Plusnet on The Register

[#1]

Hi, guys
Have a quick look at http://www.theregister.co.uk/2014/01/22/plusnet_new_customer_signup_page_transmits_unencrypted_detai...
I don't like seeing PN being "told off" in the press so you'd better start fixing this soon
André

[#2]

Thanks, we've seen the article and I've flagged it up internally too.

[#3]

Hey guys, just on the two things raised in that article:
1) Passwords are stored encrypted in the database.
2) We are urgently working to fix the lack of https in the sign up process.

[#4]

Pretty weak encryption if it can be reversed so that the agent can ask for characters from the password when we ring up!

[#5]

Jelv, you're mixing up encryption and hashing:  http://www.danielmiessler.com/study/encoding_encryption_hashing/

[#6]

Wow, The Register is having a good day with PlusNet today
http://www.theregister.co.uk/2014/01/22/plusnet_network_filter_to_block_pirate_sites_censor_access/
Now, then. Couple of questions which seem of paramount importance to me:
1 - Is this censorship voluntary? IE, can I enable different levels of censorthip or disable it altogether?
2 - Are you guys REALLY going down the DPI route? Because as much as I love PlusNet, is will be out of here liek a flash if you start spying on my usage like that...
Enquiring minds most certainly DO want to know!
André

[#7]

Topics merged.

[#8]

1. The current censorship is unblockable, short of using an off network proxy.
2. Plusnet already does DPI, it's how the traffic management works.

[#9]

The El Reg story seems to conflate Parental Controls and blocking sites with 'pirate' content.
I don't see how anyone can have problem with networks conforming with court orders regarding copyright material.
On the other hand, I also don't see why networks (or the government) should automatically impose Parental Controls on internet access when the majority of households don't have children.  Looks like PN won't have much say in it, of course given Cameron technically illiterate proposals.

[#10]

Kelly, after you've fixed that, any chance of having FTP as Secure FTP?
I am also aware that router login, FTP login and user account login all use the same ID and password.

[#11]

Quote from: WTF

The El Reg story seems to conflate Parental Controls and blocking sites with 'pirate' content.

Ish. I don't think it's 100% clear.  ISPReview have picked that up that way though
If you were doing then parental controls with an in-line network device, you could do both at that level.  If the parental controls are DNS based, you couldn't.  It's all down to final design.

[#12]

To be fair, the details of how you do it are fairly irrelevant. What I would like is the ability to turn it off or tailor it to my circumstances.
There are no children in my house but it should be up to me as a responsible parent to decide and chose whether I would like content control done by Big Brother or whether to turn it off and, you know, educate my kids myself...

[#13]

We're still at planning stages, so nothing is defined but I find it very hard to believe we'd deliver something which you couldn't turn off (or have to turn on... I'm not being specific on this just based around the Government position around 'active choice plus' etc)

[#14]

That's cool, tahnks for clarifying your position, Kelly
I'm sure PN will let us know more about this when the time comes.
I must admit the whole thing is really starting to make me rather uncomfortable...

[#15]

David Cameron isn't a fan of youporn.