topic Re: Plusnet Leaks Your Username to Every Website You Visit by Default in Everything else

Plusnet Leaks Your Username to Every Website You Visit by Default

Bobbyhyam100 — Sun, 23 Feb 2025 14:03:06 GMT

After several months on Plusnet, I realised that they configure a reverse DNS record that includes your username (username.plus.com).

For the less technical folks, what this means is that every website you go to can see what your plusnet username is. If you're using the same username for plusnet as you are using on other sites or if you have personally identifying information in it such as your name, that information is exposed.

I have a static IP with Plusnet so I'm not sure if this also applies to those on dynamic addresses. Perhaps this community knows and can add this in the comments?

When I called to report it, they said they could flip a switch and turn on "private reverse DNS" so that the username is no longer used in the reverse DNS entry. I asked why is it not private by default and was told, "that's above my paygrade".

I find this to be a remarkable privacy issue from an ISP that seems to leak user's data for no reason. They have the capability to protect it and aren't even making any money from it. I don't understand.

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

Baldrick1 — Sun, 23 Feb 2025 14:23:52 GMT

@Bobbyhyam100

This is a 'feature' of static IP addresses used by businesses to advertise that their IP address is correct. It does not apply to dynamic addresses.

To check use this link and select the address for full details: https://whatismyipaddress.com/

It is unfortunately the default setting of Plusnet static addresses. As you say, this can be changed if requested on the Everything Else board.

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

Baldrick1 — Sun, 23 Feb 2025 14:19:05 GMT

Moderator's note:
Thread moved from Full Fibre to Everything Else

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

Townman — Sun, 23 Feb 2025 14:48:17 GMT

This is all a tad alarmist. It is quite normal for one’s domain name to be the rDNS look up as per the domain email address for those having email you@youraccount.plus.com

This only applies to the few users who have chosen to have a static IP address … which is now not an option.

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

RobPN — Sun, 23 Feb 2025 16:19:24 GMT

@Townman wrote:

... the few users who have chosen to have a static IP address … which is now not an option.

Not forgetting of course that in the past a (FREE) static IP address was included as a selling point with certain Plusnet accounts. It was certainly one of the account 'features' which I considered when signing up.

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

Bobbyhyam100 — Sun, 23 Feb 2025 16:28:23 GMT

It’s still free. Just ask for it.

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

jab1 — Sun, 23 Feb 2025 16:37:10 GMT

@Bobbyhyam100 It isn't - as from (I think) late November last year. They no longer offer statics, and when they did there was a £5.00 one-off charge.

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

Townman — Sun, 23 Feb 2025 18:06:33 GMT

@Bobbyhyam100 wrote:
It’s still free. Just ask for it.

Where did you get that 'nugget' of "information" from?

Static IPs have not been free for many years. As advised above, they are not available at all now ... a path which many ISPs using BT's infrastructure have followed.

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

Bobbyhyam100 — Sun, 23 Feb 2025 18:51:05 GMT

My mistake. It was a one-off £5 cost.

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

pvmb — Sun, 23 Feb 2025 23:56:02 GMT

@Townman wrote:
This is all a tad alarmist. It is quite normal for one’s domain name to be the rDNS look up as per the domain email address for those having email you@youraccount.plus.com

This only applies to the few users who have chosen to have a static IP address … which is now not an option.

Nope! At least, not in the past. Several, including myself, had to ask for the rDNS look up to be changed. It was a not uncommon request a couple of years ago on here. I have never asked for or (officially) had a static IP address.

Though my IP address did indeed often prove to be pretty static!

Re: Plusnet Leaks Your Username to Every Website You Visit by Default

Townman — Mon, 24 Feb 2025 08:49:24 GMT

There were explicit and implicit user based decisions which brought about having a static IP address. One such user decision was to use the remote firewall service, which is history.