3 ms·
If it’s GPON, the SFP is actually an entire computer that does a handshake with the upstream OLT and has a MAC address as well as an authentication key. It’s no
by Nextgrid 4y ago
If it’s GPON, the SFP is actually an entire computer that does a handshake with the upstream OLT and has a MAC address as well as an authentication key. It’s not a normal, dumb layer-1 SFP.
- nubinetwork 4y agoAh, maybe that explains it... I guess it would be too easy to get free internet if people could just jack into fibre strands.
- Nextgrid 4y agoI'm confident the actual auth/crypto is terrible, so a dedicated attacker can do this even with GPON (through a rooted conventional GPON ONT). The security is mostly provided by the fact that most internet is cheap enough that the mere price of acquiring an SFP or GPON ONT + the time it takes to reverse-engineer and hack isn't worth it. Also, breaking into unterminated fibre itself requires a fusion splicer that will set you back a couple grand, which is enough to pay for 1+ years of internet in most places. Same with DOCSIS, the security is mostly obscurity/annoyance but anyone dedicated will easily bypass it.