You recently posted that it was concerning that private Afrihost email was disclosed on MyBroadband when it was shown you were encouraging your staff to try to manipulate the ISP Of The Year voting. Are you sure you don't want to retract the above statement? You can put lipstick on a donkey, but you can't change its name. It's still called a breach, even if it didn't involve hacking of your systems...
-
Join the MyBroadband community
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
-
Question of the Day: Have you used Wanatu?
Afrihost Email Links Security Flaw?
- Thread starter blackstarzes
- Start date
-
- Tags
- afrihost security bug
You recently posted that it was concerning that private Afrihost email was disclosed on MyBroadband when it was shown you were encouraging your staff to try to manipulate the ISP Of The Year voting. Are you sure you don't want to retract the above statement? You can put lipstick on a donkey, but you can't change its name. It's still called a breach, even if it didn't involve hacking of your systems...
I understand the concern here, but again, I need to stress that we have not had a security breach, and our team will continue to do their best to ensure that everyones data is kept secure.
I don't see how this holds any relevance to the topic being discussed here. The difference between posting an internal mail/ memo and what's being discussed here are worlds apart.
What you're referring to was a breach of trust, not a security issue.
Lipstick, meat donkey.
Don't make blanket statements that you've never suffered a security breach if evidence exists (from you) that this is not the case. You were quite categoric with your statement. I can quite categorically prove this to be false. The breach of trust resulted in a breach of information. We can go back and forth with your PR statements all you like. Won't change the facts...
Communist Panda
New Member
- Joined
- Nov 9, 2015
- Messages
- 5
- Reaction score
- 0
You really need to get off the Afrihost train now, I can't tell if you're a troll or a business owner.
Wait, what.
Last edited:
F
Fudzy
Guest
Now who's phantom are you?
Communist Panda
New Member
- Joined
- Nov 9, 2015
- Messages
- 5
- Reaction score
- 0
Nobody's, just a long time lurker. 
My join date and posts are next to my profile. My affiliation with Crystal Web is no secret in any way on this forum, nor to Afriguy. I'll call out bullschit irrespective of my affiliations. Always have and always will. I've never interfered in their threads in any trolling manner and have a good relationship with all other ISPs, so not sure what train this is you're referring to. Address the topic and content here instead. You're not going to win trying to call me out on integrity...
Communist Panda
New Member
- Joined
- Nov 9, 2015
- Messages
- 5
- Reaction score
- 0
Quick to get defensive hey?
Look bud, nobody called you out on your 'integrity'. There just seems to be no end to the drivel you spew on these forums (see anything related to Afrihost) and I'm calling you out on that.
MickeyD
RIP
Then why not use your main account?
Communist Panda
New Member
- Joined
- Nov 9, 2015
- Messages
- 5
- Reaction score
- 0
You really don't understand what a lurker is?
You use the word "bud" too loosely, commie. Time to login with your non-clone account and post. Which light are you hiding under this time?
I stand by what I post and can back any of it up. You're welcome to prove otherwise at all times, or simply continue to play the man instead like you're doing now. I have no beef with Afrihost, and have a great relationship with the majority of senior Afrihost staff/directors. I take a dim view on PR that borders on an untruthful statement, and always will.
If your accusations were correct you'd have seen me all over the AH threads. Here's a link you can use to see all of my posts in the previous AH feedback thread - http://mybroadband.co.za/vb/misc.php?do=whoposted&t=596703 (click my post count in there to read them). None in the current thread. And none in the latest AH related threads, so probably best you get your facts straight before "spewing drivel", "bud".
To illustrate the point, I posted in the AH thread to assist Afri-reps and their customers relating to high spikes in demand one day. Someone brought up Crystal Web, and my response was:
So whatever you're seeing is entirely in your head...
Last edited:
ISP gets a lot of stick. *thinks* I know, let's create some lurker customers and manipulate the forums. (cue Vox clever clogs as well).
Communist Panda
New Member
- Joined
- Nov 9, 2015
- Messages
- 5
- Reaction score
- 0
blackstarzes
Member
- Joined
- Jan 2, 2008
- Messages
- 25
- Reaction score
- 0
Thank you for understanding my concern. Unfortunately this attitude towards client security has forced me to start looking at other providers.
Sorry to hear you feel that way
Our Dev team are always looking at ways to improve, we'll see what can be done here going forward - but I don't think it's a quick fix.
@AfriGuy, any idea why I would not have received this email?
EDIT: Nevermind, I see it was disabled in my account. Any chance I can get this emailed to me now?
EDIT 2: Ok, found an old email with a link. Looks like they're using a 13 character key with mixed alpha numeric and symbols. That creates a fairly massive amount of possibilities. Although that is lowered drastically because it looks like the last 5 characters are always numbers (granted I only have 2 links to look at
). And it doesn't seem like they have any rate limit on the server.
@Afriguy, it isn't just about how secure a single access key is. It could be 25 characters or 10 characters. The biggest flaw in embedding this in emails is that people share newsletter (at least, you'd like them to). So when oupa Harry CC's the whole neighborhood with a good deal, they all have access to his account.
EDIT: Nevermind, I see it was disabled in my account. Any chance I can get this emailed to me now?
EDIT 2: Ok, found an old email with a link. Looks like they're using a 13 character key with mixed alpha numeric and symbols. That creates a fairly massive amount of possibilities. Although that is lowered drastically because it looks like the last 5 characters are always numbers (granted I only have 2 links to look at
). And it doesn't seem like they have any rate limit on the server.@Afriguy, it isn't just about how secure a single access key is. It could be 25 characters or 10 characters. The biggest flaw in embedding this in emails is that people share newsletter (at least, you'd like them to). So when oupa Harry CC's the whole neighborhood with a good deal, they all have access to his account.
Last edited:
@AfriGuy, any idea why I would not have received this email?
EDIT: Nevermind, I see it was disabled in my account. Any chance I can get this emailed to me now?
EDIT 2: Ok, found an old email with a link. Looks like they're using a 13 character key with mixed alpha numeric and symbols. That creates a fairly massive amount of possibilities. Although that is lowered drastically because it looks like the last 5 characters are always numbers (granted I only have 2 links to look at
@Afriguy, it isn't just about how secure a single access key is. It could be 25 characters or 10 characters. The biggest flaw in embedding this in emails is that people share newsletter (at least, you'd like them to). So when oupa Harry CC's the whole neighborhood with a good deal, they all have access to his account.
Glad you got the mystery bonus applied.
I do understand where you guys are coming from, just tell Oupa Harry not to FW mails meant for him
On a more serious note though, our team have taken in the feedback and working on addressing it.