Security Stupidity

[jlangdale]

I just want to say I think it's highly stupid of Public Mobile to have customers giving their information to "Moderators" on a forum system to address issues, where by identity/authentication information will be kept in PM messages that could be hacked one day.

This is a good way to screw over your company if you're hacked.

[jlangdale]

Right, I typically use the online chat for basic things and questions. But if they want to verify my identity, I tyipically call in so the information is given verbally and not stored.

[srlawren]

@jlangdale here's what we know: http://productioncommunity.publicmobile.ca/t5/Knowledge-Base/All-you-need-to-know-about-our-Communit...

Regarding your concerns about lingering private messages, I would again say it's no less secure than old Facebook Messenger, Twitter DM, or proprietary live chat history used by other providers. The main difference is at least with those providers, you do have other avenues such as a call centre.

[jlangdale]

I wasn't sure. Are Moderators on this service official salaried employees of Public Mobile? Or are they something else?

Regardless, it's not a good idea to keep copies of this authentication information in the PM messages. It cannot be deleted.

[srlawren]

@jlangdale are you aware that they are PMs official support staff?

[jlangdale]

After reading the comments, I have to say I disagree with them. I think the point I raised is still a very good one. I think having "moderators" pass on user information raises issues that would be best avoided.

Just my two cents for what it's worth. I'm just a customer giving feedback. But I get the sense that your online group is some sort of clique fan club of "power customers."

[srlawren]

@jlangdale you're welcome to voice your opionions, as you have been doing.  I'm going to go ahead and voice mine and say that I think you might want to look around for another provider.  It doesn't seem you're happy with much/anything about how PM operates.  This is the support model they've gone with.  You don't really get a vote, sorry.  If you don't like it, vote with your wallet, and move on.

That said, do you think that online chat offered by some wireless brands, or Facebook messenger offered by some, or Twitter DMs, are any better off than the public messaging system here in terms of security?  PM didn't roll their own community software, they're using the Lithium system, which is a fairly mature online community system.  I'm not saying it's impervious to attack--there's no system on the planet that is.  But this is the model being used here.  If you're not comfortable with it, look at other carriers where you can call them up and give them your personal info by phone instead when you need support.

[jp2]

Is it really that much different than having personal information on any other site such as Google, Bell, etc. If the company gets hacked your info is out at risk. FYI Bell has been hacked twice recently 

[Luddite]

If you have security concerns just pay for service with vouchers. Except for whatever you entered when activating, Public Mobile then has no info about you at all.