5 ms·

FTTH is somewhat open in Canada. You don't have to use their router, but you do have to use their SFP. (Why? I'm not entirely sure. AFAIK it doesn't send any

FTTH is somewhat open in Canada. You don't have to use their router, but you do have to use their SFP. (Why? I'm not entirely sure. AFAIK it doesn't send anything back to them)

endigma 4y ago
I wish lol, bell has moved the GPON inside their shitbox.
Nextgrid 4y ago
If it’s GPON, the SFP is actually an entire computer that does a handshake with the upstream OLT and has a MAC address as well as an authentication key. It’s not a normal, dumb layer-1 SFP.
- nubinetwork 4y ago
  Ah, maybe that explains it... I guess it would be too easy to get free internet if people could just jack into fibre strands.
  - Nextgrid 4y ago
    I'm confident the actual auth/crypto is terrible, so a dedicated attacker can do this even with GPON (through a rooted conventional GPON ONT). The security is mostly provided by the fact that most internet is cheap enough that the mere price of acquiring an SFP or GPON ONT + the time it takes to reverse-engineer and hack isn't worth it. Also, breaking into unterminated fibre itself requires a fusion splicer that will set you back a couple grand, which is enough to pay for 1+ years of internet in most places. Same with DOCSIS, the security is mostly obscurity/annoyance but anyone dedicated will easily bypass it.
ksec 4y ago
By SFP I assume you mean modem or ONT?
- Nextgrid 4y ago
  GPON SFPs are a thing - it could be that the ISP is using those even with their official router, handing off all the GPON auth to the SFP and the router just sees this as a normal WAN port. It's actually quite a good setup, as it allows power users to swap the router with anything SFP-capable and provides a standard interface across the demarcation line.
  - ksec 4y ago
    Wow. Thank You. Will definitely look that up.
flas9sd 4y ago
the new Greek regulation has those exemptions on fibre too, handoff is past a SFP. They gave their arguments on why they'd prefer it to be at the passive equipment at https://fsfe.org/news/2022/news-20220628-01 https://fsfe.org/news/2022/news-20220628-01

FTTH is somewhat open in Canada. You don't have to use their router, but you do have to use their SFP. (Why? I'm not entirely sure. AFAIK it doesn't send anything back to them)

endigma 4y ago

I wish lol, bell has moved the GPON inside their shitbox.

Nextgrid 4y ago

If it’s GPON, the SFP is actually an entire computer that does a handshake with the upstream OLT and has a MAC address as well as an authentication key. It’s not a normal, dumb layer-1 SFP.

nubinetwork 4y ago
Ah, maybe that explains it... I guess it would be too easy to get free internet if people could just jack into fibre strands.
- Nextgrid 4y ago
  I'm confident the actual auth/crypto is terrible, so a dedicated attacker can do this even with GPON (through a rooted conventional GPON ONT). The security is mostly provided by the fact that most internet is cheap enough that the mere price of acquiring an SFP or GPON ONT + the time it takes to reverse-engineer and hack isn't worth it. Also, breaking into unterminated fibre itself requires a fusion splicer that will set you back a couple grand, which is enough to pay for 1+ years of internet in most places. Same with DOCSIS, the security is mostly obscurity/annoyance but anyone dedicated will easily bypass it.

ksec 4y ago

By SFP I assume you mean modem or ONT?

Nextgrid 4y ago
GPON SFPs are a thing - it could be that the ISP is using those even with their official router, handing off all the GPON auth to the SFP and the router just sees this as a normal WAN port. It's actually quite a good setup, as it allows power users to swap the router with anything SFP-capable and provides a standard interface across the demarcation line.
- ksec 4y ago
  Wow. Thank You. Will definitely look that up.

flas9sd 4y ago

the new Greek regulation has those exemptions on fibre too, handoff is past a SFP. They gave their arguments on why they'd prefer it to be at the passive equipment at https://fsfe.org/news/2022/news-20220628-01 https://fsfe.org/news/2022/news-20220628-01