Eircom Hacked - Are we now safe ?

Canaboid · 23-08-2000 02:28PM #1

So they changed 30,000 passwords. I log on the next day no problems, so i figure I'm one of those not affected. I'm using the old 7digit 62xxxxx number to dial in. Yesterday I decide to use the 1891 number and lo, password incorrect. If my assumption is correct, assuming the hacker got 30,000 usernames and passwords (i'm sure he didn't), they will all still work on the old 7digit number. Eircom were blowing their trumpet all week about the swift measures they took to avert any security risk to users but it looks like they made a b0ll0x of it. Can anyone check and confirm this.

DeVore · 23-08-2000 03:57PM

from an informal Eircom/Indigo rep:

My understanding of the eircomnet set up is that you have to enter
username/password only for the 1891 number. If I knew thew full number it
would be easy to check if any authentication is performed. You do not need a
username/password for AAA on the free service

DeVore.

Bard · 23-08-2000 04:25PM

I didn't think the hacker actually changed all 30,000 passwords, but they merely gained access to them- allowing them potentially to maliciously send and receive emails using any of 30,000 eircom.net customers' account(s) (assuming the dialup username/password and email username/password are the same- which they often are)... which is why I reccommended to my dad to phone up eircom.net and get his password changed.... but he already had his email password set differently to his dialup one, so I guess he's probably ok... the email account passwords weren't hacked, -but it's often a safe assumption that they're the same as the dialup ones.

Bard
|home page

Canaboid · 23-08-2000 04:48PM

You misunderstand Bard. Eircom changed the 30,000 pwds in response to the intrusion. My point is they only changed them on the 1891150150 dialup. If you use the old Ph. number your old password is the one that works suggesting two seperate authentication databases one of which still uses the "compromised" passwords.

DeVore · 23-08-2000 06:49PM

Which old number are you refering to?

You told me 6047000 ... which is the indigo number.

I hope you havent ****ed this up

Tom.

Canaboid · 23-08-2000 08:41PM

Err, ****ed it up ? Yes. Had to get home to check and it's 2171101. Sorry about that.
Anyhoo it's still authenticating my old pwd on that number while the 1891 authenticates my new pwd. So still not plugged as of 8.30pm

jd · 23-08-2000 09:33PM

Sorry to break this to you, but that number is the number for free access. Take out your username and password and it will still let you login

jd

Eircom Hacked - Are we now safe ?

Comments