Wednesday 19 April 2017

Comcast is using JavaScript injection to popup modem upgrade ads on non-HTTPS sites

I've started receiving several javascript "popups" telling me my modem (which is rated for 300mbps on my 125mbps connection, just doesn't do the new DOCIS) is out of date.

Is Comcast allowed to be doing this to my connection? I'm going through my own router and modem to connect. I shouldn't be worried about my own ISP injecting HTML into my websites, regardless of their encryption level.

You can see a screenshot here: http://ift.tt/2pCJye8

It's fairly annoying. It also injects a lot of javascript into the pages.

Has anyone else witnessed this yet? Is this even allowed? This is essentially a MITM right? That definitely makes me consider getting a VPN a bit more, which is BS since I'm already paying way more than I should for internet speeds.



by afschuld http://ift.tt/2pD4ZZo

No comments:

Post a Comment