Eight Telecom discussion thread

[amazingone]

Sad but true. Remember, SG is bizness friendly ok. So, just suck it up.

Having said that, I have a feeling that Eight will be offering 5G soon due to sporadic field reports of Eight users being able to connect to 5G probably due to Eight testing 5G, albeit at specific locations only and not for a very long time, it appears.

This means that Eight users will either get a premium 5G plan, perhaps with less data and minutes; or they may get 5G completely free. Fingers crossed for the latter! If the latter happens, you can bet even more people will port over to Eight! 5G at $8 OMG... FOMO!!!

A girl can dream.

I worry how will Giga be positioned if Eight offer 5G.

 

[eddy0505]

I worry how will Giga be positioned if Eight offer 5G.

Giga alr in hot waters after the esim incident liao. If eight offers 5G im porting my whole family line 3 generations to here liao.

 

[loganrunning]

I worry how will Giga be positioned if Eight offer 5G.

my guess, either Giga will have to up their game, or eight will be "held back" in terms of products/services.
we shall see

 

[loganrunning]

Giga alr in hot waters after the esim incident liao. If eight offers 5G im porting my whole family line 3 generations to here liao.

Giga incident is the classic sim-jacking. i was told sg was immune to that as all telcos required the minimal (but least effective ie "what you have") proof of ownership ie nric/ep/wp/singpass. looks like i was told wrongly.

 

[eddy0505]

Giga incident is the classic sim-jacking. i was told sg was immune to that as all telcos required the minimal (but least effective ie "what you have") proof of ownership ie nric/ep/wp/singpass. looks like i was told wrongly.

Actually I'm also a bit shocked. Wonder if it's the person's phone or other device with credentials kena hack then conpromise his esim as collateral damage.

 

[amazingone]

my guess, either Giga will have to up their game, or eight will be "held back" in terms of products/services.
we shall see

Giga is Starhub's answer to Singtel's Gomo, but Singtel's Heya is not as aggressive as Eight as Singtel still wants to maintain some boundaries between each brand.

 

[loganrunning]

Actually I'm also a bit shocked. Wonder if it's the person's phone or other device with credentials kena hack then conpromise his esim as collateral damage.

it sounds more like the hacker knew the other accounts and that this esim number was the common denominator, so the key was to gain control of the esim, and use that to funnel OTPs while resetting passwords/credentials on the bank/financial accounts.

phone OTPs are the least secure, but sadly it's the most common aka convenient option here.

 

[loganrunning]

Giga is Starhub's answer to Singtel's Gomo, but Singtel's Heya is not as aggressive as Eight as Singtel still wants to maintain some boundaries between each brand.

yup, hierarchy is sh -- giga -- eight
that's why i mentioned that if eight introduces 5G ---- giga enhancing offerings, eight being held back
eg Giga on 5G SA, eight on 5G NSA, or eight being speed throttled or lower priority wrt Giga etc.

 

[amazingone]

yup, hierarchy is sh -- giga -- eight
that's why i mentioned that if eight introduces 5G ---- giga enhancing offerings, eight being held back
eg Giga on 5G SA, eight on 5G NSA, or eight being speed throttled or lower priority wrt Giga etc.

I guess if Starhub allow Eight to offer 5G, they will handicap the 5G in some ways or they will offer a 5G plan ($13?) between the $8 and $18 plan.

 

[tanchoo1]

Actually I'm also a bit shocked. Wonder if it's the person's phone or other device with credentials kena hack then conpromise his esim as collateral damage.

The idiotic user either reused his passwords across different accounts, or set his password to "12345678".

 

[eddy0505]

it sounds more like the hacker knew the other accounts and that this esim number was the common denominator, so the key was to gain control of the esim, and use that to funnel OTPs while resetting passwords/credentials on the bank/financial accounts.

phone OTPs are the least secure, but sadly it's the most common aka convenient option here.

Yup that's what I suspected too. Coz impossible that hacker can gain access to his esim that easily. Probably some sensitive passwords or important info like nric dob and other secret answers all in the hands of hacker liao then can bypass all the verification set by Giga.

 

[eddy0505]

The idiotic user either reused his passwords across different accounts, or set his password to "12345678".

Possible, long ago I used dummy passwords for some dummy emails for some freebies. Recently got prompt that some hacker from Brazil logged in lol.

 

[loganrunning]

Yup that's what I suspected too. Coz impossible that hacker can gain access to his esim that easily. Probably some sensitive passwords or important info like nric dob and other secret answers all in the hands of hacker liao then can bypass all the verification set by Giga.

the other problem is, "secret questions/answers" are easily guessed by crackers (correct use of term, not hacker) who know the target, eg questions like "favourite colour", "first school" etc. of course, a smart user will know what to set to not make it easy for the crackers.

 

[loganrunning]

The idiotic user either reused his passwords across different accounts, or set his password to "12345678".

consequence of wanting convenience plus not using password manager or hardware biometric keys

 

[loganrunning]

The idiotic user either reused his passwords across different accounts, or set his password to "12345678".

from the description, i view it otherwise. the weakness was to base the 2nd factor (2FA) on a channel where the user does not (and cannot) fully control and can be hijacked externally.

it was reported that the attacker obtained an esim QR code without physical verification of an identiy document (which is already the least secure method). Once this was obtained, then the attacker could use it to easily reset secure passwords and take control of the various accounts.

it's a good case study for those who want to secure their accounts, but i suspect it will be unheeded as many prefer convenience over security.

 

[sibeiTrolled]

Since you guys are talking about that GIGA incident, that "person" appeared in EDMW to talk about it before.

https://forums.hardwarezone.com.sg/...y-says-no-breach-found.7078033/post-154343359

The follow up to the situation and to some of the typical edmw comments here
https://forums.hardwarezone.com.sg/...y-says-no-breach-found.7078033/post-154345412

 

[keenklee]

IMHO.
Just gotten my Eight. Gave me fast speed at my location - 134 / 16.5 Mbps ( Down/Up)

 

[tanchoo1]

Since you guys are talking about that GIGA incident, that "person" appeared in EDMW to talk about it before.

https://forums.hardwarezone.com.sg/...y-says-no-breach-found.7078033/post-154343359

The follow up to the situation and to some of the typical edmw comments here
https://forums.hardwarezone.com.sg/...y-says-no-breach-found.7078033/post-154345412

So he admits that his giga login got compromised, implying either stupid passwords or reused passwords. My guess was correct.

That's all I need to know, he's an idiot. Sorry to say.

It's like leaving your main door key under the outdoors mat, then get shocked when your house got robbed because your backup burglar alarm didn't work. In this case, can you blame the company that made the burglar alarm?

Probably yes, but the main responsibility is that the main door was effectively unlocked for anyone to rob.

 

[tanchoo1]

Since you guys are talking about that GIGA incident, that "person" appeared in EDMW to talk about it before.

https://forums.hardwarezone.com.sg/...y-says-no-breach-found.7078033/post-154343359

The follow up to the situation and to some of the typical edmw comments here
https://forums.hardwarezone.com.sg/...y-says-no-breach-found.7078033/post-154345412

Since the very first day when we created our first online account, we were told and reminded again and again to choose a good password. Choose one with at least eight characters. (Now sometimes ten or even twelve characters minimum.) Use a passphrase, or a password manager. Use upper case, lower case, digits, and sometimes even symbols. And never reuse passwords under any circumstances, or use variations of the same base password.

I guess the giga hack victim couldn't be arsed to follow these rules. And this are the consequences.

Harsh I know, but it's true, yet very sad because it is so easily prevented just by good proper password hygiene practices.

 

[tanchoo1]

Eight Telecom: Year End Port-In Promo
Promo period: 8 Dec to 28 Dec.

Year-end port in promo: FREE $8/$18 Credits and 8 Lucky winners per week to WIN 1-year Mobile Plan!*

All Port in and get FREE $8/$18 credits: $8 and $18 plan (only voice plans). Credit will take 7 working days to be credited into the main wallet!

Win 1 Year Mobile Plan (equal to $96 credit), 8 lucky winners weekly. Winners will be announced on FB/IG weekly + sms send to the winners.

Don’t miss out!