jfrancis
Member
I have a serious concern with the current situations with Userids and passwords on the Telkom ADSL network.
Telkom currently provides no facility for users to change their userid or even their passwords. This means that every ADSL subscriber uses the userid & password supplied to them by some Telkom employee.
Tekom employees that have access to these userids and passwords can either use them thmeselves or hand them out to friends & family! So how can Telkom have a 3 gig cap in place without providing a *SECURE* means for changing the password for a given connection?
This info would also be available to any hacker who gains control of a badly configured machine or ADSL device (particulalrly those purchased from Telkom with a default password -- you have been warned!)
Imagine the possibilities -- once your 3 gig cap is active, just hack ouround the Telkom ADSL IP range for a new userid / password that is not yet capped. (I am by no means endorsing this sort of behaviour, but it's about time that someone revealed this to Telkom ADSL users and to Telkom.)
The issue that I would like to see Telkom address is the level of protection that they afford ADSL subscribers -- before they implement caps on usage -- which are bound to userid profiles.
Telkom have no right to cap users before they implement basic levels of protection to protect users against this kind of abuse.
I would *LOVE* to see Telkom's response on this one, RPM!
Telkom currently provides no facility for users to change their userid or even their passwords. This means that every ADSL subscriber uses the userid & password supplied to them by some Telkom employee.
Tekom employees that have access to these userids and passwords can either use them thmeselves or hand them out to friends & family! So how can Telkom have a 3 gig cap in place without providing a *SECURE* means for changing the password for a given connection?
This info would also be available to any hacker who gains control of a badly configured machine or ADSL device (particulalrly those purchased from Telkom with a default password -- you have been warned!)
Imagine the possibilities -- once your 3 gig cap is active, just hack ouround the Telkom ADSL IP range for a new userid / password that is not yet capped. (I am by no means endorsing this sort of behaviour, but it's about time that someone revealed this to Telkom ADSL users and to Telkom.)
The issue that I would like to see Telkom address is the level of protection that they afford ADSL subscribers -- before they implement caps on usage -- which are bound to userid profiles.
Telkom have no right to cap users before they implement basic levels of protection to protect users against this kind of abuse.
I would *LOVE* to see Telkom's response on this one, RPM!
