45 ms·

Oh I remember this tutorial, because I followed it once to get telnet to this exact device. I even bought a special transcend sd card reader that was said to su

Oh I remember this tutorial, because I followed it once to get telnet to this exact device. I even bought a special transcend sd card reader that was said to support 1-bit mode, but what worked for me in the end was the cheapest and crappiest looking adapter I had. The funny thing is that you can use this method to illegaly increase your internet speed, since it is limited by the modem, not by the ISP's equipment.

tentacleuno 5y ago
> The funny thing is that you can use this method to illegaly increase your internet speed, since it is limited by the modem, not by the ISP's equipment. No way. I wonder if this works with ADSL modems. That's absolutely insane.
- toast0 5y ago
  ADSL modems are a totally different beast. With *DSL, you have a point to point connection with the telephone company equipment. It doesn't make sense to limit speed with the customer premises equipment, since the company equipment can easily do it (usually by limiting the negotiated sync speeds) With cable, it's a broadcast medium, so it's a lot simpler to let the network equipment be simple and have the CPE limit speeds. OTOH, network equipment capabilities have increased a lot since the early days.
- Terry_Roll 5y ago
  Not in the UK, its set by the cabinet which in my case is a Broadcom running version 12.3.16. So one of the reasons why its set by the cabinet is they charge different fees for different connection speeds. So in the UK if you are limited to say a 40Mb or 80Mb download and whatever upload, when your adsl router/modem connects or negotiates a speed (max DSLAM throughput), even if you could negotiate a 100Mb speed, you would be throttled to whatever you package speed is and then with things like TR069 (https://en.wikipedia.org/wiki/TR-069 https://en.wikipedia.org/wiki/TR-069) they can remote control your router. So that will include disconnecting your ADSL connection, reconnecting and giving you a new IP address if you dont pay for a fixed ip address. One ISP I tested could reset the connection and give you new IP address every second, it was literally as quick as the device could handle getting the new ip address in bridge mode. Some firewall products also do throttling, its part of what is called traffic shaping as explained here (some reasonable docs) https://forum.netgate.com/topic/20089/how-to-using-squid-for-bandwidth-throttling https://forum.netgate.com/topic/20089/how-to-using-squid-for... Traffic Shaping in general https://docs.netgate.com/pfsense/en/latest/trafficshaper/limiters.html https://docs.netgate.com/pfsense/en/latest/trafficshaper/lim... AFAIK the adls cabinets also have a separate RF communication channel possibly as an independent backup if the mainlines go down but power still remains. I know if the engineers so much as opens the door to a cabinet, it phones home possibly over the RF or maybe using both network and RF, havent established that yet, but things are quite joined up here from what I've been able to tell. Other factors will which affect the DSL speed are the stability settings, so do you have little to no interference and error checking for max speed or do you go cautious and have lots of interference mitigation enabled on the adsl modem/router. Think of adsl as loads of radio stations all transmitting down a wire, to get more speed you tune into and listen to more radio stations all at the same time. For slower speeds you tune into just a couple radio stations. The frequency of the "radio" station also counts, like listening to poor radio quality on Long wave which can bounce around the planet, Medium Wave which can cover a sizable area or Frequency Modulation which you need to be close by to get. Same as mobile phone 2G, 3G, 4G & 5G. The bubble or area of 2G is massive, where as 5G is tiny, but that tiny bubble can transmit alot unlike 2G which is slower. Same sort of concept just transmitted & contained down a wire instead of over the air. One reason hard coding the route in the modem is it can prevent random accesses to the GUI from malware in the computer or in other network devices and then other network security can come into play. There's a lot of info in this post, and will be similar and thus relevant for hacking other devices.
- nijave 5y ago
  If it hasn't limited by the modem, you could just saturate the connection up to where it's limited when uploading For cable modems, the modem runs the ISP's firmware which downloads runtime parameters from the ISP. The supported modem list is modem's they have firmware for that run on their network Afaik it's not very difficult for the ISP to detect modified modems
- jeroenhd 5y ago
  DSL has a speed limit on the DSLAM side, but cable has to deal with a shared medium and for some god forsaken reason the DOCSIS people decided that ISPs should trust the devices placed into people's homes to do rate limiting. In the same vein it's also trivial to hack many IPTV boxes used by fiber/DSL providers to give you free shows and channels because they essentially filter out the options you can click on on the client side rather than do any server side validation. There was a somewhat prolific subforum on a Dutch tech forum that tried to get into customising ISP IPTV boxes (didn't even need to alter the firmware, just needed to mess around with some JSON in transit) but that got cease-and-desisted because the method people used to alter themes could just as easily unlock most paid content. Sometimes it really does look like TV related ISPs are still living in the 90s when it comes to security boundaries.
  - butlerm 5y ago
    With a shared medium trusting customer premise equipment to do proper, compatible media access control is pretty much inevitable. A device could just as easily transmit noise all day long, ruining service for everyone on the same cable segment. The only way to make that impossible would require rewiring everything as a switched network, which would generally mean running a fiber to every home.
    - jeroenhd 5y ago
      When it comes to submitting well-formed streams, I agree. With DOCSIS, though, there's frequency/time block negotiation going on that a central node needs to confirm. A modem getting 1000mbps down on a 100mbps subscription should not be possible by simply flashing the modem with different firmware. This problem has been solved for LTE and other wireless standards, there's no reason why DOCSIS should stick to this old design in their new iterations.
      - sidewndr46 5y ago
        It's cheap to implement. Why would anyone bother trying to secure it? It's just going to cost a bunch of money for very little gain. If someone gets free bandwidth or free TV shows, nothing is really lost in the process. It isn't like having your car stolen.

tentacleuno 5y ago

> The funny thing is that you can use this method to illegaly increase your internet speed, since it is limited by the modem, not by the ISP's equipment. No way. I wonder if this works with ADSL modems. That's absolutely insane.

toast0 5y ago
ADSL modems are a totally different beast. With *DSL, you have a point to point connection with the telephone company equipment. It doesn't make sense to limit speed with the customer premises equipment, since the company equipment can easily do it (usually by limiting the negotiated sync speeds) With cable, it's a broadcast medium, so it's a lot simpler to let the network equipment be simple and have the CPE limit speeds. OTOH, network equipment capabilities have increased a lot since the early days.
Terry_Roll 5y ago
Not in the UK, its set by the cabinet which in my case is a Broadcom running version 12.3.16. So one of the reasons why its set by the cabinet is they charge different fees for different connection speeds. So in the UK if you are limited to say a 40Mb or 80Mb download and whatever upload, when your adsl router/modem connects or negotiates a speed (max DSLAM throughput), even if you could negotiate a 100Mb speed, you would be throttled to whatever you package speed is and then with things like TR069 (https://en.wikipedia.org/wiki/TR-069 https://en.wikipedia.org/wiki/TR-069) they can remote control your router. So that will include disconnecting your ADSL connection, reconnecting and giving you a new IP address if you dont pay for a fixed ip address. One ISP I tested could reset the connection and give you new IP address every second, it was literally as quick as the device could handle getting the new ip address in bridge mode. Some firewall products also do throttling, its part of what is called traffic shaping as explained here (some reasonable docs) https://forum.netgate.com/topic/20089/how-to-using-squid-for-bandwidth-throttling https://forum.netgate.com/topic/20089/how-to-using-squid-for... Traffic Shaping in general https://docs.netgate.com/pfsense/en/latest/trafficshaper/limiters.html https://docs.netgate.com/pfsense/en/latest/trafficshaper/lim... AFAIK the adls cabinets also have a separate RF communication channel possibly as an independent backup if the mainlines go down but power still remains. I know if the engineers so much as opens the door to a cabinet, it phones home possibly over the RF or maybe using both network and RF, havent established that yet, but things are quite joined up here from what I've been able to tell. Other factors will which affect the DSL speed are the stability settings, so do you have little to no interference and error checking for max speed or do you go cautious and have lots of interference mitigation enabled on the adsl modem/router. Think of adsl as loads of radio stations all transmitting down a wire, to get more speed you tune into and listen to more radio stations all at the same time. For slower speeds you tune into just a couple radio stations. The frequency of the "radio" station also counts, like listening to poor radio quality on Long wave which can bounce around the planet, Medium Wave which can cover a sizable area or Frequency Modulation which you need to be close by to get. Same as mobile phone 2G, 3G, 4G & 5G. The bubble or area of 2G is massive, where as 5G is tiny, but that tiny bubble can transmit alot unlike 2G which is slower. Same sort of concept just transmitted & contained down a wire instead of over the air. One reason hard coding the route in the modem is it can prevent random accesses to the GUI from malware in the computer or in other network devices and then other network security can come into play. There's a lot of info in this post, and will be similar and thus relevant for hacking other devices.
nijave 5y ago
If it hasn't limited by the modem, you could just saturate the connection up to where it's limited when uploading For cable modems, the modem runs the ISP's firmware which downloads runtime parameters from the ISP. The supported modem list is modem's they have firmware for that run on their network Afaik it's not very difficult for the ISP to detect modified modems
jeroenhd 5y ago
DSL has a speed limit on the DSLAM side, but cable has to deal with a shared medium and for some god forsaken reason the DOCSIS people decided that ISPs should trust the devices placed into people's homes to do rate limiting. In the same vein it's also trivial to hack many IPTV boxes used by fiber/DSL providers to give you free shows and channels because they essentially filter out the options you can click on on the client side rather than do any server side validation. There was a somewhat prolific subforum on a Dutch tech forum that tried to get into customising ISP IPTV boxes (didn't even need to alter the firmware, just needed to mess around with some JSON in transit) but that got cease-and-desisted because the method people used to alter themes could just as easily unlock most paid content. Sometimes it really does look like TV related ISPs are still living in the 90s when it comes to security boundaries.
- butlerm 5y ago
  With a shared medium trusting customer premise equipment to do proper, compatible media access control is pretty much inevitable. A device could just as easily transmit noise all day long, ruining service for everyone on the same cable segment. The only way to make that impossible would require rewiring everything as a switched network, which would generally mean running a fiber to every home.
  - jeroenhd 5y ago
    When it comes to submitting well-formed streams, I agree. With DOCSIS, though, there's frequency/time block negotiation going on that a central node needs to confirm. A modem getting 1000mbps down on a 100mbps subscription should not be possible by simply flashing the modem with different firmware. This problem has been solved for LTE and other wireless standards, there's no reason why DOCSIS should stick to this old design in their new iterations.
    - sidewndr46 5y ago
      It's cheap to implement. Why would anyone bother trying to secure it? It's just going to cost a bunch of money for very little gain. If someone gets free bandwidth or free TV shows, nothing is really lost in the process. It isn't like having your car stolen.