3 ms·

Wow, that sounds like a crazy vulnerability... so could I shine a laser pointer (of the right wavelength) down a FTTH optical fibre, screw up the TDMA, and knoc

• tialaramex 6y ago
  The GPON splitter is entirely passive, it's effectively a very fancy prism, so yes. It's a shared network. So is the road. You could just pour barrels of something nasty across the big road into the village and snarl everything up, but when they catch you I'm guessing the other villagers will be pretty unhappy about that. In principle the technology might arrange for encryption keys between your endpoint and the smarts at a remote exchange so that it's impossible without physical access to another terminal to interpret messages for other terminals or impersonate them. In practice I doubt this is actually effective. You should assume that traffic you send may be intercepted by an adversary. If you're confident that you don't have any adversaries then I suppose that needn't concern you, otherwise you should probably put most confidence in security at layers you can actually inspect, like TLS/ HTTPS rather than mysterious proprietary technologies like your FTTP installation. There are standards for stuff like the encryption of GPON, but those standards aren't for implementing by us, so they leave lots of gaps that could be filled by your service provider with strong, security focused decision making, or could be "Eh, who cares just set the password as 'password' on all the terminals and stop fiddling with it". It doesn't take too much cynicism to assume the latter.