Xfinity Is Man-in-the-Middle Attacking My Internet (rietta.com)

Article summary

The article discusses how Xfinity, a US internet service provider, injects JavaScript code into users' web requests to notify them when they are approaching their data cap. This practice is criticized for being a man-in-the-middle attack, which can compromise security and accessibility. The injected code can also slow down website loading times and contribute to the user's data usage. The author argues that this practice is morally wrong and should be stopped.

Main themes

• Man-in-the-middle attack
• Data cap notifications
• Internet security
• Accessibility
• ISP practices

What commenters say

• Xfinity's injection of JavaScript code into users' web requests is a long-standing issue that has been a source of frustration for many customers.
• The practice of injecting code into web requests can be used to compromise security and should be stopped.
• Some commenters question whether the injected code actually counts towards the user's data cap, and if so, how this is implemented.
• Others argue that the issue is not just about Xfinity, but about the lack of competition in the ISP market, which allows such practices to continue.
• There is disagreement about whether it is possible for an ISP to perform a man-in-the-middle attack on HTTPS traffic without being detected.
• Some commenters suggest that the use of deep packet inspection technology could allow an ISP to unwrap and re-wrap SSL traffic, potentially compromising security.
• The discussion also touches on the importance of certificate transparency and the role of root CAs in maintaining the security of HTTPS connections.
• Some argue that the article's tone is overly alarmist and that the issue could be presented in a more straightforward and factual manner.