Crystal Web suffers ADSL security breach

arr0w said:
Oh wow I wasnt aware of that. Why are people hacking adsl account information?

Does an ISP keep a log of every website visited?
Do ISPs record all activity of a user?

How does a hacker benefit from this?
Click to expand...

Yes, ISPs should keep track of IP Addresses logging on to these accounts. Hackers obviously benefits from 'free' Internet access.
 
So is the new rule of thumb to change your password every month or every second month to be safe?
 
Trialling an account with them at the moment.
My username is my first name and my house phone number...
 
MickeyD said:
Define "leaking info". You make it sound as if it was a malicious act, which I don't read in the article.
Click to expand...

That is why I said "knowing or unknowing" - it wasn't mentioned in the article, no.
 
arr0w said:
So is the new rule of thumb to change your password every month or every second month to be safe?
Click to expand...

Good security practices dictate that you should do this on a regular basis in any event.
 
jouda said:
LOL at the 1122 example!!!

As a customer I would not be happy, but I have respect for the fact that you are upfront with the info and that you are accepting responsibility.
Click to expand...

Which ICT company would be daft enough to think that 1122 or 2233 is an adequate password standard?! Next thing you'll tell me is that they share user accounts!

Re: CW data leakage (it is not a security breach; data was leaked. There's a difference)
As a customer and as an IT risk assurance practitioner, the cause of this is a concern to me and there is much that CW management will have to do to assess an rectify internal processes, and given the tidbits of insight that DJ gives us (the transparency we yearned for), the business still has some ways to go to reach aa good level of maturity. They've grown tremendously in the past year or so and you can see their dedication and passion to uplift the business. This incident also proves their dedication to transparency and their way of handling issues.
 
ToxicBunny said:
Worrying that such a thing was allowed onto a public server, but their response to the incident is precisely what I would expect.
They were notified, they pulled the entire portal site down, and they're changing DSL passwords and notifying all customers of this rather than trying to hide it.
Click to expand...

+1

Mistakes happen. They owned up an took action vs. trying to hide it.

Now they must also make sure it does not happen again. A 2nd breach will rattle my confidence in them drastically.
 
jouda said:
You sir, should don your tinfoil hat ;)
Click to expand...

I dont think we can trust anybody. A lot of shady stuff goes down way to often. I remember phoning a friend on MTN once and talking to him about a mybb article. The mybb article was about the NSA or some organisation listening to our calls. I eventually couldnt hear him over the phone and the call just cut off. I was spooked out but it could just be dodgy MTN reception.
 
arr0w said:
I dont think we can trust anybody. A lot of shady stuff goes down way to often. I remember phoning a friend on MTN once and talking to him about a mybb article. The mybb article was about the NSA or some organisation listening to our calls. I eventually couldnt hear him over the phone and the call just cut off. I was spooked out but it could just be dodgy MTN reception.
Click to expand...

Yes - I'm sure the NSA is deeply interested in your personal phone conversations...
 
MrR said:
Which ICT company would be daft enough to think that 1122 or 2233 is an adequate password standard?! Next thing you'll tell me is that they share user accounts!
/snip
Click to expand...

I dont know, dont think they will be open to discuss their password and sharing policy though.
 
arr0w said:
I dont think we can trust anybody. A lot of shady stuff goes down way to often. I remember phoning a friend on MTN once and talking to him about a mybb article. The mybb article was about the NSA or some organisation listening to our calls. I eventually couldnt hear him over the phone and the call just cut off. I was spooked out but it could just be dodgy MTN reception.
Click to expand...

:wtf:

Oh and kudos to CW for coming out :D
 
Well handled by CW.

Mistakes and breaches will happen (it's the nature of the beast) - it's how you deal with it that matters and they've done well.

(not a CW customer)
 
arr0w said:
Aww man. I am conflicted about this. I am rooting for you guys and want you to do well but I am cautious about signing up with you guys now. I was considering moving over to you guys. I guess my only options for an isp are WebAfrica or Vox.
Click to expand...

stay away from WA.

there is a reason the Cancellation policy change caused such a fuss. everyone is leaving them.
 
Necropolis said:
Yes - I'm sure the NSA is deeply interested in your personal phone conversations...
Click to expand...

In fact they are. Especially if, for some reason, they suspect that you may be a threat to State Security or planning something against government.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X