> Subject to applicable law, Comcast may disclose information generated by your WiFi Motion to third parties without further notice to you in connection with any law enforcement investigation or proceeding, any dispute to which Comcast is a party, or pursuant to a court order or subpoena.

Sounds like, at least in some limited circumstances (using the provided WiFi AP, having this feature turned on, etc), ISPs are going to be able to tell law enforcement/courts whether anyone was home at a certain time or not.

One takeaway from this is that there's a strong privacy case for disabling the built-in wireless network from your ISP-provided modem/router and using your own, to reduce the number of ways that your ISP can surveil you.

I don't want my ISP doing this to me, but it sounds like something pretty cool to do myself. Does anybody know what the current state of "self-hosting" this kind of functionality is?

One more reason not to use an ISP router, although in this case most of us are at minimum carrying around GPS homing beacons in our pocket so the carriers already know where we are.

Xfinity won't give folks in certain locales (maybe everywhere in the US?) unlimited bandwidth unless they use their modem/router. This seems like a good reason that practice should be illegal.

I had a conspiracy theorist tell me one time this is why they removed all the lead paint. It never quite made sense that kids were actually eating lead chips.

I know lead is bad for you, maybe a coincidence.

Sensing is (sadly) part of Wi-Fi 7. If you have a recent Intel, AMD or Qualcomm device from the past few years, it's likely physically capable of detecting human presence and/or activity (e.g. breathing rate). It can also be done with $20 ESP32 devices + OSS firmware and _possibly_ with compromised radio basebands.

Yeah, disable that wifi on an device not controlled by you

I'm sure people will want to make it seem like Comcast is doing something evil here, but they're not:

> Comcast does not monitor the motion and/or notifications generated by the service.

> This feature is currently only available for select Xfinity Internet customers as part of an early access preview.

> WiFi Motion is off by default.

Features like this at Comcast are typically one or two engineers on a random team coming up with a cool idea, testing it out, and if it works, they ask if they can roll it out en-masse. If it's just a software or server/backend thing and it doesn't have any negative impact, it gets accepted. Despite their terrible customer service and business practices, they do some cool stuff sometimes. They also release a fair bit of home-grown stuff as open source, which is expensive and time-consuming, but [they hope] it attracts engineers.

In case anyone is skimming the headline and comments: It's not enabled by default. This is an optional feature that you have to find, turn on, and then select up to 3 WiFi devices to use as reference signals:

> Activating the feature

> WiFi Motion is off by default. To activate the feature, perform the following steps:

The actual title of the article is "Using WiFi Motion in the Xfinity app".

Does wrapping their modem in foil work at defeating this thing in any meaningful way? I have my own router.

I've been telling people for ages to not trust ISP provided hardware. Notice the vague language here which means they reserve the right to share private information for anything that might be called an investigation, or for any dispute which includes them (didn't pay your bill?), or a subpoena.

    Subject to applicable law, Comcast may disclose information generated by your WiFi Motion to third parties without further notice to you in connection with any law enforcement investigation or proceeding, any dispute to which Comcast is a party, or pursuant to a court order or subpoena.

Plus, sharing isn't limited to a court or law enforcemnt agency - they reserve the right to share information with any third party.

This is scary, particularly considering how the current administration wants to weaponize everything they possibly can.

This is a neat feature when it's your own device that you control, but not so great when they "disclose information generated by WiFi Motion to third parties without further notice to you."

I wanted to talk about how responsible WiFi router software authors can make things local-only (and I've done that in the past; no way to get this information even if I wanted it). But this is always temporary when "they" can push an update to your router at any time. One day the software is trustworthy, they next day it's not, via intentional removal of privacy features or by virtue of a dumb bug that you probably should have written a unit test for. Comcast is getting attention for saying they're doing this, but anyone who pushes firmware updates to your WiFi router can do this tomorrow if they feel like it. A strong argument in favor of "maybe I'll just run NixOS on an Orange Pi as my router", because at least you get the final say in what code runs.

What is the escalation path for replacing or removing the corrupt public utility commissions that allow these fraudulent and unethical monopolists to continue operating?

We have endless cases of Comcast and others criminally abusing their granted monopoly and the PUCs simply allowing them to run roughshod over consumers.

How do we fix it?

The race is on to find the cheapest/easiest decoy that can simulate such motion (because if everything is moving, then nothing is moving). A tube man in every corner?

...and promising to give it to cops.

Turn that thing off.

Put your cable modem in bridge mode and use your own WiFi.

I used to recommend using your own cable modem as well, but these days you have to use the Xfinity modem to avoid overages if you're in a market with data caps.

Comcast has a stellar network operations unit, but their business operations are creepy and exploitative.

It’s creepy there is an Exclude Small Pets mode.

People here claiming "stick the ISP modem in a microwave oven, put on a tin foil hat and use your own device" -- do you truly, 100% trust that nobody but you has access to said "own" device?

Worth mentioning that unlike some ISPS Xfinity does let you use your own DOCSIS modems, which is the ideal way of using an ISP. ISP provided gateway's WIFI is not ideal for privacy, security and performance.

Comcast in general has a long history of snooping around and messing with users' traffic. Not that the alternatives are much better. Regular folks are screwed on this matter.

But perhaps for HNers setting up your own trusted WIFI AP and routing it (and all other traffic) through an internet gateway that routes your traffic over a secure channel (whatever that is for you, Tor, VPN services, VPN over your own cloud/vps,etc..) is ideal. It goes without saying, your DNS traffic should also not be visible to the ISPs.

Keep in mind that they sell all this data (including the motion data) not just to law enforcement but to arbitrary well-paying data brokers and other clients.

I really wish Xfinity focused on providing a reliable service instead of building out next gen surveillance machines

>WiFi Motion is not a home security service and is not professionally monitored.

That's funny because it does sound like they suggest it be used as such.

Okay I'm as concerned about privasy as everybody else is here but i also gotta admire that its pretty neat they can actually do that. Are they measuring the signal echo like what radar does? If they controlled both the receiver and transmitter i wouldn't be as surprised to find out they can tell when something crosses between them and form a 2-dimensional mesh (like that episode of Star Trek TNG where geordie detects cloaked romulan ships by having starfleet deploy a fleet of ships that send signals back and forth and look for timing variances) but if I'm understanding correctly this is different because they only control a single point in the network?

I wonder if they have enough information to make out shapes or if it's just a simple rangefinder?

Soon ICE will have given Comcast enough money to provide a live feed of the neighborhoods they are targeting and where all the bodies are that match the height of their targets.

We need to be finding the xfinity wifi hotspots in our neighborhoods, knock on doors, and help people understand the risks they are creating for themselves and their neighbors and how to setup their own routers.

If you ask the Xfinity managers who came up with this idea whether thieves will be able to buy live information on whether your home is empty from hackers on the dark web, the managers will likely say... nothing. What they will do is look at you with a deer-in-the-headlights expression in their shocked faces.

Sigh.

People who worked at xfinity on anything related to this will pay a reasonable price. The price is yet to be determined

> WiFi Motion will function only in areas of your home where you have strong WiFi signals traveling between your gateway and your WiFi-connected devices, and Comcast does not guarantee or warrant performance.

It is clearly just monitoring RSSI and everybody's acting like this is some spooky radar based technology.

Reason #293674 to always use your own router and modem as often as possible

Just get your own router and don't use ISP provided router.

Reason 732 why I would never use the network gear provided by an ISP.

Myself and my buddies worked on it. This might sound ripe with "conspiracy". I know how it's going to sound. Take it for what you will. Initially wanting to know things like, whose in what room, how many people, and what your actively doing, who you socialize with most etc. Been working on this since they bought Skydog/Powercloud. Purposely "helped" design the spec for wifi since Wifi 5 or earlier. How do we get more sensor devices into the home? Build an IoT line of business and make wifi "better". Imagine seeing the the entire USA on a map (comcast "national watchtower" tool), and then seeing what each router can "see", including those xfinity hotspots. One, giant, signal map of devices with tagged metadata such as a percentage associated to "who" owns the device, what the device is, and what apps you have installed, which you are using at this current moment, any health and biometric data in case grandma fell over and can't get up. There is always a hidden SSID transmitting. p0f is nicely preinstalled on the wifi router cpe. Now create the standard firmware RDK for worldwide use purchasing cable/tv networks in other countries. (Sky, IoT companies in Italy). Now give them more ability, like to unlock your home "MyQ" (comcast ventures "investment"), why stop there, get into businesses such as taco bell with LoRaWAN. Add xfinity mobile for that extra juice of seeing all the little SIMS (game) characters on the (very real) map so you can recommend to them how to better schedule their life. It's all there. Now take that same map, and make it global. Attend the next SCTE conference and see it all for yourself. They're proud of it. I thought, I was too.

3 cat feeders(small dispensers) 3 different recurring times, 3 cats = never a dull moment for the FBI on watch...

I always turn off every feature on every router I don't own and use it in pass through mode.

Can't help but imagine a reality where this is widespread and people resort to installing radio reflective curtains/decorations that freely move with slight ambient air currents in an effort to scramble the reflections and make it as hard as they can to measure.

Something like a belly dance belt around the router could also work.

holy shit we live in a matrix

Great, I always wanted to

  - be able to spy on my neighbors
  - add more surveillance systems into my house
  - have my neighbors be able to spy on me through my walls

I get that there is utility to this thing but come on, they don't even guarantee that the information is private and they say they collect it. Does the boot really taste that good? Why are we so obsessed with surveillance and giving people the power to surveil ourselves? Why are so many devs complicit in developing these tools? Again, I can understand how there's honest and good nature utility to them, but just because something has utility doesn't mean you get to ignore any harm. This trade-off is literally the whole of ethics in engineering. Engineers both create the tools for utopia and the tools for autocracy. The bitter truth is that often tools for autocracies are created while trying to create tools for utopias. But frankly, I'm not convinced this one is in that ambiguous gray zone...

Next step it will just be a feature they offer and whether you know of it, use it, or want it, it'll always be on in the background due to you signing a terms of service that lets them. And then it'll not just be in a xfinity router but your tv, phone, etc. Just makes me want to live in a cabin in the woods.

I was reading Hyatt's Privacy Policy and they mention biometrics (and even genetic information for some reason). Does this mean they can analyze all of my behavior in the hotel room?

I'm not about to find out. I really liked Hyatt, too.

One more reason yet to have my own modem.

Can anyone recommend a worthwhile setup for me? I am interested in switching my setup on Cox. It seems the Arris S33 plus Unifi Dream Router is one of my best options for good speed and features like ad blocking and VLAN? Best to buy direct from the manufacture or is Amazon ok?