157 ms·

To take advantage of this, you need the target's account number. Not impossible to get, but it's also not something you can readily get your hands on.

DmenshunlAnlsis 8y ago
You could probably find it in most peoples’ trash, reliably, intact, on a regular schedule.
- mcbutterbunz 8y ago
  One more reason to enter into paperless statements.
  - mamon 8y ago
    Or to buy a shredder.
    - oneeyedpigeon 8y ago
      That negates many of the other reasons to go paperless, though.
    - slumberlust 8y ago
      Don't buy a shredder. Buy the Shredder: https://smile.amazon.com/Teenage-Mutant-Ninja-Turtles-Figure/dp/B00007KQCU?sa-no-redirect=1 https://smile.amazon.com/Teenage-Mutant-Ninja-Turtles-Figure...
- Clubber 8y ago
  Ya, but that's pretty out there. The big problem with vulnerabilities is millions of hackers from all over the world can actively exploit them at the same time. If you limit it to someone digging in your trash, you would have to be a pretty high value target for someone to go through that. I wouldn't expect anyone in my neighborhood to go through that for free internet.
  - Retric 8y ago
    It's common for apartments to have trash can in their mail room that's just got mail in it. So, it's not going to be unclean and being able to leech internet is likely worth it for many people.
  - IncRnd 8y ago
    You fundamentally misunderstand the attack. Nobody needs to dig in your trash. A malicious third party only needs one account number/address from any Comcast customer. With that, they can use your equipment to download child porn or launch illegal traffic that will trace back to you.
gwbas1c 8y ago
Upvoted. A lot of the security breeches we see are, in practice, extremely difficult to exploit. If I had a Comcast router, (which I don't,) I wouldn't worry one about this exploit. (As long as it's fixed in a timely manner.)
- alasdair_ 8y ago
  Sure, unless you have a stalker-ish ex, or you're a politician, or you've ever had someone else pay your bill, or you once had a bit of mail go missing or...

DmenshunlAnlsis 8y ago

You could probably find it in most peoples’ trash, reliably, intact, on a regular schedule.

mcbutterbunz 8y ago
One more reason to enter into paperless statements.
- mamon 8y ago
  Or to buy a shredder.
  - oneeyedpigeon 8y ago
    That negates many of the other reasons to go paperless, though.
  - slumberlust 8y ago
    Don't buy a shredder. Buy the Shredder: https://smile.amazon.com/Teenage-Mutant-Ninja-Turtles-Figure/dp/B00007KQCU?sa-no-redirect=1 https://smile.amazon.com/Teenage-Mutant-Ninja-Turtles-Figure...
Clubber 8y ago
Ya, but that's pretty out there. The big problem with vulnerabilities is millions of hackers from all over the world can actively exploit them at the same time. If you limit it to someone digging in your trash, you would have to be a pretty high value target for someone to go through that. I wouldn't expect anyone in my neighborhood to go through that for free internet.
- Retric 8y ago
  It's common for apartments to have trash can in their mail room that's just got mail in it. So, it's not going to be unclean and being able to leech internet is likely worth it for many people.
- IncRnd 8y ago
  You fundamentally misunderstand the attack. Nobody needs to dig in your trash. A malicious third party only needs one account number/address from any Comcast customer. With that, they can use your equipment to download child porn or launch illegal traffic that will trace back to you.

gwbas1c 8y ago

Upvoted. A lot of the security breeches we see are, in practice, extremely difficult to exploit. If I had a Comcast router, (which I don't,) I wouldn't worry one about this exploit. (As long as it's fixed in a timely manner.)

alasdair_ 8y ago
Sure, unless you have a stalker-ish ex, or you're a politician, or you've ever had someone else pay your bill, or you once had a bit of mail go missing or...