5 ms·

First, thanks for participating. Second, I am a Comcast customer who will never see these messages precisely because you do things like MITM unprotected traffi

by _jal 9y ago

First, thanks for participating. Second, I am a Comcast customer who will never see these messages precisely because you do things like MITM unprotected traffic. Because I can't trust you to leave my traffic alone, all my traffic is tunneled. So at the very least, if you feel this is a critical service you are offering (as implied by the RFC), you need an alternative communications channel for people like me who don't permit this one. Snailmail is fine; you try to upsell me constantly through that channel already.

novaleaf 9y ago
downvoting because of snarkyness. Your suggestion of alt cmu channel is good however.
- bayonetz 9y ago
  Downvoting because they weren't that snarky and because of your smugness. Your willingness to tell some one straight up why you downvoted them was good however.
  - novaleaf 9y ago
    why am I smug? I totally agree with the premise and personally hate comcast, but if _jal wants to be taken seriously by jlivingood, snarkyness isn't the way to go. I don't mind the anon downvotes though, it's par for the course anywhere.
pooloo1 9y ago
I second this, in addition, the injection is not only related to EOS/EOL for modems it is also for when you are approaching your data cap. Which is rather annoying because it actually can halt your gaming or netflix experience oddly. I have had both happen, one I was playing PlayerUnknown's Battlegrounds and the game crashed. Since the game itself uses web based tools, for its menu system, upon restarting the client a Comcast injected message popped up warning me I have used 90% of my data cap. The same thing happened on Netflix ...
- aaomidi 9y ago
  TBH what kind of game doesn't use https...
  - cookiecaper 9y ago
    HTTPS is not free. Game developers are usually very performance-sensitive. If you're not transmitting any sensitive data, it may seem appealing to forgo the seemingly-needless HTTPS overhead.
    - enzanki_ars 9y ago
      Please cite your sources on the speed comparison. See: https://istlsfastyet.com/ https://istlsfastyet.com/ Also, most games I have played seem to use HTTPS. The only time it is used is when the game does not need an instant result, in which case they use HTTP or HTTPs. Most of the times, this is in the main menu or similar. Doing this makes it even harder (assuming they use certificate pinning) for users to change the values returns to gain any advantage on their client. Any part of the game that needs speed should be using a UDP based protocol.
      - deleted 9y ago
        [deleted]
    - chopin 9y ago
      If your game is executing js (as for the example given by the GP), you are transmitting sensitive data. In that scenario not only confidentiality but even more integrity of the data is important.
- tatersolid 9y ago
  I think it’s funny you’re approaching your data cap and they add 400 lines to the size of each web page you visit. I hope pages they tamper with are subtracted from your cap. This is exactly why Comcast is still the most hated company in America [1], and the only reason you have any customers is due to the monopoly deals of dubious legality you or your acquisitions bribed local officials to create back during the infancy of cable. We hate you, but we don’t have any choice. It’s worth noting that government regulation created Comcast by allowing long-term monopoly contracts with municipalities. Remove the regulations which prevent competition in local internet and TV services; don’t add more regulations. [1]: http://finance.yahoo.com/news/america-most-hated-companies-110032495.html
zwily 9y ago
They do say they try to email you a bunch of times first... Email seems like a decent enough alternate channel.
- hackmiester 9y ago
  They emailed my Comcast.net address, which I didn't even know I had.
  - jlivingood 9y ago
    > They emailed my Comcast.net address, which I didn't even know I had. I recommend you add your primary email address. You can do this via the self-service portal. Go to https://customer.xfinity.com/#/settings/account https://customer.xfinity.com/#/settings/account under Account / Settings / Contact Information. IIRC you are sent a confirmation email you have to act on before it takes effect.
  - cannonedhamster 9y ago
    You should mark this day. This is probably the most positive customer experience you're going to ever have with a Comcast employee. I had a choice between Verizon and Comcast. Comcast was cheaper and I still went with Verizon. Edit: typo.
jsmthrowaway 9y ago
> Snailmail is fine; you try to upsell me constantly through that channel already. Implying you’d probably miss it and, if not you, the customers they’re trying to reach.
- LeifCarrotson 9y ago
  Then they ought to stop abusing the communication channels they have. If they send so much email and snail mail spam that the customer automatically ignores it, that's the choice they have made.
  - cookiecaper 9y ago
    What happens when a customer who really does have a modem that is vulnerable or outmoded runs into related issues? Is that customer going to accept "Well, we included it with our junk mail" as an explanation? As for email, does anyone use their ISP-provided email address anymore? Everyone has a third party provider (mostly Gmail). I don't think there's any fault in logic in presuming that the best way to make sure a customer receives a notification is to insert as near to their known-active stream as possible. I don't condone altering that stream, but I think it would be nice if they could send a page, potentially at the browser or OS level, exclusive for system control and status messages (no sales, marketing, billing, or collection messages allowed).
- rietta 9y ago
  I am so sick and tired of xfinity mailings addressed to me or my wife or former residents of the home address asking us to switch to them for a two year discount that I know they won’t give us because we’re already a customer. They even just jacked my rates yet again.
  - rietta 9y ago
    Along the lines of this. Anyone in the industry, why do they not cross reference the street addresses of their current subscribers and reduce the promotional mailing list or mail relevant promotions? Maybe it seems cheaper to do it this way, but it's actually quite antagonistic to current customers. Why would they not maintain a clean marketing list!?
dhimes 9y ago
OT question: Do you roll your own tunnel or use a service?

by _jal 9y ago

novaleaf 9y ago

downvoting because of snarkyness. Your suggestion of alt cmu channel is good however.

bayonetz 9y ago
Downvoting because they weren't that snarky and because of your smugness. Your willingness to tell some one straight up why you downvoted them was good however.
- novaleaf 9y ago
  why am I smug? I totally agree with the premise and personally hate comcast, but if _jal wants to be taken seriously by jlivingood, snarkyness isn't the way to go. I don't mind the anon downvotes though, it's par for the course anywhere.

pooloo1 9y ago

I second this, in addition, the injection is not only related to EOS/EOL for modems it is also for when you are approaching your data cap. Which is rather annoying because it actually can halt your gaming or netflix experience oddly. I have had both happen, one I was playing PlayerUnknown's Battlegrounds and the game crashed. Since the game itself uses web based tools, for its menu system, upon restarting the client a Comcast injected message popped up warning me I have used 90% of my data cap. The same thing happened on Netflix ...

aaomidi 9y ago
TBH what kind of game doesn't use https...
- cookiecaper 9y ago
  HTTPS is not free. Game developers are usually very performance-sensitive. If you're not transmitting any sensitive data, it may seem appealing to forgo the seemingly-needless HTTPS overhead.
  - enzanki_ars 9y ago
    Please cite your sources on the speed comparison. See: https://istlsfastyet.com/ https://istlsfastyet.com/ Also, most games I have played seem to use HTTPS. The only time it is used is when the game does not need an instant result, in which case they use HTTP or HTTPs. Most of the times, this is in the main menu or similar. Doing this makes it even harder (assuming they use certificate pinning) for users to change the values returns to gain any advantage on their client. Any part of the game that needs speed should be using a UDP based protocol.
    - deleted 9y ago
      [deleted]
  - chopin 9y ago
    If your game is executing js (as for the example given by the GP), you are transmitting sensitive data. In that scenario not only confidentiality but even more integrity of the data is important.
tatersolid 9y ago
I think it’s funny you’re approaching your data cap and they add 400 lines to the size of each web page you visit. I hope pages they tamper with are subtracted from your cap. This is exactly why Comcast is still the most hated company in America [1], and the only reason you have any customers is due to the monopoly deals of dubious legality you or your acquisitions bribed local officials to create back during the infancy of cable. We hate you, but we don’t have any choice. It’s worth noting that government regulation created Comcast by allowing long-term monopoly contracts with municipalities. Remove the regulations which prevent competition in local internet and TV services; don’t add more regulations. [1]: http://finance.yahoo.com/news/america-most-hated-companies-110032495.html

zwily 9y ago

They do say they try to email you a bunch of times first... Email seems like a decent enough alternate channel.

hackmiester 9y ago
They emailed my Comcast.net address, which I didn't even know I had.
- jlivingood 9y ago
  > They emailed my Comcast.net address, which I didn't even know I had. I recommend you add your primary email address. You can do this via the self-service portal. Go to https://customer.xfinity.com/#/settings/account https://customer.xfinity.com/#/settings/account under Account / Settings / Contact Information. IIRC you are sent a confirmation email you have to act on before it takes effect.
- cannonedhamster 9y ago
  You should mark this day. This is probably the most positive customer experience you're going to ever have with a Comcast employee. I had a choice between Verizon and Comcast. Comcast was cheaper and I still went with Verizon. Edit: typo.

jsmthrowaway 9y ago

> Snailmail is fine; you try to upsell me constantly through that channel already. Implying you’d probably miss it and, if not you, the customers they’re trying to reach.

LeifCarrotson 9y ago
Then they ought to stop abusing the communication channels they have. If they send so much email and snail mail spam that the customer automatically ignores it, that's the choice they have made.
- cookiecaper 9y ago
  What happens when a customer who really does have a modem that is vulnerable or outmoded runs into related issues? Is that customer going to accept "Well, we included it with our junk mail" as an explanation? As for email, does anyone use their ISP-provided email address anymore? Everyone has a third party provider (mostly Gmail). I don't think there's any fault in logic in presuming that the best way to make sure a customer receives a notification is to insert as near to their known-active stream as possible. I don't condone altering that stream, but I think it would be nice if they could send a page, potentially at the browser or OS level, exclusive for system control and status messages (no sales, marketing, billing, or collection messages allowed).
rietta 9y ago
I am so sick and tired of xfinity mailings addressed to me or my wife or former residents of the home address asking us to switch to them for a two year discount that I know they won’t give us because we’re already a customer. They even just jacked my rates yet again.
- rietta 9y ago
  Along the lines of this. Anyone in the industry, why do they not cross reference the street addresses of their current subscribers and reduce the promotional mailing list or mail relevant promotions? Maybe it seems cheaper to do it this way, but it's actually quite antagonistic to current customers. Why would they not maintain a clean marketing list!?

dhimes 9y ago

OT question: Do you roll your own tunnel or use a service?