Top all-time · #3837
Ryan Kearney
Personal blog · blog.ryankearney.comsecurityhardware
Ryan Kearney's personal blog at blog.ryankearney.com covers security and hardware. Since 2010, 20 different Hacker News readers have linked it 23 times, most often “Never Give Your Information To 10 Minute Old Startups”. The last post was in 2013, but the archive is still widely read.
Too few sampled comments (18) to say how often HN recommends it.?
Why HN links it
HN readers link this blog mainly for its 2013 post documenting Comcast injecting JavaScript into web pages, cited as evidence of ISP traffic interception. Also linked is a 2012 post warning about giving personal data to a service.
Summarised by Claude from a sample of 18 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/6 people · 7 mentions · first linked 2013-04-02
- Never Give Your Information To 10 Minute Old Startups5 people · 5 mentions · first linked 2012-10-06
- /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/5 people · 5 mentions · first linked 2014-09-15
- How Not To Secure Your Network2 people · 2 mentions · first linked 2010-05-30
What Hacker News says?
Much longer than that: http://blog.ryankearney.com/2013/01/comcast-caught-intercept...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Comcast injects JavaScript into webpages to show copyright notices to customers”Submitted Never Give Your Information To 10 Minute Old Startups as a story · 501 points
HN discussionIs there an example of this in action Jarred? I'm on a Comcast connection right now (DSL was too slow). Looks like it has been happening for a while -- from 2013: https://gist.github.com/ryankearney/4146814 Blog post: http://blog.ryankearney.com/2013/01/comcast-caught-intercept... So also used when you near the monthly traffic cap (if your area has active caps).
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Comcast injects JavaScript into webpages to show copyright notices to customers”Submitted Why Apple Approved Opera And Not Google Voice as a story · 15 points
HN discussionNot only that but it appears people are using Comcast as a DOS proxy http://blog.ryankearney.com/2013/01/comcast-caught-intercept...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Comcast injecting JS”Submitted It costs $35 million to send an HD video via text while roaming on AT&T as a story · 6 points
HN discussionHas this been confirmed to still be happening? The guys blog post[1] states that this was on Nov 20th 2012. Anyone currently using a comcast account want to put down their pitchfork for a second and help verify this? [1] http://blog.ryankearney.com/2013/01/comcast-caught-intercept...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Comcast injecting JS”Submitted How Not To Secure Your Network as a story · 2 points
HN discussionI thought this code looked familiar! Here's my writeup on it for whoever is interested http://blog.ryankearney.com/2013/01/comcast-caught-intercept...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Comcast injecting JS”Submitted How Not To Secure Your Network as a story · 1 points
HN discussionComcast also injects JavaScript into HTML responses if they feel the need to send you a message. Here's the code they use: https://gist.github.com/ryankearney/4146814 And here's my (extremely short) writeup on it: http://blog.ryankearney.com/2013/01/comcast-caught-intercept...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “I fought my ISP's bad behavior and won”https is important for preventing spying by anyone else in between you and the server. ISPs, coffee shop owners, schools, etc used to spy on http traffic to see what people were doing/searching for, and ISPs like xFinity injected code into non-https pages to show "important messages" to users, e.g. going over your bandwidth limit[0]. The only weak link now is Cloudflare, which is still "less secure than a direct con…
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?”Would that block injection like Comcast does for bandwidth notifications? http://blog.ryankearney.com/2013/01/comcast-caught-intercept...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Google recommends inlining small CSS”Apparently it's a thing: https://www.infoworld.com/article/2925839/net-neutrality/cod... https://blog.ryankearney.com/2013/01/comcast-caught-intercep... https://www.fastcompany.com/3023305/att-offers-discounted-gi... https://arstechnica.com/information-technology/2016/09/att-t...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Bypassing Browser Security Warnings with Pseudo Password Fields”Don't give your data to this site until they fix this: http://blog.ryankearney.com/2012/10/never-give-your-informat...
Comment linking /2012/10/never-give-your-information-to-10-minute-old-startups/
on “Ice Box Pro: The best of Dropbox and Amazon Glacier combined”"Comcast did not respond to our inquiries but has mentioned a 180 day retention policy for IP-addresses in BitTorrent-related court documents. On some occasions cases have been dismissed because logs were no longer available, meaning that alleged infringers could not be identified. The 180 day policy is also mentioned in the Comcast Law Enforcement Handbook that leaked in 2007." https://torrentfreak.com/how-long-doe…
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Setting the Record Straight on Tor”MITM attacks. Verizon currently injects tracking headers into HTTP pages. https://www.eff.org/deeplinks/2014/11/verizon-x-uidh A variety of ISP's (Comcast, MTNL, IDEA) also run MITM attacks and inject ads in pages, sometimes on behalf of law enforcement. I imagine they inject tracking as well. https://blog.ryankearney.com/2013/01/comcast-caught-intercep... https://medium.com/@sushubh/delhi-police-is-literally-doing-…
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Google in Kansas City: A Tale of Two-Speed America”But this has a social app! This is a kickstarter project! This gives you the amazing opportunity to upload automatically every single moment of your life to a server on which you have absolutely no control! But they will be marked as private so totally safe! /irony http://blog.ryankearney.com/2012/10/never-give-your-informat...
Comment linking /2012/10/never-give-your-information-to-10-minute-old-startups/
on “Memoto Lifelogging Camera”Hey. Congrats on shipping.. that's more than I have been capable of this year. Lots of constructive things I want to point out. Don't think I'm bashing on the idea... (But you did post it as a Show HN so like most hackers I tried and find out how things work). - I successfully created an account without paying. (Contact me through my email if you want details. You can find it in my profile). - You write all of your…
Comment linking /2012/10/never-give-your-information-to-10-minute-old-startups/
on “Show HN: Use landing pages to test your product”http://blog.ryankearney.com/2010/01/ipad-vs-hp-mini-netbook/ The line that reads "Many of the Dell Laptop deals now include the Mini 10v and 11 at several hundred dollars less than the cheapest iPad." and links to Dell.
Comment linking /2010/01/ipad-vs-hp-mini-netbook/
on “IAcquire Banned From Google After Link Buying Allegations”I've also seen them hijack http streams. https://blog.ryankearney.com/2013/01/comcast-caught-intercep...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Tell HN: Comcast/Xfinity is having a widespread DNS outage”Comcast have repeatedly been caught injecting, from 2013 [0] through 2019 [1]. At what point do you acknowledge that the large-scale business that is the ISP, might just have more bargaining power than a single individual? [0] http://blog.ryankearney.com/2013/01/comcast-caught-intercept... [1] https://gist.github.com/ryankearney/4146814?permalink_commen...
Comment linking /2013/01/comcast-caught-intercepting-and-altering-your-web-traffic/
on “Getting a Psion 5 palmtop from 1997 online via PPP (and a Raspberry Pi)”To be honest, that's a tracking parameter, so I know where the clicks come from. You'd be surprised where HN percolates to! Maybe I should do a write-up on that. The Icebox fiasco is the fact that for a pretty long time, Ice Box Pro allowed watching every user's complete credentials (including Amazon keys) via a simple change in the URL parameter. You can read the details of the vulnerability here: http://blog.ryank…
Comment linking /2012/10/never-give-your-information-to-10-minute-old-startups/
on “Safe & Simple Amazon Glacier for everyone - only 4 weeks after the Icebox fiasco”
