All Zen Internet passwords sent insecurely.

I've noticed that Zen Internet routinely sends all of their
ADSL passwords to customers via insecure email.

They do not seem to offer their customers any secure way to
change their passwords , only via insecure telephone or
insecure fax.

Don't at least some ISP's allow the setting of , display of ,
and/or changing of passwords through a secure https/SSL
connection?

Anonymous Sender wrote:
> I've noticed that Zen Internet routinely sends all of their
> ADSL passwords to customers via insecure email.

Agreed - all ours have come by this method so far. But the control
account online is secure although I can't see an option to change the
ADSL password.

> They do not seem to offer their customers any secure way to
> change their passwords , only via insecure telephone or
> insecure fax.
>
> Don't at least some ISP's allow the setting of , display of ,
> and/or changing of passwords through a secure https/SSL
> connection?

AAISP does - and we always change the default they allocate us.

Anonymous Sender wrote:
> I've noticed that Zen Internet routinely sends all of their
> ADSL passwords to customers via insecure email.
>
> They do not seem to offer their customers any secure way to
> change their passwords , only via insecure telephone or
> insecure fax.
>
> Don't at least some ISP's allow the setting of , display of ,
> and/or changing of passwords through a secure https/SSL
> connection?

Not sure I see a problem as I have never understood why you have a password
on an ADSL connection, you can only connect from the line that is enabled. I
can't connect on your ADSL account from my line even if I know the password.

Mark BR

On 15 Sep 2006, "Mark BR" <(E-Mail Removed)> wrote:

>Not sure I see a problem as I have never understood why you have a password
>on an ADSL connection, you can only connect from the line that is enabled. I
>can't connect on your ADSL account from my line even if I know the password.

I think you'll find you *might* be able to, depending on which ISPs are in
use by the two line renters. For example, a friend's dad has had no ADSL
connection for a few days. Since I use the same ISP, his router was tested
on my phone line (no need for me to alter the PPP login information) and
his router worked fine all day on my line.

So we knew the router was not the cause of a problem.

Agreed, if the other person was on Zen, then knowing the details would not
allow *me* a connection (as my ISP is not Zen), but some other Zen user, if
they had the login information, could use up another customer's monthly
quota, or even cost that other user real money if exceeding a d/l quota.

It would be quite quickly detected, and could be traced and stopped, of
course, but to claim "I cannot connect" is a little more complicated than
at first glance and while some ISPs might have some other authentication
system, if Zen is like the majority, then some other Zen user's line might
well be able to establish a connection.

In article <450aea15$0$97259$(E-Mail Removed) ews.net>,
"Mark BR" <(E-Mail Removed)> writes:
>
> Not sure I see a problem as I have never understood why you have a password
> on an ADSL connection, you can only connect from the line that is enabled. I
> can't connect on your ADSL account from my line even if I know the password.

This isn't true. You can normally connect as any customer of your
ISP using their username and password, and you can sometimes connect
to other ISPs.

--
Andrew Gabriel

Andrew Gabriel wrote:
> In article
> <450aea15$0$97259$(E-Mail Removed) ews.net>,
> "Mark BR" <(E-Mail Removed)> writes:
>>
>> Not sure I see a problem as I have never understood why you have a
>> password on an ADSL connection, you can only connect from the line
>> that is enabled. I can't connect on your ADSL account from my line
>> even if I know the password.
>
> This isn't true. You can normally connect as any customer of your
> ISP using their username and password, and you can sometimes connect
> to other ISPs.

That isn't entirely true as some end users services have/were
restricted to their telephone number (I've had to deal with a few
cockups about this in the past)..

kráftéé wrote:
> Andrew Gabriel wrote:
> > In article
> > <450aea15$0$97259$(E-Mail Removed) ews.net>,
> > "Mark BR" <(E-Mail Removed)> writes:
> > >
> > > Not sure I see a problem as I have never understood why you have a
> > > password on an ADSL connection, you can only connect from the line
> > > that is enabled. I can't connect on your ADSL account from my line
> > > even if I know the password.
> >
> > This isn't true. You can normally connect as any customer of your
> > ISP using their username and password, and you can sometimes connect
> > to other ISPs.
>
> That isn't entirely true as some end users services have/were
> restricted to their telephone number (I've had to deal with a few
> cockups about this in the past)..

I thought this was the normal with ADSL - so I live and learn!

Thanks

Mark BR