OffTopic: Telecom Fraud

2019-04-23 Thread Dovid Bender
Hi All, I am wondering if a bit of public shaming may help. I every so often get calls from the "verizon wireless fraud prevention dept". It's scammers calling me (and others) telling them there was fraud on their account. This gets people worked up and fooled into giving out data that they normal

Re: OffTopic: Telecom Fraud

2019-04-23 Thread Valdis Klētnieks
On Tue, 23 Apr 2019 15:55:43 -0400, Dovid Bender said: > day). but at the very least why can't Verizon drop these calls at their > edge. If they see the B-Number as being their client and the A number being > theirs but coming from elsewhere why can't they just drop the call? Probably for the sam

Re: OffTopic: Telecom Fraud

2019-04-23 Thread Paul Timmins
I guarantee you that if carriers were made civilly or criminally liable for allowing robodialers to operate on their network, this sort of issue would end practically overnight. Robodialer calling patterns are obvious, and I'd imagine any tech could give you a criteria to search for in the CDR

Re: OffTopic: Telecom Fraud

2019-04-23 Thread Dovid Bender
On Tue, Apr 23, 2019 at 4:18 PM Paul Timmins wrote: > I guarantee you that if carriers were made civilly or criminally liable > for allowing robodialers to operate on their network, this sort of issue > would end practically overnight. Robodialer calling patterns are > obvious, and I'd imagine an

Re: OffTopic: Telecom Fraud

2019-04-23 Thread Mel Beckman
Dovid, You are correct that your message is off topic. I respectfully ask that you honor the rules of this mailing list and refrain from off topic posts. They simply add noise to an otherwise useful and highly germane experts resource. -mel beckman On Apr 23, 2019, at 1:24 PM, Dovid Bender ma

Re: OffTopic: Telecom Fraud

2019-04-23 Thread Mel Beckman
From the NANOG mailing list FAQ: “You can help keep NANOG's signal-to-noise ratio high by subscribing to the nanog-offto...@lists.blank.org list, and migrating digressive conversations there. To subscribe, send mail to nanog-offtopic-subscr...@lists.blank.

[FYI] Call for Presentations European Peering Forum 14 (EPF14) // NANOG

2019-04-23 Thread Arnold Nipper
Dear Community This is the Call for Presentations European Peering Forum 14 (EPF14) AMS-IX, DE-CIX, LINX and Netnod are happy to host the 14th European Peering Forum (EPF) in Tallinn, Estonia from the 16th - 18th September 2019. The event will welcome up to 300 peering managers and coordinators f

Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Töma Gavrichenkov
Hi NANOG, Here's an issue raised today: https://security.stackexchange.com/questions/207895/how-does-comcast-know-my-wifi-password Apparently there's a concern with customers that their seemingly private passphrases, entered in their own boxes, are being shared with the upstream ISP without an ex

Re: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Seth Mattinen
On 4/23/19 16:46, Töma Gavrichenkov wrote: Apparently there's a concern with customers that their seemingly private passphrases, entered in their own boxes, are being shared with the upstream ISP without an explicit customer consent, and are kept in the ISP database for an unspecified period of t

Re: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Töma Gavrichenkov
On Wed, Apr 24, 2019 at 3:07 AM Seth Mattinen wrote: > Don't use the built in wifi AP on a cable modem combo would be my first > reaction. Totally correct, but that's what s/he claims to have already taken care of! -- Töma

Re: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Laurent Dumont
It's not exactly clear from the StackExchange post but if the end-user is also using Comcast as an ISP, then I guess the modem simply re-registered under the new customer and is happily providing the visibility to Comcast? On Tue, Apr 23, 2019 at 8:34 PM Töma Gavrichenkov wrote: > On Wed, Apr 24

Re: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Luke Guillory
OP said they logged into their account and went to the security portion of the portal. So one can assume they're the ISP or I don’t see the point in asking how Comcast would know the info. Luke Ns Sent from my iPad On Apr 23, 2019, at 8:05 PM, Laurent Dumont mailto:laurentfdum...@gmail.com

Re: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Peter Beckman
On Wed, 24 Apr 2019, Luke Guillory wrote: OP said they logged into their account and went to the security portion of the portal. So one can assume they're the ISP or I don’t see the point in asking how Comcast would know the info. It is entirely possible that an account separate and hidden fro

Re: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Peter Beckman
On Tue, 23 Apr 2019, Peter Beckman wrote: On Wed, 24 Apr 2019, Luke Guillory wrote: OP said they logged into their account and went to the security portion of the portal. So one can assume they're the ISP or I don’t see the point in asking how Comcast would know the info. It is entirely poss

Re: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Yang Yu
On Tue, Apr 23, 2019 at 4:48 PM Töma Gavrichenkov wrote: > Apparently there's a concern with customers that their seemingly > private passphrases, entered in their own boxes, are being shared with > the upstream ISP without an explicit customer consent, and are kept in > the ISP database for an u

Re: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Christopher Morrow
On Tue, Apr 23, 2019 at 10:35 PM Peter Beckman wrote: > ... such that the access of the Wifi Password which is likely stored in > plain text on the router is accessed by Comcast in a secure manner and not you've seen TR-069 right? :(

RE: Comcast storing WiFi passwords in cleartext?

2019-04-23 Thread Luke Guillory
Yes it's in the router, accessed via the following MIB. Name arrisRouterWPAPreSharedKey OID .1.3.6.1.4.1.4115.1.20.1.1.3.26.1.2 MIB ARRIS-ROUTER-DEVICE-MIB Syntax OCTET STRING (SIZE (8..64)) Access read-write Status current Descri Sets the WPA Pre-Shared Key (PSK) used by