iDWard Privacy Manager : blocking issues

[Gondola]

Hi Ady-TalkTalk 

Tonight, 11 January 2022, the Privacy Manager for TalkTalk Mail was changed. No advance notice was given of planned maintenance.

The introduction of a new Privacy Manager, iDWard, caused blocking issues. Blocking users from signing in to TalkTalk Mail, unless using ad/tracker-blocking, and the iDWard logo, positioned bottom left, totally blocking the << toggle function for the Folder view.

On selecting the iDWard logo and then selecting Manage Settings: https://data-account-web.id-ward.com/?idw-error-type=hydra-error&idw-error=timeout

iDWard was later removed.

[Ady-TalkTalk]

I'm hoping this gets locked down so that we don't see repeats of the recent issues. 

Ady

[Gondola]

In my opinion the advertising team, if that's who are controlling this activity, having unrestricted access to the TalkTalk Mail production platform is damaging to TalkTalk's reputation.

The previous incident showed evidence of email addresses being captured. This latest incident locked users out of the platform and lost a view function.

[Ady-TalkTalk]

I believe it related it the ad provider again. 

Ady

[Gondola]

Hi Ady

The blocking of access to sign in to webmail did get reported to the Incidents team and was noted as incident INC000100214242 on Service Status overnight.

Whoever is responsible for implementing iDWard will know.

I'm more concerned about the reference to the hydra error in connection with the idw error because hydra is a known network password cracker. Could be something else but are TalkTalk Security aware of this incident?

[Ady-TalkTalk]

Hi Gondola, we weren't aware of anything happening last night and I've checked with the managers they weren't aware of anything either.

I'll see what information we can get. 

Ady

[Gondola]

Also noted that the former Privacy Manager cookie icon bottom right has been restored this morning 12 January 2022.

I see Planned Maintenance is scheduled for TalkTalk Mail on 13 January 2022.