VM E-Mail acount security issues

[d.chatten]

I don't know the best way to explain this issue but i will try my best.

Lets say i have four e-mail addresses in the "Manage your email" part of the VM website, and the e-mail addresses are as follows.

e-mail 1 < Primary, Default
e-mail 2
e-mail 3
e-mail 4

I can login using e-mail 2 and "Modify" or "Delete" e-mail 3 and4, i can also login using e-mail 3 and "Modify" or "Delete" e-mail 1 and 4, etc, etc, the problem is, i should only be able to login using my primary e-mail address, i should also only be able to modify and delete e-mail addresses using my primary e-mail address.

Has anyone else noticed this issue, also, does anyone else think this is a major problem in regards to VM e-mail security.

Thanks!

[Toto]

Originally Posted by d.chatten

I don't know the best way to explain this issue but i will try my best.

Lets say i have four e-mail addresses in the "Manage your email" part of the VM website, and the e-mail addresses are as follows.

e-mail 1 < Primary, Default
e-mail 2
e-mail 3
e-mail 4

I can login using e-mail 2 and "Modify" or "Delete" e-mail 3 and4, i can also login using e-mail 3 and "Modify" or "Delete" e-mail 1 and 4, etc, etc, the problem is, i should only be able to login using my primary e-mail address, i should also only be able to modify and delete e-mail addresses using my primary e-mail address.

Has anyone else noticed this issue, also, does anyone else think this is a major problem in regards to VM e-mail security.

Thanks!

If you are talking about ex NTL email (ntlworld), then yes, this issue has always been there. It is considered a feature of the service, and not a very good one in my opinion, but there you have it.

You will probably find that when they amalgamate the email system across Blueyonder, ntlworld and Virgin.net, this "feature" will dissapear. However, you can't delete the primary email address from logging in on addresses 2,3 or 4. (Well I couldn't anyway)

[d.chatten]

Thanks for the info, i find it very odd that a company that is suppose to take security seriously has such a flaw in the e-mail account system, my kids like to check their e-mails from other PC's so they need to know their passwords, the problem with this is they could, if they wanted, go in to the e-mail management system and change or delete any of the listed e-mail accounts except the primary one, they could also retrieve all passwords to all secondary e-mail accounts, this would allow them to read other family members e-mails without them knowing, this is bad if they are expecting any confidential e-mails.

[Toto]

Originally Posted by d.chatten

Thanks for the info, i find it very odd that a company that is suppose to take security seriously has such a flaw in the e-mail account system, my kids like to check their e-mails from other PC's so they need to know their passwords, the problem with this is they could, if they wanted, go in to the e-mail management system and change or delete any of the listed e-mail accounts except the primary one, they could also retrieve all passwords to all secondary e-mail accounts, this would allow them to read other family members e-mails without them knowing, this is bad if they are expecting any confidential e-mails.

I fully agree.

That said though, they don't need to know the passwords for each other accounts if you set up email accounts based on identities, and have the ermail program remember the password.

[Shaun]

Or use another provider : gmail.com is good