Thank you HarryB, look forward to the results of your investigation.
Indeed EJS, the password for our online account should NOT be the same as for our Broadband access, as this password can be 'sniffed' or otherwise recovered and then used to log into our on-line accounts, this is surly a very high security risk, with the attach on TalkTalk very recently, (my previous supplier, thankfully my data wasn't stolen) my anxiety level is Very high, I am a software developer with experience in the area of security and I can see that there is a security hole here that needs to be closed before another school kid decides to take advantage of it
While you might not store them as plain text, they are being decrypted, this shouldn't be possible, they should be hashed and salted, then a comparison performed to compare patterns, they should not be retrievable and most certainly not printed in letters!
Our online account have our bank, home and personal details, this would allow anyone who comprised your system to use this data illegally, I surely don't have to highlight how much damaging this would be, maybe over reacting but, as I said I've been bitten before by poorly secured systems, I don't want to be a victim of another, I need reassurance, backed up with evidence that your systems are secure, ie, do you run penetration tests, security checks, monitoring, etc?
