Feeds

Vodafone shares subscriber info with world+dog

For your convenience

Remote control for virtualized desktops

Vodafone has been caught taking liberties with customers' email accounts, and it seems at least some of the customers aren't happy about the practice.

The problem is with the password reminder feature on the “My account” section of the carrier's website. All you have to do is enter the phone number of the person you're interested in. If he's got an online account, Vodafone gladly gives up his email address. The Reg was able to test the feature and it worked as described.

“There is nothing to stop a determined spammer from entering thousands of numbers and getting a long list of email addresses,” Vodafone subscriber Terence Eden writes here. “Nothing to stop a fraudster from sending you an email to an address you only use with Vodafone. Nothing to stop you finding out that your boss’s email is IlikeBigButts@example.com.”

Several Reg readers who have left comments to this article have pointed out that the remind me feature also returns phone numbers and email addresses that correspond to user names. Indeed, a quick test showed it wasn't that hard to guess valid names. Vodafone is so generous, it seems, that it shares details of ex-subscribers as well, according to a comments left by people claiming to have ported phone numbers from Vodafone to a competing carrier.

The flaw is by no means as bad as a similar one found last month on Facebook, which spilled name and pic for all 500 million of its users. But it stems from the same kind of careless thinking.

We wouldn't be surprised to see it fixed in short order. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
Mighty Blighty broadbanders beg: Let us lay cable in BT's, er, ducts
Complain to Ofcom that telco has 'effective monopoly'
Download alert: Nearly ALL top 100 Android, iOS paid apps hacked
Attack of the Clones? Yeah, but much, much scarier – report
Broadband sellers in the UK are UP TO no good, says Which?
Speedy network claims only apply to 10% of customers
Yahoo! blames! MONSTER! email! OUTAGE! on! CUT! CABLE! bungle!
Weekend woe for BT as telco struggles to restore service
Fujitsu CTO: We'll be 3D-printing tech execs in 15 years
Fleshy techie disses network neutrality, helmet-less motorcyclists
Facebook, working on Facebook at Work, works on Facebook. At Work
You don't want your cat or drunk pics at the office
Soz, web devs: Google snatches its Wallet off the table
Killing off web service in 3 months... but app-happy bonkers are fine
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Seattle children’s accelerates Citrix login times by 500% with cross-tier insight
Seattle Children’s is a leading research hospital with a large and growing Citrix XenDesktop deployment. See how they used ExtraHop to accelerate launch times.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?