name wrong :(

mercurial
18-01-2012, 05:24 PM
hey i made myBB front page. - but you spelt my name wrong :( You're famous :D

The_Librarian
18-01-2012, 06:24 PM
You're famous :D

Live with it! :p :D

_TrXtR_
18-01-2012, 06:27 PM
I love how there is down time and everyone is up in arms.
But the moment everyone's personal information is up for mining... utter silence.

Pr⊕phet
18-01-2012, 08:13 PM
/Demands royalties :p

Bern
18-01-2012, 09:05 PM
I love how there is down time and everyone is up in arms.
But the moment everyone's personal information is up for mining... utter silence.

Everyone is to busy changing passwords etc...

WebWanderer
18-01-2012, 09:06 PM
True... downtime and/or hacks = lots of comments, complaining, etc., but when a site just gives away personal info - eerie silence.

terencevs
18-01-2012, 10:29 PM
Well i just went to vodacom and was logged in as someone else so problem still not fixed!

ijacobs3
19-01-2012, 07:12 AM
i wonder how many people got to see all of my personal details.... cant vodacom get into serious sh#$ for this?

donal
19-01-2012, 08:27 AM
Yes, I got this too using Chrome (seemed to be ok in FF9). I mailed customer care and was told 'we are not aware of any current problems with the Vodacom Web Portal'. So the immediate response is to lie - without even investigating to see if there is a problem. Even though I sent screenshots to prove it! Then they ask for my username AND password so they can 'investigate'. Investigate..?! But there's 'no problem', right..? Eventually I relented and gave my credentials, then tried logging in to change password, and hey wow - suddenly I'm Grace M******. Hit F5 and then hey wow - I'm now Jaco R*****; then Hadley O***** etc. Closed the browser and reopened, but it wouldn;t go away.

All the while VC are mailing to say silly stuff like 'Please be advised that you should select the "Change Password" option and not "Forgotten Login Details"' and 'after you login to the portal move the cursor to the top right side displaying your name and select change password' - as if I'm some kind of simian moron.

So what assurances and guarantees are Vodacom going to give me that my personal information has not been viewed/'cached' by another user? If it was truly a caching issue then the screen would display MY pages - not someone elses.

HapticSimian
19-01-2012, 08:36 AM
...as if I'm some kind of simian moron.

:mad:

donal
19-01-2012, 08:40 AM
No offence intended Haptic..! Chill so bietjie... :-)

DarkStreet
19-01-2012, 08:44 AM
I experienced something similar on Facebook once.

Bern
19-01-2012, 09:12 AM
I experienced something similar on Facebook once.

That is very worrying!! Much more information available there if you can get in to someone's account, VC just basic personal details and a phone number - not exactly the most difficult info to get - that and you can send a few free on-net sms/mms's - maybe by a bundle on your account. FB has a wealth of info that can help answer security questions etc. Not ideal.

DarkStreet
19-01-2012, 09:13 AM
That is very worrying!! Much more information available there if you can get in to someone's account, VC just basic personal details and a phone number - not exactly the most difficult info to get - that and you can send a few free on-net sms/mms's - maybe by a bundle on your account. FB has a wealth of info that can help answer security questions etc. Not ideal.

Yeah, it was with the mobile version (m.facebook.com). It's happened only once. I hope it stays that way!

mercurial
19-01-2012, 01:26 PM
Live with it! :p :D

/Stalks Naeem :D