RE: ISP reconfiguring cable modem?

["Burton M. Strauss III" <BStrauss () acm org>]

Sure it's legal - it's in the TOS you signed when you purchased service.

Same as with a car - just because you own it doesn't give you the right to
drive across my lawn.

-----Burton

> -----Original Message-----
> From: David Schwendinger [mailto:dschwendinger () BlackbirdTech com]
> Sent: Tuesday, June 01, 2004 8:44 AM
> To: paul () myipis com; security-basics () securityfocus com
> Subject: RE: ISP reconfiguring cable modem?
>
>
> I think an equally important question besides the "is it technically
> possible" is: Is it or should it be legal for ISPs to reconfigure
> equipment
> belonging to its subscribers, let alone doing it without telling
> them about
> it?
>
>
> David T. Schwendinger
>
> -----Original Message-----
> From: Paul Kurczaba [mailto:paul () myipis com]
> Sent: Thursday, May 27, 2004 3:12 PM
> To: security-basics () securityfocus com
> Subject: ISP reconfiguring cable modem?
>
> On this ZDNet article
> (http://zdnet.com.com/2100-1107_2-5218720.html?tag=zdaresources), it
> mentions that to help prevent spam, comcast could remotely reconfigure the
> cable modem if it sees that user is sending out a bunch of spam. How is it
> possible to remotely configure the cable modem? Would it be a TCP/IP or
> cable signal that would reconfigure the modem? If it is TCP/IP, couldn't a
> hacker screw up the modem? If it is a cable signal, what happens if the
> cable user bought the modem at best buy or compusa (it wouldn't be ISP
> specific)
>
> -Paul Kurczaba
>
>
>
> ------------------------------------------------------------------
> ---------
> Ethical Hacking at the InfoSec Institute. Mention this ad and get
> $545 off
> any course! All of our class sizes are guaranteed to be 10
> students or less
> to facilitate one-on-one interaction with one of our expert instructors.
> Attend a course taught by an expert instructor with years of in-the-field
> pen testing experience in our state of the art hacking lab. Master the
> skills
> of an Ethical Hacker to better assess the security of your organization.
> Visit us at:
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
> ------------------------------------------------------------------
> ----------


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------