Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors. [...]

all 10 comments

sorted by: hot top controversial new old
[–] 13 points 2 months ago

Don't worry, they're monitoring regardless of you using the service.

  • source
  • [–] 11 points 2 months ago (6 children)
    1. Get a wifi router and install OpenWRT on it
    2. Put your xfinity router at http://10.0.0.1/ into bridge mode plug in your OpenWRT
    3. Let xfinity fuck itself, you just get a data pipe not spying
  • source
  • hideshow 6 child comments
  • [–] 6 points 2 months ago (3 children)

    You can also buy your own modem to further reduce the dependence on xfinity.

    Someone correct me if Arris has been up to shady shit over the past 6 years

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 2 months ago (2 children)

    Any modem needs the latest DOCSIS which is ostensibly a standard but in practice is a big opaque proprietary blob afacit more or less shared among telecoms that adhere to the "standard". Using an older DOCSIS or one without the Comcast's latest-greatest enhancements (hence the quotes around "standard") will absolutely sacrifice line quality.

    Moreover Comcast gives you their latest-best modem for negotiation with their upstream WAN and replaces it when it ages out or gets recalled. With bridge mode enabled, it's as close to a dumb pipe as you're going to get without sacrificing quality.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 months ago* (1 child)

    I would much rather make that sacrifice than trust Comcast everyday of the week. Not disputing you at all but I don’t trust a thing about that company an never will

    Edit: and I should add, I haven’t personally noticed any difference in quality

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 months ago

    You are trusting them either way. If it is your router to their modem, or your modem to their local relays, either way they can view all the traffic you put across the line.

    AT&T doesn't really leave me a choice, I have to use their stupid router/modem, but of course that's treated as a dumb gateway for my own router. I've turned off their wifi radios and enabled their equivalent to gateway mode. It's pretty much the best you can do beside put it in a faraday cage.

    The notable step ups you can do is DNS over HTTPS, or full VPN tunneling, although I always assume most the VPN providers are doing the same spying, not to mention the performance hit.

  • source
  • parent
  • [–] 5 points 2 months ago* (last edited 2 months ago)

    Time to wrap the modem in foil

    EDIT: it takes way more foil than you’d think to block the ssids from being seen. Make sure to get the top and bottom of the device as well.

  • source
  • [–] 3 points 2 months ago

    I saw this one coming

  • source
  • 59 comments in c/technology@lemmy.world view that post
    [–] 85 points 2 months ago (19 children)

    PSA: If you can afford your own a retail router, it’s always a better idea than using the one provided by your ISP. Make no mistake, Xfinity is absolutely collecting (and probably selling) data on the traffic of every device on your network.

  • source
  • hideshow 19 child comments
  • [–] 31 points 2 months ago (5 children)

    Ubiquiti isn't perfect but they make a really good product and you don't have to connect it with a cloud

  • source
  • parent
  • hideshow 5 child comments
  • [+] 1 point 2 months ago (5 children)
  • [–] 16 points 2 months ago (1 child)

    I could give 2 shits if China is spying on me.

    Someone will figure out how to use the backdoor on the Chinese router. Then they can bypass your firewall. Now your router and all of your insecure IoT devices will be part of their botnet. They will sell your internet connection as a residential proxy or use it to DDoS websites.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 months ago*

    Everybody hacks everybody

    https://www.forbes.com/sites/joshpearce/2025/11/15/why-farmers-are-shielding-their-crops-with-solar-panels/

    Man, the Snowden leaks had examples of 5th to 6th party docs retrieved from hacking intelligence agencies who had hacked intelligence agencies who... You get the point

    5 eyes countries literally spy on their own citizens by proxy, retrieving information from each others' agencies directly

  • source
  • parent
  • [–] 11 points 2 months ago (1 child)

    Everyone is really readily accepting of china potentially spying on them whenever this topic comes up, and I'm just kinda curious why you think chinese companies don't sell that user data to western companies just as western countries do for china?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 months ago*

    https://spycloud.com/blog/state-secrets-for-sale-chinese-hacking/

    China’s state-sanctioned data collection and intelligence apparatus is leaky. We have observed a vast ecosystem of corrupt insiders siphoning data from China’s state-sponsored data collections apparatus and selling it on the black market. This threat activity most acutely affects Chinese citizens, whose personal data is readily available to any paying customer.

    Cybercriminals from the Sinosphere appear to be increasingly present in Western digital crime spaces. This trend seems to be somewhat driven by Chinese scam and smishing actors aggressively and successfully targeting overseas victims. We frequently observe Chinese-language actors re-sharing (or sometimes taking and attempting to re-sell) data breaches from English-language forums in Chinese-speaking communities.

    Countries like China rely a lot of independent local groups doing the dirty job so they can shield their national reputation by "taking care of" individual groups as they become a liability. Russia and others do it too. Everybody hacks everybody. Some of these groups target both foreigners and their own. Sometimes for domestic spying, sometimes just for plain scams.

  • source
  • parent
  • load more comments (-1 replies)
  • [–] 15 points 2 months ago (6 children)

    Xfinity is absolutely collecting (and probably selling) data on the traffic of every device on your network.

    They're doing that anyway via the modem. Unless you are tunnelling everything your ISP sees every byte you send.

  • source
  • parent
  • hideshow 6 child comments
  • You can also get your own modem, but that doesn’t change the fact that yes, you need to use a VPN for any external traffic you don’t want your ISP seeing.

    However, ISP controlled routers provide them direct visibility into your LAN, which they otherwise wouldn’t see. This gives WAY more detailed information about you and your behavior, i.e. the original article.

  • source
  • parent
  • [–] 3 points 2 months ago (3 children)

    By tunnelling, you mean using a VPN?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 11 points 2 months ago (2 children)

    Yeah but to clarify, encrypted traffic is still encrypted. They can't see specifics beyond the sites you went to, urls, dns queries, etc... to hide that you'd need a VPN.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 13 points 2 months ago (1 child)

    I work for a different large ISP who provides modems and routers to our customers, but not this specific feature (being a bit vague because I know at one point mentioning the company’s name on social media would result in the post being reviewed by the social media team/referred to security for anything discussing internal processes, and while Lemmy probably isn’t on their radar I’d rather not risk it).

    The amount of data we can see if you’re using our routers is pretty crazy, and most people have no idea. We can see exactly what you have on your network and what it’s doing. If you’re just using the modem and not the router, we have much more limited visibility. We don’t have the capacity to monitor everything everyone is doing all the time, so if you’re using your own equipment (and you’re not using our DNS service), it’s unlikely we have much data on your activity. Storage in the scale needed to store what everyone is doing gets expensive.

    I’ve always used my own equipment, and I make sure everyone in my family has their own equipment as well. I would absolutely advise against using your ISP’s equipment if your goal is privacy.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 2 months ago

    I encourage everyone with the ability to do so to at least try to run their own networking, or even just periodically examine the logs. The weird things I’ve discovered about random devices on my network have made me seriously question what the fuck companies are doing.

  • source
  • parent
  • [–] 1 point 2 months ago (3 children)

    Can you recommend some trustworthy hardware?

    I know gl.inet is probably best for routers, but are any of the mainstream brands more trustworthy than others? TP-Link, Ubiquiti, etc.? I recently got a Zyxel, are those okay?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 2 months ago*

    Mikrotik.com is another. Often the kind of router developed to work for small businesses and also suitable for homes are decent (note the direction).

    If your router supports it, consider flashing openWRT (replacing the OS entirely)

  • source
  • parent
  • [–] 37 points 2 months ago (17 children)

    Regardless of the basic privacy invasion that we all know Comcast is doing. Buy your own cable modem and router. Comcast charges you to use theirs, so they pay for themselves in a couple years.

  • source
  • hideshow 17 child comments
  • [–] 13 points 2 months ago (6 children)

    They used to charge you more for unlimited data if you didn't use their modem. Renting their modem plus getting unlimited data was $30/month, but just getting unlimited data with your own modem was $50/month.

    Not relevant any more though, as (at least in my area) they completely removed the data caps.

    I'm so glad I have a local ISP that provides 10Gbps for cheaper than Comcast's 1Gbps.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 2 months ago (3 children)

    Did they change that really recently? That was still a thing two years ago with Comcast. It is the only reason I still have their modem.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 2 months ago

    The clue is the last line of their comment where they say they have a competitor offering 10Gbps which is why Comcast removed the data cap in their area. AFAIK it's still in place where I'm at because the only other option is CenturyLink 100mbps DSL.

  • source
  • parent
  • [–] 1 point 2 months ago (1 child)

    In my area, they removed the data caps last year, when they also rolled out the higher upload speeds (eg the gigabit plan now has 350Mbps upload speed instead of 25Mbps). I don't think they've rolled that out everywhere though.

    They also have a habit of keeping people on old plans that are either slower or more expensive. If you're still using Comcast/Xfinity, check their site and see what they offer to new customers at your address. (you may need to use an internet connection other than your Comcast one, otherwise they may detect that you're an existing customer)

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 months ago (1 child)

    Haven't seen that one. Everywhere I've been they tack on $5 a month or so to have their router. Last one I bought was $80 2 years ago, so it's already paid for itself.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 2 months ago* (last edited 2 months ago)

    Their pricing can differ by region. Not every region got the data caps back when they rolled them out.

    It also depends on competition - if there's a lot of competition in your area, Comcast will have better deals compared to if you live somewhere where Comcast is the only option.

    I used to live in an apartment that had an exclusivity deal with Comcast (residents were only allowed to use Comcast for internet service). Now I live somewhere in the same county where there's three different fiber providers in addition to Comcast, and their prices here are noticeably cheaper vs the old apartment.

  • source
  • parent
  • [–] 8 points 2 months ago

    It's always been a ripoff from the start. The modem / router is far cheaper than whatever they charge you to rent it over a year. Additionally they were broadcasting public wifi hotspots from your rented modem for a while (probably still are) and now this. Having said that, walk into any random friend's house, and what will you see? A big stupid rented Comcast modem.

  • source
  • parent
  • [–] 3 points 2 months ago (7 children)

    I tried... Comcast would "forget" the modem 3 times a month and would have to call and read them the MAC address again etc... fuck Comcast

  • source
  • parent
  • hideshow 7 child comments
  • [–] 4 points 2 months ago (1 child)

    Probably a modem problem honestly. I've been on and off comcast a few times and 3 different modems over the years. Only issue I've had were when my old ones got too out dated.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 2 months ago (2 children)

    So glad I was able to get an alternate ISP. A good chunk of my life, Comcast was the only high speed ISP in the area.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 months ago

    They've changed it since covid so now if you use their modem/router combo, you get unlimited data for free. If you don't use their modem and router, you have to pay $30/mo to remove the data caps or keep yourself under 1.2TB for the month.

  • source
  • parent
  • [–] 22 points 2 months ago (1 child)

    Yep it will get used by advertisers to know how many times you get up while watching netflix, or by police to know when to conduct a raid.

  • source
  • hideshow 1 child comment
  • [–] 21 points 2 months ago

    The Dark Knight surveillance tech is real life now. We're screwed.

  • source
  • [–] 15 points 2 months ago

    I remember the scientific article of this technology as a proof of concept. Honestly it didn't take an ISP very long to weaponize it offer it as a service.

  • source
  • [–] 11 points 2 months ago (1 child)

    Last time I had to use their services I wrapped their modem/router that they forced me to use in a roll of aluminum foil and ran one short ethernet cable out to use my own router with whatever I want. Blocked all their public WiFi you can't turn off and roasted that thing. I was genuinely surprised that it still worked when I gave it back.

  • source
  • hideshow 1 child comment
  • [–] 6 points 2 months ago (2 children)

    Guess I'm injecting metal into my exterior walls and lining my blinds with tin foil

  • source
  • hideshow 2 child comments
  • [–] 5 points 2 months ago* (last edited 2 months ago) (3 children)

    If Google and Apple start doing this with Bluetooth and WiFi on Location Services, they're not that far off the The Dark Knight sonar scene:

    https://www.youtube.com/watch?v=IRELLH86Edo

  • source
  • hideshow 3 child comments
  • [–] 5 points 2 months ago (3 children)

    I had (still have) my own modem, but switched to their cheep "prepaid" Xfinity NOW service. Fast enough for my needs but I'm annoyed to learn I can only use the refurbished modem they have given me. No idea if its capable of presence monitoring but Its one of their old ones and I'm sure it already leaks metrics I'd rather not share.

  • source
  • hideshow 3 child comments
  • [–] 3 points 2 months ago

    OPs article links to another article at TechCrunch . That article states:

    As first reported by The Verge, the new Wi-Fi Motion feature works for advanced Xfinity gateways XB7 and newer models and is opt-in, which means users can choose whether to switch on the feature in the Xfinity app.

    So it seems like for now it's only this one model that can do it, if you believe them. Frankly, I wouldn't sniff that opt-in claim either because I'm fairly certain I know which orifice they pulled it out of.

  • source
  • parent
  • [–] 4 points 2 months ago

    I like my no BS ISP that allows me to use any retail router matching their specs. One thing I just don't have to worry about.

  • source
  • [–] 4 points 2 months ago

    And you thought having to use Comcast was bad enough!

  • source
  • [–] 6 points 2 months ago

    Fun fact: I have my device in airplane mode 90% of the time and only use WiFi. My device ID/name is "Unknown device" specifically so it looks like random or no good. I also use randomized Mac addresses.

    I'm free of xfinity/Comcast, but for anyone else I know who uses it, I freely offer my professional IT tips to change DNS, recommend modem/gateway, etc.

  • source
  • [–] 1 point 2 months ago

    Hopefully my personal router isn't being used by the ISP for this sort of thing. Odds are, they probably just do it, because capitalism is sucktackular by default.

  • source
  • 11 comments in c/technology@lemmy.zip view that post
    [–] 23 points 2 months ago (1 child)

    And of course all the data will be kept, and sold for profit

    Soon they'll add cameras as well that you can hang up in your kids rooms, totally safe, Comcast will make sure the data will be as profitable ad possible, they'll find the right target audience for it

  • source
  • hideshow 1 child comment
  • [–] 9 points 2 months ago (7 children)

    Can they do it with any router, or only the Xfinity branded devices?

  • source
  • hideshow 7 child comments
  • [–] 12 points 2 months ago (6 children)

    Looks like it's a feature of the router they provide you if you don't bring your own.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 14 points 2 months ago (5 children)

    One more reason I’m glad I bought my own modem and router

  • source
  • parent
  • hideshow 5 child comments
  • [–] 13 points 2 months ago (4 children)

    just beware this is their implementation but it is possible to detect movement in wifi signal without special equipment. netgear, tp-link and a few more were found to have backdoors in them for authorized remote access via ssh. opnsense, pfsense, ipfire, openwrt i believe haven't been found to include these backdoors, so basically don't trust any closed/proprietary source routers.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 2 months ago (2 children)

    I, for one, am looking forward to a plugin to do this with OpenWRT and Home Assistant for my own purposes.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 months ago (1 child)

    I'm not sure about OpenWRT, but you can do WiFi motion detection with an ESP32.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 2 months ago

    Yeah, I found that one. Still, I'd prefer it to be built into my WAPs instead of having to use separate hardware, even if I do have extra ESP32s sitting around.

    I mean, maybe if I could just tack it on as an extra function on some other device I was already going to be using an ESP32 in, but (especially in microcontroller-land as opposed to full preemptively-multitasking PC land) that sounds like maybe more complexity than I want to deal with.

  • source
  • parent
  • [–] 2 points 2 months ago

    Wow measuring presence by WiFi attenuation through the walls? That’s a lot more than motion. They’ll be able to tell when there’s a party at your house, or which rooms you use the most, or how often you cook dinner at home, or how long you spend in bed each night.

  • source