Xfinity Is Man-in-the-Middle Attacking My Internet
Xfinity injected 581 lines of JavaScript into unencrypted traffic as a data-cap warning, creating MITM risks, accessibility failures, and slower loads.
Independent cybersecurity and ADA Title II/WCAG accessibility audits and attestation for governments and regulated SaaS firms. Since 1999. Call 770-623-2059.
Visit rietta.com → RSS feedOn Hacker News Mar 2016 – Sep 2026
Security & Privacy 4Society, Policy & Culture 2Software Engineering 1Networking & Internet 1
Xfinity injected 581 lines of JavaScript into unencrypted traffic as a data-cap warning, creating MITM risks, accessibility failures, and slower loads.
When sophisticated adversaries want to hack a network, they ultimately win. A government mandated encryption backdoor would make Americans less safe.
The FBI wants strong encryption without key escrow, which is insecure at scale, to be illegal or impractical. Data breach risks rise as devices get less secure.
Rietta patched a government client's Ruby on Rails site within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.