Visitor
•
2 Messages
A new arris device has connect to your modem.
I keep seeing this as something that has been a several years long issue.
Well I live in a high traffic area downtown...
AND I HAVE NO WAY TO DISCONNECT THIS ILLICIT DEVICE THAT I DID NOT CONNECT TO YOUR EQUIPMENT.
When you force us low-income people to pay 100 a month just for internet service and are unable to properly provide both service
and security, what exactly are you doing again?
Now I get to spend 2 hours calling your company to find a solution because:
1- You've designed your [Edited: "Language"] customer service to specifically never answer a phone call.
2- You've forced everyone to use your [Edited: "Language"] app to manage our equipment where as it was better
when it was via the web browser. Thanks for that by the way, thanks for making it WORSE and CHARGING MORE.
3- When a person finally does answer the phone, it's 80% of the time someone in another country and they have
zero networking experience and spend 90% of the phone call apologizing.
4- Your service is randomly down for "maintenance" without notice, and if you connect to anything else nearby
and do a trace route, you see that everyone in your area is using comcast routers; (cell services and other providers) so you bring it
down for residents but it's mysteriously up for everyone else.
5- Back in the 90s when we started building all of these things, WE MADE THEM REDUNDANT; that means you could
take down a server stack of routers but have a live set up and running SO PEOPLE DON'T EXPERIENCE DOWNTIME.
At the prices you charge how do you fail to do this!?
SHAME on you Comcast.
SHAME.
flatlander3
Problem Solver
•
1.5K Messages
2 years ago
Well, in an high density situation, there's a "feature" on their equipment called MoCA. It's TCP/IP over coax. In Xfinity's implementation, there is no security.
What you do is install a filter that screws into your coax, that blocks the frequency other MoCA devices use so they can't connect to your gear. You're supposed to have one, but often it's not installed especially in apartment buildings or they end up getting removed. They're less than $10 on Amazon. Search for "MoCA point of entry filter". That way, your neighbors devices aren't connecting to YOUR network either intentionally, or unintentionally.
It can go right on the back of your gateway if you aren't using coax cable boxes. If you are, it goes just before the splitter that feeds your other coax jacks and your gateway.
Now if you are actually doing a security audit, anything that you have to control with a phone app -- the least secure device you own -- is a horrid idea, especially if you are using it to control critical infrastructure. It's also a bad idea to expose a password with a cloud server (your WiFi password does this). I won't use their equipment, and actually can't use their gear for what I do. They fail everyone else's security audit as well. You can use 3rd party gateways with Xfinity, but I have to do it a bit differently with a dedicated firewall and isolate other things as well.
No, changing your WiFi password doesn't help this. Turning the feature off on your gateway won't fix it either, it will turn itself back on when an MoCA device is present. If you MUST use their gear for some reason, at least buy a filter.
3