About adding a static route to my DOCSIS modem

And the route itself has 192.168.88 in it which smells mighty like MikroTik to me.

I am familiar with the looks of this device as it’s in use at two locations I‘m providing in-family support for.

At least in those two cases (different ISPs), it’s possible to turn the device into bridging mode

I’m really curious about the fbi bit. Do you have any further reading?

If I remember correctly, an ISP can push a new firmware to a Docsis3 modem at any time too and force reboot it.

Bothers me none of my modems have ever had the option to turn off WAN-side flashing, never know who is going to figure out how to take advantage of that.

Given the author posted it on danman.eu I would assume EU law applies. Not sure in which scenario FBI would get involved. Cause this is legal to do in EU.

On the other hand, the EU has laws that actually guarantee users the right to use their own hardware if they want. The providers have to provide any required documentation and if the system requires devices to be registered, the providers are obliged to register user devices.

But why do this on the modem, why not on the router?

ADSL modems are a totally different beast. With *DSL, you have a point to point connection with the telephone company equipment. It doesn't make sense to limit speed with the customer premises equipment, since the company equipment can easily do it (usually by limiting the negotiated sync speeds) With cable, it's a broadcast medium, so it's a lot simpler to let the network equipment be simple and have the CPE limit speeds. OTOH, network equipment capabilities have increased a lot since the early days.

Not in the UK, its set by the cabinet which in my case is a Broadcom running version 12.3.16.

So one of the reasons why its set by the cabinet is they charge different fees for different connection speeds.

So in the UK if you are limited to say a 40Mb or 80Mb download and whatever upload, when your adsl router/modem connects or negotiates a speed (max DSLAM throughput), even if you could negotiate a 100Mb speed, you would be throttled to whatever you package speed is and then with things like TR069 (https://en.wikipedia.org/wiki/TR-069) they can remote control your router. So that will include disconnecting your ADSL connection, reconnecting and giving you a new IP address if you dont pay for a fixed ip address. One ISP I tested could reset the connection and give you new IP address every second, it was literally as quick as the device could handle getting the new ip address in bridge mode.

Some firewall products also do throttling, its part of what is called traffic shaping as explained here (some reasonable docs) https://forum.netgate.com/topic/20089/how-to-using-squid-for... Traffic Shaping in general https://docs.netgate.com/pfsense/en/latest/trafficshaper/lim...

AFAIK the adls cabinets also have a separate RF communication channel possibly as an independent backup if the mainlines go down but power still remains. I know if the engineers so much as opens the door to a cabinet, it phones home possibly over the RF or maybe using both network and RF, havent established that yet, but things are quite joined up here from what I've been able to tell.

Other factors will which affect the DSL speed are the stability settings, so do you have little to no interference and error checking for max speed or do you go cautious and have lots of interference mitigation enabled on the adsl modem/router. Think of adsl as loads of radio stations all transmitting down a wire, to get more speed you tune into and listen to more radio stations all at the same time. For slower speeds you tune into just a couple radio stations. The frequency of the "radio" station also counts, like listening to poor radio quality on Long wave which can bounce around the planet, Medium Wave which can cover a sizable area or Frequency Modulation which you need to be close by to get. Same as mobile phone 2G, 3G, 4G & 5G. The bubble or area of 2G is massive, where as 5G is tiny, but that tiny bubble can transmit alot unlike 2G which is slower. Same sort of concept just transmitted & contained down a wire instead of over the air.

One reason hard coding the route in the modem is it can prevent random accesses to the GUI from malware in the computer or in other network devices and then other network security can come into play.

There's a lot of info in this post, and will be similar and thus relevant for hacking other devices.

If it hasn't limited by the modem, you could just saturate the connection up to where it's limited when uploading

For cable modems, the modem runs the ISP's firmware which downloads runtime parameters from the ISP. The supported modem list is modem's they have firmware for that run on their network

Afaik it's not very difficult for the ISP to detect modified modems

DSL has a speed limit on the DSLAM side, but cable has to deal with a shared medium and for some god forsaken reason the DOCSIS people decided that ISPs should trust the devices placed into people's homes to do rate limiting.

In the same vein it's also trivial to hack many IPTV boxes used by fiber/DSL providers to give you free shows and channels because they essentially filter out the options you can click on on the client side rather than do any server side validation. There was a somewhat prolific subforum on a Dutch tech forum that tried to get into customising ISP IPTV boxes (didn't even need to alter the firmware, just needed to mess around with some JSON in transit) but that got cease-and-desisted because the method people used to alter themes could just as easily unlock most paid content.

Sometimes it really does look like TV related ISPs are still living in the 90s when it comes to security boundaries.