Eircom Hacked - Are we now safe ?

Canaboid

So they changed 30,000 passwords. I log on the next day no problems, so i figure I'm one of those not affected. I'm using the old 7digit 62xxxxx number to dial in. Yesterday I decide to use the 1891 number and lo, password incorrect. If my assumption is correct, assuming the hacker got 30,000 usernames and passwords (i'm sure he didn't), they will all still work on the old 7digit number. Eircom were blowing their trumpet all week about the swift measures they took to avert any security risk to users but it looks like they made a b0ll0x of it. Can anyone check and confirm this.

DeVore

from an informal Eircom/Indigo rep:

My understanding of the eircomnet set up is that you have to enter
username/password only for the 1891 number. If I knew thew full number it
would be easy to check if any authentication is performed. You do not need a
username/password for AAA on the free service

DeVore.

Bard

I didn't think the hacker actually changed all 30,000 passwords, but they merely gained access to them- allowing them potentially to maliciously send and receive emails using any of 30,000 eircom.net customers' account(s) (assuming the dialup username/password and email username/password are the same- which they often are)... which is why I reccommended to my dad to phone up eircom.net and get his password changed.... but he already had his email password set differently to his dialup one, so I guess he's probably ok... the email account passwords weren't hacked, -but it's often a safe assumption that they're the same as the dialup ones.

---

Bard
|home page

Canaboid

You misunderstand Bard. Eircom changed the 30,000 pwds in response to the intrusion. My point is they only changed them on the 1891150150 dialup. If you use the old Ph. number your old password is the one that works suggesting two seperate authentication databases one of which still uses the "compromised" passwords.

DeVore

Which old number are you refering to?

You told me 6047000 ... which is the indigo number.

I hope you havent ****ed this up

Tom.

Canaboid

Err, ****ed it up ? Yes. Had to get home to check and it's 2171101. Sorry about that.
Anyhoo it's still authenticating my old pwd on that number while the 1891 authenticates my new pwd. So still not plugged as of 8.30pm

jd

Sorry to break this to you, but that number is the number for free access. Take out your username and password and it will still let you login

jd