Wednesday, July 8, 2015

comcast asks for your last 4 social security digits on a page without ssl

Only the last 4?
Well sure, they say some can predict them anyways. But who really wants to increase their chances of identity theft? I don't. It seems comcast did oopsies and doesn't mind if your social is compromised, until they do. This should be encrypted.

http://www.xfinity.com/localize/localizetnssn.aspx?mode=PASMODE&CCT

10 comments:

  1. Tell Comcast CEO not to ask for your SSN or any security questions so that anybody and I mean anybody who knows you, can contact Comcast in behalf of you, without your authorization, to make changes to your account that will make you create an even worse blog like this!!!

    ReplyDelete
    Replies
    1. No, you have it all wrong... Even though authorization is needed to verify all customer accounts people still feel vulnerable with such a shitty, cheap, and deceptive company. But the point is and always will be that these blogs and other sites are needed to reiterate and put the fact out there, that Comcast does indeed, suck big, hairy, sweaty balls!

      Delete
  2. How about they introduce encryption like I said? I'm not suggesting they remove security, I'm suggesting they protect your privacy, which is more security! Do you want your ssn compromised? That's the whole point of the post man, you miserable dumbass!

    ReplyDelete
    Replies
    1. The reps only ask for the last 4 digits of your social over the phone and they can only see those last 4 digits on the account page. However, like I mentioned in the post below, there are worse things to worry about. For example, if an American pisses off a tech support rep in India they could just upgrade your package without your knowledge and create ridiculous charges to a customer's account. Unethical? Yes, absolutely, but if the rep is in India or the Philippines, what do they have to worry about? No one, is going to track those folks over there lol.

      Delete
  3. How the hell can your SSN be compromised when they only ask for the last 4 digits?

    ReplyDelete
  4. I called about a problem I was having with my on demand service 3 times, after the fourth call I found out some idiot changed my whole package from the third call. Now I'm getting charged more . I will cancel my service now . What BS !

    ReplyDelete
  5. So people can already get a basic determination on your social security number using sophisticated algorithms, imagine if they could get 44% of your ssn for free from comcast which happily sends that information over the line without encryption? Do you see my point?

    ReplyDelete
  6. Lol... Well, lets just say I know someone who works as a contractor for Comcast's tech-support. It is a third party company that is signed with Comcast of course, due to the fact that they have multiple and major issues with hiring competent tech support as well as other departments for reasons I can share at a later time.

    Anyway, all that can be seen is the last 4 numerical values of an SSN when a customer's information pops up. The rest of the values are X's. There are various other concerns that I would be worried about (like pissing off a Comcast representative). Besides from what I have noticed is the actual billing departments and service centers screw up most of the customer's social security numbers when opening a new account lol.

    ReplyDelete
  7. Comcast can verify your account by either the last four of your social, which is listed on your account so is accessible for the agent to see anyway OR by the full account number. Comcast corporate can also see everything an agent does so they'd know if your account was compromised.

    ReplyDelete