VERIZON WEB E-MAIL VULNERABLE MY ACCOUNT WAS HACKED INTO
tiara320
Contributor - Level 2

I guess the service  is continually going down hill Web Based Email vulnerable to Hacking. 

 I've had nothing but issues this past month 1ST  with TV AP WIDGET STILL NOT SHOWING UP AFTER 1  MONTH PLUS; That service I really valued.

TV cuts out when watching programs on TV or DVR changed DVRS 2-3 times past 2 years and now my Verizon Email Web Based E-Mail was Hacked into. But Verizon has no problem with continuing Increases in monthly bill Twice this past year; yet the service is really going down hill. I've been with Verizon for 4 years; Service was way better than now. It seems you do not care about your LOYAL customers.  YOU ARE NOT LISTENING TO OUR PROBLEMS.  I AM SO FRUSTRATED AND UPSET.

Verizon was always #1 with me but now it's nothing but continuous problems.

0 Likes
Re: VERIZON WEB E-MAIL VULNERABLE MY ACCOUNT WAS HACKED INTO
pkegney
Contributor - Level 1

YES!!!! As it would seem with the changes came vulnerabilities. The logon page is now "HTTP://" (i.e.. Insecure) rather than "HTTPS://" (Secure) connection which is was before the 'big' change. The 'big' change was apparently a wholesale upgrade forced upon us all a short while ago that was purported as necessary and more helpful. Helpful to whom I ask myself ...hackers, phishing phreaks and 'god' knows what. When I researched why this had even occurred I found even more questions and puzzling answers as to why it was done in the first place, Plus even more dissatisfaction overall (i.e. unhappy customers) with the change in general. I feel like a guinea pig in the Verizon laboratory being subjected to electric shocks and such just to see just how much I can take..

0 Likes
Re: VERIZON WEB E-MAIL VULNERABLE MY ACCOUNT WAS HACKED INTO
dslr595148
Community Leader
Community Leader

@pkegney wrote:

The logon page is now "HTTP://" (i.e.. Insecure) rather than "HTTPS://" (Secure) connection which is was before the 'big' change...


There is a SSL log-in page.

It is at

https://www.verizon.net/ssowebapp/VOLPortalLogin?TARGET=https://www.verizon.net/ssowebapp/protected/...

However, the URL does not remain SSL (HTTPS) after log-in.

Re: VERIZON WEB E-MAIL VULNERABLE MY ACCOUNT WAS HACKED INTO
topdog
Specialist - Level 2

So, why use it, if it only allows you to sign in securely?

Re: VERIZON WEB E-MAIL VULNERABLE MY ACCOUNT WAS HACKED INTO
Holly1
Contributor - Level 3

All other secure email sites for AOL , Google,etc. have https until you sign out. So Verizon site is  not secure. Maybe instead of making constant changes they should make their email pages secure.

I complained some time ago and someone who purported to be an employee said it was coming soon. That was many many months ago!!!!

Also before putting on a new email page it should be checked out more thoroughly so it doesn't conflict with Microsoft and other updates as it did and so they had remove the new email page and put the old one back on, How many months ago has that been?

Holly

Re: VERIZON WEB E-MAIL VULNERABLE MY ACCOUNT WAS HACKED INTO
pkegney
Contributor - Level 1
Welcome aboard, dslr595148...

@dslr595148 wrote:


@pkegney wrote:

The logon page is now "HTTP://" (i.e.. Insecure) rather than "HTTPS://" (Secure) connection which is was before the 'big' change...


There is a SSL log-in page.

It is at

https://www.verizon.net/ssowebapp/VOLPortalLogin?TARGET=https://www.verizon.net/ssowebapp/protected/...

However, the URL does not remain SSL (HTTPS) after log-in.


This is exactly what we were discussing. The question on the table is why? Why did Verizon change the security from our logins forward, I don't know how much you know about the differences between the "http://" and "https://" but one is unsecure and one is not. The unsecure connections send your request in 'plain text' mode hence it can be read, harvested and more or less announced to the 'www'. Anyone with the abilities to extract this information would subject you to identity theft or even worse. However with the more secure 'http://' protocol your communications are encrypted with a cypher key and only the recipient or destination would recieve the actual decryption key to the decypher the communication, just like a bank transaction. Having just a prtected login page does little in the way of securing our communications. Beit e-mail, web surfing, etc., everything is now broadcasting your every move to the entire web, better still to those who are actually listening on the web. Not something we'd all like to do ...or lose control of what is shared information and what is private.