Live data from Hacker News

Comcast injecting JS

gist.github.com

181–190 of 288 posts

Re: Comcast injecting JS

#181
post #35

This code is beyond awful - it fails to display, makes endless AJAX requests, and more; here are a few fun tidbits: 1. The code is not encapsulated in an IIFE, so it clobbers any global variables (like 'image_url') in the page, breaking any scripts relying on those variables. 2. The code spends an inordinate time checking if you're running Netscape Navigator 6. 3. Strangely, they include a whole bunch of code allowin…

soooo is there a browser plugin to block stuff like this yet?

Re: Comcast injecting JS

#182
The easiest way to combat this is to use SSL. You should be doing that on your website anyway.

Another effective way of combatting this is to detect what's happening and add a "This ad was sponsored by Comcast:" message.

I can sort of see the intent behind this. I just wish they'd tell their customers about their service usage out-of-band, like sending them a text message or an email.

One part of me realized "OMG they're going to track which websites I visit by looking at the HTTP Referer!" But then I quickly realised that as my ISP, they already have access to that information anyway...

Re: Comcast injecting JS

#183
post #154
post #134

Earlier quoted context omitted.

The real goal of this is for the copyright infringement notices they want to send. Which I'm sure they will deem "critical".

They are legally required to serve DMCA copyright infringement notices to maintain their safe harbor status.

By mail, not by using a browser popup.

Re: Comcast injecting JS

#184
post #98
post #76

Earlier quoted context omitted.

They're all over the place. People just starting out. It could've been an intern fresh out of college. It could've been someone who just never graduated beyond copy-and-paste-from-StackOverflow. It could've been written by a person who never did web development before and was just told to make it work. The little HN/Twitter/Reddit "awesome programmer" bubble is just that... a bubble. It's easy for us to forget that l…

>They're all over the place. People just starting out. It could've been an intern fresh out of college. It could've been someone who just never graduated beyond copy-and-paste-from-StackOverflow. It could've been written by a person who never did web development before and was just told to make it work. I'm an intern, just moving past S.O. copy-pasta jobs and generally get scared at what the hacker news crowd might s…

You should be scared... what's with the hardcoded login info exposed on github?

https://github.com/Machtap/_ctv/blob/master/_www/model/commo...

Re: Comcast injecting JS

#185

Wonder how the folks back at Comcast HQ would feel if the rest of the internet started adding messages to their web browsing telling them this kind of thing is unsatisfactory? Hey, this content injection game is a game that we all can play. This is the old "windows alert" nonsense. Everybody and their brother that touched the windows system thought the user would want a popup when their program did something. So the…

Interestingly it would be easy to write some code that detected THIS code. Get web developers to add it to their sites and make it show a message that comcast are charging them for traffic they're causing. And then link to the class action. inject.ly isn't registered (yet) so let's presume some enterprising HN reader uses that. As a web dev, all I need to do is and it will detect this (and any future variant) ISP inj…

Do this!

Re: Comcast injecting JS

#187
It would be nice if there was an easier way to find out ISP injections for the layperson who can't really use wireshark/proxy and data comparisons, or for technical people that just don't have the time.

This project had potential ( it detected torrent traffic shaping) but it seems to no longer be under dev. http://broadband.mpi-sws.org/transparency/results/

Also this is a good read and contains comcast traffic shaping info: https://www.eff.org/wp/detecting-packet-injection

ps. Who cares about the shit JavaScript, this discussion should be about detecting packet injection and shaping.

Re: Comcast injecting JS

#188
post #110

Earlier quoted context omitted.

Isn't this just a matter of 1) building a webpage where you own the copright 2) Have someone in one of the cities where this is happening browse to your page. 3) Copyright violated, and you get to be the test case!

Courts will generally refuse to take on manufactured cases. Their job is resolve real disputes. A lower court would probably just throw the case out. And if it didn't, the higher courts, which would set a widely binding precedent, would exercise their discretion simply not to hear the case. Yes: they get to pick and choose what appeals to hear.

It doesn't have to be manufactured, someone just has to notice it already happening.

Re: Comcast injecting JS

#189

Comcast is an awful awful awful company. Yet I pay them over $100/month. I hate them with a passion. I've never experienced worse customer service. If I could pay double the price with a different company for internet/cable, I would do it in an instant but I unfortunately have no other options.

[deleted]

Re: Comcast injecting JS

#190

Earlier quoted context omitted.

T-Mobile is currently doing this and does not allow for opt-out.

I'm pretty sure you can forcefully opt out by using a DNS server that isn't run by scumbags, like 8.8.8.8 and 8.8.4.4 for Google Public DNS. I hear OpenDNS is similarly good.

Next up, hijacking DNS queries to external servers.
Post reply on HN