<div dir="ltr">Hello Alessndro,<br><br>The phrase "hack into all customer computers" in my question that was part of m email to Airtel months ago was more of an angry expression as an independent, individual customer. It was a message that I wrote when I was very angry. <br>
<br>Had this been in the context of an isoc communication, I would have phrased it more appropriately. (An ISP wouldn't achieve anything by hacking into ALL customer computers, but if they want they can selectively hack in-depth, for which they have the technical superiority and the ability to monitor and control)<br>
<br>The internet connection works with some specific settings. These settings are designed for modems from
the ISP's "approved list" of modems- I have one provided by the ISP on a monthly
rental of $2.5 which has a universal user name and password. 90% of the home users use the modem with default settings and the ISPs do not bother to educate them to change the modem password, which is a multi-step process that one has to learn from a phone call to customer support. <br>
<br>As you say, may
be they have modified the settings of my modem. I don't know about the various technical possibilities. Through the modem or by some other back door, this ISP had some way of overriding the browser settings. I have a screen shot of the page that loaded (attached) and a text file of what I noted down from the page properties including the source code copied from a file that was saved as a .pl file. This is not much, but might an expert determine how this unsolicited web page popped up.<br>
<br>I have had other instances of intrusion attempts of indeterminate
origin. But this particular issue is caused by the ISP, which was
simply not taken note even after repeatedly raising this issue. I have
once even raised concerns about noticeable parallel wiring which was
also unattended.<br>
<br>
Yes, I must be careful, may be even set up a decoy or a honey pot to
record logs. In the absence of these measures all that I could
immediately do is to work out of a computer with Solaris, an O/S that
is a little unfamiliar for the local hackers to tamper with.<br><br>There is not much of a choice of ISPs in small towns in India. So I continue.<br><br>(The bright side is that such experience of helplessness has given me one or two additional points to cover in a paper that I am drafting on Internet Rights)<br>
<br>S<br><br><br><br><div class="gmail_quote">On Tue, Jul 22, 2008 at 12:45 AM, Alejandro Pisanty <<a href="mailto:apisan@servidor.unam.mx">apisan@servidor.unam.mx</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
S.,<br>
<br>
have you ascertained fully that your computer has been hacked into by the ISP, or is there some other form of interception, on the network, occurring?<br>
<br>
The scenario of the ISP hacking into all of its users' computers seems highly unlikely to me. And, you should have available - as an ISOC Chapter! - the services of someone knowledgeable in computer forensics to check your computer, as well as to set up a decoy where logs are kept of all activity, etc. to prove this hacking beyond any doubt.<br>
<br>
What is less unlikely is that they have modified configurations in your (ADSL or other technology) modem. That would be a different story, though many of us would raise hell and call it "pharming" if it was an egregious enough redirection of the DNS calls.<br>
<br>
Beyond that: other than in closed networks, like a hotel's, no-one should stand between you and the DNS. But then, no-one should stand between you and the Internet... unless you have accepted it in the small print of your contract with your ISP (Arnoud: this applies to your response as well.)<div class="Ih2E3d">
<br>
<br>
Yours,<br>
<br>
Alejandro Pisanty<br>
<br>
<br>
. . . . . . . . . . . . . . . . . . . . . . . . . .<br>
Dr. Alejandro Pisanty<br>
UNAM, Av. Universidad 3000, 04510 Mexico DF Mexico<br>
<br>
Tels. +52-(1)-55-5105-6044, +52-(1)-55-5418-3732<br>
<br>
*Mi blog/My blog: <a href="http://pisanty.blogspot.com" target="_blank">http://pisanty.blogspot.com</a><br>
*LinkedIn profile: <a href="http://www.linkedin.com/in/pisanty" target="_blank">http://www.linkedin.com/in/pisanty</a><br>
*Unete al grupo UNAM en LinkedIn, <a href="http://www.linkedin.com/e/gis/22285/4A106C0C8614" target="_blank">http://www.linkedin.com/e/gis/22285/4A106C0C8614</a><br>
<br>
---->> Unete a ISOC Mexico, <a href="http://www.isoc.org" target="_blank">http://www.isoc.org</a><br>
Participa en ICANN, <a href="http://www.icann.org" target="_blank">http://www.icann.org</a><br>
. . . . . . . . . . . . . . . . . . . . . . . . . .<br>
<br>
<br></div>
On Mon, 21 Jul 2008, Sivasubramanian Muthusamy wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Date: Mon, 21 Jul 2008 21:31:11 +0530<br>
From: Sivasubramanian Muthusamy <<a href="mailto:isolatedn@gmail.com" target="_blank">isolatedn@gmail.com</a>><br>
To: Gilles Massen <<a href="mailto:gilles@isoc.lu" target="_blank">gilles@isoc.lu</a>><br>
Cc: <a href="mailto:chapter-delegates@elists.isoc.org" target="_blank">chapter-delegates@elists.isoc.org</a>,<div class="Ih2E3d"><br>
Patrick Vande Walle <patrick@vande-walle.eu><br></div>
Subject: Re: [Chapter-delegates] Canadian ISP Rogers violates net neutrality<div><div></div><div class="Wj3C7c"><br>
by hijacking failed DNS lookups<br>
<br>
Hello Alejandro,<br>
<br>
1. I followed the original link and from there tried to go to<br>
<a href="http://www.digitalhome.ca/forum/forumdisplay.php?f=28" target="_blank">http://www.digitalhome.ca/forum/forumdisplay.php?f=28</a> or to page<br>
<a href="http://www.digitalhome.ca/forum" target="_blank">http://www.digitalhome.ca/forum</a>. Both pages returned a 403 error.<br>
<br>
2. My ISP is Bharti AIRTEL, I have noticed a more serious issue of a<br>
possible backdoor intrusion by the ISP, which is a possible breach of<br>
consumer privacy. This ISP - Airtel Broadband is evidently in a position to<br>
control the browser in MY COMPUTER to take over my browser to redirect any<br>
URL to an Airtel page that says you are temporarily disconnected ( The ISP's<br>
tolerance for late payments even for long standing subscribers is not even a<br>
day past the due date, which is sometimes missed )<br>
<br>
I have asked them in several repeated email messages<br>
<br>
a) How did you get into my computer to override my browser home page<br>
settings ?<br>
b) What gives you the right to do that ?<br>
c) If you can do as much of a hack in all customer computers as to<br>
override the browser settings and ensure that any address typed in the<br>
address bar takes the browser to<br>
<a href="http://203.145.184.29/cgi-bin/airtel/frontpage.pl" target="_blank">http://203.145.184.29/cgi-bin/airtel/frontpage.pl</a>, what else couldn't<br>
you have done ?<br>
<br>
This issue was raised in several repeated email messages, routinely<br>
acknowledged but was conveniently left unanswered. In India Consumer Forums<br>
are grossly inadequate and largely controlled or influenced by the<br>
Industrial groups; Consumer legislation, the judicial process are<br>
inadequate, so these large companies simply brush aside any communication<br>
that questions their ways of working<br>
<br>
Sivasubramanian M.<br>
<br>
<br>
<br>
On Mon, Jul 21, 2008 at 7:05 PM, Gilles Massen <<a href="mailto:gilles@isoc.lu" target="_blank">gilles@isoc.lu</a>> wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Alejandro, Patrick, et al,<br>
<br>
There are more and more ISPs that tweak their DNS servers to return an IP<br>
address when they should return that a name does not exist. Rogers is only<br>
the last on a growing list.<br>
<br>
Personally, I'd never accept that behaviour from my ISP, I'd either change<br>
or<br>
work around it (with services like OpenDNS, where you can at least opt-out<br>
from such an 'enhanced user experience').<br>
<br>
Verisign was the same idea on another level, and you could not easily work<br>
around it, so I'm quite happy that that's gone.<br>
<br>
But let's face it: net neutrality is slowly disappearing...be it by<br>
changing<br>
the content of DNS replies, or by treating P2P traffic differently. To<br>
many 'optimisations' do simply that: manipulate what's on the wire.<br>
<br>
Best,<br>
Gilles<br>
<br>
<br>
<br>
<br>
On Monday 21 July 2008 01:54, Alejandro Pisanty wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Patrick,<br>
<br>
reminds me of the spat on wildcards with Verisign some years ago. Quoting<br>
it could be a good precedent Rogers clients may want to use. Rogers may<br>
not want to get into a similar mess.<br>
<br>
Yours,<br>
<br>
Alejandro Pisanty<br>
<br>
<br>
. . . . . . . . . . . . . . . . . . . . . . . . .<br>
</blockquote>
.<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Dr. Alejandro Pisanty<br><br>
<br>
On Sun, 20 Jul 2008, Patrick Vande Walle wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Date: Sun, 20 Jul 2008 21:57:11 +0200<br>
From: Patrick Vande Walle <patrick@vande-walle.eu><br>
To: isoc Chapter Delegates <<a href="mailto:chapter-delegates@elists.isoc.org" target="_blank">chapter-delegates@elists.isoc.org</a>>,<br>
ISOC Extended Board <<a href="mailto:isoc-ext-board@elists.isoc.org" target="_blank">isoc-ext-board@elists.isoc.org</a>><br>
Subject: [Isoc-ext-board] Canadian ISP Rogers violates net neutrality<br>
</blockquote></blockquote>
by<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
hijacking failed DNS lookups<br>
<br>
<a href="http://www.digitalhome.ca/content/view/2689/206/" target="_blank">http://www.digitalhome.ca/content/view/2689/206/</a><br>
<br>
In what appears to be a violation of Net Neutrality by Rogers Cable,<br>
Digital Home readers are reporting that Rogers High Speed Internet<br>
service has begun redirecting customers "Server not found pages" to<br>
webpages laden with Rogers advertising.<br>
<br>
See original link for more details and screenshots.<br>
<br>
--<br>
Patrick Vande Walle<br>
</blockquote></blockquote>
<br>
</blockquote></div></div></blockquote></blockquote></div><br></div>