Hacker News new | past | comments | ask | show | jobs | submit login

What "MITM attacks" are you talking about?



Not the person you're replying to, but most ISPs and cellular providers log DNS queries and use that to profile you or resell to data brokers.

If you want to have some fun understanding this better, call up (for example) Verizon and have them send you the data they have on you. It's surprisingly detailed, including timestamped logs of every DNS query (in addition to specific profiling data, like "how likely you are to buy a new phone" or "household income", etc).

https://www.verizon.com/support/download-and-view-vpd-file/

After doing this myself, I always (at a minimum) use a privacy centric DNS and never the ISP's default.


Comcast started attacking it's customers via MITM about ~2013 or so. Initially it was ads, https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=co... . This would break things like, say, the Steam browser and prevent it from working. I literally had this happen to me. Eventually Comcast changed it's terms of service and violated it's contracts with existing customers and started limiting total data transfer to about 1 TB/mo. When it started doing this it also started MITM injecting JS about your usage into HTTP connections: https://rietta.com/blog/comcast-insecure-injection/

Comcast is the only non-56k ISP available in my area still in 2024. So I use them... but I also have to make sure to protect myself from their attacks. If I did what they're doing I'd go to prison. But some types of legal persons have more rights than human persons.


Comcast intercepts and rewrites your DNS queries to their own servers. I spent hours figuring out why I wasn't getting NXDOMAIN back from 8.8.8.8 until I realized Comcast was MITMing me.


Stream-downscaling, ad injection, etc. US isp shenanigans.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: