ZDNet reports on concerns that copyright warnings issued by Comcast may pose privacy and security issues. Developer Jarred Sumner, who published the warning code on his GitHub page, said the code injected into a user’s browser by Comcast is a form of a “man-in-the-middle” attack. “This probably means that Comcast is using (deep packet inspection) on subscribers’ Internet and/or proxying subscriber Internet when they want to send messages to subscribers,” Sumner said, adding, “That would let Comcast modify unencrypted traffic in both directions.” Sumner said, however, that the injection only happens on unencrypted sites.
Full Story