Home
 » ISP News » 
Sponsored

UK ISP Eclipse Internet Fails to Hide User Password via Account Page

Tuesday, January 21st, 2014 (2:14 pm) - Score 1,200

Internet providers take note; a wide gaze is being cast across your security measures. The latest ISP to feel the heat is KC’s sibling Eclipse Internet, which makes no attempt to hide their customer’s user password when they login to check the broadband providers online account pages.

Admittedly this isn’t nearly as bad as KC’s own recent engineer security gaffe (here) or EE’s hacked-to-bits router shenanigans (here), yet it is still a problem and one that the ISP itself appears to have no problems with.

A Spokeswoman for Eclipse Internet said (The Register):

Customers can view their password within our secure Eclipse customer portal only after they have logged in using their user name and password to authenticate their details. During the login process the password is not visible in plain text.”

Most reputable ISPs know that the password field in any form should generally be replaced with stars (not shown as plain text), unless the end-user specifically elects to uncover the field (web browser often give this option when typing your password into a box). One reason why this is desirable is to help prevent over-the-shoulder style data snooping by a third party.

But in Eclipse’s case the user password (note: not DSL password) becomes visible to anybody looking at the monitor when customers browse to their “User Details” page. We’re sure that Eclipse aren’t the only company to make little mistakes like this and it can make life easier for the user, although it’s also a risk and a few simple tweaks might easily make the form more secure.

Meanwhile as a rule we’d always recommend not even accessing private pages or account details until you’re on a home PC where the environment is hopefully more controlled. At the end of the day nothing is 100% secure but a little prudence goes a long way to keeping your vital data safe from prying eyes.

Leave a Comment
0 Responses

Comments are closed.

Comments RSS Feed

Javascript must be enabled to post (most browsers do this automatically)

Privacy Notice: Please note that news comments are anonymous, which means that we do NOT require you to enter any real personal details to post a message. By clicking to submit a post you agree to storing your comment content, display name, IP, email and / or website details in our database, for as long as the post remains live.

Only the submitted name and comment will be displayed in public, while the rest will be kept private (we will never share this outside of ISPreview, regardless of whether the data is real or fake). This comment system uses submitted IP, email and website address data to spot abuse and spammers. All data is transferred via an encrypted (https secure) session.

NOTE 1: Sometimes your comment might not appear immediately due to site cache (this is cleared every few hours) or it may be caught by automated moderation / anti-spam.

NOTE 2: Comments that break our rules, spam, troll or post via known fake IP/proxy servers may be blocked or removed.
Cheapest Superfast ISPs
  • Hyperoptic £19.95 (*22.00)
    Avg. Speed 50Mbps, Unlimited
    Gift: Promo Code: HYPER20
  • NOW TV £22.00 (*40.00)
    Avg. Speed 36Mbps, Unlimited
    Gift: None
  • SSE £22.00
    Avg. Speed 35Mbps, Unlimited
    Gift: None
  • xln telecom £22.74 (*47.94)
    Avg. Speed 66Mbps, Unlimited
    Gift: None
  • Vodafone £22.95
    Avg. Speed 35Mbps, Unlimited
    Gift: None
Prices inc. Line Rental | View All
The Top 20 Category Tags
  1. BT (2690)
  2. FTTP (2532)
  3. FTTC (1739)
  4. Building Digital UK (1679)
  5. Politics (1574)
  6. Openreach (1538)
  7. Business (1356)
  8. FTTH (1277)
  9. Statistics (1188)
  10. Mobile Broadband (1157)
  11. Fibre Optic (1033)
  12. 4G (1000)
  13. Ofcom Regulation (985)
  14. Wireless Internet (985)
  15. Virgin Media (962)
  16. EE (666)
  17. Sky Broadband (649)
  18. TalkTalk (631)
  19. Vodafone (624)
  20. 5G (460)
Promotion
Helpful ISP Guides and Tips
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms , Privacy and Cookie Policy , Links , Website Rules , Contact