News for hackers. Stuff that matters.
Re:Hack GPON – how to access, change and edit fibre ONTs by jeroenhd on Wednesday September 25, 2024 @06:38AM (#41645844)
In theory the ONT can act like a listening device. They're also often Linux or BSD devices that can get hacked.

If you're paranoid, you may want to run an ONT that you control, just in case. I doubt it's something that matters to a lot of people, but even if it only matters to some, it shouldn't be made impossible for those that want to.

RE: misbehaving hardware: the same is very much true for cable internet and there are plenty of countries where people hook up their own modem without any trouble. If someone wanted to mess with the fiber network they could just disconnect the ONT and shine a laser pointer down there. All off-the-shelf devices are built to just work and follow the necessary standards, because there's nothing to be gained by messing with the PON network like that.

Re:Hack GPON – how to access, change and edit fibre ONTs by the_mitsuhiko on Wednesday September 25, 2024 @06:48AM (#41645896)
> In theory the ONT can act like a listening device

Sure, but so can the other endpoint. Even many AON installations these days are just hidden XPS-PON and similar, you just never see the ONT. (See a lot of ISPs in Switzerland)

Re:Hack GPON – how to access, change and edit fibre ONTs by bobmcnamara on Wednesday September 25, 2024 @10:28AM (#41647934)
And so can all the other endpoints if they're not encrypting downstream traffic
Re:Hack GPON – how to access, change and edit fibre ONTs by worewood on Wednesday September 25, 2024 @12:17PM (#41649024)
In the year 2024 it is prudent to think of everything that leaves the premises as potentially listened upon.

That's why we've got HTTPS an DoT/DoH so widespread these days

Re:Hack GPON – how to access, change and edit fibre ONTs by lxgr on Wednesday September 25, 2024 @05:48PM (#41652211)
There’s still a huge privacy impact if anyone can listen to your traffic (since hostnames are almost always plaintext due to SNI).