Live data from Hacker News

A detailed look at the router provided by my ISP

0x90.psaux.io

111–120 of 184 posts

Re: A detailed look at the router provided by my ISP

#111
post #52
post #14

Earlier quoted context omitted.

redirections aren't parsed by exec....

Indeed, I read the command's template too fast. Well, in this case it's worrysome

Controlling arguments without shell often still leads to RCE though, because a lot of software has some flag that runs some command

https://0x90909090.blogspot.com/2015/07/no-one-expect-comman...

Re: A detailed look at the router provided by my ISP

#112
post #30

In the Netherlands we now have a law where ISPs must allow your own choice of network equipment. This means they must give you the required information on how to connect your own device with their network. I have a fiber connection, which I connected directly to a Ubiquity router through a suitable SFP module. My ISP supplied the information on the fiber type and which VLAN ID's to setup for internet, TV and telephon…

What's you cost and speed of the fiber? Also, if you didn't need so much bandwidth, is it possible to just order a basic 100Mb/10mb connection for a nominal fee of, say, 30Euro? The speeds in the US aren't actually that bad, but you're basically forced to pay for everything: paid cable TV, equipment rental fees, etc, and your $40 plan ends up creeping towards $100 / month after the fees and taxes, with increases ever…

For me, in NL, it's about 55 Euro per month for 200/200 fiber and TV (including fees and taxes). Unfortunately this increases every year in NL as well.

Re: A detailed look at the router provided by my ISP

#113
post #42

Earlier quoted context omitted.

It existed, but was definitely not in wide use. I worked for several early internet providers during that period (mid to late 90's.) Most folks had public addresses on their desktops. No customer we ever set up wanted NAT. Most didn't even have firewalls, sadly! Some of these were small companies, some of these were large corporations or universities. And I'd argue NAT actually is necessary if you want IPv4 for home…

ISPs didn't use it in the early days, but it was used in corporate/organizational networks. The PIX was apparently marketed as a security appliance (heh) so that defined the user base to a large extent. You can access the web over v4 with other kind of proxies besides NAT, for example application level HTTP proxies. If you want working v4 for all the protocols, NAT is out by definition anyways.

Yes, I remember the PIX! Probably late 97 or 98, I set one up for a large corp. They were not using NAT previously, but HTTP and socks proxies.

Re: A detailed look at the router provided by my ISP

#114

Earlier quoted context omitted.

IANAL, but Turkcell would lose the case in Turkey too. This is not due to net neutrality regulations (Turkey deliberately lacks it), but due to case law arisen from competition and customer rights regulations. However, telcos work around that too, by "leasing" modems, like telephone divisions did in the past. Does the trick of "leasing" work in the EU too?

in marketing they try hard to make it sound like what you are going to get by renting their device is WiFi not just the ability to turn on WiFi functionality of the CPE. of course everybody wants that but most people don't get that's not something that has to be provided by the ISP. I am not sure if its required, but i have seen often a lower end device (without WiFi accessible) is given for the lifetime of the contr…

Not instead of renting, but of selling.

Re: A detailed look at the router provided by my ISP

#117
post #51
post #30

In the Netherlands we now have a law where ISPs must allow your own choice of network equipment. This means they must give you the required information on how to connect your own device with their network. I have a fiber connection, which I connected directly to a Ubiquity router through a suitable SFP module. My ISP supplied the information on the fiber type and which VLAN ID's to setup for internet, TV and telephon…

The US has (had?) some network neutrality rules around discriminating against different types of hardware, but AT&T just does it anyway. (They require you to use their DSL modem + router + wifi and it has broken support for adding a second router behind it.)

Dealing with the same thing with AT&T fiber. There was word of a hack involving putting your router behind a switch with the AT&T router after cloning the MAC, then booting them both up and letting your router pick up the DHCP responses along with the AT&T router. Once the AT&T router had done its proprietary handshake, you could disconnect the AT&T router.

Unfortunately I had no luck with that - my loose theory is that my EdgeRouter was doing a ping check to see if the IP was already taken before accepting the DHCP lease...

I was able to get "IP passthrough" mode working with the AT&T router though. The key hiccup was that the AT&T router had to be on a different subnet than my router's LAN subnet.

Re: A detailed look at the router provided by my ISP

#118
post #73

Earlier quoted context omitted.

It's not the provision of Internet that's the problem, it's the customer service requests. e.g., AT&T could provide perfect service to the home endpoint, but the customer bought some aftermarket router from their cousin, who had configured it for Verizon. Customer calls AT&T to holler. Tier 1 support doesn't know what that particular router config GUI even looks like, so it gets bumped to T2 or T3. Ultimately to find…

> ISPs job isn't just "provide the Internet," it's also "provide all the troubleshooting for every non-technical customer who just wants to watch Netflix but doesn't even know what a router is" No ISP that I'm aware of will provide troubleshooting for devices they don't own. They just say "sorry, not our device, not our problem". When I installed my own cable modem and router, Comcast was quite clear about that. And…

The ISP I work for does, and it's a very large one (not in the US). If a router is not ours, we check for sync or if PPPoE is up. We tell the customer what's the result of our tests and offer a technician if they are willing to pay in case it's not our fault.

Most people are unwilling to pay, and yell at customer service. Most of the times, specially when the router has sync it's customer fault.

Re: A detailed look at the router provided by my ISP

#119

Why did port 8015 show up on the remote system after resetting firmware? Shouldn't nmap have reported that?

It was a “fast nmap”, so only the top 100 most common ports were checked.

Ah, thanks. If nmap was run exhaustively on all 64k ports, would that both (a) take forever, and (b) raise alarm bells on the target? Why isn't a full scan the norm?
Post reply on HN