topic PlusNet Login Details - Variation Please in Plusnet Feedback

PlusNet Login Details - Variation Please

Thunderclap — Sat, 25 Oct 2008 07:55:39 GMT

Hi,
to improve the security of both customer network and customer information, I would like to suggest that PlusNet have different username and password combinations for the ADSL router login and, or, account mangement.
At the moment, a router's username and password are too much like the customer's PlusNet account login. Either by design or, by user omission, not all routers are as secure at holding their information as they should be. Which I believe is a potential risk to all customer's data security. Furthermore, as everyone's personal domain names are shared in the public domain, it does not take rocket science to figure out one-half of the login combination!
From what I have seen elsewhere, PlusNet is probably the only ISP that has the same login values for router and customer administration.
Maybe customers could have the option to assign an alias login code for their ADSL router and, account management?
Regards,
Thunderclap
Edit: Thanks for your feedback guys. Indeed, my router of a well respected brand does indeed, store my PN password in clear text in the config.bak file. The issue is that although tech-heads may apply multi-layer asymetric DES encryption to just about everything in Middle Earth, the average family user will not even know what encryption is. Let alone why it is? I believe that by aggregating router login, customer account login and public domain names under the same value is not as secure as it could be for all users.
Thunderclap AKA Hey, you really think I'm going to give out my real PN name?
BTW I'd still recommend PN to a friend.

Re: PlusNet Login Details - Variation Please

Oldjim — Sat, 25 Oct 2008 08:48:26 GMT

i must admit to being a bit confused.
My router login is totally different and additional to the login for Plusnet ADSL service also the Plusnet login in the router is hidden - I don't know how easy it is to extract that.

Re: PlusNet Login Details - Variation Please

chillypenguin — Sat, 25 Oct 2008 09:21:31 GMT

I can sort of see Thunderclaps point, many routers can backup their settings as a plain text file, this will include your ADSL username and password.
If you have left your router password as default and have remote administration enabled, it is possible to find another users portal login details.
But it does rely on not following basic security precautions, of changing your router password and only enabaling remote administration if it is required (and using as `secure` a password as possible).

Re: PlusNet Login Details - Variation Please

Oldjim — Sat, 25 Oct 2008 09:27:55 GMT

Your right - creating a backup with my link:censored has everything in plain text
cp:green In hindsight best not to give out brand names. mod:end

Re: PlusNet Login Details - Variation Please

chillypenguin — Sat, 25 Oct 2008 09:38:27 GMT

Jim, I have removed the example brand name for our posts, as it isn't a great idea to publish which brands of router have this ~~weakness~~ feature.
I know that the brand we have discussed are aware of this `feature` as their professional versions don't save the passwords in the config file.