Comcast's Protected Browsing Is Blocking PayPal, Steam and TorrentFreak, Customers Say

Comcast's Xfinity internet customers have been reporting multiple websites, including PayPal, Steam, and TorrentFreak have been getting blocked by the ISP's "protected browsing" setting. From a report: The "protected browsing" setting is designed to "reduce the risk of accessing known sources of malware, spyware, and phishing for all devices connected to your home network." This, in general, isn't a bad thing. It's similar to Google Chrome's security settings that warn you when you have an insecure connection. But it's odd that Xfinity's security setting would be blocking perfectly harmless sites like PayPal. Multiple consumers have been reporting on Comcast's forums and elsewhere that they've been blocked while trying to access sites that many people use every day. After posting about it on the forums, one user who said they couldn't access PayPal said the problem with that particular site had been fixed. Further reading: Comcast's Protected Browsing Blocks TorrentFreak as "Suspicious" Site (TorrentFreak).

This, in general, is a bad thing

[i_ate_god]

Why does the summary suggest this is a good idea? What's good about it exactly?

Re: This, in general, is a bad thing

[mSparks43]

Comcast customers are to stupid to browse the internet on their own.

Re:

[Bob-Bob Hardyoyo]

In markets where they have a choice of broadband ISP, sure they're that stupid. Sadly though, not all markets have that choice.

Re:

[CodeHog]

^^^ This

Re:

[Anonymous Coward]

Many of comcast's customers wouldn't be comcast customers if they had another choice, but in many areas your choices are 1. Comcast or 2. No internet.

Re:

[ArtemaOne]

True. I have Comcast, but there are no alternatives for broadband. I generally like my service, just not the 1 terabyte cap that I've gone over the grace twice (you get two free).

Re: This, in general, is a bad thing

[mSparks43]

Iâ(TM)m pretty sure not being able to establish your own broadband connection counts as stupid, typical state depenancy mentality, always someone elses fault.

Re:

[lister king of smeg]

As they are the only* option where I live how does that make me stupid. My apartments lease says no satellites (historic building) and they are the only game in the building. More like shafted than stupid.

Not counting cellular (more expensive and low data caps) and dial-up are not really options.

Re:

[Luthair]

Not really different than 9.9.9.9 which people applauded

Is this on by default?

[ArtemaOne]

Do users turn this on, or is it a default setting? I'd be upset if it were forced on people. This sounds like a violation of net neutrality, which is still in place for a while longer.

Re:

[ArtemaOne]

The rest of the setence that you eliminated from the quote?

Re:

[ComputerGeek01]

That's completely different. No one blocked the Daily Stormer, they just couldn't find a host for their content.

Re:

[110010001000]

It is the default setting. Turning it off it pretty difficult as it requires you to login to a website and find it in the Security -> Advanced settings. This shouldn't be a surprise. They have been doing it over a year now.

Re:

[ArtemaOne]

Sounds like they're tightening the screws lately. I'm overseas for a few months, so I'll have to try to log in and fix it by the time I get home.

Re:

[110010001000]

Well get used to it. Eventually they are going to start limit what devices are allowed to connect and what protocols you are going to be allowed to use. It is only a matter of time.

Re:

[pnutjam]

I've run a server on my comcast internet for years without a peep.

Re:

[Berkyjay]

Where exactly is the security section?

Re:

[110010001000]

https://internet.xfinity.com/n... [xfinity.com]

Re:

[Berkyjay]

Funny, this says I'm not eligible. Probably because I don't rent their shitty modems and routers. I wonder if that means they can't filter my traffic.

Re:

[msauve]

So, they were violating net neutrality a year before the FCC got rid of it.

Re:

[ArtemaOne]

That makes no sense.

Re:

[viperidaenz]

TorrentFreak is a news site about torrents.

The media industry doesn't like them because they don't publish their view.

Re:

[Falconnan]

And a distribution model used for a lot of open source materials as well. Also, that doesn't really justify this as I am unaware of any technology that isn't a source of malware.

HTTP is a source of malware

[Cajun Hell]

WTF do protocols have to do with this? TFA doesn't say they blocked torrents (or web access or email, since those are just as useful for spreading malware).

My 2 Cents

[DaMattster]

This is what happens when you turn to ISPs to solve the problems of the internet; more problems are created. There are plenty of ways to do this for yourself that can be found for a simple Google search. One of the problems with America is that we've stopped using the critical thinking skills that evolution gave us. You need not be a power user to search for solutions. In a former career, I was a System Admin so I simply setup an OpenBSD-based firewall/gateway/proxy out of a spare computer to replace the hunk of garbage my ISP gave me. I've created a list of all of the allowed websites and that's it.

Re:

[greenwow]

You can't blame us for the people we vote for. This is their fault, not the fault of their supporters.

Re:

[ArtemaOne]

No, if you put them in power, you're an enabler.

Re:

[ArtemaOne]

I can't help it if you voted for Trump.

Re:

[ArtemaOne]

No

Re:

[thegarbz]

There are plenty of ways to do this for yourself that can be found for a simple Google search.

Why would you google search? There's plenty of ways you can find this solution by yourself. Just ask around for people until you get a somewhat relevant web address and then follow all links you can until you find your comment.

Ok facetiousness aside, there's a very good reason not to do a lot of this management yourself. It has nothing to do with critical thinking and everything to do with data. Do you single-handedly look at all data coming in and out to determine if it is a virus in the systems you admin?

Paypal is harmless?

[dkone]

Read about some of the things Paypal does. I don't think I would put them in the harmless category.

Re:

[Impy the Impiuos Imp]

They profit off of kids gambling, when they should be gamboling.

Re:

[jfdavis668]

Yea, like fund SpaceX.

Where is this blocked?

[Rick Schumann]

I've never seen anything like this. Is it some router setting, or do they block it in their network? I use my own router not Comcast's equipment.

Simple solution: different DNS

[xfade551]

I've been stuck with Comcast. I've always used my own router, and more recently started using my own cable modem. After bumping into this sort of crap -years- ago, I stopped using their Domain Name Servers, and set my router to use the OpenDNS servers. (Yes, I know they got bought up by an "evil corporate entity", so I'm willing to consider suggestions for new alternatives, but I haven't settled on another, yet.)

Re:

[pnutjam]

I think your misunderstanding. I resolver still queries an upstream DNS server. It will usually default to your ISP's, but you can use openDNS, google, or pipe it off to a VPN providers DNS.
There is nothing that makes a resolver inherently safer.

Re:

[drinkypoo]

They're all owned by evil corporate entities. Might as well use google dns, at least it works.

No Problems Here

[CodeHog]

Steam is in nearly constant use in my house and never had an issue accessing PayPal. The price I pay them for access is horrible but in general I don't have Internet access issues through Comcast.

As usual, no one reads TFA

[Rexdude]

From the TorrentFreak article -

The good news is that the blocking ‘feature’ isn’t mandatory. Subscribers can enable and disable it whenever they please, by changing their network settings [xfinity.com]

From the link to Xfinity support (emphasis added) -

Protected Browsing is an opt-in service that Xfinity xFi customers can use to help safeguard their home networks against malicious content. In order to use the feature - which we offer at no additional cost - you must enable it using the Xfinity xFi app.