cancel
Showing results for 
Search instead for 
Did you mean: 

PlusNet Login Details - Variation Please

Thunderclap
Grafter
Posts: 673
Registered: ‎08-09-2008

PlusNet Login Details - Variation Please

Hi,
to improve the security of both customer network and customer information, I would like to suggest that PlusNet have different username and password combinations for the ADSL router login and, or, account mangement.
At the moment, a router's username and password are too much like the customer's PlusNet account login. Either by design or, by user omission, not all routers are as secure at holding their information as they should be. Which I believe is a potential risk to all customer's data security. Furthermore, as everyone's personal domain names are shared in the public domain, it does not take rocket science to figure out one-half of the login combination!
From what I have seen elsewhere, PlusNet is probably the only ISP that has the same login values for router and customer administration.
Maybe customers could have the option to assign an alias login code for their ADSL router and, account management?
Regards,
Thunderclap
Edit: Thanks for your feedback guys. Indeed, my router of a well respected brand does indeed, store my PN password in clear text in the config.bak file. The issue is that although tech-heads may apply multi-layer asymetric DES encryption to just about everything in Middle Earth, the average family user will not even know what encryption is. Let alone why it is? I believe that by aggregating router login, customer account login and public domain names under the same value is not as secure as it could be for all users.
Thunderclap AKA Hey, you really think I'm going to give out my real PN name?

BTW I'd still recommend PN to a friend.
4 REPLIES 4
Oldjim
Resting Legend
Posts: 38,460
Thanks: 741
Fixes: 63
Registered: ‎15-06-2007

Re: PlusNet Login Details - Variation Please

i must admit to being a bit confused.
My router login is totally different and additional to the login for Plusnet ADSL service also the Plusnet login in the router is hidden - I don't know how easy it is to extract that.
chillypenguin
Grafter
Posts: 4,729
Registered: ‎04-04-2007

Re: PlusNet Login Details - Variation Please

I can sort of see Thunderclaps point, many routers can backup their settings as a plain text file, this will include your ADSL username and password.
If you have left your router password as default and have remote administration enabled, it is possible to find another users portal login details.
But it does rely on not following basic security precautions, of changing your router password and only enabaling remote administration if it is required (and using as `secure` a password as possible).
Oldjim
Resting Legend
Posts: 38,460
Thanks: 741
Fixes: 63
Registered: ‎15-06-2007

Re: PlusNet Login Details - Variation Please

Your right - creating a backup with my link:censored has everything in plain text
cp:green In hindsight best not to give out brand names. mod:end
chillypenguin
Grafter
Posts: 4,729
Registered: ‎04-04-2007

Re: PlusNet Login Details - Variation Please

Jim, I have removed the example brand name for our posts, as it isn't a great idea to publish which brands of router have this weakness feature.
I know that the brand we have discussed are aware of this `feature` as their professional versions don't save the passwords in the config file.