Why does Plusnet store my account password in plain text?

[#1]

Quote from: x47c

BT broadband engineers or remote testing facilities may need to log on as if it was you when using their diagnostic equipment to locate the problem.

BT engineers tend to use generic logins (bt_test_user@realm) or we can provide them with a real test account (not customer details) if required rather than provide customer details.

[#2]

I think it was someone else (not PN) that suggested engineers are sometimes required to login using the customer's credentials. I did think it was somewhat bizarre that that might be the case as it blows a hole right through the whole fundamental purpose of authenticated access.
Mathew

[#3]

Quote from: Chris

I'm not sure where bank details come into this? They are *not* stored in the same way as authentication details and when logging in to our website you can't see full details of them (neither can we here).

Well, I can only hope they are encrypted and the key necessary to decrypt them is not stored in plain text. They are bound to be kept in a related table somewhere, and accessible to the internet in some way.

[#4]

To be fair c0ld, there's enough to worry about with what we know is the case without also worrying about what may or may not! Conjecture is not going to help.
Mathew

[#5]

Quote from: c0ld

You must realise that is is merely your dbms that does the logging.

How do you know this?
I believe that the workplace application does the logging.

[#6]

Can I just advise anyone reading to not make post such as mine. Since making this post, some spiteful shit at plusnet has decided to degrade my connection severely. I can only assume it is plusnet policy to fuck with customers who complain.

[#7]

That statement is complete rubbish. you need to calm down, and also stop been rude to the forum member.(jelv , who spends his own time here helping, as do many others)
If you are having problems with your broadband just ask for help in a polite manner.
You may have a fault, would be useful if you could post your router stats and do a bt speed test, and also post the results of this.
What is your setup like, are you plugged into the master socket?
Regards
Mike
adie:quote

[#8]

We don't store the credit card number.  We store a token for it which is meaningless to anyone barring Plusnet.

[#9]

As all companies are working to PCI compliance then bringing bank details into this is moot.