cancel
Showing results for 
Search instead for 
Did you mean: 

Major UK ISPs, Privacy and security audit.

Midnight_Caller
Rising Star
Posts: 4,143
Thanks: 7
Fixes: 1
Registered: 15-04-2007

Major UK ISPs, Privacy and security audit.

Value Security & Privacy?
We entrust our security & privacy with thousands of firms online, but how safe are they?
Some of the results:
Quote
Critical Issues

TalkTalk

Database Credential Leak

Quote
Serious Issues
Plusnet

Cross Site Request Forgery / My Account
RFC 2142 / Obtained Genuine TLS Certificate

EE

Cross Site Request Forgery / My Account
RFC 2142 / Obtained Genuine TLS Certificate
TalkTalk
TalkTalk Firmware update pages serve malware
Webmail credentials sent over HTTP post-breach
Account credentials sent over HTTP post-breach
Lied about periodicity of Information Commissioner's Office auditing

Sky
Cross Site Request Forgery / My Account 

lLnk  <- See link for more detailed comparisons including Virgin and BT who are also not without issues.
4 REPLIES
Community Veteran
Posts: 18,545
Thanks: 190
Registered: 12-08-2007

Re: Major UK ISPs, Privacy and security audit.

A positive action from Plusnet which you didn't show:
Quote
BT / Plusnet
Within hours of my initial email, both BT & Plusnet called to acknowledge receipt and outline their plan of action. Both companies have remained in touch, supplying very detailed updates about how they intend to move forward with the recommendations.
I remain thoroughly impressed by their professional and remarkably candid approach and wouldn't hesitate using either service in future.
Community Veteran
Posts: 4,746
Thanks: 1,045
Fixes: 27
Registered: 16-10-2014

Re: Major UK ISPs, Privacy and security audit.

And then there's this:
Community Veteran
Posts: 26,373
Thanks: 630
Fixes: 8
Registered: 10-04-2007

Re: Major UK ISPs, Privacy and security audit.

I wonder if they told him when we'll be getting SSL/TLS email?
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£13/month)
Mobile: iD mobile (£4/month)
Community Veteran
Posts: 26,373
Thanks: 630
Fixes: 8
Registered: 10-04-2007

Re: Major UK ISPs, Privacy and security audit.

One thing that stands out from that audit is that "Believe in better" is a true claim!
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£13/month)
Mobile: iD mobile (£4/month)