Comcast Migrating Customers To DNSSEC Resolvers

ctg1701 passes along this quote from a Comcast announcement: "Starting today we will begin migrating customers who have opted out of our Domain Helper service over to our production DNSSEC-validating servers. This will happen first in a selected part of our Virginia network, and will later expand to all markets in the following sixty days, at which point all of our customers who have opted out of Domain Helper will be migrated. After this has been completed, we will migrate the rest of our customers, which we anticipate will stretch into the early part of 2011."

Comments

migrate

[jsnipy]

You really should be migrating off of Comcast

Re:migrate

[Anonymous Coward]

My other choice being.... dialup.

Comcast sucks, but it is the only choice for many of us. Competition doesn't work if there isn't any.

Re:migrate

[jsnipy]

you have a good point

Re:migrate

[zero_out]

Same here. Well, satellite and 1.5 Mbps DSL, but they might as well be dial-up. Comcast's 22 Mbps is the only reasonable choice, I'm sad to say.

Re:migrate

[Anonymous Coward]

If you're stuck with Comcast, there's an "alternative" that's often the best way to go: Comcast Business Internet service. It's run by a separate division of the company from the residential services, one that actually has competition and a decent customer service mindset. The business side also seems to completely avoid stupid stuff like Domain Helper in the first place. For those of you who still use TV or want other Comcast services, note that you can (and want to) mix-and-match Residential and Business services. For example, Residential for TV and Business for Internet -- the business rep who set up my account actually called this out and recommended it to avoid unnecessary restrictions on TV use applied to business accounts (e.g. no DVRs, etc.).

Re:migrate

[Fallon]

I don't understand all the hate for Comcast, at least here in Colorado Springs. In the past year and a half I've had service with them I've had less than a couple of hours of downtime (at least that was their fault and not me fiddling with my router). Good bandwidth & pings, who could as for more. It really blew me away after spending the past decade on military bases in the middle of nowhere overseas or downrange (1 second+ ping times, 10-30% packet loss, modem class bandwidth).

Re:migrate

[Anonymous Coward]

Yeah, I'll just migrate off Comcast over to that other cable company that offers service right alongside the existing monopoly.

Re:migrate

[thesequoiad]

I've been using Comcast cable internet (and the predecessors) since mid 1999. I've loved it.

Re:migrate

[Anonymous Coward]

http://consumerist.com/2010/09/comcast-wont-give-me-tv-service-because-im-a-home-business-customer.html

"Comcast won't give me TV service because I'm a home business customer"

Re:migrate

[ZorinLynx]

Location location location.

If you're in an area with a simple or recently updated cable plant, where there's less customers on each node, you will have absolutely excellent performance, like myself.

If you're in an area with 20 year old cable plant that has corroded/loose fittings, bad or marginal amplifiers and other equipment that hasn't received enough love lately, it will be comparable to the sort of Internet access you would receive in hell. Dropped packets, modem resyncing, and so on.

Also, another customer on the same node with bad equipment spewing noise into the upstream channel can also knock you offline. This happens from time to time, resulting in a poor internet connection until the cable company can track down the offending equipment and remove it or disconnect the customer. People stealing cable can also degrade a network, though thankfully with systems going digital and less analog (stealable) service this is less of a problem now.

So basically, it's all up to luck whether cable internet (on any provider) is reliable or not.

Re:migrate

[Anonymous Coward]

We hate them because they used to block (in their lingo "throttle") bittorrent.

Re:migrate

[dch24]

I can't fill you in on all the shenanigans that Comcast has been up to. Not enough time, and tl;dr.

Still, I am one of those people who will never buy Comcast. I won't move into a neighborhood where they have a monopoly. Take that, real estate prices!

Re:migrate

[Ardx]

Tell me about it. I have the choice of Crapcast, Qwest dialup (because 10 years to fix the reason my local neighborhood can't get dsl, but residences to the north, south, east and west are all able to), Hughes, and Clear wireless are my options. I almost went to clear, but after looking at thier support forums... well.

Re:migrate

[Nadaka]

My other choice at the moment is tethering my phone at around 300 Kbps due to low signal quality. If I had 4g in my area, you bet I would drop cable in a heartbeat.

Re:migrate

[commodore64_love]

The US should be breaking-up these monopolies, the same way it broke-up the AT&T monopoly.

Also: 1.5 is it? My DSL goes up to 7.0 guaranteed, although I opted for the cheaper and slower $15 plan.

Re:migrate

[commodore64_love]

>>>another customer on the same node with bad equipment spewing noise into the upstream channel can also knock you offline

I'm glad I don't have to share the line on my DSL.

Re:migrate

[Anonymous Coward]

The US should be breaking-up these monopolies, the same way it broke-up the AT&T monopoly.

Even if they broke up ComCast, that wouldn't guarantee competition in each region, it would just give the newly spawned mini-ComCast companies regional monopolies.

Re:migrate

[gad_zuki!]

>You really should be migrating off of Comcast

So the local telco monopoly is somehow better than the local cable monpoly? Err, seriously? I have dozens of AT&T horror stories and only a couple Comcast ones. Just getting AT&T installed anywhere is this Kafkaesque experience of dealing with multiple departments, multiple liars, multiple lazy no shows, etc who when instructed basic things "This is a new condo, thus you'll need to do more than just terminate at the demarc outside" they just pass the work onto other departments who just pass it back while you're taking off work waiting for them to do anything. With Comcast you deal with a much smaller bureaucracy.

I'm not even going to go into how Comcast business services sells me a 40mbps line for $99 and when I call support I get an American who either knows his shit or will connect me to someone who does without protest. Last time I called about the local telco, I got passed around to something like 4 or 5 departments before anyone even knew what a PTR record was. My first call to Comcast about PTR changes? "Sure, I can do that for you."

I'm not sure why there's this default love of the local telco, but its a bunch of shit. In many markets Comcast is the superior product, and by a long shot.

Re:migrate

[beadfulthings]

I signed up for something they call the "home business triple play" that provides business Internet and phone service with residential TV. The service is basically a hundred bucks a month plus an extra five for a toll-free number and some additional charges for HBO and a second TV hookup. We're still saving a lot over our previous Comcast TV and Internet plus Vonage phone.

The downside is that I've been trying since June to opt out of their Domain Helper, which mysteriously re-appeared along with the new business account. After hours on the phone over a protracted period of about six weeks, the bottom line seems to be that I can't opt out. This has infuriated me, and I would throw them over if I had an alternative. They can't or won't understand that all I want from them is reliable TV reception and a connection to the Internet. I don't need them to be my Internet daddy, and the only time I want to know they're there is when I have a problem or need to pay the bill. I suspect if they could get that through their thick, idiotic heads, they'd probably attract a few more business users.

Re:migrate

[Osgeld]

I am going to comcast, I am beyond frustrated with ATT, for nearly a month my 1.5mb line has mostly been under 200k, and I have fought with these people nearly every night, they suckered me out of 80$ for a new modem (which is on its way back now) which did nothing, the dipshit says to me last night "you might need a new modem"

so I snapped yelled at him etc, and finally got him to start scheduling a lineman to come out, then he tells me that if they find nothing (I guess its in my head that it takes google 40 seconds to load) that it would be another 80$ for a service charge

so wait, if its one of the 3 times during the day that its working right, not only do I get 80$ billed to me, but I get to keep my worthless shit internet and argue with another call center monkey for an hour! F-U

cable modem is in the mail, and I am saving 10 bucks a month

besides whats my other choice dialup?

Re:migrate

[Osgeld]

oh, and I am dropping my att celphone, my pace of work is in a deadzone, but yet every single body's non ATT phone works like a charm

Re:migrate

[Osgeld]

they sold me 6, couldn't do it, maxed out at 1.5, and now it cant even sustain 256kbs, comcast gets 15 out here

Re:migrate

[Anonymous Coward]

Which is false. Im posting AC because I work in "Business Services" at comcast..

I don't know about this specific case but I do run in to this with "home office" accounts alot.

My bet his he wanted Business class internet and "Residential TV" at "Residential TV" costs.

The difference between Res and Biz TV? Well here in Connecticut mainly the COST.
It doesn't matter if its a night club or a guy running a WebDev company our of his attic...its a commercial account.
Biz class tv costs ALOT more then normal TV.
Biz class tv has all sorts of crazy rules and extra fee's to the content providers.
We can not offer VOD/"Pay Per-View" because the content providers are worried you will order it at your BAR and show everyone there for free...or charge at the door.
We can not offer DVR service because the content providers don't want you skipping all the commercials in your packed restaurant.
We can not offer Adult Content (PlayBoy/Spice/etc) to places of business because of the agreements we have with the city. (think of the children!)
on and on..

My bet is the guy in that linked story did not want to pay all this extra money for "less" TV.
The work around is simple: You get 2 account numbers,2 drops, and 2 bills. One is the biz-class internet which your company pays for and the other is your home TV.
Makes doing the taxes simple and if your company is paying you to telecommute you just hand them the whole Biz internet bill.

From what I can tell comcast doesn't care all that much about pushing Biz Class TV(at least in this state) because its to much of a PITA with the regs/fee's and in the end we don't make all that much on it.Not being able to put "upsells" on it like DVR/VOD hurts. The only thing its really good for is keeping ATT/DISH/etc OUT of your company and getting us in the door with the internet/phone.

Re:migrate

[bastion_xx]

Do it the other way around, that's what we've done for our employees. First they order Comcast cable only (any package) if they so desire. Some are on satellite and have opted not to do that. Then you order Comcast Business and tie it to your company but the service address is the employee's house. They are more than happy to do that and the few times we've called them to resolve issues that required a truck roll, the tech wasn't a contractor but an actual Comcast employee who knows the the business service. We have consistent quality and service on 12, 22, and 50 Mb connections. When comparing the lost time and IT staff required to resolve issues when we let home users use the residential services (Cable or HellSouth, err AT&T) to the increased cost of service, it continues to pay for itself.

Re:migrate

[AstynaxX]

I opted out of Domain Helper by using manually configured DNS servers, OpenDNS at the moment. It seems if you manually migrate to their DNSSEC servers, Domain Helper goes away, as according to the FAQs the two are incompatible.

Re:migrate

[icebike]

Opting out of domain helper is as simple as changing your DNS servers in your router. Mine point to a OpenDNS (paid), and allow me to block a lot of advertising popups and under-lines.

Google also supplies free DNS servers (8.8.8.8 ).

To do this, I just bridged my router (The comcast business service box), they even told me how to do this. Then I use my own linux box to handle routing. But you can also set up your own dns sources using their box if you want.

The Business services bunch are a whole lot easier to deal with than the home services people.

Re:migrate

[Anonymous Coward]

I can't fill you in on all the shenanigans that Comcast has been up to. Not enough time, and tl;dr.

Here ya go

Re:migrate

[tepples]

I'm glad I don't have to share the line on my DSL.

But how much did it cost to move into range?

Re:migrate

[icebike]

You are exactly correct, the two-bill setup is what I have and it works fine.

Business internet, and Residential TV+Phone. Since its a home office setup, I have no paying customers viewing my TV so there is no licensing conflict.

Its actually all on a single drop, split at the demarc before it hits any comcast box.

My static IP allows me to open a couple ports for my clients without comcast security getting all over my case.

Re:migrate

[Anonymous Coward]

'round here, the cable company was rolling out 12Mbps service and doing pretty well. Then Comcast buys them, we see nothing but price increases (go from $25/$25 for TV/Internet to $55/45), service downgrades (woohoo 6Mbps with 12Mbps "boost" for the first 5MB of data), and dropping channels.

Re:migrate

[beadfulthings]

If I had mod points, I'd mod up both replies out of gratitude. Two very do-able suggestions. I hadn't realized I could do anything with their business box, and apparently I didn't catch their tech support on one of their better days. (Was told by one guy that they didn't support Macs, while another swore that I had the Mac plugged into the phone box.) Now I know what questions to ask.

Re:migrate

[modmans2ndcoming]

shoot... Comcast doesn't even nickel and dime you on their products either. I did an analysis of Comcast and WOW for my service level, ignoring the Fancast goodness, I get way less with WOW than I do with Comcast for the money I spend.

Wow puts their hand out for every freaking little thing... HD channels, they cost 2 bucks more for a DVD, they charge 2 bucks more for a cable card, they actually charge for the tv listings, etc. yeah... Comcast might be doing the same thing but if they are they are hiding it in some weird charge that does not amount to very much and it still comes in 30 dollars less than WOW.

Re:migrate

[Omniscientist]

This is true; it is difficult to get TV service if you subscribe to Comcast Business.

As far as I'm concerned, high quality Internet service trumps TV any day. I get great download/upload speeds (not sure what residential is at, but it is fine for my purposes), great 24 hour customer/technical support that knows wtf they're talking about (Me: "Hey, can you set up reverse DNS for me?" Them: "Sure!"), two or more static IP's, consistent monthly prices that don't go up, etc.

I'll never buy TV service again, ever. What a waste of time. Sure it's just as easy to waste time on the computer, but at least there's a chance you might end up doing something productive.

(By the way, for people having issues with their Domain Helper crap: Have your network set to use the 4.2.2.1, 4.2.2.2, 4.2.2.3 (etc.) nameservers for DNS. I never even knew about this new service until reading about it here.)

Re:migrate

[Anonymous Coward]

You don't have to use Comcast's DNS servers. Just get a caching nameserver for your machine (Treewalk for M$ or pdnsd for Linux) and you can bypass Comcast DNS entirely. (This also works for any ISP.)

An added bonus is that your surfing speed may improve and you will be immune to any deep packet inspection that the ISP may implement.

Re:migrate

[AlamedaStone]

The US should be breaking-up these monopolies, the same way it broke-up the AT&T monopoly.

The US should just nationalize the last mile, treat it as a utility, and avoid all that icky anti-trust litigation.

While I wait for that to happen I'm going to hold my breath until Steve McQueen rides a rainbow-winged pegasus out of my ass.

The reality will probably involve the encroachment of the insurance industry into the ISP realm. You'll need a co-pay to call customer service, and you can only use an ISP from the approved list.

I can't tell whether or not I'm joking.

Re:migrate

[Darth_brooks]

Exact opposite here. Comcast is shit. Utter shit. Phone-net-TV bundle was going down several times per month. Make a server call, tech finds a lousy return signal, corrects, rinse wash repeat. I went to U-verse and my connection's been solid. Not mind blowing, but nothing yet that a reboot of the afflicted box can't fix.

In an ideal world there'd be multiple companies offering me DSL and Cable over the same shitty infrastructure, and one of those companies might actually get motivated to *improve* the infrastructure, or at least be willing to do more than a cursory fix. But then, if i was in that world, I'd also be getting blown by a supermodel right now, and wouldn't be bitching on slashdot...

Re:migrate

[no1nose]

We had a lightning storm sweep through South Reno, Nevada last week. My AT&T DSL speeds went from 1.5 Mb to 300Kbps. I replaced the little filter/adapter that separates the normal phone line from the DSL router and my speeds went right back up to 1.5 Mb.

Re:migrate

[tobiasly]

It seems if you manually migrate to their DNSSEC servers, Domain Helper goes away, as according to the FAQs the two are incompatible.

Wait, you mean to say that DNSSEC prevents man-in-the-middle servers from intercepting and modifying the traffic? Sounds like a pretty big flaw in this new "standard", they obviously weren't thinking of long-term monetization opportunities...

Re:migrate

[ms139us]

I have to agree. I too live in the Springs and their service is amazing, consistent and fast. Even their techs which they send out have their act together, are polite, friendly, and quick to admit the limits of their knowledge. Truly a joy to work with.

Their phone "support" (and I use that term loosely), on the other hand, is a shining example of mind-numbing stupidity. The phone folks, I kid you not, cannot even give me a listing of the channels available in the potpourri of packages I subscribe to. Really, they can't list the channels. If their internet is having issues (hey, it happens), they cannot accept your word for it until you reboot everything in the house. Their cable modems lock up regularly and one time that I was masochistic enough to call and report it, they made me reboot a server which takes 25 minutes to cycle, before they would accept that I had an issue. Their solution was to replace the cable modem with a new one which poisoned all of the DNS caches until it was "configured" using a Windows machine, which I don't have. Literally, my wife called me at work after she exchanged the modem because the home phone, tivo, internet, Wii, her cell phone and an Xbox360 quit connecting.

In short, if you never have to call 800-I-hate-comcast, their service is fantastic.

Re:migrate

[rwyoder]

If you're stuck with Comcast...

"Stuck with Comcast"??? From my perspective as a network engineer, Comcast is taking the lead in deploying IPv6, and now DNSSec. They are putting the rest of the corporate world to shame on these fronts. (And I am neither an employee, nor a customer of Comcast.)

Re:migrate

[Roark Meets Dent]

Doesn't "business" internet cost a lot more than a "residential" connection, all other factors being equal?

Re:migrate

[Anonymous Coward]

Correct, your DSL is not shared, you have a direct line from your house to the central office. All communications leaving your house and coming from that central office are for you. What happens when your packets get to the central office though? I know... They are shared with all of the other DSL customers going out the link from that central office.

DSL is shared, one hop further up the line than the cable customer.

Re:migrate

[Anonymous Coward]

After you have a weeks worth of 3 hour nightly outages where support just tells you to reboot your modem, you'll understand. I came home to need-to-power-cycle-cable-modem-and-router every day for a month, and after changing out the router with no improvement, changed out the internet company instead. I now have half the problems for half the price.

Re:migrate

[Anonymous Coward]

Most of the time, the throughput on Comcast is only marginally higher than 1.5 Mbit/sec DSL. In practice, very few servers other than [redacted] can actually drive a high-bandwidth data pipe to saturation. Cable also states the peak speed, which is what they deliver on commonly-visited websites using buffered data if very few other people on your node are doing anything and if the general infrastructure in the area is in good shape.

Also, Comcast cuts you off after something like 200GB up + down these days. Even slowish DSL will give you more bandwidth per month, even if cable will give you higher peak transfer rates. Besides, what are you going to do with that extra bitrate, load a Slashdot comments page 0.2 seconds faster?

Re:migrate

[Jane Q. Public]

They can't break it up "the same way", because it's not the "same" kind of monopoly. Most people don't understand that Ma Bell was not broken up over their monopoly on wired communications. They were broken up over illegal manipulation of the HARDWARE industry: telephones.

Ma Bell had been enjoined by a Federal court no less than 20 years earlier, that they must not use their monopoly power over the wires to control a monopoly on hardware as well. They ignored this injunction (and got away with it for ~ 20 years), but eventually the courts did catch up with them and cut them off.

In a way, it is too bad. The most efficient nationwide communications systems shown to exist so far, are government-controlled "natural monopolies", just like Ma Bell was. If we had that kind of system with the internet, we'd likely have 3 times the bandwidth of today for 1/3 the cost. Why do I say that? Because not only is history a powerful teacher, but other countries that have that kind of system already enjoy that. The so-called "free market" in the United States (which is actually nothing of the sort, it is an oligopoly), has so far made us a third-world country, internet-wise. I really hope people wake up and start screaming about that soon. I am tired of being alone in the dark.

Re:migrate

[vtcodger]

***Comcast sucks, but it is the only choice for many of us. Competition doesn't work if there isn't any.***

Correct. And even if one has DSL or FIOS, it is probably with a telephone company that is losing customers as they drop landlines and is probably going to provide deteriorating service in the future as they try to maintain the same size network with less revenue.

Ya know, many of us may be pretty much screwed.

Re:migrate

[vtcodger]

***DSL is shared, one hop further up the line than the cable customer.***

Sure, but hopefully it's a more balanced load because it is the average load from a much larger number of customers.

Re:migrate

[Anonymous Coward]

I opted out of Domain helper by running a caching DNS server on a sheeva plug as a primary and an open DNS freebie as a secondary. I can configure what name servers my computers use in my router so it is automatically supplied at DHCP.

Re:migrate

[adolf]

It clearly depends on where you are at.

I've had really good luck with AT&T. My U-Verse line is over 3,000 feet long, which is technically out-of-spec. It took a long, long time to get it to work correctly. This isn't so much AT&T's fault, as it is just a coincidence between the location of my house, the location of the VRAD, and the route of the overhead of the wires, none of which anyone (including me) were inclined to move. It was a weird problem: It'd work just fine, until evening came and then: Blotto. It seemed related to the angle of the sun, tidal activity, phase of the moon, or something along those lines. Intermittent problems with no obvious external cause like that are the worst things to try to fix.

All of the folks who worked on it were very courteous and either on-time or early. All of them gave me their business card, with a cell phone number that they actually would answer when I called. They've probably got over 60 man hours in making my singular home account work, all in taking apart splices, scoping things with a TDR, and other bucket-truck sorts of activity.

When I wanted TCP port 25 opened for SMTP, all I had to do was call and ask for it. It worked in less than a minute.

Nowadays, I can call support when there's an issue (every ISP has issues from time to time) and the conversation goes something like:

"It's broke. Can you fix it?"
*clickety-click* "You're right. The RADIUS server is down in your area. Would you like me to give you a call when it's back up?"
"Sure."

And then, they offer me a credit for the downtime, without me even asking for it.

It helps that they told me how to call higher-level support directly, instead of filtering through the "Please, do you know where your modem is located? Good. Please to be reset the modem by unplug[.....]" script readers first. This is easy enough at most companies, once you demonstrate that you've got a bit of a clue and are not a raging asshole. (I had a bit of trouble figuring out the latter part of that.)

Hell, even their billing department was happy to issue big refunds for the various service outages I've experienced. They got almost nothing for money until things started working reliably, and it wasn't ever a fight.

*shrug*

Re:migrate

[rjstanford]

The internet is shared.

If it wasn't shared, it wouldn't work.

Re:migrate

[Osgeld]

yep, I had a rant above but they have had me switch out every single item in my house with no change except that I payed for a bunch of stuff I didnt need

Re:migrate

[admica]

Then they gouge you with price hikes because the only way to get their advertised prices is to buy bundled services.

Re:migrate

[laurelraven]

Too bad there is no "+1, Sad But True" mod.

Re:migrate

[commodore64_love]

>>>Ma Bell was broken up over illegal manipulation of the HARDWARE industry: telephones.

Comcast and other ISPs can be broken-up for the same reason: control of Set Top Boxes/hardware instead of letting customers choose their own equipment. - Also you're wrong to say Ma Bell should have kept its natural monopoly. Now I can choose from literally 50 different companies for long distance, in-state calls, and local service. Instead of paying the outrageous 50 cents/minute Ma Monopoly charged, I can choose cheaper alternatives (as low as 5 cents). Choice is better because it puts control in the hands of the citizen, where it belongs.

Re:migrate

[commodore64_love]

>>>The US should just nationalize the last mile, treat it as a utility, and avoid all that icky anti-trust litigation.

It can't.

Antitrust legislation is constitutional (says the supreme court), but nationalization of the lines is not. There are limits to what the US Government can do.

Re:migrate

[theaveng]

Nothing cause I didn't move. DSL came to me when the telco ran fiber to the neighborhood, attached it to existing telephone wires, and then mailed-out letters to everyone asking them to join DSL.

Probably the same is true for c64_love

Re:migrate

[Anonymous Coward]

"I don't understand all the hate for Comcast,"

I'm in and just outside of Lancaster, PA.

0320pm and 0750pm regularly in my area, torrents all reset. I know, because I have access to 2 residences and 1 business where I am.

7-8 years ago, it took 1.5 months, 3 truck rolls, 5 tech visits...to fix a loose cable. Apparently, when they check to the pole (techs) and to the headend (truck rolls), no one bothers to check the connections at the pole. At the time, it was policy (per 2 techs) that 2 tech visits occur before a truck roll.

I got lucky the 3rd time, when I told the tech firmly to tell the headend operators to insist on checking the pole. I watched the tech call the headend to authorize a truck roll, and listened on the Nextel or Motorola or whatever 2-way cell conversation, and was shocked how much the headend was an ass, like it bored them to do their job and that why they should do this. Finally the tech got through to the boss that this was over a month of problems, and they sent someone out that afternoon. Guess what happened? Problem fixed (loose connector)--I actually talked to the person who checked the pole. Took him 30 seconds to identify and fix. Not sure why 2 previous truck rolls, if supposedly done, didn't find the loose connector.

7 years later, when they upgraded to supply more HD in my area and supposedly faster surface, whoever did the work at the pole didn't bother checking signal strength coming off the lines. Mine was supposedly absurdly high. Took them 1 month to fix the problem. Had intermittant service and crappy TV from before Thanksgiving that year to the day before Christmas, in the days leading up to I had been talking to them to do something daily on the phone for 40 minutes on average per day...each day someone "troubleshooting" the connection (you know, reset the modem, reset the router, the computer, check settings). After again 3 techs and finally one tech finding the signal was too high, and again waiting for a truck roll (3 days), they decided there was a problem, and correct the absurdly high signal.

If you don't, good luck, esp. if you have to deal with the lazy ass headend people who, well, can't be bothered to send a truck out.

btw, where I am, internet has gone UP the past few months. Lovely.

Re:migrate

[Anonymous Coward]

Probably the same is true for c64_love

It's funny watching you pretend that you are not a sockpuppet of Troll64.

(I know the theaveng account was created prior to the commodore64_love account, so technically commodore64_love should be the sockpuppet, but Troll64 flows off the tongue better).

Re:migrate

[Anonymous Coward]

No shit on AT&T. I've been through multiple installs like this.

My employer rents an apt for the boss to stay at when he flies into town from the main office. It's cheaper and more comfortable than a hotel for the time he is in. To cut costs, we moved the office into the apt temporarily, and I worked out of the living room. It was rather nice and peaceful.

Anyway, you would not believe the cluster fuck of getting a business class dry loop DSL with a static IP installed at that apt. First they installed it to the wrong apt since that was what the work order was for. He comes in to test, and doesn't get any sync. He calls his office. I don't remember the details, but it would have been as easy to fix as flipping a switch. They wouldn't do it because the original work order was for the wrong address. Not sure what point the wrong address was entered in. The guy in our main office that initiated the order didn't know there was an apt number associated with the address since it wasn't on his shit that way. Yet the work order had like apt 10 or some random shit just put on it. That actually was a valid apt number, but not ours.

It took about 3 weeks to get it installed after the initial phone call. Everything you said was spot on. Lazy no-shows, hours of waiting, liars, and dept hot potato.

Re:migrate

[AlamedaStone]

Hey Commodore,

Do you have a link for reference? I'm poking around and can't find info on nationalization and constitutionality for some reason. Is it a SC ruling? I have found (temporary) WWI nationalization, and the railroads, and the private airport security industry in/after 2001.

I'd really like to learn more about this, because the last-mile issue really gets stuck in my craw.

Thanks,

AS

Re:migrate

[johnmcboston]

I changed to Google servers a while back. With all respect to Chris, in the past I had a lot of problems with CC's DNSs not finding valid web sites, so just changed over to Google one day...

Re:migrate

[Jane Q. Public]

Except that you are wrong: Comcast and other ISPs for years now have been required to allow customers to use their own equipment. They have not had the monopoly you claim, as a matter of Federal law. It is true that there have been interoperability problems, but that was due to lack of standards (exactly why "natural monopolies" do not have those problems... everything must conform to the same standard).

And I am not wrong about Ma Bell keeping its natural monopoly... on land lines. IF, that is, the phone business was still limited to "same old" copper land lines. The reason you enjoy all those benefits now is not because Ma Bell had a monopoly, but because new technologies have since been invented to compete with it, therefore prices have dropped. You can't argue that they are competing in the same field. They aren't.

What is this?

[mark72005]

For those of us on Comcast, what does this mean?

Whenever I am offered the opportunity to opt out of something by a company, I know it's probably a good idea to opt out.

Also, I've had very flaky internet service the past week or so, although I am not in this market (Minneapolis area). My equipment all seems to work fine, and of course there could be any number of causes, but this seems interesting.

Re:What is this?

[Entropius]

My parents have had intermittent connectivity in Alabama these last few days, which is a Big Deal since they have Vonage for phone service. Comcast blames it on the analog-digital switchover, which is horseshit.

Re:What is this?

[rakuen]

30 seconds of searching says it's Domain Name System Security Extentions (DNS SEC). It's essentially what it says on the tin. Hopefully someone with more extensive knowledge can respond.

Re:What is this?

[AdmiralXyz]

If you haven't opted out of Domain Helper ("helpfully" redirecting your 404's to advertising), it doesn't mean anything yet. If you are, it means your DNS lookups are going to be done over a secure channel, which in theory makes it much more difficult to perform DNS redirection attacks (where you look up www.google.com but a hiacking means that you get back the IP address for http://ebay.spamwarezdeath.ru./ In short, it's a Good Thing ;)

Re:What is this?

[Anonymous Coward]

It's this thing.

Re:What is this?

[ctg1701]

For those of us on Comcast, what does this mean?

Whenever I am offered the opportunity to opt out of something by a company, I know it's probably a good idea to opt out.

Also, I've had very flaky internet service the past week or so, although I am not in this market (Minneapolis area). My equipment all seems to work fine, and of course there could be any number of causes, but this seems interesting.

DNSSEC security is an Internet standard and it means that we are enabling it for our domains and will validate others once it is rolled out globally. I suggest you read through http://www.dnssec.comcast.net/faq.htm which explains why we are rolling this out and what it means for our customers.

Thanks

Chris
Comcast

Re:What is this?

[ctg1701]

What this means is that COMCST is now going to tell their customers that your only allowed to visit websites that have joined the system. They may be selling this as security, but make no mistake this is also a huge control system. I may have to cancel my service with them, when this happens. The simply fact is you may have some legimate website who choose willfully NOT to partake in such a control scheme. I may need to visit such a site and COMCST is going to essentially tell me I can't visit that site. No thanks, I don't need a big brother. I'm an adult and I can take care of my own computers and I don't need COMCST protecting me. I don't give a crap what they say, I alone should have the right to decide where I can and can't go on the internet, unless of course you don't believe in freedom. Just give me the fully open internet service I pay for ya dern COMCST Commies!!! Quit interferring with my traffic.

-Anonymous Coward (yeah right like they can't track you down by your ip the way the RIAA is racketering everybody)

You have clearly not read anything about DNSSEC and how this actually ensures you get the traffic you requested without anyone - including Comcast - interfering with your DNS requests. I highly recommend you read http://www.dnssec.comcast.net/faq.htm so you can understand why we are doing this and why the global Internet and DNS is moving to this standard.

Thanks

Chris
Comcast

Re:What is this?

[mark72005]

Great.

Like I don't pay far, far, FAR above market for what I get from Comcast already (lack of other options...)

Re:What is this?

[ctg1701]

Oh great. CCast sent shills already.

Actually I am one of the engineers that run the DNS at Comcast, but if you consider me a shill, so be it.

Re:What is this?

[popeye44]

Which I am assuming matters not a whit to those of us using OpenDNS.

I've been extremely happy with Opendns so far. "and entirely unhappy with Comcast's opt-out method"

Re:What is this?

[Anonymous Coward]

Here's an idea, sizzle chest - don't use comcast name servers.

Re:What is this?

[Wyatt Earp]

Stop posting press release posts.

Here is some non-Comcastic information - http://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions

Chris what is your non-biased take on Comcast forging TCP reset packets and terrible quality HD?

Re:What is this?

[Neil Blender]

Are you guys running any tests in Seattle at night? DNS lookups regularly fail after midnight and are generally really spotty from midnight on. It's not a connectivity issue because I can always ssh using an ip address even when my web browser can't load pages due to lookup failures.

Re:What is this?

[ZorinLynx]

One of the inherent problems with cable internet is that it's a shared medium. One bad fitting, or a customer with malfunctioning equipment can ruin the experience for EVERYONE on the node. And in some systems you can have thousands of customers on one node.

It's irritating that cable and DSL are the only options here, and DSL is from AT&T who refuses to provide anything faster than 6000/512k around here. I've been lucky so far on Comcast with my 16000/2000k business connection, but I just know that there WILL be problems eventually. It's the nature of a shared medium network that something will eventually fuck it up and be hard to track down.

Re:What is this?

[andymadigan]

I'm not a Comcast Shill, I don't like a comcast area, and I can definitively say that is not how DNS SEC works. Checking against a database like that would be the worst possible security system imagined since autorun-based DRM.

No one can be this stupid, GTFO troll.

Re:What is this?

[cecom]

Good luck getting respect on Slashdot :-)

For what its worth, I have been a happy Comcast customer for years. My connection has been getting faster and recently (quite surprisingly) even more reliable.

I like how Comcast approached the IPv6 transition testing and I like what they are doing with DNSSEC.

Nothing is perfect in this world, of course, but you guys are doing a good job. So, thank you.

Re:What is this?

[commodore64_love]

>>>terrible quality HD?

And also feeding SD channels (like MTV) with the top/bottom chopped off to try and trick customers to think it is widescreen! Bastards. I get my HD programming off the antenna, which is typically 15 Mbit/s rather than Comcast's squeezed 7 Mbit/s HD.

Re:What is this?

[ctg1701]

Comcast must have a pretty active presence here- modded to oblivion because I engaged their rep in a public forum.

That is actually pretty funny. At least you have a sense of humor :-)

Re:What is this?

[ctg1701]

Are you guys running any tests in Seattle at night? DNS lookups regularly fail after midnight and are generally really spotty from midnight on. It's not a connectivity issue because I can always ssh using an ip address even when my web browser can't load pages due to lookup failures.

No we are not running any tests and our DNS is up and responding. If you are having issues, I would suggest stopping by our customer forums at http://forums.comcast.net to get help.

Thanks

Chris
Comcast

Re:What is this?

[Wyatt Earp]

I need to get an antenna for local HD, know of any good indoor antennas? We rent up here in Alaska, so an outdoor isn't going to work, at least for a year or two till we buy a place.

Re:What is this?

[ctg1701]

Stop posting press release posts.

Here is some non-Comcastic information - http://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions

Chris what is your non-biased take on Comcast forging TCP reset packets and terrible quality HD?

Actually I have been working in the IETF to help provide better methods for P2P to work on ISP networks after the issues with the TCP reset packets a few years ago. I am sure you can look up some of the RFC items if you search for them.

If you have a problem with your HD quality, I suggest getting someone to come look at that. Given I am an Internet Engineer, I don't work on that side of the business.

Thanks

Chris
Comcast

Re:What is this?

[Y.A.A.P.]

Since you are "one of the engineers that run the DNS at Comcast", can you answer a question is not answered by the FAQ that you have pointed everyone to:

Will your DNS servers running DNSSEC be implementing NSEC3 to regain some of the "security through obscurity" lost in the DNSSEC protocol?

Re:What is this?

[Anonymous Coward]

You really should learn NOT to reply to trolls on slashdot. I know its hard because they intentionally try to involk false emotions, but it IS just all fakeso they can have a laugh at your expense.

Re:What is this?

[ctg1701]

Stop posting press release posts.

Here is some non-Comcastic information - http://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions

Chris what is your non-biased take on Comcast forging TCP reset packets and terrible quality HD?

I also should mention that reading Wikipedia isn't the most reliable source, although that one is fairly good. I might suggest looking at the following if you don't care for Comcast's write up:

https://www.dnssec-deployment.org/

or the RFCs:

http://tools.ietf.org/html/rfc4033
http://tools.ietf.org/html/rfc4034
http://tools.ietf.org/html/rfc4035

Thanks

Chris
Comcast

Re:What is this?

[hardaker]

Ok, here: I'm not with comcast and the original post was just insanely uninformed. Go read *anywhere* else about dnssec and you'll find that comcast will have a hard time figuring out how turning it on can be a bad thing.

Re:What is this?

[nurb432]

The way it sounds, opt-out is only for the short term anyway.

But i also wonder what practical issues its going to cause me on a daily basis.

Re:What is this?

[acedotcom]

so does calling me a troll make your statement more effective? no it does not. and its clear you dont know how comcasts dnssec works, otherwise you wouldnt sound like a sony fanboy on the defensive.

i am right. you are wrong. even comcast says thats how their dnssec works. now kindly stfu.

Re:What is this?

[Anonymous Coward]

If you have problems it will be line related, not because it is a shared medium. Comcast gives their business customers higher priority on the CMTS, so the only way you would have issues is if the line filled up from 100% business users which is probably as unlikely as winning the lotto, especially if you have a DOCSIS 3.0 modem.

Re:What is this?

[modmans2ndcoming]

In Metro Detroit I have Comcast, WOW, and ATT Uverse. Comcast is easily 50 dollars cheaper than Uverse and for the package level I am at, Comcast is cheaper than WOW, not to mention the better onDemand and Internet Media.

Re:What is this?

[modmans2ndcoming]

when did Slashdot get populated with a bunch of morons who can't change a freaking router DNS setting?

Re:What is this?

[modmans2ndcoming]

why would someone want any security through obscurity? It isn't real security.

Re:What is this?

[Anonymous Coward]

You're just a fucking asshole who is flaming a guy who has absolutely no choice in the matter. Do you think any sane techie wants to force this on anyone? A PHB came up with this idea.

As someone in IT who has had to implement bad ideas because of a PHB and get flamed by end users for it, fuck you. He doesn't deserve this.

Re:What is this?

[Anonymous Coward]

Fuck you, fuck you, fuck you. Domain Helper was a technically and morally bankrupt piece of shit that should have never have seen the light of day. And way to turn it on without warning. I want the hour or two I spent fucking with dnsmasq to fix your fuckup back. I don't care if it wasn't your idea. You were complicit in DNS hijacking and you continue to foist this bullshit on people who don't know better, like my parents.

Fuck you.

Re:What is this?

[billcopc]

Dude, I don't even live in the same country, and I'd have modded you down for turning a corporate matter into a personal attack. Comcast is big, and chances are this fellow had no choice but to carry out his orders. If he doesn't do as he is told, a more compliant replacement will be found.

If you hate the company so much, don't take it out on the worker bees, just take your money and go elsewhere. Don't like the alternatives ? Well tough tits, either start your own ISP or STFU. Bitching at a sysadmin will not get you anywhere, at best you will browbeat someone who doesn't deserve your ire, at worst he will mess with your service like any self-respecting BOFH should.

Re:What is this?

[Anachragnome]

"...Actually I am one of the engineers that run the DNS at Comcast..."

Until tomorrow morning, at which time you will be fired on the spot for actually providing useful information to Comcast customers.

Re:What is this?

[ScrewMaster]

In Metro Detroit I have Comcast, WOW, and ATT Uverse. Comcast is easily 50 dollars cheaper than Uverse and for the package level I am at, Comcast is cheaper than WOW, not to mention the better onDemand and Internet Media.

Where I am I've had the exact opposite experience. Comcast fucked with my service, jacked up my rates, gave me dismal picture quality, and in the end I couldn't wait to get U-Verse. Finally it came to my area, and I switched on the spot. Not looking back either. Competition is good, actually.

Re:What is this?

[kevmeister]

As a network engineer not beholden to Comcast (except as a customer) who has spent considerable time implementing DNSSEC for a non-commercial network, DNSSEC completely removes the ability of the carrier to mess with DNS responses. You can be certain that, if a systems DNS data is signed and the public key has been passed to the delegating zone, the DNS response is correct and authoritative. If it is not signed and the public key supplied, DNSEC has NO effect at all.

In computer security circles Comcast is being congratulated for making this step and I certainly add my congratulations.

Oh, this will also be the end the odious Comcast DNS redirection scheme as DNSSEC will make it impossible once the top level domains (com, net, org, edu, gov etc) are signed. Comcast cannot become involved in any domain other than those they own. (E.g. comcast.com, comcast.net)

Re:What is this?

[Anonymous Coward]

and you are clearly a child. You couldn't possibly be in high school yet, at least I hope not. Please cancel this guys account.

Re:What is this?

[RichiH]

> Comcast must have a pretty active presence here- modded to oblivion because I engaged their rep in a public forum.

That, or because the people with mod points understood that you are merely trolling an engineer for business-level decisions.

The fact that you are unable to use a non-default DNS server is not his fault. And trolling this person _in a thread which talks about DNS faking being phased out_.... Instant classic. Or -1 troll.

Re:What is this?

[andymadigan]

Bleh, sorry, that should have said "I don't live in a Comcast area".

Re:What is this?

[ZorinLynx]

I'm not talking about load problems, I'm talking about plant problems. Bad or marginal cable plant affects everyone, and it's a fact of life that problems start to crop up as the system ages.

Re:What is this?

[marka63]

Comcast almost certainly already supports NSEC3 in their validators as that is required to validate the root zone. Yes the root zone is using NSEC but the algorithm in use requires that the validator support NSEC3. All the DNS vendors that support DNSSEC validation ship products that validate responses from zones using NSEC3.

You can see if Comcast recursive servers are validating the root zone by running "dig +dnssec DNSKEY ." and looking for the "ad" flag.

As to whether Comcast decide to use NSEC or NSEC3 when signing their zones, well that is up to them. I'm sure Comcast can do their own risk analysis about their zones. I can tell you that it is a waste of time to use NSEC3 in a reverse zone as it is too highly structured.

Re:What is this?

[mark72005]

No Uverse here yet, but other friends have had the same experience. Canning cable gave them more channels, more boxes, better quality for less money.

Re:What is this?

[beadfulthings]

OK, since you've clearly identified yourself, I'm going to write this with as much civility as I can muster. As I've already stated in this discussion, I'm a "home-business" subscriber. Frankly, I've had excellent support and follow-up from non-technical contacts, while technical support has been truly abysmal (while trying to opt-out of "Domain Helper"). Would you point us to either (a) written documentation or (b) phone information that would provide information on how to use the "business gateway" to configure DNS services of our own choosing. You'll note that I have not posted anonymously, which apparently causes me to run the risk of being modded down. You can follow the story of my last two or three months with Comcast by clicking on my username. Thank you.

Re:What is this?

[Wannabe Code Monkey]

Oh great. CCast sent shills already.

What are you smoking? He came right out and stated where he worked. Do you know what a shill is? He also presented verifiable technical information on exactly what they're doing.

Re:What is this?

[commodore64_love]

I use the Channel Master CM4228 which sits right next to my set on its own stand. It can get channels 7-51

You won't get many channels in Alaska. Might be better of going with Dish Network for just $32.50 per month.

Re:What is this?

[Anonymous Coward]

Are you really surprised that nobody trusts anything that comcast does, these days?? they have done everything from inject TCP floods, to slam down torrent users, to using "dns helpers" to build unwarranted ad revenue! They opt-out only came later after countless complaints for wiser end-users.

Ever Seen SSL certificate injections??.. they do that too in order to get at your SSL content...

God only knows to what extent comcast would go, but one thing is for sure, any changes they make to their services, will in the end be self serving, and are never motivated by enhancing the quality of their ISP services.. or let alone privacy.

Re:What is this?

[ScrewMaster]

No Uverse here yet, but other friends have had the same experience. Canning cable gave them more channels, more boxes, better quality for less money.

What amazed me about my last (and, with any luck at all, final experience with Comcast) is how they could fuck up television. I mean, sure, we all know how they've handled their Internet services: performing MITM attacks on their own customers, DNS hijacking, nickel-and-dime billing practices and scads of other things. But back when I had them I had just bought my first big-screen high-definition television. So I paid extra for the HD box and the full panoply of hi-def channels, hooked it all up and was ... nonplussed. Why in hell was I paying all this money? The regular channels were fine but the so-called "hi def" was decidedly fuzzy, blurry even. Had a tech come out and switch out the cable box, and got the same result ... he tried to tell me that this was what hi-definition TV was all about. Yeah right. So why did the picture improve substantially when I bypassed their stupid box? Even then it was nothing like what I'd seen elsewhere from other providers.

So I eventually went to U-Verse ... night and day so far as picture quality is concerned. Phone service works fine and is reasonably priced, and so far as the Internet connection goes, I'm getting more bandwidth than I'm rated at, no mucking about with downloads and a 2 mbit backchannel. So far AT&T is treating me very well (knock on wood.)

Now, every year a Comcast drone drops by my house trying to sell me on their new "improved" high-definition service. "Oh, you had the old silver box? Our new ones are ever so much better." Now maybe they are, I don't know. But I'm happy with what I have now, and so long as AT&T doesn't screw up, I'll have no reason to switch back.

As an aside, when a Comcast tech came out to connect my phone service (Comcast Digital Voice, I think it was called) he left a bunch of bare wires hanging from my basement ceiling. Bastard couldn't be bothered to use any wire nuts, much less a terminal strip of any kind. Bare fucking wires. I couldn't believe it I ended up installing my own punchdown block and doing it right.

When the U-Verse folks came out, they set me up to run a network connection to my upstairs STB over my phone wires (worked very well, I must say.) They had the tools to work with my existing punchdown block and it was all done very professionally.

Re:What is this?

[modmans2ndcoming]

considering Uverse can only show HD on One TV at a time, I would say that on top of the high price for the same package I have with Comcast, there is quite a bit of cognitive dissonance going on with the Comcast haters.

Re:What is this?

[Anonymous Coward]

You are wrong, the Uverse can do 4 HD TV stations at once depending on bandwidth.

Re:What is this?

[ScrewMaster]

considering Uverse can only show HD on One TV at a time, I would say that on top of the high price for the same package I have with Comcast, there is quite a bit of cognitive dissonance going on with the Comcast haters.

Um ... where did you hear that? U-Verse will do four simultaneous HD streams. I understand that you're one of those rare happy Comcast customers, but there's no need to dissemble when speaking about the competition. Comcast's TV ads already do plenty of that.

Re:What is this?

[Anonymous Coward]

Every connection is a shared medium. The only difference is where the sharing starts. There's no such thing as an ISP that doesn't oversubscribe their links at some point, and typically at several points. In practice, cable had issues with this when it first came out but really hasn't since. Capping at the cable modem plus smaller nodes and DOCSIS 2 and 3 means that most cable users consistently get just as close to their advertised speeds as DSL users, if not closer (DSL, being originally wired for drastically lower-bandwidth applications, is rather more sensitive to line imperfections at a given speed)

opendns or google dns?

[Anonymous Coward]

it isn't like there is a shortage of dns services that easily scale to your needs.

Re:opendns or google dns?

[afidel]

OpensDNS has the same flaws as Comcast's Domain Helper service (ie does not return NXDOMAIN), GoogleDNS has some issues I can't remember and for us has pretty significant latency.

Re:opendns or google dns?

[ctg1701]

OpensDNS has the same flaws as Comcast's Domain Helper service (ie does not return NXDOMAIN), GoogleDNS has some issues I can't remember and for us has pretty significant latency.

Currently neither support DNSSEC validation and with us enabling DNSSEC on our recursive resolvers, we are disabling Domain Helper. Please check out http://www.dnssec.comcast.net/faq.htm for more details.

Thanks

Chris
Comcast

Re:opendns or google dns?

[icebraining]

GoogleDNS with local cache works pretty well for me.

Re:opendns or google dns?

[jecowa]

Google is kind of creepy; they are like cyber stalkers. They want to read all our emails, see what we are searching for, log all our visited domains, know what places we are planning on visiting, track which YouTube videos we watch, transcribe our Google voice calls, and probably much more, so they can send us better targeted ads. Important: The previous statement was a collection of random and fictional thoughts from the author's imaginative head and is not deserving of a suit for libel.

Re:opendns or google dns?

[icebraining]

GoogleDNS doesn't share info with other Google systems.

Is any of the information collected stored with my Google account?
        No.
Does Google share the information it collects from the Google Public DNS service with anyone else?
        No.
Is information about my queries to Google Public DNS shared with other Google properties, such as Search, Gmail, ads networks, etc.?
        No.

Re:opendns or google dns?

[heypete]

OpenDNS only does the "domain helper" thing for non-registered users.

Register for an account, specify the IP address (or range) that you'll be making queries from (e.g. your home router), and you can disable all of that. I've been doing that for years with no problems. Way better than Cox's DNS service, which rewrites all TTLs to 30s.

If your home router supports dynamic DNS updating, you can have the router update OpenDNS (I use their DNS-O-Matic service, which also updates DynDNS and EveryDNS) whenever your system gets a new IP address so the settings stick with you, even if the IP address changes.

Re:opendns or google dns?

[afidel]

Good to hear, always glad to hear that the Internet is getting a little less broken. Btw do these recursive resolvers support IPv6 yet?

Re:opendns or google dns?

[jecowa]

That's what they say, anyway. There's no way to know for sure, though. Their moto is something like "Don't be evil." It makes me wonder if being evil is something they struggle with.

Re:opendns or google dns?

[icebraining]

Their other privacy policies are very clear about all the data they record. Why would they lie in this particular case? It's not like people wouldn't use it, when everyone and their mother uses the search engine despite clearly stating they record everything.

Obviously I can never be sure, but the Occam's razor applies here, in my opinion.

Their moto is something like "Don't be evil." It makes me wonder if being evil is something they struggle with.

It's not official, it's only an item in their corporate philosophy statement, and it's well explained: http://www.google.com/corporate/tenthings.html
Besides, lot's of companies have ethical codes.

domain helper?

[bhcompy]

Domain helper.. is that the crap that automatically relocates you to some ad serving search website when you input an unrecognized dns in the web browser? That kind of crap is why I switched to 4.1.1.1

Re:domain helper?

[ctg1701]

Domain helper.. is that the crap that automatically relocates you to some ad serving search website when you input an unrecognized dns in the web browser? That kind of crap is why I switched to 4.1.1.1

We will be disabling Domain Helper on our recursive resolvers and you will also get DNSSEC validation by using our Anycast resolvers. There is no redirection and you will also get the protections enabled by DNSSEC.

Thanks

Chris
Comcast

Re:domain helper?

[jecowa]

I use 4.2.2.1-6. It's twice as fast as my ISP's default DNS server and has no ads.

Re:domain helper?

[Anonymous Coward]

What I want to see and is not addressed in the FAQ is will comcast store the dns requests and use that information.
This technology doesn't prevent the dns host from using the requests they get to build profiles of their customers
It seems like comcast would explicitly state if they were not using this data.

Re:domain helper?

[jonwil]

Good to see at least one ISP realizing that returning anything other than NXDOMAIN for non-existant domains is a VERY bad idea. I hope other ISPs (and DNS providers and registrars) see sense and disable their wildcarding.

Doesn't make Comcast any less evil though (they wont stop being evil until they stop messing with BitTorrent, stop fighting any efforts to create competitors in their areas and adopt the principles of Net Neutrality)

Re:domain helper?

[fyrewulff]

Weren't they talking about restricting it to their customers though (I believe 4.1.1.x is owned by Level3). Or did they change their mind on that?

Re:domain helper?

[jecowa]

I heard rumors about Level 3's DNS servers possibly getting shut down on a forum more than a year ago.

4.2.2.x is owned by Level 3. I don't know anything about 4.1.1.x.

Meh ... 8.8.8.8

[Anonymous Coward]

My router is already set up to ignore Comcast's DHCP provided DNS, and use 8.8.8.8 and 8.8.4.4 anyway... Substitute your own favorite public DNS resolver (or install OpenWRT and use its djbdns if you prefer).

Re:Meh ... 8.8.8.8

[ctg1701]

My router is already set up to ignore Comcast's DHCP provided DNS, and use 8.8.8.8 and 8.8.4.4 anyway... Substitute your own favorite public DNS resolver (or install OpenWRT and use its djbdns if you prefer).

While you could do any of the following, Comcast DNS servers should provide a fast response and better localization than third party resolvers. We also will now have DNSSEC validation turned on to enable another level of security that none of the third party resolvers currently offer.

Hopefully you will give us a try and take a look at http://www.dnssec.comcast.net/faq.htm for details.

Thanks

Chris
Comcast

Re:Meh ... 8.8.8.8

[QuoteMstr]

My favorite resolver is 127.0.0.1. Running your own recursive DNS server is easy.

Re:Meh ... 8.8.8.8

[Maxo-Texas]

Glad to see a nice calm response. Don't respond to trolls.

Understand comcast has some issues of behavior that users don't like and leave that for another day.

Re:Meh ... 8.8.8.8

[CoonAss56]

Better than Google's resolvers? I think not. And considering them "third party" is total bullshit. It's like comparing them to "third world countries".
Nice-NOT.

Re:Meh ... 8.8.8.8

[AltairDusk]

I actually switched back to OpenDNS from Google DNS, the latency was worse with Google. I don't see anything malicious about referring to Google as third party either. Under the common usage of the terms your ISP is first party, someone affiliated with the ISP but not the ISP would be second party and anyone else is third party. First world/Second world/Third world country have a completely different meaning.

Some more information...

[cobrausn]

Had no idea what it was either until I read this. http://blogs.techrepublic.com.com/networking/?p=234

Re:Some more information...

[ctg1701]

Had no idea what it was either until I read this.

http://blogs.techrepublic.com.com/networking/?p=234

We have also put together an information site here: http://www.dnssec.comcast.net and an FAQ with additional details: http://www.dnssec.comcast.net/faq.htm.

Thanks

Chris
Comcast

a bit confused

[Anonymous Coward]

what happens if the site doesn't want to sign up for dnssec? would comcast block communications with those sites? also it seems dnssec cost additional to the current cost for a site. (just putting that out there)

Re:a bit confused

[afidel]

No, Comcast is going to offer DNS servers that properly handle DNSSEC including passing along signed root answers. It is up to the client whether they wish to accept or reject unsigned domains (or in the case of anti-spam appliances probably give additional weight to non-signed domains).

Re:a bit confused

[Anonymous Coward]

It would work normally, just not protected by DNSSEC.

Ever since ROOT and COM were signed, any site that wanted to roll it out could.

Re:a bit confused

[ctg1701]

what happens if the site doesn't want to sign up for dnssec? would comcast block communications with those sites? also it seems dnssec cost additional to the current cost for a site. (just putting that out there)

If a site chooses not to sign their domain, then the DNS will work just like it does now and will not be validated. As for hosting sites, some of them may choose to charge for securing domains. You should check with your provider for additional details.

Thanks

Chris
Comcast

Re:a bit confused

[marka63]

COM isn't currently signed. Slated for next year if I remember properly.

For Webmasters?

[djdevon3]

What does this mean for webmasters? Are all of us going to need DNSSEC keys on our websites or does this just apply to comcast's array of websites? I wasn't aware that DNS had any kind of security issue which would warrant a revamp. How will this affect the future of the web?

Re:For Webmasters?

[ctg1701]

What does this mean for webmasters? Are all of us going to need DNSSEC keys on our websites or does this just apply to comcast's array of websites? I wasn't aware that DNS had any kind of security issue which would warrant a revamp. How will this affect the future of the web?

This has little to do with websites and more to do with the zones in the DNS for the websites. This adds an additional layer to protect the DNS from attacks. I suggest if you want more information, please read the following: http://www.dnssec.comcast.net/faq.htm

Thanks

Chris
Comcast

Re:For Webmasters?

[marka63]

Once you have a secure DNS, you can then use if to provide secure linkage to other things. While still a while off yet. it is coming. SSH can already take advantage of this. Look at the "keyassure" work starting in the IETF. I'm pretty sure there will be a formal BoF in Beijing in a couple of weeks. There was a informal BoF at the last IETF in Maastricht.

This is a GOOD thing

[Anonymous Coward]

I've been using these months while they've been available for testing. The very nature of DNSSEC kills the 404 helper service, and provides an extra level of security. For anyone that wants to use them now without being migrated automatically someday, just use 75.75.75.75 and 75.75.76.76 for the DNS.

Re:This is a GOOD thing

[ctg1701]

I've been using these months while they've been available for testing. The very nature of DNSSEC kills the 404 helper service, and provides an extra level of security. For anyone that wants to use them now without being migrated automatically someday, just use 75.75.75.75 and 75.75.76.76 for the DNS.

Absolutely correct, and hopefully people realize that we want to make your Internet service a better and safer experience.

Re:This is a GOOD thing

[stonedcat]

In the past few years your company has been actually making peoples internet experience worse.
Please excuse us all if we think you're completely full of shit..

Re:This is a GOOD thing

[jecowa]

I just tested out these servers. The ping is decent (~30ms), but the servers wouldn't resolve domains for me, however, I'm not on Comcast internet service. I like 4.2.2.1. The ping is ~25ms and there are no ads.

Re:This is a GOOD thing

[Anonymous Coward]

Absolutely correct, and hopefully people realize that we want to make your Internet service a better and safer experience.

That's why you, personally, implemented DNS hijacking to serve up ads for mistyped domains. Yeah... better and safer my ass. Fuck off and die.

DNSSEC Service Resolvers

[Anonymous Coward]

Am I tired already? I read that title as "Revolvers", and I wondered what the hell Comcast was doing selling handguns to people. For about thirty seconds. Then I wondered what the hell a "DNSSEC" revolver was for another thirty seconds. Then I smacked myself, re-read the thread title, and decided to make this utterly pointless post.

Sleep deprivation is a wonderful thing...

Re:DNSSEC Service Resolvers

[gujo-odori]

Could be worse. I parsed "Virginia network" as "Vagina network" the first time :p

Re:DNSSEC Service Resolvers

[fast turtle]

you think that's bad? I had one the other day that was embarassing as hell. Read Cub Scouts as Cum Scouts on a bumper sticker.

Re:DNSSEC Service Resolvers

[John Hasler]

Try not reading bumper-stickers out loud.

The TL;DR; version, please?

[Kashell]

Point by point:

Is DNSSEC a good thing? (Yes)
Do webmasters need a DNSSEC cert? (No, but it wouldn't be a bad idea. DNS works normally if you do not have one).
Will consumers get 404 redirect pages with DNSSEC? (Not sure here. I'm guessing -- No, because DNSSEC doesn't allow this?)
Will Comcast ever stop sucking? (Probably not.)

Re:The TL;DR; version, please?

[Anonymous Coward]

Unless you are managing your own DNS server (which webmasters of large servers probably do...) you do not need to worry about DNSSEC. Well, that is, unless whoever is managing your DNS server isn't providing DNSSEC support automatically. If so, ask them about their timetable for implementing DNSSEC or just switch providers.

NXDOMAIN redirects would not be signed, so they have to be disabled when using DNSSEC. Comcast said disabling them would be part of the transition.

Location = experience

[dwreid]

Your experience with Comcast is very likely related to where you are located. I live in a NW suburb of Chicago. Literally the very worst service I have ever received from any company was from Comcast. Outages that lasted for 2 to 3 weeks at a time. Outages several times a year. Technicians that I stayed home for waiting for them to arrive and they never came. Technicians who eventually came to the house and said "I don't know what's wrong" and left, and closed the ticket. (This happened more than once.) Bandwidth that made dialup look like a miracle it was so bad. Two different routers that literaly over heated and melted. (and yes they were in a ventilated area.) Replacement equipment that was used and dirty and didn't work. Comcast screwed with packets that belong to Skype to make sure the quality was terrible. (Oh but their VOIP brand was just fine.) The list goes on and on. It was so bad that I finally dumped my cable TV completely and switched over to AT&T business DSL. Mind you AT&T is not my favorite company either but the service is rarely if ever down and if I have a problem they fix it. DSL at 6 Mbps is better than Comcast 22 Mbps that delivers 150Kbps and is down more than up. So for those of you who have "never been happier with the amazing orgasmic experice that is Comcast" ... good for you. I certainly won't be doing business with them again anytime soon.

Re:Location = experience

[Cheile]

Amusingly enough I live in the Bridgeport neighborhood of Chicago and the best that AT&T can deliver to me is flaky 384Kpbs and my Comcast connection has been rock solid and fast. :] An AT&T tech once suggested that I go around to all of my neighbors and get them to sign a petition that I could turn into the AT&T business office in order for AT&T to consider upgrading their equipment in my neighborhood. Another AT&T tech once tried to bill me for a customer premises equipment issue because I was losing signal every night. He blamed it on the fact that I had an AMD processor and wanted me to sign for the $150 visit.

Pitchforks and torches. Nice job, /.

[Caerdwyn]

Chris what is your non-biased take on Comcast forging TCP reset packets and terrible quality HD?

Because guys that run DNS servers are obviously the guys who are responsible for video quality-of-service. Same field, and Comcast has only a couple of engineers running their entire network. I bet Chris also is responsible for designing their logos and what's in their cafeterias and whether the cable installers show up on time.

The topic is DNSSEC, not bandwidth caps or video compression or network traffic filtering.

I would have thought that having a primary source, an engineer relevant to the discussion, was welcome. Instead, it's an excuse to get out the haters. IT guys complain about how they're the ones that take the heat for corporate decisions which they don't control, but the moment it's someone else's IT guy, that person gets the heat for corporate decisions which they don't control. Nice consistency there. What's YOUR company, so we know who YOU are a "shill" for?

I'd be surprised if we hear from Chris again. I know I wouldn't come back. Screw Slashdotters, they don't want information or answers, they want scapegoats and straw men.

Whether Comcast, EFF or the Nazis use DNSSEC is irrelevant to the merits and flaws of DNSSEC. Whether Comcast uses DNSSEC is irrelevant to whether they use ad-readirectors for NXDOMAIN results.

By the way, I think I worked on the DNS server and service that Comcast is using for this, at my previous job. I guess that makes me a shill too. But I'll be damned if I'm going to share anything useful about it, even things that aren't under NDA, to Slashdot.

Re:Pitchforks and torches. Nice job, /.

[Wyatt Earp]

The dude from Comcast's rote answer to questions was to post links to Comcast's PR.

As for my company and who I shill for, that's easy. I'm a public sector education and video teleconferencing goblin in the 49th state. And I shill for children with low incidence disabilities who are using technology.

Re:Pitchforks and torches. Nice job, /.

[AlamedaStone]

The dude from Comcast's rote answer to questions was to post links to Comcast's PR.

As for my company and who I shill for, that's easy. I'm a public sector education and video teleconferencing goblin in the 49th state. And I shill for children with low incidence disabilities who are using technology.

Another K Street fatcat, lobbying for Big Pediatric Disability.

You people make me sick.

Re:Pitchforks and torches. Nice job, /.

[AltairDusk]

His "rote answer" was a perfectly acceptable and useful response to the question he quoted (notice that it was modded +5 Informative). Furthermore he did not attempt to trick anyone by hiding his association with Comcast, he openly provided the information so that any possible bias can be estimated and accounted for by the reader.

Re:Pitchforks and torches. Nice job, /.

[Wyatt Earp]

So Comcast submitted a press release to /., then the submitter of the story lurks in the comments and pastes links to Comcast webpages.

The subject of the story should have included Press Release or Advertisement, at least Fark will tell you when a story is paid for.

Boy, if Apple or M$ had done that there would be a storm about it.

Thanks for telling me.

[wdhowellsr]

I'm a Comcast subscriber and have had problems with DNS resolution. Just changed to the new DNS servers and magically it is about twenty times faster.

Cricket seems faster

[mdsolar]

I switched from Comcast to Cricket because the Comcast service was so unreliable. In the end, they could not even get a TV signal through reliably. But that is another story. What I notice though is that even when Comcast was working up to advertised speed, the name server delays were really bad. So, even with lower bandwidth, Cricket seems faster because their name servers work. Hope this move by Comcast makes an improvement.

Why should the unwashed masses care?

[Anonymous Coward]

From the http://blogs.techrepublic.com.com/networking/?p=234/ article:

Key signing should not be carried out online, so DNSSEC was designed to return a pre-signed report containing a range of names which do not exist; this could be signed offline and ahead of time.

Suddenly it's all very specific and yet somehow just incomprehensible.

I wonder if someone even knows what this means to the end user? I guess now I'll **have** to believe I'm actually on my bank's web site?

I used to work for CableVision Chris

[Anonymous Coward]

Actually I am one of the engineers that run the DNS at Comcast, but if you consider me a shill, so be it." - by ctg1701 (311736) on Monday October 18, @06:07PM (#33939512)

Well, at least YOU admitted that you work for COMCAST Chris... HOWEVER:

You also didn't admit what I strongly suspect is true though (myself having worked for CableVision, a like member of your industry in telecommunications)... what is that? Well, ok!

That You are one of your staff, one of a VERY SELECT FEW in fact, who is ALLOWED to speak here on this issue, & others in your firm, specifically lower level techs is my guess, were also STRICTLY WARNED to steer clear of commenting on this publicly online, especially on largely travelled forums like this, or say, DSLReports.com & others like them, or highly trafficked sites like this one is...

Am I right?

Since you're thusfar showing a track-record of 'truth' here at this point?? I trust you will give us a straight answer on this much I just asked above... hopefully!

See, Chris, around here? You have to realize 1 thing: We're pretty aware of "how the show runs" for folks out of any large corporate entity... & that you people can & DO patrol largely travelled sites like this, especially when new news comes out that involves you & yours (COMCAST in this case).

Hell, even "industry notables" who have had enough of that type of crap have sounded-off on it here... & on the very account I am noting (paid trolls/shills etc.- et al) & here is an example thereof:

"It just takes one Ubuntu sympathizer or PR flack to minus-moderate any comment. Unfortunately, once PR agencies and so on started paying people to moderate online communities, and to have hundreds of accounts each, things changed." - by Bruce Perens (3872) on Friday July 30, @04:55PM (#33089192) Homepage Journal

http://linux.slashdot.org/comments.pl?sid=1738364&cid=33089192

APK

P.S.=> Still, do I think you're doing this just to "cover comcast's behind"? No, I think you really MEAN what you're saying about COMCAST now going over to DNSSEC (probably a GOOD THING for you folks & your clientele hopefully)... but, my point is that I know PER MY SUBJECT-LINE NO LESS, just as Mr. Perens quoted above knows from his time @ HP, that only SOME FOLKS from large corporates are "allowed to talk" on various issues online publicly, and I have heard that "go down" myself in fact (but, not a paid shill/troll here, ever) - I am still willing to wager that you are 1 of your companies "Chosen Few" that were allowed to speak on this at all, period... am I right Chris? I wager I am... strongly (but, could be wrong, but... well, we'll see)... apk

Re:I used to work for CableVision Chris

[Anonymous Coward]

Random bolding - check
Random quotes - check
Random allcaps - check

crazy aggressive web loon - confirmed

Don't you have some sort of website with point 18 centered Comic Sans to go post on?

Re:I used to work for CableVision Chris

[cheese_wallet]

are you the timecube guy?

Re:I used to work for CableVision Chris

[Anonymous Coward]

Random weasel comment - check
Random paragraph usage - check
Random immature moron - check

stupidly idiotic real world pussy - confirmed

Don't you have some sort of LIFE where you can get your ass kicked again as you have here as usual?

From Comcast's DNSSEC FAQ

[HockeyPuck]

After reading their FAQ, looks like Comcast is doing the right thing and also admitting the DNS Redirector/Helper wasn't the right solution.

Are customers who have opted in to or out of Comcast Domain Helper impacted by this?

        * When DNSSEC is deployed on all of our DNS servers, the web error redirect function at the core of Comcast Domain Helper will be disabled, as this is not technically compatible with DNSSEC.
        * Customers that have opted out of Domain Helper will be the first customers that we migrate to the new DNSSEC servers. Domain Helper will not be active.
        * Comcast does plan to turn off Domain Helper when DNSSEC is fully implemented.

What happens to Comcast Domain Helper, which offers DNS redirect services, when you fully implement DNSSEC?

        * We believe that the web error redirection function of Comcast Domain Helper is technically incompatible with DNSSEC.
        * Comcast has always known this and plans to turn off such redirection when DNSSEC is fully implemented.
        * The production network DNSSEC servers do not have Comcast Domain Helper's DNS redirect functionality enabled.
        * We recently updated our IETF Internet Draft on this subject, available at http://tools.ietf.org/html/draft-livingood-dns-redirect, to reflect this.

I got this today

[Ritchie70]

I'm in a Chicago suburb and got this today:

This is a courtesy email to let you know that Comcast's DNS servers are changing to servers that use DNS Security Extensions (DNSSEC), as part of an evolving suite of security protections that are part of Comcast Constant Guard. These changes, which have started today in some markets, will be completed within the next sixty days or so. You do not need to take any action and you should not notice any changes to your service, though behind-the-scenes your service will be more secure.

Watch a short video about this change at http://www.dnssec.comcast.net/dnssec-video.htm.

Additional Details:
We know you have previously opted out of Comcast Domain Helper, which redirects you if you mistype a website address to a Comcast search page. Your opt-out preference will of course continue to be honored as you migrate to the new DNSSEC servers.

With DNSSEC, a web site name such as www.comcast.net can be signed with a secure key in the Domain Name System. Then, when you try to connect to that website, the Comcast DNS server checks that domain name, and it verifies the special key to ensure that it is valid and has not been tampered with by hackers or other criminals. You will only be connected if this security verification has been passed, which occurs so quickly you won't even notice that it's being done.

We're pleased to enhance Comcast Constant Guard with the addition of DNS Security Extensions (DNSSEC), delivering you a more secure Internet experience. As the first major Internet Service Provider (ISP) to move to DNSSEC in the United States, you should know that you are among the first to be getting these new security capabilities and that we continue to push for a more secure Internet experience for you, as well as a more secure global Internet.

You can learn more by:
- Watching this short video: http://www.dnssec.comcast.net/dnssec-video.htm
- Learning about Comcast Constant Guard: http://security.comcast.net/constantguard/
- Diving deeper at our DNSSEC Information Center: http://www.dnssec.comcast.net/

Warm Regards,

Jason Livingood
Internet Systems Engineering
Comcast

This is a service-related email. Comcast will occasionally send you service-related emails to inform you of service upgrades or new benefits to your Comcast High-Speed Internet service.

Copyright 2009. Comcast. All other trademarks are properties of their respective owners.

Comcast respects your privacy. For a complete description of our privacy policy, click this link.

Comcast
One Comcast Center, 10th Floor
1701 JFK Boulevard
Philadelphia, PA 19103-2838
Attn: CHSI

DNSSEC and NXDOMAIN

[Anonymous Coward]

How does DNSSEC affect NXDOMAN? Are DNSSEC and these "domain helper" type services incompatible?

Re:DNSSEC and NXDOMAIN

[marka63]

It really depends on the client you are running and what type of answers it expects.

If the client is expecting answers with DNSSEC records (by setting DO in the query) then any modification of a answer like changing NXDOMAIN to a 1.2.3.4 can be detected if the client has a trust anchor that covers that zone (directly or indirectly though a parent zone).

If the client is not expecting answers with DNSSEC records then the recursive server can still ask for the DNSSEC records and validate the answers it receives but send on modified answers to the clients.

That being said it would just be a bad PR exercise to validate then do NXDOMAIN redirection.

This is also not to say that Comcast won't do some re-writting of responses in the future. If they decide to deploy NAT64 then they will need to also deploy DNS64 which work by re-writting answer to AAAA queries if there are no AAAA records but there are A records. How to do DNS64 with validating DNSSEC clients is still being worked out but will almost certainly require the client to do the DNS64 synthesis itself.

OR.. at least migrate off Domain Helper, here:

[odd42]

http://dns-opt-out.comcast.net/help-index.php

Choice? Comcast DNSSEC Beta or ad-enhanced DNS?

[lpq]

So your choice is a Comcraptic DNSSEC testbed, or targeted ads?

While I am forced (alternatives are 5 times slower or 10x as expensive for the same speed) to connect through Comcast, I run my own DNS server -- I wonder how long that will be allowed.

Comcast is so messed up, though the US broadband as a whole is messed up and getting worse...wonder time to live in the US, in it's twilight years...

Re:Choice? Comcast DNSSEC Beta or ad-enhanced DNS?

[Anonymous Coward]

No, they have other DNS servers that are ad-free and DNSSEC free. I've been having no trouble with the DNSSEC ones though.

Clarification

[Jane Q. Public]

I am really not a fan of government regulations. But some things work, and some things are appropriate for a government to do. This qualifies as both.

No, this is "who I am" (what I have done in CS)

[Anonymous Coward]

"My Name is Ozymandias: King of Kings - Look upon my works, ye mighty, & DESPAIR..."

----

Windows NT Magazine (now Windows IT Pro) April 1997 "BACK OFFICE PERFORMANCE" issue, page 61

(&, for work done for EEC Systems/SuperSpeed.com on PAID CONTRACT (writing portions of their SuperCache program increasing its performance by up to 40% via my work) albeit, for their SuperDisk & HOW TO APPLY IT, took them to a finalist position @ MS Tech Ed, two years in a row 2000-2002, in its HARDEST CATEGORY: SQLServer Performance Enhancement).

WINDOWS MAGAZINE, 1997, "Top Freeware & Shareware of the Year" issue page 210, #1/first entry in fact (my work is there)

PC-WELT FEB 1998 - page 84, again, my work is featured there

WINDOWS MAGAZINE, WINTER 1998 - page 92, insert section, MUST HAVE WARES, my work is again, there

PC-WELT FEB 1999 - page 83, again, my work is featured there

CHIP Magazine 7/99 - page 100, my work is there

GERMAN PC BOOK, Data Becker publisher "PC Aufrusten und Repairen" 2000, where my work is contained in it

HOT SHAREWARE Numero 46 issue, pg. 54 (PC ware mag from Spain), 2001 my work is there, first one featured, yet again!

Also, a British PC Mag in 2002 for many utilities I wrote, saw it @ BORDERS BOOKS but didn't buy it... by that point, I had moved onto other areas in this field besides coding only...

Lastly, being paid for an article that made me money over @ PCPitstop in 2008 for writing up a guide that has people showing NO VIRUSES/SPYWARES & other screwups, via following its point, such as THRONKA sees here -> http://www.xtremepccentral.com/forums/showthread.php?s=ee926d913b81bf6d63c3c7372fd2a24c&t=28430&page=3

----

That might answer your question just a WEE bit better than another type of reply would here...

APK

P.S.=> What do I have to say about that much above? I can't say it any better, than this was stated already (from the greatest book of all time, the "tech manual for life" imo):

"But by the grace of God I am what I am: and his grace which was bestowed upon me was not in vain; but I labored more abundantly than they all: yet not I, but the grace of God which was with me." - Corinthians Chapter 10, Verse 10

(And, because I got LUCKY to have been exposed to some really GREAT classmates, professors, & colleagues on the job over time as well)... &, I'm FAR from "done" yet! apk

FiOS ask for it by name...

[Anonymous Coward]

Comcast is a dead horse - make the switch to FiOS if you have the opportunity, your quality of life will improved dramatically. I have 35Mps up and 35Mps down - when I was on Comcast I was lucky to get modem speeds...

oh FiOS...i almost cried...

[yodleboy]

i almost cried when i moved to an area with FiOS. I'm getting 35/35 Mb for only $15 more than what I used to pay Time Warner cable for 15/1 Mb...

Different subject: Speed

[Burz]

Would you mind commenting on why, over 9 years at several different Comcast-served residences, using DHCP in my routers to get and forward DNS server numbers to my systems has resulted in extremely slow lookups? I'm talking easily 5+ seconds per lookup with some complex web pages taking more than a minute to load.

I never had this problem with Verizon or Charter. The only solution for getting decent DNS performance on Comcast has been to use non-Comcast servers.

Where is your PHD in Psychiatry?

[Anonymous Coward]

See subject-line above, and take your meds. It's not our fault you are a trolling psycho online loser with nothing better to do than post your immature replies. Additionally - When you get your PHD in Psychiatry and have performed a formal analysis of a person's alleged mental condition and in a professional environs? Perhaps then you can make assessments of others' mental condition. Otherwise, you are merely a libellous little know-nothing scumbag online.

Not only in the router, but in the OS IP settings

[Anonymous Coward]

See subject-line above.

cheesewallet 1 reply a month alt. reg acct. troll

[Anonymous Coward]

At your present apparent reply rate of perhaps once a month, it is obvious you are nothing more than an alternate registered account used by some troll. This is especially evident by the stupidity of your reply. Given that amount of stupidity, do you think you are really deceiving anyone here troll? Guess again.