TiVo Community
TiVo Community
TiVo Community
Go Back   TiVo Community > Main TiVo Forums > TiVo Premiere DVRs
TiVo Community
Reply
Forum Jump
 
Thread Tools
Old 03-22-2013, 09:24 AM   #1
mbp2112
Registered User
 
Join Date: Dec 2004
Posts: 6
Angry Is it possible to spoof Cablecard HostID? - Comcast On-Demand

Howyadoin,

I've been billed by Comcast for on-demand movies that I didn't order. They quoted the HostID of the device from which the movies were supposedly ordered, which matches the ID of my Premiere. Is it possible that someone spoofed my Host ID? Does Comcast store any other information besides Host ID that I can use to prove my case? Basically, I'm being called a liar...grrr...

Thanks!
mbp2112 is offline   Reply With Quote
Old 03-22-2013, 09:38 AM   #2
ferrumpneuma
fading fast
 
Join Date: Jun 2006
Location: Anhedonia
Posts: 561
Is is possible a guest or child was with the premier unattended. What were the titles ordered? That might be a clue.
ferrumpneuma is offline   Reply With Quote
Old 03-22-2013, 10:17 AM   #3
mbp2112
Registered User
 
Join Date: Dec 2004
Posts: 6
Quote:
Originally Posted by ferrumpneuma View Post
Is is possible a guest or child was with the premier unattended. What were the titles ordered? That might be a clue.
There were several partial porn (of both persuasions, interestingly) movies, all within the same afternoon, and partly viewed, apparently.

It was a weekday afternoon, I was at work, my wife was home, but she wouldn't go into my office for the purpose of watching porn, and I really don't think she has a predilection for some of the material ordered.

So anyway, Comcast is refusing to waive the charges, so I'm looking for a new provider. But that's a story for another thread...
mbp2112 is offline   Reply With Quote
Old 03-22-2013, 11:01 AM   #4
innocentfreak
Registered User
 
Join Date: Aug 2001
Location: Florida
Posts: 8,522
Is your Premiere provided by the cable company? If not the only way to order would be over the phone or via the webpage.
__________________
1 - TiVo Roamio Pro
2 - TiVo Premiere XL

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
innocentfreak is offline   Reply With Quote
Old 03-22-2013, 11:14 AM   #5
tatergator1
Registered User
 
Join Date: Mar 2008
Location: Columbus, Ohio
Posts: 781
Quote:
Originally Posted by innocentfreak View Post
Is your Premiere provided by the cable company? If not the only way to order would be over the phone or via the webpage.
He mentions Comcast. I assumed he was in an Xfinity of Premiere area. You can buy directly via the Tivo in this situation.
tatergator1 is offline   Reply With Quote
Old 03-22-2013, 11:16 AM   #6
innocentfreak
Registered User
 
Join Date: Aug 2001
Location: Florida
Posts: 8,522
Quote:
Originally Posted by tatergator1 View Post
He mentions Comcast. I assumed he was in an Xfinity of Premiere area. You can buy directly via the Tivo in this situation.
I had asked someone before and they had said they couldn't order PPV even though they had access to Xfinity VOD now. I guess they were wrong or it changed. Good to know. Thanks.
__________________
1 - TiVo Roamio Pro
2 - TiVo Premiere XL

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
innocentfreak is offline   Reply With Quote
Old 03-22-2013, 11:28 AM   #7
tatergator1
Registered User
 
Join Date: Mar 2008
Location: Columbus, Ohio
Posts: 781
Quote:
Originally Posted by innocentfreak View Post
I had asked someone before and they had said they couldn't order PPV even though they had access to Xfinity VOD now. I guess they were wrong or it changed. Good to know. Thanks.
I wasn't sure either, so I pulled up the Xfinity on Tivo support page and it indicated you could select "Buy and Watch Now" for paid content. There are also instructions on setting a PIN for purchases. Based on what the OP has indicated, this seems like a Comcast mistake they don't want to admit, or can't figure out so they are just going to stick to the OP.
tatergator1 is offline   Reply With Quote
Old 03-22-2013, 11:31 AM   #8
WhiskeyTango
Registered User
 
Join Date: Sep 2006
Location: New Jersey
Posts: 5,777
Quote:
Originally Posted by innocentfreak View Post
I had asked someone before and they had said they couldn't order PPV even though they had access to Xfinity VOD now. I guess they were wrong or it changed. Good to know. Thanks.
You've always been able to order PPV with a phone call.
WhiskeyTango is offline   Reply With Quote
Old 03-22-2013, 11:40 AM   #9
mbp2112
Registered User
 
Join Date: Dec 2004
Posts: 6
I bought my Premiere myself, it wasn't provided by Comcast.

They quoted me the Host ID and card serial number for my Premiere, but if it's being spoofed, that's irrelevant, no? I do have on-demand capability, and have had it for some time. I've used it to watch free movies in the past, but have never attempted to watch anything that had a charge associated with it.
mbp2112 is offline   Reply With Quote
Old 03-22-2013, 11:53 AM   #10
Teeps
Registered User
 
Teeps's Avatar
 
Join Date: Aug 2001
Location: Torrance,Cal. 90503
Posts: 920
Quote:
Originally Posted by mbp2112 View Post
I bought my Premiere myself, it wasn't provided by Comcast.

They quoted me the Host ID and card serial number for my Premiere, but if it's being spoofed, that's irrelevant, no? I do have on-demand capability, and have had it for some time. I've used it to watch free movies in the past, but have never attempted to watch anything that had a charge associated with it.
Is the TiVo in question connected to the internet by wireless connection?
Teeps is offline   Reply With Quote
Old 03-22-2013, 12:48 PM   #11
JandS
Registered User
 
Join Date: Oct 2010
Posts: 95
Howyadoin,

The DSLReports website has a terrific section called "Comcast Direct" where registered DSLReports members can get official, direct support from Comcast techs and account services. Postings in the Direct forums are "Secure", i.e. private and unreadable to other forum members (except for the thread title).

I've had great results by posting there after calls to Comcast support and on-site service calls totally failed to resolve the problem (or even understand it, for that matter). The folks on the Direct forum are able to "see" your account and tech settings that are not visible or available to the front-line folks. No knee-jerk customer service attitudes at all.

I would think that the Direct forum folks would be especially interested in following up on any possibility of your account being somehow hacked to steal VOD programming, whether by spoofing or a neighbor hacking into your comcast lines or whatever.

https://secure.dslreports.com/forum/comcastdirect

If you do post there please let us know what you think of the experience.
JandS is offline   Reply With Quote
Old 03-22-2013, 12:55 PM   #12
innocentfreak
Registered User
 
Join Date: Aug 2001
Location: Florida
Posts: 8,522
Quote:
Originally Posted by WhiskeyTango View Post
You've always been able to order PPV with a phone call.
Correct.

Quote:
Originally Posted by innocentfreak View Post
Is your Premiere provided by the cable company? If not the only way to order would be over the phone or via the webpage.

__________________
1 - TiVo Roamio Pro
2 - TiVo Premiere XL

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
innocentfreak is offline   Reply With Quote
Old 03-26-2013, 11:39 AM   #13
mbp2112
Registered User
 
Join Date: Dec 2004
Posts: 6
After several rounds with Comcast CSRs and supervisors, I posted a nastygram on Comcast's message board. I was referred to the We Can Help (we_can_help@cable.comcast.com) group, to which I presented my case again. I got an email (on a Saturday, no less) from corporate, followed by a phone call on Monday. They then called Tuesday morning, acknowledging that there was a problem, my account may have been affected, and they were crediting the charges. I'm happy that they agreed to do this, but the level of interaction it took to make it happen, given that this isn't exactly an uncommon complaint, is not good. When you have to use the word "Kafkaesque" in an email, something has gone horribly wrong...

PS. Just a note to others that are having a problem, there's an option I just found in the Comcast website to receive a text message whenever an on-demand or PPV transaction is made. Login to your account at the comcast.com webpage, choose "Manage users and alerts" and scroll to the bottom of the page. You'll see the checkbox. It won't fix the problem, but you'll know immediately that you're being hacked and can call customer service while the blankety-blanks are in-the-act. That might crack this situation, who knows?
mbp2112 is offline   Reply With Quote
Old 04-01-2013, 12:24 AM   #14
Merle Corey
Registered User
 
Join Date: Aug 2001
Location: Mount Prospect, IL, US
Posts: 64
There's definitely something going on, and it isn't pretty.

I'm a Premiere owner in a non-OnDemand market (Chicago). I'm now on my third iteration of this, after having mistakenly thought it was resolved back in January.

I was already signed up for email notifications, which is how I spotted the problem in the first place. We never buy PPV, getting email means something has already gone wrong.

First instance in December, billing was extremely nice/helpful and dropped the charge immediately. They recommended that we set PINs on everything (cable boxes, phone orders) and we did. There should have been no way to purchase PPV without manual intervention.

Whoops, second instance a few weeks later (January). Billing was once again very helpful and dropped the charge immediately. They also identified the order as coming from my cable card and suggested contacting support to troubleshoot. That's where things got stupid; to make a long story short, it amounted to the CS rep claiming that we were ordering movies through the TiVo even though OnDemand wasn't available in our area.

I immediately escalated to the we_can_help address. I received an email response amounting to "We'll call you soon" the same weekend and got the phone call the next business day. The conclusion was to set our PPV credit limit to $0, requiring a phone authorization for any purchase. Case closed, right?

Wrong. Got a new movie purchase today. I went directly to we_can_help and am waiting on the followup.

While I love my TiVo, especially over the Comcast DVRs, this is the kind of issue that may well result in cutting the cord and switching to Netflix/Hulu/Amazon for our content. No kids, only my wife watches regularly, it's suddenly really hard to justify the money for service/cards/cable boxes when the normal CSRs' default response is to treat us like criminals.

mbp, keep a close eye on things. It's clear that Comcast doesn't really have a handle on this, and it's a pretty severe flaw in their system.
Merle Corey is offline   Reply With Quote
Reply
Forum Jump




Thread Tools


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Advertisements

TiVo Community
Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
vBulletin Skins by: Relivo Media

(C) 2013 Magenium Solutions - All Rights Reserved. No information may be posted elsewhere without written permission.
TiVoŽ is a registered trademark of TiVo Inc. This site is not owned or operated by TiVo Inc.
All times are GMT -5. The time now is 11:07 PM.
OUR NETWORK: MyOpenRouter | TechLore | SansaCommunity | RoboCommunity | MediaSmart Home | Explore3DTV | Dijit Community | DVR Playground |