Re:A Comcast Security Flaw Exposed Millions of Customers’ Pe...
by uxp on Wednesday August 08, 2018 @09:12PM
(#17721007)
Think of it this way: Two people are playing an online game, and one gets mad at the other. He or she then sends a link to an image or something else to the player they are mad at, effectively siphoning off their IP address. By using this flaw, it could make it trivial to find their real address if it was a comcast customer, and send the SWAT team to their house.
[ Parent
| on HN ]
Re:A Comcast Security Flaw Exposed Millions of Customers’ Pe...
by trocadero on Wednesday August 08, 2018 @09:23PM
(#17721047)
Finding a location by IP address is not always reliable. The first result when googling my IP address yields a city 1,000 miles away (other results have the correct city). Then, knowing the first digit of a street address gets you a range of addresses that can represent anywhere from 1 to hundreds of homes. It's theoretically possible to get a specific address from this method but it's unlikely and not reliable.
Re:A Comcast Security Flaw Exposed Millions of Customers’ Pe...
by Firerouge on Wednesday August 08, 2018 @09:28PM
(#17721067)
The point of the article is that you could essentially get the exact address house address from just the IP of a Comcast customer
Re:A Comcast Security Flaw Exposed Millions of Customers’ Pe...
by trocadero on Wednesday August 08, 2018 @09:55PM
(#17721168)
Right, and my point is that you essentially can't. For my address the best you could do is narrow it down to ~30 or so homes that share the same first digit as my address. For this to work you have to:
(1) Have the IP address return the right location
(2) Not have duplicate street names in that location
(3) Have a single digit address OR be the only home starting with that number
That's going to be a pretty rare combo. Probably less than 1%.
Re:A Comcast Security Flaw Exposed Millions of Customers’ Pe...
by meowface on Friday August 10, 2018 @11:09PM
(#17738064)
They'll be able to narrow it down to 10-30 homes, but from there they can see who owns those homes, research those people on social media etc., and determine who their likely target is.