Comcast's Protected Browsing Is Blocking PayPal, Steam and TorrentFreak, Customers Say (vice.com)

Comcast's Xfinity internet customers have been reporting multiple websites, including PayPal, Steam, and TorrentFreak have been getting blocked by the ISP's "protected browsing" setting. From a report: The "protected browsing" setting is designed to "reduce the risk of accessing known sources of malware, spyware, and phishing for all devices connected to your home network." This, in general, isn't a bad thing. It's similar to Google Chrome's security settings that warn you when you have an insecure connection. But it's odd that Xfinity's security setting would be blocking perfectly harmless sites like PayPal. Multiple consumers have been reporting on Comcast's forums and elsewhere that they've been blocked while trying to access sites that many people use every day. After posting about it on the forums, one user who said they couldn't access PayPal said the problem with that particular site had been fixed. Further reading: Comcast's Protected Browsing Blocks TorrentFreak as "Suspicious" Site (TorrentFreak).

Comments

This, in general, is a bad thing

[i_ate_god]

Why does the summary suggest this is a good idea? What's good about it exactly?

Re: This, in general, is a bad thing

[mukinrestak]

In markets where they have a choice of broadband ISP, sure they're that stupid. Sadly though, not all markets have that choice.

Re: This, in general, is a bad thing

[Anonymous Coward]

Many of comcast's customers wouldn't be comcast customers if they had another choice, but in many areas your choices are 1. Comcast or 2. No internet.

Re:This, in general, is a bad thing

[Luthair]

Not really different than 9.9.9.9 which people applauded

Re: This, in general, is a bad thing

[lister king of smeg]

As they are the only* option where I live how does that make me stupid. My apartments lease says no satellites (historic building) and they are the only game in the building. More like shafted than stupid.

Not counting cellular (more expensive and low data caps) and dial-up are not really options.

Re: This, in general, is a bad thing

[CodeHog]

^^^ This

Re: This, in general, is a bad thing

[ArtemaOne]

True. I have Comcast, but there are no alternatives for broadband. I generally like my service, just not the 1 terabyte cap that I've gone over the grace twice (you get two free).

Re: This, in general, is a bad thing

[mSparks43]

Iâ(TM)m pretty sure not being able to establish your own broadband connection counts as stupid, typical state depenancy mentality, always someone elses fault.

Is this on by default?

[ArtemaOne]

Do users turn this on, or is it a default setting? I'd be upset if it were forced on people. This sounds like a violation of net neutrality, which is still in place for a while longer.

Re:Is this on by default?

[110010001000]

It is the default setting. Turning it off it pretty difficult as it requires you to login to a website and find it in the Security -> Advanced settings. This shouldn't be a surprise. They have been doing it over a year now.

Re:Is this on by default?

[ArtemaOne]

Sounds like they're tightening the screws lately. I'm overseas for a few months, so I'll have to try to log in and fix it by the time I get home.

Re:Is this on by default?

[110010001000]

Well get used to it. Eventually they are going to start limit what devices are allowed to connect and what protocols you are going to be allowed to use. It is only a matter of time.

Re:Is this on by default?

[Berkyjay]

Where exactly is the security section?

Re:Is this on by default?

[msauve]

So, they were violating net neutrality a year before the FCC got rid of it.

Re:Is this on by default?

[ArtemaOne]

The rest of the setence that you eliminated from the quote?

Re:Is this on by default?

[ArtemaOne]

That makes no sense.

Re:Is this on by default?

[110010001000]

https://internet.xfinity.com/n...

Re:Is this on by default?

[Berkyjay]

Funny, this says I'm not eligible. Probably because I don't rent their shitty modems and routers. I wonder if that means they can't filter my traffic.

Re: Is this on by default?

[ComputerGeek01]

That's completely different. No one blocked the Daily Stormer, they just couldn't find a host for their content.

Re:Is this on by default?

[pnutjam]

I've run a server on my comcast internet for years without a peep.

Re:Torrents ARE a source of malware

[viperidaenz]

TorrentFreak is a news site about torrents.

The media industry doesn't like them because they don't publish their view.

My 2 Cents

[DaMattster]

This is what happens when you turn to ISPs to solve the problems of the internet; more problems are created. There are plenty of ways to do this for yourself that can be found for a simple Google search. One of the problems with America is that we've stopped using the critical thinking skills that evolution gave us. You need not be a power user to search for solutions. In a former career, I was a System Admin so I simply setup an OpenBSD-based firewall/gateway/proxy out of a spare computer to replace the hunk of garbage my ISP gave me. I've created a list of all of the allowed websites and that's it.

Re:My 2 Cents

[greenwow]

You can't blame us for the people we vote for. This is their fault, not the fault of their supporters.

Re:My 2 Cents

[ArtemaOne]

No, if you put them in power, you're an enabler.

Re:My 2 Cents

[thegarbz]

There are plenty of ways to do this for yourself that can be found for a simple Google search.

Why would you google search? There's plenty of ways you can find this solution by yourself. Just ask around for people until you get a somewhat relevant web address and then follow all links you can until you find your comment.

Ok facetiousness aside, there's a very good reason not to do a lot of this management yourself. It has nothing to do with critical thinking and everything to do with data. Do you single-handedly look at all data coming in and out to determine if it is a virus in the systems you admin? Or do you use a 3rd party company with lots of experience and data to do it? Do you drive around the city taking note of the traffic as it builds up and then stop to calculate your own optimal route, or do you use Google Maps or Waze, or someone else with loads of data about traffic to help you get to your destination? Do you look up a copy of Grey's Anatomy every time you get stabbed and perform surgery on yourself, or do you defer it to an expert, preferably one who has the experience to deal with it?

Likewise just because you can do a Google search, and because you're an expert system admin doesn't mean you don't already outsource a lot of your work too. Or do you not subscribe to spam lists either?

The idea that people should filter their own internet just because *you* have a spare computer, and way too much time on your hands is absolutely absurd. Instead what you should be proposing is to manage the lists for other people, not because they are idiots, but because they value their own time.

Re:My 2 Cents

[ArtemaOne]

I can't help it if you voted for Trump.

Re:My 2 Cents

[ArtemaOne]

No

Paypal is harmless?

[dkone]

Read about some of the things Paypal does. I don't think I would put them in the harmless category.

Re:Paypal is harmless?

[Impy the Impiuos Imp]

They profit off of kids gambling, when they should be gamboling.

Re:Paypal is harmless?

[jfdavis668]

Yea, like fund SpaceX.

Where is this blocked?

[Rick Schumann]

I've never seen anything like this. Is it some router setting, or do they block it in their network? I use my own router not Comcast's equipment.

Simple solution: different DNS

[xfade551]

I've been stuck with Comcast. I've always used my own router, and more recently started using my own cable modem. After bumping into this sort of crap -years- ago, I stopped using their Domain Name Servers, and set my router to use the OpenDNS servers. (Yes, I know they got bought up by an "evil corporate entity", so I'm willing to consider suggestions for new alternatives, but I haven't settled on another, yet.)

Re:Simple solution: different DNS

[drinkypoo]

They're all owned by evil corporate entities. Might as well use google dns, at least it works.

Re:Simple solution: different DNS

[pnutjam]

I think your misunderstanding. I resolver still queries an upstream DNS server. It will usually default to your ISP's, but you can use openDNS, google, or pipe it off to a VPN providers DNS.
There is nothing that makes a resolver inherently safer.

Re:Torrents ARE a source of malware

[Falconnan]

And a distribution model used for a lot of open source materials as well. Also, that doesn't really justify this as I am unaware of any technology that isn't a source of malware.

No Problems Here

[CodeHog]

Steam is in nearly constant use in my house and never had an issue accessing PayPal. The price I pay them for access is horrible but in general I don't have Internet access issues through Comcast.

HTTP is a source of malware

[Cajun Hell]

WTF do protocols have to do with this? TFA doesn't say they blocked torrents (or web access or email, since those are just as useful for spreading malware).

As usual, no one reads TFA

[Rexdude]

From the TorrentFreak article -

The good news is that the blocking ‘feature’ isn’t mandatory. Subscribers can enable and disable it whenever they please, by changing their network settings

From the link to Xfinity support (emphasis added) -

Protected Browsing is an opt-in service that Xfinity xFi customers can use to help safeguard their home networks against malicious content. In order to use the feature - which we offer at no additional cost - you must enable it using the Xfinity xFi app. You can also turn it off at any time with a single swipe.