In reply to a post by RobertoS:

In reply to a post by Oliver341:

Also, if you sign up for a static IP address your username (and therefore surname and initials) will by default be given to every website you visit.

Is that true?

Websites can (and usually do) log the visitor's IP address, and Plusnet's default reverse DNS on static IP addresses is the customer's username.

In reply to a post by Oliver341:

Plusnet's default reverse DNS on static IP addresses is the customer's username.

Ah, I follow you now. That wasn't quite what you said before .

I'll look into that when I remember, but for the moment I'll rely on a somewhat complex password .

In reply to a post by RobertoS:

I'll look into that when I remember, but for the moment I'll rely on a somewhat complex password .

You raised it in February. If I remember rightly Plusnet have no immediate plans to alter the reverse DNS for static IPs away from containing the customer's username (which can, as this thread highlights, contain personal data like a surname).

But, as was also pointed out at the time, it's just a couple of clicks in the Member Centre to change it from the default to one just containing the IP address and Bob has already done that so he doesn't need to worry about it!

I'm glad someone remembers . I remember too, from your post and Oliver's. I don't remember raising the issue here, but no doubt I did the complex password and setting change at the same time. The rDNS on mine shows nnn-nnn-nnn-nnn.plus.com

In reply to a post by kasg:

But, as was also pointed out at the time, it's just a couple of clicks in the Member Centre to change it from the default to one just containing the IP address and Bob has already done that so he doesn't need to worry about it!

Assuming of course the customer is actually finds out what their reverse DNS is in good time, since it's generally something other people see and not the customer themselves.

I don't think Bob realised straight away that his reverse DNS was his username and he wasn't happy about it, probably even less so if his username contained his surname.

I certainly wasn't happy about it. It doesn't contain my surname, but my account password, which is also the broadband login password, was decidedly weak.

Any malicious site, given the username, wouldn't have taken long to crack it.

It really is a bad hole, and I can't believe it would be difficult to alter the default. Plus inform all static IP address holders - that might be a bit more complicated, depending on how their databases are set up.

BB is due to switch 8/8/13. I've never migrated broadband before, as o2 was my first (dialup before) and definitely never moved phone away from BT!

So questions:

1) When Plusnet tell me BB is go and it works ok with their router, do I at that point phone o2 to say I have now been switched to Plusnet so they can refund for unused service? o2 billing date is 14th of month (so I'll have used most of it) and their DD got taken yesterday.

2) When the phone gets switched over 2-3 weeks later apparently, do Plusnet do all the contacting and BT's billing will just stop and get adjusted for a final bill/refund. A BT bill is date 25 July and quarterly DD gets taken on around the 8th Aug. Or do I also need to call them when the switch is complete?

Thanks

Edited by rob54 (Fri 02-Aug-13 23:38:33)

Always best to phone the ISP you have just left as soon as the new one is working. They should be notified by Openreach, but that can fail and O2 think you are still with them. Then things get messy.

Re the phone coming from BT, PlusNet will order the swap from Openreach, and Openreach tell BT Retail that it is being taken away from them.

BT Retail then (should) contact you by whatever email/contact method you have set up and ask you if this is what you want to happen. It's an anti-slamming system for the phone, with the same effect but a different method as MACs for the broadband. I'm not sure what the BT wording is, but if it asks you to say OK then do so. If it just says to let them know if you don't want to leave them then it is best to do nothing.

In reply to a post by RobertoS:

Always best to phone the ISP you have just left as soon as the new one is working. They should be notified by Openreach, but that can fail and O2 think you are still with them. Then things get messy.

OK thanks that's what I thought re BB.

In reply to a post by RobertoS:

BT Retail then (should) contact you by whatever email/contact method you have set up and ask you if this is what you want to happen. It's an anti-slamming system for the phone, with the same effect but a different method as MACs for the broadband. I'm not sure what the BT wording is, but if it asks you to say OK then do so. If it just says to let them know if you don't want to leave them then it is best to do nothing.

OK thanks again. I guess Plusnet can hardly do their switch without having informed BT retail. I'll just make sure I do hear from BT in time!