cancel
Showing results for 
Search instead for 
Did you mean: 

Reverse IP reveals username - a routine privacy violation and security risk

FIXED
SixCopperKs
Newbie
Posts: 3
Thanks: 1
Registered: ‎19-04-2022

Reverse IP reveals username - a routine privacy violation and security risk

Looks like this is a very old favourite. Each time it requires Plusnet intervention, and yet it keeps happening.

I noticed my IP address for at least 2-3 days, possibly weeks, has been revealing my Plusnet username.

My plusnet username is personally identifiable information — so it's protected under GDPR.

When I created a username, I never consented for Plusnet to put it on all my web browsing for every marketing organisation and advertiser to see.

For example: [  dig 1.128.229.80.in-addr.arpa ptr ]  reveals my username.plus.com (no, that is not my current IP)

I don't have static IP. I haven't got weird firewall settings.

Plusnet has control over the registration of in-addr.arpa records, not me.

Even if I were to change my plusnet username so that it didn't include my real name, it still is an unchanging identifier which  effectively deanonymises me and my family.

I see this applies to lots of other Plusnet customers — just from a quick random look.

Anyone got any suggestions, please?

6 REPLIES 6
C1Rider
Grafter
Posts: 190
Thanks: 4
Registered: ‎06-01-2015

Re: Reverse IP reveals username - a routine privacy violation and security risk

Plusnet can change your user name to your ip address if you ask them.

 

Regards..

 

Baldrick1
Moderator
Moderator
Posts: 11,700
Thanks: 5,203
Fixes: 418
Registered: ‎30-06-2016

Re: Reverse IP reveals username - a routine privacy violation and security risk


Moderators Note

This topic has been moved from Tech Help To Everything Else

Moderator and Customer
If this helped - select the Thumb
If it fixed it,  help others - select 'This Fixed My Problem'

LaurenB
Plusnet Help Team
Plusnet Help Team
Posts: 2,577
Thanks: 508
Fixes: 131
Registered: ‎07-12-2017

Re: Reverse IP reveals username - a routine privacy violation and security risk

Hiya @SixCopperKs, thanks for getting in touch. 

 

I'm sorry for the concern caused by your rDNS and would like to do what I can to help resolve your query Smiley

 

We can look to change your rDNS for you and I have created a ticket here: https://www.plus.net/wizard/?p=view_question&id=223739849 if you can please reply on the ticket with what you'd like it amended to (and give me a nudge on here once you've added your reply) I can get that raised to our Net Ops Team for you Smiley

If this post resolved your issue please click the 'This fixed my problem' button
 Lauren Barry
 Plusnet Help Team
SixCopperKs
Newbie
Posts: 3
Thanks: 1
Registered: ‎19-04-2022

Re: Reverse IP reveals username - a routine privacy violation and security risk

Thanks for the swift reply Lauren, I've replied to the ticket.

I remain concerned (for others) that the default is the username, but I'll follow that up later when I feel more sure.

SixCopperKs
Newbie
Posts: 3
Thanks: 1
Registered: ‎19-04-2022

Re: Reverse IP reveals username - a routine privacy violation and security risk

Thanks, @C1Rider , much appreciated.

As @LaurenB  has raised a ticket for me now, I've responded to that.

My privacy concern is that there's no warning that the username you choose when you sign up will be the one attached to your PTR reverse-IP records. Handy for diagnosing email issues maybe, but worrying for advertising/tracking/profiling.

Other ISPs just throw their domestic customers into big pools of CG-NAT and the internet IP address seems to last for a matter of hours. A Plusnet IP address seems to last for far longer. (Five+ days since my last reboot…!)

If it wasn't for the lack of privacy, this might even be a sort-of dynamic DNS….

LaurenB
Plusnet Help Team
Plusnet Help Team
Posts: 2,577
Thanks: 508
Fixes: 131
Registered: ‎07-12-2017

Re: Reverse IP reveals username - a routine privacy violation and security risk

Fix

Thank you for getting back to me. 

 

I have now picked up the ticket and have got that raised for you Smiley The team will aim to get to the request as soon as they can, though we do advise to allow 3-5 working days. 

 

Should you have any further queries, please do just get back to me.

If this post resolved your issue please click the 'This fixed my problem' button
 Lauren Barry
 Plusnet Help Team