Not only does Plusnet store passwords in plain text, call centre employees can see that plaintext when you call in http://www.theregister.co.uk/2015/11/25/plusnet_still_delivering_passwords_plaintext/ …
That's how Plusnet verifies your identity over the phone. They ask for a few characters from your password, verbally.
-
-
Usually one or two of the first five or six characters, so the customer doesn't have to count too far, apparently
-
So a Plusnet call centre employee could just log in as any customer, see their email, etc.
- 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.