-
Join the MyBroadband community
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
-
Question of the Day: Will you be subscribing to the new Disney+ R49 streaming package?
Telfree accounts hacked
- Thread starter rpm
- Start date
bekdik
Honorary Master
Yup, Zuma logic.
LiamRG
Well-Known Member
This is a big load of BS.
I am a web developer and I force users to choose strong passwords. Then our encryption uses the .NET encryption.
Poor standards in web dev should not be the fault of users. The web dev should always assume the user is stupid and force them to choose strong passwords.
I do not buy any of the this.
Wonder if users can take them to court?
I am a web developer and I force users to choose strong passwords. Then our encryption uses the .NET encryption.
Poor standards in web dev should not be the fault of users. The web dev should always assume the user is stupid and force them to choose strong passwords.
I do not buy any of the this.
Wonder if users can take them to court?
Lol @ users fault. Yeah because the user wants them to only use numbers in the password and make the username something that's easily obtainable.
If they allow such weak access into their system, where you can easily bruteforce a few combinations for access, how is this the users fault?
As LiamRG said, give the user a nice 32char password that he will either keep (not so easy to brute force) or want change it in which case make sure you have a half decent password policy defined.
Oh and sequenced usernames (087xx1, 087xx2) what a fail. Make it an email address or the users name. At least then the hax0r has to go fishing for each user and cant just play guessing games.
If they allow such weak access into their system, where you can easily bruteforce a few combinations for access, how is this the users fault?
As LiamRG said, give the user a nice 32char password that he will either keep (not so easy to brute force) or want change it in which case make sure you have a half decent password policy defined.
Oh and sequenced usernames (087xx1, 087xx2) what a fail. Make it an email address or the users name. At least then the hax0r has to go fishing for each user and cant just play guessing games.
I'm amazed that their systems didn't pick up on the brute force attacks and ban the ip address on the fly.
Bad Telfree.
Shame on you.
Refund your customers.
This publicity is probably costing them a lot more than the R40K the hackers took from their customers.
Bad Telfree.
Shame on you.
Refund your customers.
This publicity is probably costing them a lot more than the R40K the hackers took from their customers.
You dodged a bullet.
Try Switch. We use them ourselves and also resell their service. There's never any hassle.
Not good Telfree....
As an agent of Telfree who has lost roughly R 4000.00 through this little "mishap" i am highly disappointed in Telfree's attitude and am immediately exploring alternatives.. Issuing week passwords to start off with.. Come on Telree... By saving yourself a little money now by avoiding refunding clients... You are going to lose a lot more on the long run.. Including me... Enough is enough!!! When were notices sent out about changing passwords... Only after the S^%$ hit the fan....Very easy to pass the buck.. The bottom line is your administration is TERRIBLE to say the least.. You are going to have a lot of angry people coming your way still...
As an agent of Telfree who has lost roughly R 4000.00 through this little "mishap" i am highly disappointed in Telfree's attitude and am immediately exploring alternatives.. Issuing week passwords to start off with.. Come on Telree... By saving yourself a little money now by avoiding refunding clients... You are going to lose a lot more on the long run.. Including me... Enough is enough!!! When were notices sent out about changing passwords... Only after the S^%$ hit the fan....Very easy to pass the buck.. The bottom line is your administration is TERRIBLE to say the least.. You are going to have a lot of angry people coming your way still...