dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
7
share rss forum feed


dbirdman
Premium,MVM
join:2003-07-07
usa
kudos:5
reply to notech

Re: Other customers can see my infor

said by notech:

"Credit card information was not compromised" - You said "Our emails, address, credit card, past bills etc have been open for this other customer to see"

While I had Hughes service for many years I was never a Hughes customer, so a question to all of those who are: Are you able to see your OWN credit card info when you log in?

That is generally a no-no. Last 4 digits only would be max. If you can see it, they need to be told to reprogram their site. If you can't see it, likely nobody else could either even if two accounts became cross-wired.

Actually, beyond displaying it, the web server shouldn't even have access to the whole number. That should be one-way only, when you put in new information, transmitting to the database, but no way for the web server to read it back from the database in its entirety.
--
Author of hnFAP-Alert, PC-OPI and DSSatTool


notech

join:2013-02-03
Reviews:
·HughesNet Satell..

dbirdman, I am on the old HN9000 and have a different support site. This site does not display any billing information beyond invoices that only say "paid with credit card". Gen4 customers have a different site. I totally agree on everything you say.