3 ms·

> I don't want my ISP to inject JavaScript to random pages or analyze my traffic. I haven't seen a single reputable ISP do this anywhere. It would illegal. Is

> I don't want my ISP to inject JavaScript to random pages or analyze my traffic. I haven't seen a single reputable ISP do this anywhere. It would illegal. Is the US really such a third world nation that not even basic regulation like this exist?

pritambaral 9y ago
US Cable companies in the past have injected alerts into unsecured sites users browsed, to tell them they're running out of data. If they could do that, they could inject ads too. US Mobile companies inject identification headers in unsecured HTTP calls, for advertiser tracking; and in other cases allow servers to ping the user's IP back to the ISP to get full details of the user (including addresses). The regulatory agents responsible for regulating the cable and mobile companies in the US are right now hellbent on removing net neutrality and are fighting against the consumer. Fat chance of those "basic regulation"s existing or surviving.
FRex 9y ago
Apparently it's a thing: https://www.infoworld.com/article/2925839/net-neutrality/code-injection-new-low-isps.html https://www.infoworld.com/article/2925839/net-neutrality/cod... https://blog.ryankearney.com/2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/ https://blog.ryankearney.com/2013/01/comcast-caught-intercep... https://www.fastcompany.com/3023305/att-offers-discounted-gigabit-internet-in-exchange-for-spying-on-you https://www.fastcompany.com/3023305/att-offers-discounted-gi... https://arstechnica.com/information-technology/2016/09/att-to-end-targeted-ads-program-give-all-users-lowest-available-price/ https://arstechnica.com/information-technology/2016/09/att-t...
rwbcxrz 9y ago
I used to have internet from Cox Communications. One day when I was working from home, I was surprised to see a page in my local dev environment load with an overlay telling me my ISP thinks I have a Windows virus (I didn't own any Windows machines at the time). Turns out our dev environment didn't force CDN assets to load over HTTPS, so my ISP injected some JS into a library we were loading. I tweeted at them, and they not only verified that it came from them, but also that they consider hijacking and modifying my traffic to be a service.
- zackboe 9y ago
  "With respect to your complaint that Cox intercepts and injects our own data in order to display alerts, etc, we note that browser alerts are a method Cox utilizes to bring customers’ attention to important information that may affect their Internet experience." They'll also appear if you're nearing your data allowance or if their email service (that you probably don't use) is undergoing maintenance. When I last asked, there is no possible way to opt-out or disable these.
acdha 9y ago
If you run a JavaScript error collector or use CSP on a public site you’ll find this all over the world. Mobile ISPs inject horrible 90s JavaScript which recompresses images (see e.g. https://calendar.perfplanet.com/2013/mobile-isp-image-recompression/ https://calendar.perfplanet.com/2013/mobile-isp-image-recomp...). Many ISPs - both mobile and wired - inject code to send messages about your account. ISPs like Comcast have tried objecting ads: https://www.infoworld.com/article/2925839/net-neutrality/code-injection-new-low-isps.amp.html https://www.infoworld.com/article/2925839/net-neutrality/cod... https://arstechnica.com/tech-policy/2013/04/how-a-banner-ad-for-hs-ok/ https://arstechnica.com/tech-policy/2013/04/how-a-banner-ad-... After leaving Mozilla, Andreas Gal described ISPs reselling search engine queries and results to Google competitors: https://andreasgal.com/2015/03/30/data-is-at-the-heart-of-search-but-who-has-access-to-it/ https://andreasgal.com/2015/03/30/data-is-at-the-heart-of-se...
peterwwillis 9y ago
It has nothing to do with regulation. Users sign contracts that explicitly state the company will do this. You can't fault the company for doing what it told you it would do.
yjftsjthsd-h 9y ago
Siblings have pointed out how very much it does happen, but if I may take issue with: > Is the US really such a third world nation that not even basic regulation like this exist? First, the US is by definition the First World (USSR et al. being second world, third being "everyone not allied with first two"). Second, we have somewhat different ideas about freedom that, often, lead to an extreme lack of regulation; the hope is that this gives more freedom and we'll work around abusive actors (yes, I know monopolies are an obvious weak point in the system).

pritambaral 9y ago

US Cable companies in the past have injected alerts into unsecured sites users browsed, to tell them they're running out of data. If they could do that, they could inject ads too. US Mobile companies inject identification headers in unsecured HTTP calls, for advertiser tracking; and in other cases allow servers to ping the user's IP back to the ISP to get full details of the user (including addresses). The regulatory agents responsible for regulating the cable and mobile companies in the US are right now hellbent on removing net neutrality and are fighting against the consumer. Fat chance of those "basic regulation"s existing or surviving.

FRex 9y ago

Apparently it's a thing: https://www.infoworld.com/article/2925839/net-neutrality/code-injection-new-low-isps.html https://www.infoworld.com/article/2925839/net-neutrality/cod... https://blog.ryankearney.com/2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/ https://blog.ryankearney.com/2013/01/comcast-caught-intercep... https://www.fastcompany.com/3023305/att-offers-discounted-gigabit-internet-in-exchange-for-spying-on-you https://www.fastcompany.com/3023305/att-offers-discounted-gi... https://arstechnica.com/information-technology/2016/09/att-to-end-targeted-ads-program-give-all-users-lowest-available-price/ https://arstechnica.com/information-technology/2016/09/att-t...

rwbcxrz 9y ago

I used to have internet from Cox Communications. One day when I was working from home, I was surprised to see a page in my local dev environment load with an overlay telling me my ISP thinks I have a Windows virus (I didn't own any Windows machines at the time). Turns out our dev environment didn't force CDN assets to load over HTTPS, so my ISP injected some JS into a library we were loading. I tweeted at them, and they not only verified that it came from them, but also that they consider hijacking and modifying my traffic to be a service.

zackboe 9y ago
"With respect to your complaint that Cox intercepts and injects our own data in order to display alerts, etc, we note that browser alerts are a method Cox utilizes to bring customers’ attention to important information that may affect their Internet experience." They'll also appear if you're nearing your data allowance or if their email service (that you probably don't use) is undergoing maintenance. When I last asked, there is no possible way to opt-out or disable these.

acdha 9y ago

If you run a JavaScript error collector or use CSP on a public site you’ll find this all over the world. Mobile ISPs inject horrible 90s JavaScript which recompresses images (see e.g. https://calendar.perfplanet.com/2013/mobile-isp-image-recompression/ https://calendar.perfplanet.com/2013/mobile-isp-image-recomp...). Many ISPs - both mobile and wired - inject code to send messages about your account. ISPs like Comcast have tried objecting ads: https://www.infoworld.com/article/2925839/net-neutrality/code-injection-new-low-isps.amp.html https://www.infoworld.com/article/2925839/net-neutrality/cod... https://arstechnica.com/tech-policy/2013/04/how-a-banner-ad-for-hs-ok/ https://arstechnica.com/tech-policy/2013/04/how-a-banner-ad-... After leaving Mozilla, Andreas Gal described ISPs reselling search engine queries and results to Google competitors: https://andreasgal.com/2015/03/30/data-is-at-the-heart-of-search-but-who-has-access-to-it/ https://andreasgal.com/2015/03/30/data-is-at-the-heart-of-se...

peterwwillis 9y ago

It has nothing to do with regulation. Users sign contracts that explicitly state the company will do this. You can't fault the company for doing what it told you it would do.

yjftsjthsd-h 9y ago

Siblings have pointed out how very much it does happen, but if I may take issue with: > Is the US really such a third world nation that not even basic regulation like this exist? First, the US is by definition the First World (USSR et al. being second world, third being "everyone not allied with first two"). Second, we have somewhat different ideas about freedom that, often, lead to an extreme lack of regulation; the hope is that this gives more freedom and we'll work around abusive actors (yes, I know monopolies are an obvious weak point in the system).