[loading...]

So I've been exploiting these for over two years now and I've become too curious for my own good.

It seems these networks are incredibly secure, as it's nearly impossible to capture packets from other connected devices, let alone even see that device that's connected. At least from my studies. Even in their early days, it was near impossible to even do a simple session hijack. I'm just curious as to how this works.

I'm also curious if anyone uses these, or has worked for Comcast in the past and can shed some light in this area on how these networks actually work.

From what Comcast says, the routers they use have two antennas essentially broadcasting two separate networks. They say it's impossible to gain entry to the real network from the hotspot network but I don't believe that. Many, many routers in the past have vulnerabilities and i'm sure these do, it's only a matter of time before they're found.

I also believe if something like that was to be found, it could create a disaster. These networks are available on over 5 million user's routers. If one was able to infiltrate the real network through the hotspot, shit would hit the fan very quickly, so it surprises me that nobody has looked into this.


And for a final question, does anyone know if Comcast rewards people for finding exploits? I've called them several times but they typically just give the run around or redirect me to a tech agent.

[mothered]

And for a final question, does anyone know if Comcast rewards people for finding exploits? I've called them several times but they typically just give the run around or redirect me to a tech agent.

And what did the tech agent have to say?

If you call them and say (for example) "I've Identified a vulnerability that could potentially expose and compromise customer credentials", judging by their response, you'll have some Indication whether they do/do not offer rewards.

[loading...]

And for a final question, does anyone know if Comcast rewards people for finding exploits? I've called them several times but they typically just give the run around or redirect me to a tech agent.

And what did the tech agent have to say?

If you call them and say (for example) "I've Identified a vulnerability that could potentially expose and compromise customer credentials", judging by their response, you'll have some Indication whether they do/do not offer rewards.

He just told me to submit a ticket to their tech support team. That's all they ever say

[phyrrus9]

So I've been exploiting these for over two years now and I've become too curious for my own good.

It seems these networks are incredibly secure, as it's nearly impossible to capture packets from other connected devices, let alone even see that device that's connected. At least from my studies. Even in their early days, it was near impossible to even do a simple session hijack. I'm just curious as to how this works.

I'm also curious if anyone uses these, or has worked for Comcast in the past and can shed some light in this area on how these networks actually work.

From what Comcast says, the routers they use have two antennas essentially broadcasting two separate networks. They say it's impossible to gain entry to the real network from the hotspot network but I don't believe that. Many, many routers in the past have vulnerabilities and i'm sure these do, it's only a matter of time before they're found.

I also believe if something like that was to be found, it could create a disaster. These networks are available on over 5 million user's routers. If one was able to infiltrate the real network through the hotspot, shit would hit the fan very quickly, so it surprises me that nobody has looked into this.


And for a final question, does anyone know if Comcast rewards people for finding exploits? I've called them several times but they typically just give the run around or redirect me to a tech agent.

They don't necissarily use two antennas, but there is a heafty firewall and AP isolation is turned on. If you had 5 clients connected to the same hotspot, it would appear that 5 hotspots existed.

[mothered]

He just told me to submit a ticket to their tech support team. That's all they ever say

That sounds about right. With most technicalities, they tend to pass the buck from one department to the next.

They say it's impossible to gain entry to the real network from the hotspot network but I don't believe that.

Believe me, nothing Is Impossible.

Whether It's technical or from a social engineering standpoint (or both), there's always a way In. They can have all the hardware/technical security Implementations In place, but It means nothing If the vulnerability of the person operating the devices Is exploited.