This is very troubling, and I’m not even sure where to start. I recently received an email message from my ISP which alerted me to an incoming update. I didn’t worry too much since this is obviously not the first update they’ve ever pushed through.

However, after this update, I noticed that my guest connections and some other things had changed / disappeared. I logged on to my router, and I immediately noticed my custom password had been reset to the default. No problem, I entered it.

At this point, I saw that all of my options were greyed out. I could change the password, which I did, but nothing else. I immediately called my ISP.

I was told that I would have to use their app now, so as much as I dislike using proprietary phone apps, I conceded and installed the app through the Play store.

However, the agent was not entirely honest with me. I still can’t bifurcate my 2.4g and 5g connections, nor can I add or remove any guest connections. I immediately enabled “privacy mode” via the app, which purportedly prevents information from being collected by something called “HomePass,” and I “Delete[d] Guard events” whatever the hell that means, but this seems really troubling. I can no longer access my modem/router settings via the normal interface, but have to use an Android app?

There is only one other ISP in my area. They have much worse/slower service, but should I switch, or is this just the “new normal”? Does what I’m describing even make sense? I’m not a tech expert, but I feel like I’ve self-taught myself how to navigate these settings, and learned from others in online forums, but now … an Android app?

I’d appreciate any advice. I’d even be willing to purchase my own modem/router instead of using the one from my ISP, if that fixes this mess.

Edit: So I need my own router, at least. I did some research, and these are the ones I can get locally that are within my budget:

  • TP-Link Archer AC1900 Dual-Band Mu-Mimo Wi-Fi Router with Gigabit Port

  • Linksys AC1200 Dual Band WiFi 5 Router

  • TP-Link Archer AX1500 WiFi 6 Dual-Band Wireless Router | up to 1.5 Gbps Speeds

  • TP-Link Archer C54 | AC1200 MU-MIMO Dual-Band WiFi Router

  • NETGEAR - Nighthawk AC1900 WiFi Router, 1.9Gbps (R6900) I’VE BEEN WARNED AGAINST NETGEAR THOUGH IN OTHER FORUMS

  • TP-Link | AX1800 4 Stream Dual-Band WiFi 6 Wireless Router | up to 1.8 Gbps Speeds

  • TP-Link Archer AX3000 | 4 Stream Dual-Band WiFi 6 Wireless Router | up to 3 Gbps Speeds

  • Linksys E7350 AX1800 Wi-Fi 6 Wireless Router

Am I right in thinking the TP-Link AX3000 is best?

Edit 2: At first, I bought the Netgear AC1900, which seemed like a great deal. Turns out it was unusable without creating a netgear account, so I returned it in exchange for the TP-Link Archer AX1500, and it appears to be working! I got everything set up pretty close to the way it was before, except even better.

Once I save money, I’ll also invest in a different modem and return this one to my ISP.

This was a big wake-up call for me in terms of privacy. I never listened to people saying not to use your ISP’s equipment because I always trusted my ISP (it’s not one of the big name ones). Never trust a company. Lesson learned. I appreciate all the responses I got! This community is great!

281 points

Get. Rid. Of. Their. Router.

ISP provided networking routers are inherently garbage. They don’t want users messing with that, because your average user doesn’t even know what the fuck an ethernet cable is and will break everything by fucking around in it.

Run your own router and put theirs into modem only mode with routing and wifi disabled. If that’s not an option ask their tech support if you can buy your own DOCSIS/fiber modem (or whatever hardware you use) and return their hardware. If they also don’t allow that… well, switch or just suck it and deal with it while the ISP rubs their nipples some more.

permalink
report
reply
21 points

https://cdn.imgchest.com/files/j7kzcvmllm7.png

So I can’t disable wireless mode. This too is greyed out, and it also doesn’t let me disable wireless via the app. (When I try, it throws a popup that says “You must have at least one network.”

So is my best bet to get my own modem with router built in, or could I still connect a router to this, but never use the wifi connection through their equipment? I don’t have a lot of money, so I also want to be a bit mindful of cost.

permalink
report
parent
reply
22 points

I’d check to see if your provider has an approved modem list, buy one off that and then run your own router.

permalink
report
parent
reply
6 points

So I will want a separate router vs. buying one that has it built in? I can use whatever router I want, right? That part doesn’t have to be from the list.

permalink
report
parent
reply
6 points

When I try, it throws a popup that says “You must have at least one network.”

Sounds like it might allow you to disable it after you plug your own router in. If not, customer service might be able to do it. Ask them to put it in modem only mode.

permalink
report
parent
reply
5 points
*

I bought a refurbished cable modem for less than $30 off of amazon that’s working well for me. I’d just go that route instead of using their equipment. Even if it breaks in a year, that’s savings over renting ISP equipment.

permalink
report
parent
reply
5 points

All the router modem combos I have used have basically disabled most of the features including wifi if it gets set in modem only mode

permalink
report
parent
reply
4 points

That is literally fucked. There are some scenario’s where I can imagine an ISP wanting to force wireless on. a mesh network for their customers sounds like the most straightforward reason. if you cannot replace the router, faraday the shit out of it. put your own router behind the isp router and don’t forget to change the MAC address of the router (isp will probably block any 3rd party router macs on the network. seen it before)

permalink
report
parent
reply
6 points
*

That shit would get thrown in a metal cage and treated as a radioactive DMZ network-wise if I was forced to use it

My ISP is the dumb pipe my internet comes from, it’s bad enough that they inject bandwidth cap warnings into the raw HTML of webpages like some sort of adware virus, they can stay the fuck out of my local network

permalink
report
parent
reply
1 point

The worst part that ISP’s do these days is have all their hardware broadcast “guest” networks that you can’t disable. They market it as a bonus since any of their own customers using their own apps can connect to any ISP-provided guest network anywhere to save mobile data, but it’s actually just a massive uncontrollable security hole.

permalink
report
parent
reply
4 points

Some ISPs will not let you put the modem into a true bridged mode. I would try to disable as much on it as you can. As long as the traffic can pass through from the modem to your router that’s the important part.

permalink
report
parent
reply
6 points

Yup.iterally only use the modem to convert the signal, then run your own setup off that Ethernet cable.

permalink
report
parent
reply
3 points

That’s what I’m thinking. I looked up how to use bridge mode for my router, and it does look like I am able to access that setting, at least for now.

permalink
report
parent
reply
1 point

Yup.iterally only use the modem to convert the signal, then run your own setup off that Ethernet cable.

permalink
report
parent
reply
3 points

When I had Comcast, I had to call them and have them turn this stuff off for me, fwiw.

I’ve owned a TP-Link that frequently lost all my settings. I’ve owned two Netgears and they’ve been great. I’ve owned two Linksyses and they’ve been great. That’s just my experience.

permalink
report
parent
reply
2 points

I couldn’t even access the Netgear settings without creating a Netgear account, so I returned it. My friend who has a Netgear said this didn’t used to be the case, but I could not bypass that requirement.

permalink
report
parent
reply
2 points

Yes, get your own router, don’t use the app. If you’re technically inclined, the app will only restrict what you can do with the equipment. And with ISP owned equipment, they have api access to your equipment.

permalink
report
parent
reply
1 point

I deleted the app as soon as I got a normal router put in place and my network set up the way I want. I’m not sure why I even thought the app would do what I wanted, but the agent deliberately deceived me.

permalink
report
parent
reply
2 points

Fun thought. I’d try wrapping their wifi router in a faraday cage of chicken wire, test that the signal isn’t going out with a nearby smartphone, then plug ethernet from their to my own wifi router.

permalink
report
parent
reply
1 point

Does chicken wire actually work for this?

permalink
report
parent
reply
2 points

Fvck it, run your own router on top of that. Make a another local network and just connect it to the ISP Router, then connect all your devices to the new local. Voila.

Also run a VPN on the new router if you daisy-chain them.

permalink
report
parent
reply
11 points

You could always do double NAT (put your own router behind theirs) as last resort. It’s not that bad, I’ve done it a lot.

permalink
report
parent
reply
5 points

Out of curiosity, if your router is able to connect with their network, why do you then need to add their router back in front of yours?

permalink
report
parent
reply
11 points

In that case you totally don’t. But many ISPs only allow their own routers/modems or require some very specific abilities from 3rd-party routers usually only found on more high end (expensive) models. So sometimes the last resort is double NATing (which is fine for most users).

permalink
report
parent
reply
4 points

If you can’t disable theirs.

permalink
report
parent
reply
1 point
*

Do you need NAT if their network supports IPv6 and your whole home network is set up in IPv6?

permalink
report
parent
reply
4 points

Probably, unless they have a static delegation or do prefix delegation properly, which if they did they probably don’t suck enough to require double NAT^ lol

^single NAT for IPv6, assuming they don’t NAT it themselves

permalink
report
parent
reply
1 point

yeah, double-NAT tends to break a lot of multiplayer games though so I heavily try to avoid it.

permalink
report
parent
reply
1 point

That’s surprising, considering CGNAT would break it as well and is meaningfully common.

permalink
report
parent
reply
6 points

Is the Unify Dream Machine a good option?

permalink
report
parent
reply
4 points

If you’re on the techy side and want an all-in-one solution? Sure, if you plan on expanding within their ecosystem later. Unifi’s biggest benefit is the ecosystem, being able to manage everything from one place is nice.

permalink
report
parent
reply
3 points

I worked on one clients unifi setup and loved it. Immediately got the usg 4 pro, 24 port switch and 3 pro waps. Highly recommend for a prosumer setup.support can be whack, but lots of YouTube and forums. Meraki too pricey for home setup but the support is top tier for critical business.

permalink
report
parent
reply
3 points
*
Deleted by creator
permalink
report
parent
reply
1 point

Yeah I was thinking about the consumer one, which also has a WiFi AP integrated.

permalink
report
parent
reply
3 points

Yes.

permalink
report
parent
reply
2 points

I have the usg pro 4 with ap pros and love it.

permalink
report
parent
reply
2 points

It’s good enough.

I’m running wired routers with their wifi systems. I have a lot of control over my network.

permalink
report
parent
reply
1 point

I can’t speak to the all in one dream machine, though I’m sure it’s similar in capability to my UDM pro, which has been fairly solid for me and only really has had trouble when I induced it myself. It’s definitely much more complex and open than most home routers, and allows you to set every single thing you can think of, the drawback though is that it’s not as automated as some home routers and you need to know what you are setting more in depth when you step off the auto modes. Overall I’ve been very happy with my unifi setup. I also use Protect and I’m looking to set up Access too soon(ish).

permalink
report
parent
reply
5 points

I have fiber here in my apartment.

There is an optical network terminal with an Ethernet port on it. The optical network terminal does not appear to do any routing, just conversion of the signal between the electrical and optical interfaces. An ordinary PC can be plugged directly into it, use DHCP to get its IP address, and that’s it.

I was supplied a router by the ISP as well. It’s spent the better part of the last decade gathering dust in a drawer.

permalink
report
parent
reply
2 points

lucky bastard, enjoying fiber optic internet with common sense hardware…

permalink
report
parent
reply
2 points

No kidding. I’m going to sorely miss this setup if I ever move out.

permalink
report
parent
reply
3 points
Deleted by creator
permalink
report
parent
reply
2 points

Of course they have to configure the modem- they have to set it up right to talk to their own hardware. Itd be impossible to use otherwise.

The point is to insulate your actual LAN settings and router from the ISP so they can’t go fuck with it. This isn’t even a security thing - the ISP can and already is sniffing every packet you send - it’s just trying to maintain some semblance of usable control.

permalink
report
parent
reply
2 points

my ISP didn’t gave me the captive portal password and I’m afraid to reset it now because they’ve manually entered the WAN IP 😩

permalink
report
parent
reply
1 point
Deleted by creator
permalink
report
parent
reply
1 point
Deleted by creator
permalink
report
parent
reply
84 points

Use that shit as a modem and get another device for your internals.

permalink
report
reply
29 points

So I just got off a chat with an agent who tells me if I provide my own equipment that I will be able to use the settings as normal and delete the phone app, but that I have to use one from their supported modem list.

I’m thinking about the Arris SBG8300.

permalink
report
parent
reply
29 points

Arris makes good stuff. But that is just the cable modem. It will NOT provide any router protection for your home network. Your network topology should look like this:

ISP -> your cable modem -> your router -> everything else

Honestly, if you don’t have need for many ethernet connections, just get a wifi router with good reviews and the arris cable modem. Make sure the cable modem you pick up has the right DOCSIS version for the speed you are getting or plan to upgrade to. Your ISP will be able to tell you what version they are on.

permalink
report
parent
reply
6 points

Arris makes good stuff.

Except when they hardcode the challenge for logging into the admin console into their web frontend. To call the firmware code quality subpar would be an exaggeration.

permalink
report
parent
reply
4 points

Please forgive my ignorance, but this would need an additional wireless router? Isn’t it built into the device?

I do understand your flowchart, but it seems to me that this model covers both the modem and router aspects.

(To be clear, this might be my own ignorance. I do remember before they had modems with wireless built in, I would connect an additional wireless router, but I might be behind the times again.)

permalink
report
parent
reply
1 point

Personally i use Isp network - ISP router - cable - my own router wifi + cable

So ISP router only does wired communication and my own router handles all internal devices as well as wifi. That way you get more control at the cost of slightly more electricity.

permalink
report
parent
reply
2 points

I know you’re on a budget, but avoid Intel puma based modems. The raw specs look good, they’re the only 8x32 channel docsis 3.0, but they have a big that causes a serious jitter.

https://lookgadgets.com/articles/intel-puma-modems-list/

Personally, I have an Arris S33. The 8200 is good too, those are both docsis 3.1 and more future-ready but $150+. The 8300 you mentioned is an Intel puma, so maybe keep looking. You might be stuck with a 24 channel modem.

permalink
report
parent
reply
1 point

Bookmarking this for reference when I’m ready to buy a modem

permalink
report
parent
reply
70 points
*
Deleted by creator
permalink
report
reply
15 points

If I gave you a list of the names of routers that are available to buy in my town and that are within my budget, do you think you would be so kind as to recommend one for me? There are so many and I really don’t know where to start

I promise I wouldn’t hold you accountable for my decision :P

permalink
report
parent
reply
7 points
*
Deleted by creator
permalink
report
parent
reply
2 points

If you can, look into Ubiquiti. Their Unifi package is pretty comprehensive, and self-hostable.

If not, get an RPi with two Ethernet interfaces. Run raspbian, and learn IPTables/netfilter with masquerade. Put the WiFi in AP mode. Yes, it’ll suck but at least it’s not their router.

Save up a little bit and upgrade to a NUC with 2x Ethernet or some older HTPC with two Ethernet interfaces, it doesn’t need to be much. If it can run VMs, maybe you could run even run pfSense or DD-wrt on it. Get a managed switch that understands VLANs. Look into upgrading your WiFi to Ubiquiti Unfi APs with a local controller in a VM.

This is the way…

permalink
report
parent
reply
2 points

That looks nice, but ubiquiti is way outside what I can reasonably afford, unfortunately

permalink
report
parent
reply
2 points
Removed by mod
permalink
report
parent
reply
3 points

The AX3000 is actually on sale for $89, down from $130

permalink
report
parent
reply
36 points

Never use their router. Obviously for the issue you’re having now, but also for financial reasons. They charge ridiculous fees for renting their shit routers when buying one for like $120 will be a significant upgrade over there’s and will start saving money like 6 to 8 months in. Also it’s not tied to the company, so you get to keep it.

permalink
report
reply
6 points

I even had the tech try to install their own router after I’d told them I’d be using my own hardware, and then he ARGUED with me that theirs was better and faster. Didn’t ask for your opinion, install the service the way I asked, I know what I’m talking about in this space.

permalink
report
parent
reply
4 points

I spent about $200 on a router and modem when I moved into my last apartment, they have already paid for themselves based on the fees that Xfinity would’ve charged to “rent” the equipment. Plus they’re significantly better than the equipment that isp’s provide

permalink
report
parent
reply
4 points

And the same goes for modems. Those monthly equipment fees add up fast.

permalink
report
parent
reply
28 points

Never use the ISP provided equipment on your network. Even if you must use their modem and router, have them turn of the wifi, and connect your router to their garbage using the WAN port to connect from their LAN port with nothing else connected. If they refuse to turn off their wifi and you can’t do so through the admin, cover their crap in a Faraday cage to kill the signal. Always enter your own DNS settings on your router, never use their DNS. Make sure to use an encrypted DNS to avoid them hijacking it.

permalink
report
reply
2 points

I’m pretty sure they can’t refuse. At least in the US. Correct me if I’m wrong.

permalink
report
parent
reply
1 point

I never saw a router without an Ethernet port

permalink
report
parent
reply
2 points

RJ45 isn’t the only connector.

permalink
report
parent
reply

Privacy Guides

!privacyguides@lemmy.one

Create post

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.


You can subscribe to this community from any Kbin or Lemmy instance:

Learn more…


Check out our website at privacyguides.org before asking your questions here. We’ve tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!


This community is the “official” Privacy Guides community on Lemmy, which can be verified here. Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.


Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don’t ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don’t repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

Additional Resources:

Community stats

  • 504

    Monthly active users

  • 639

    Posts

  • 10K

    Comments