Re: [OT] Security question

2016-12-30 Thread Marko Rauhamaa
Chris Angelico : > On Fri, Dec 30, 2016 at 10:47 PM, Anssi Saari wrote: >> I'd say it depends on what the password is actually used for. You seem >> to indicate it's just so you can access the internet? To me it seems >> abusing that password is hard to impossible since it's your fibre to >> your

Re: [OT] Security question

2016-12-30 Thread Chris Angelico
On Fri, Dec 30, 2016 at 10:47 PM, Anssi Saari wrote: > I'd say it depends on what the password is actually used for. You seem > to indicate it's just so you can access the internet? To me it seems > abusing that password is hard to impossible since it's your fibre to > your home. If the password i

Re: [OT] Security question

2016-12-30 Thread Marko Rauhamaa
Anssi Saari : > "Frank Millman" writes: >> To my surprise, they sent me my existing username *and* my existing >> password, all in clear text. > > I'd say it depends on what the password is actually used for. You seem > to indicate it's just so you can access the internet? To me it seems > abusin

Re: [OT] Security question

2016-12-30 Thread Anssi Saari
"Frank Millman" writes: > Hi all > > This is off-topic, but I would appreciate a comment on this matter. > > I have just upgraded my internet connection from ADSL to Fibre. > > As part of the process, my ISP sent a text message to my cell phone > with the username and password I must use to conne

Re: [OT] Security question

2016-12-23 Thread Steve D'Aprano
On Thu, 22 Dec 2016 09:10 pm, Frank Millman wrote: > If this is the standard of security out there, it is no wonder we hear of > so many attacks (and how many don't we hear of?) Everything is broken: https://medium.com/message/everything-is-broken-81e5f33a24e1 -- Steve “Cheer up,” they said

Re: [OT] Security question

2016-12-22 Thread Peter Pearson
On Thu, 22 Dec 2016 12:10:40 +0200, Frank Millman wrote: [snip] > > What about the second part of my query? Is it acceptable that they keep > passwords on their system in clear text? Absolutely not. Keeping the passwords, even encrypted, is a reckless invitation to disaster. Chris has done a f

Re: [OT] Security question

2016-12-22 Thread Rich Osman
Chris, I compliment you on your succint and accurate summary of the issue. Sounds like Frank's ISP is aspiring to be the next Yahoo... On December 22, 2016 4:33:52 AM CST, Chris Angelico wrote: >On Thu, Dec 22, 2016 at 9:10 PM, Frank Millman >wrote: >> What about the second part of my query? I

Re: [OT] Security question

2016-12-22 Thread Chris Angelico
On Thu, Dec 22, 2016 at 10:10 PM, Frank Millman wrote: > Thanks for all the info, Chris. > > This is clearly a subject you feel strongly about! > > Much appreciated. It is - partly because I've been guilty of poor password security in the past. I speak with the voice of someone who has sighted ho

Re: [OT] Security question

2016-12-22 Thread Frank Millman
"Chris Angelico" wrote in message news:CAPTjJmrG+1==nmoxf6cu2pttgcykgz_dvi36gjaqhqa9daf...@mail.gmail.com... On Thu, Dec 22, 2016 at 9:10 PM, Frank Millman wrote: > What about the second part of my query? Is it acceptable that they keep > passwords on their system in clear text? Well no, abso

Re: [OT] Security question

2016-12-22 Thread Chris Angelico
On Thu, Dec 22, 2016 at 9:10 PM, Frank Millman wrote: > What about the second part of my query? Is it acceptable that they keep > passwords on their system in clear text? Well no, absolutely not. I referred to "decrypting" the password, which is all you can actually be certain of here - they may

Re: [OT] Security question

2016-12-22 Thread Frank Millman
"Chris Angelico" wrote in message news:CAPTjJmoQK39EU=m3w1zr8xa7myv42kyn4mxprgqmye4rga+...@mail.gmail.com... On Thu, Dec 22, 2016 at 8:39 PM, Frank Millman wrote: > To my surprise, they sent me my existing username *and* my existing > password, all in clear text. > Your concerns are entirely

Re: [OT] Security question

2016-12-22 Thread Chris Angelico
On Thu, Dec 22, 2016 at 8:39 PM, Frank Millman wrote: > To my surprise, they sent me my existing username *and* my existing > password, all in clear text. > > """ > Thank you for taking the time to contact [...] Technical Mail Support. > I understand the importance of your password inquiry and wil