Live data from Hacker News

Avoid ISP Routers (2024)

routersecurity.org

101–110 of 210 posts

Re: Avoid ISP Routers (2024)

#101
post #7

Earlier quoted context omitted.

Yup, most have a "bridge" mode. That's the first thing that I did when I got AT&T Fiber

The bridge mode for AT&T's fiber plans is notoriously shitty at just being a dumb bridge... but it does at least pass the IP through so you can port forward like a normal person would (the built in port forward is so ass backwards). My connection became significantly better (marginally better in max throughput, significantly better in connections/s, QoS, and jitter) when I went from "bridge" mode to replacing the ONT…

Got a link to that device? Also, does that break any AT&T terms of service? I don't want them to cancel my account.

Re: Avoid ISP Routers (2024)

#102

Earlier quoted context omitted.

My experience in the Bay Area - if you rent the gateway from Comcast ($25/mo) then you have no data cap. If you use your own modem and want to remove the data cap it costs $30/mo, more than renting the gateway. The data cap is 1.2TB per month in my area. I think that is what the commenter meant: "...unless I pay a whole bunch of extra fees or accept a stupidly low monthly data cap" (edit: I initially thought it was $…

Tell them it's a home office and get comcast business. There's no data caps on any of the tiers and they allow use of any modem on their approved list.

My current residential price is $65/mo for 500mbps/20mbps. Business is $120/mo for 500mbps/200mbps ($105 for first 24 months). I wouldn't mind getting a bit more sweet sweet upload. Maybe I will!

There is also "gigabit pro"/"gigabit x10" where they run fiber to your house. That is $350/month for symmetric 10gbps. Lots of limitations on availability and a big install fee, though. Gotta get the other half on board with that ;-)

Re: Avoid ISP Routers (2024)

#103
The median consumer for an ISP is someone who pays for a service and asks for the wifi password printed on the back. Thats about it. Maybe they change the password through the app (TR-069) if they want to change it later. Having something like this working 24x7 while also being able to afford to run a cable to the home is quite challenging. I hate pretty much most ISPs for having a good service but terrible equipment. But I know most of my friends and relatives really don't care. They just want to use it for work or browsing / binging and thats about it. With fiber this is more messed up because now they are being sold gigabit plans when in reality a 100-200mbps connection would be enough if the home was wired correctly and all devices received a good wifi connection with a good router connected to some APs / mesh with maybe something like SQM.

Getting rid of a GPON router can be challenging now that everyone is moving to fiber.

-For one, you could get banned for having a problematic transceiver. -You might be able to spoof the SN and even MAC and PLOAM password but even then there is a GPON ONU and OLT incompatibility problem. Nokia OLT for example can be notorious while some OLTs only work with their own brand ONUs. -Finding the correct VLAN is also tricky and sometimes different VLANs are used for different services like POTS which means your GPON bridge needs to be able to do correct pass through after registering instead of registering on just one VLAN.

ISPs should just provide a GPON SFP bridge to consumers with the router it plugs into that has a TR-069 configured so that the ISP can also swap routers as and when they get upgraded while keeping the SFP bridge constant as the cost of router would then decrease without having to need a GPON ONU to be built. Not to mention the software gets less complicated without GPON on the router end.

https://hack-gpon.org

Re: Avoid ISP Routers (2024)

#104
post #30

I wish. I own my own modem and router, but Comcast won’t let me use them unless I pay a whole bunch of extra fees or accept a stupidly low monthly data cap. I’ve got my router downstream of theirs which is a bit annoying, especially considering their modem-router combo overheats and needs to be rebooted via unplugging power at least once a month. Sadly I have no other options here in San Francisco. My house is not wi…

I'm surprised by this, is Comcast super regional with it's restrictions? I have a Comcast 1gig plan in the Bay Area, and last I checked I get a small ($5?) discount for using my own modem. I've been on the plan for a least a few years now... so alternatively maybe I'm grandfathered in or something? Or maybe some Comcast sales person was lying to you about your options?

> I have a Comcast 1gig plan in the Bay Area, and last I checked I get a small ($5?) discount for using my own modem.

Are you sure it's a _discount_? They charged me _more_ for "unlimited" data and own modem. This change isn't new (at least a few years) but a quick google found recent: https://forums.xfinity.com/conversations/customer-service/wh...

Re: Avoid ISP Routers (2024)

#105
Xfinity (Comcast) is uploading their own firmware to my netgear which I have purchased on amazon. So one may (rightfully) assume that they have their own backdoors there too; otherwise why would they bother doing that.

Re: Avoid ISP Routers (2024)

#106
post #36

Agreed with the article, but to add to: > The ability to update the firmware may also be locked down. You should have full control over firmware updates. Bizarrely, for DOCSIS modems, even if you buy your own modem, the ISP has control over firmware! They can (and do) push any arbitrary firmware to your modem. The manufacturers go along with this for some reason. So make sure to separate your modem and router too.

Yes it's key to separate both, but regardless they know DNS queries + can see all http traffic and TLS handshakes will reveal (in plaintext) the name of sites connected to. So basically... they know very well where you go, they just don't always know (sometimes they do) what is being transferred there.

Re: Avoid ISP Routers (2024)

#107

I wish. I own my own modem and router, but Comcast won’t let me use them unless I pay a whole bunch of extra fees or accept a stupidly low monthly data cap. I’ve got my router downstream of theirs which is a bit annoying, especially considering their modem-router combo overheats and needs to be rebooted via unplugging power at least once a month. Sadly I have no other options here in San Francisco. My house is not wi…

Since you’re in SF, have you tried Monkeybrains? Edit for disclosure: I’m a former employee, but I have no present affiliation with the company.

Monkey brains is great if you can get it! Cheap and reliable and you can use any router you want.

Re: Avoid ISP Routers (2024)

#108

The part about a cockroach colony is a bit unfair. Insects love electronics, with the heat and noise they generate. And when electronics sit in storage for a long time, the critters can crawl in from neighboring items. This is just as likely to happen with a non-ISP router. Ok, in all fairness I don’t have any stats to back up that claim. But nobody else does either. That open source router you love so much may have…

It is not unfair.

The linked article is about a live cockroach colony in the package when it was delivered from their ISP. If that went unnoticed, what would you think about their supply-chain security?

If you get insect-infested packages from wherever you get your electronics, you should switch suppliers. It is not normal.

Re: Avoid ISP Routers (2024)

#110
post #58

Earlier quoted context omitted.

In EU the second poorest country has the fastest internet. The richest country cannot provide cellular signal to all of its area.

It kindof depends when a country did its investment into Internet infrastructure. More western countries did it first and are now stuck with older technologies that limit speed and capacity, where as the less modern countries put that investment in later and therefore have newer technologies like fibre. Once an investment has been made it's hard to justify making another large investment, or if one is being made it b…

[deleted]
Post reply on HN