Menu
Reply
  • 7
  • 1
  • 1
tim11pop
Tuning in
612 Views
Message 1 of 9
Flag for a moderator

SuperHub3 - plain text password

Hello All,

I've just upgraded to the 300Mb/s plan and got the new SuperHub. To my surprise, when I got it and set the password, it's actually shown instead of encrypted like, well, just about every password box on the internet.

Does everyone else have this? According to the info page, I'm on:

Software version : 9.1.88T

0 Kudos
Reply
  • 21K
  • 771
  • 1.56K
Forum Team
Forum Team
584 Views
Message 2 of 9
Flag for a moderator

Re: SuperHub3 - plain text password

Hi tim11pop, 

 

Thanks for your post Smiley Happy

 

We hope you're enjoying your new connection. 

 

When you refer to your password, which one are you talking about? The one used to join the wifi network? The one you use to sign in to your Virgin Media Router? Or something else? 

 

All passwords are safe and secure so there's no need to worry about anything being unsafe Smiley Happy 

 

Let us know so we can offer further advice. 

 

Thanks,

Kath_F
Forum Team

Tech fan? Have you read our Digital life blog yet? Check it out



0 Kudos
Reply
  • 7
  • 1
  • 1
tim11pop
Tuning in
582 Views
Message 3 of 9
Flag for a moderator

Re: SuperHub3 - plain text password

It's the password to login to the router. When you navigate to your router login page and enter in your password it just shows the password.

This is a pretty big bug and I'm a bit surprised that this actually got through any testing.
  • 12.48K
  • 353
  • 1.45K
Forum Team
Forum Team
561 Views
Message 4 of 9
Flag for a moderator

Re: SuperHub3 - plain text password

Hi tim11pop,

I do understand your concerns about this though as the password would only be entered during the confines of the home (as opposed to an Internet cafe for example) the risk of 'over the shoulder' peeping is relatively minimal.

Any Hub improvement suggestions that have been previously presented to the firmware team will most likely be dealt with in future firmware updates. 

Thanks for reporting this, I'll make sure it gets flagged up the right persons.

All the best,


Jen
Forum Team



0 Kudos
Reply
  • 20.53K
  • 542
  • 3.16K
Sephiroth
Alessandro Volta
557 Views
Message 5 of 9
Flag for a moderator

Re: SuperHub3 - plain text password

I tell you, I didn't want to struggle with the password rules and I left my GUI password as issued with the modem. It's a home device, after all.

Seph - ( DEFROCKED - My advice is at your risk)

0 Kudos
Reply
  • 1
  • 0
  • 1
grller
Joining in
462 Views
Message 6 of 9
Flag for a moderator

Re: SuperHub3 - plain text password

I couldn't believe this when I saw it (IE and Chrome) - yes, shoulder surfing isn't a huge issue in my house but it's the principal of it and if someone doesn't consider security here, it begs the question as to where else will they not consider it.

  • 4
  • 0
  • 1
Hypercubed
Tuning in
445 Views
Message 7 of 9
Flag for a moderator

Re: SuperHub3 - plain text password

Virgin's response to this is quite frankly a very lame cop out. The SuperHub 2 password is hidden and it's quite standard protocol to hide passwords on any login screen regardless whether it's being used at home or not - you cannot (and shouldn't) make that assumption anyway. Just admit that the engineers who implemented this haven't got a clue and stop trying to justify it.

  • 9
  • 0
  • 2
RussPitcher
Tuning in
413 Views
Message 8 of 9
Flag for a moderator

Re: SuperHub3 - plain text password

I'm sorry, that's a terrible answer.  I got my SuperHub 3 installed today and I'm astounded that the password is in clear text when you enter it.  Home use or not, that's a terribly bad security practice and as an IT professional I'm horrified at it.  I can imagine that it might have cut down on a few support calls from fat-fingered users, but a simple '[ ] reveal password' checkbox would have been much more suitable and provided security by default.  

PLEASE change this - You simply need to change the HTML from <input type='text'> to <input type='password'>.  It's that simple and there are NO excuses for this lousy practice!

  • 1
  • 0
  • 1
will130
Joining in
149 Views
Message 9 of 9
Flag for a moderator

Re: SuperHub3 - plain text password

I must admit I was also surprised when I typed in my password especially when you consider this can be made remotely accessible - not that it or any port forwarding works on the hub3 - looks like I'm going back to my 2ac hub that actually works and has better security - ill keep the hub 3 as a dumb router.