full-disclosure - Sify: ISP in India using hubs to provide connectivity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

From: rohit at kritikalsolutions.com (rohit@...tikalsolutions.com)
Subject: Sify: ISP in India using hubs to provide
	connectivity

hi,
 This one is the most obvious problem, I am nevertheless reporting it
since the ISP concerned has refused to take any action.

Sify (www.sify.com/bbhome) is an ISP in India with second largest customer
base and largest among broadband users. To provide broadband, they install
a radio link near your place and than provide connectivity to many users
via a HUB, not even a switch! The problem is obvious. I can listen to
anyone's conversation and do anything at all, using stuff like dnsspoof
and the likes. To top it all, they refuse to acknowledge that this is a
problem warn that in case you run sniffers on our network, we will
prosecute you! As if everyone who sniffs traffic is going to tell them.
In a place like India where people are still on windows 98, scope of a
major virus attack becomes many fold in such situations.
Thanks
Rohit