Live data from Hacker News

Virgin Media (UK) stores passwords in plain text, sends them through the mail

twitter.com

41–50 of 55 posts

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#41

Virgin Media is an ISP, for those who don't know. Perhaps more shockingly, they have a maximum password length of 10 characters, and the first character must be a letter. https://twitter.com/Joshwright10/status/1162811048359014400

Probably to save money on ink for those envelopes with printed passwords!

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#42
When you have a problem and call support, they do the "please enter the 4th digit of your account password" thing to verify you (further evidence that they store it in plaintext). This is particularly fun since my password is only in a password manager, which, if my service is offline, I can't access. So whenever my internet goes out, calling VM support to get them to fix it involves an extra 15 minutes of me arguing with them.

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#44
post #14

Earlier quoted context omitted.

"non-tech-first companies" Is an ISP not tech first? Bell labs is an off shoot of a phone company, early computing was based on the efforts of phone companies. Phone companies, which ISPs are the modern variant are the original tech companies. Edit to add: Virgin maintains a fibre optic network so we aren't just talking about a sales front end to someone else's network.

Yea I know, I considered that someone would raise the fact that they're a telco. It's difficult to articulate what I mean by tech-first, and I don't want to lean on "I know it when I see it", but I'm describing a cluster in thingspace that I think is clear to pretty much everyone here.

I’d say that at heart they’re a utility company rather than a tech company.

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#45

Does anyone else think the Virgin group companies are really bad and are simply baded on good marketing ? My read on Branson himself is that he's DT with actual billions.

The Virgin brand means two things: the company is paying 1% of annual turnover to Virgin Group and Branson himself is happy for the company to carry the brand.

Nothing else links the various Virgin companies. By this stage the brand is basically a convenient way for companies to outsource branding while they get on with whatever their business is.

The problem there is that Virgin used to mean something but it's less meaningful now.

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#46
post #42

When you have a problem and call support, they do the "please enter the 4th digit of your account password" thing to verify you (further evidence that they store it in plaintext). This is particularly fun since my password is only in a password manager, which, if my service is offline, I can't access. So whenever my internet goes out, calling VM support to get them to fix it involves an extra 15 minutes of me arguing…

I’d say that a password manager with no offline caching capability is also a problem, but yeah, Virgin Media (and Virgin Mobile) are complete monkeys. I’ve ended up leaving them for a commercial-grade connection costing almost 10x more just so I don’t have to deal with this bullshit anymore.

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#47
post #42

When you have a problem and call support, they do the "please enter the 4th digit of your account password" thing to verify you (further evidence that they store it in plaintext). This is particularly fun since my password is only in a password manager, which, if my service is offline, I can't access. So whenever my internet goes out, calling VM support to get them to fix it involves an extra 15 minutes of me arguing…

I’d say that a password manager with no offline caching capability is also a problem, but yeah, Virgin Media (and Virgin Mobile) are complete monkeys. I’ve ended up leaving them for a commercial-grade connection costing almost 10x more just so I don’t have to deal with this bullshit anymore.

Also in UK, my local ISP is an offshoot of the local Telco (the only one that didn't merge with BT back when), they are on the pricey end of normal but the service is fabulous and I've had maybe an hour's disruption in 4 years on their fiber.

Their engineers are good as well when I've had to deal with them professionally for work.

It's so hit and miss with other companies I've dealt with though.

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#48
I’m a bit rusty and could be wrong but doesn’t MSCHAPv2/CHAP require knowledge of the plaintext password on the server side? I think that makes it required to be stored plaintext for any PPP connection and thus most if not all ISPs would be storing plaintext passwords

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#49

Earlier quoted context omitted.

Yea I know, I considered that someone would raise the fact that they're a telco. It's difficult to articulate what I mean by tech-first, and I don't want to lean on "I know it when I see it", but I'm describing a cluster in thingspace that I think is clear to pretty much everyone here.

Is We a tech-first company?

I don't know enough about We. Aren't they a real estate company?

Re: Virgin Media (UK) stores passwords in plain text, sends them through the mail

#50

Earlier quoted context omitted.

Is We a tech-first company?

I don't know enough about We. Aren't they a real estate company?

In their S1 they claim they’re SAAS ( “space-as-a-service” )

eyeroll emoji

Post reply on HN