[	Tags	|	security	]
[	mood	|	pissed off	]
[	music	|	Orbital - "Fahrenheit 303"	]

I'm seriously considering switching away from Vodafone. It's just too easy to hack their systems.

To change the statement address for a Vodafone account, all you need to give Vodaphone is a name and address. They don't even ask you for the corresponding phone number (which is at least less public), let alone the account number (which should only be on bills). When you get your hands on an intercepted statement, you have the account number with which I'm sure you can do all kinds of nastiness.

I spoke to Vodaphone about this, and they say that they set up a PIN the first time someone calls them. However, this PIN is apparently only authenticated with the name and address of the caller, so again provides no security - I've had my phone for years and never called their customer service line before. The chances are that most people will be in the same situation. Why don't they ask you for your account number, which shouldn't be known by anybody other than you and them?

Update: Rather than just blogranting, I have e-mailed Vodafone. Again, I will let people know if I get a reply.( E-mail )