Comcast website leaks details of Xfinity users -- including router passwords

Security researchers have discovered a bug in the Comcast website that makes it possible to gather information about Xfinity users. As well as customer data such as home addresses, it is also possible to access wireless network details including passwords. The bug was reported by Karan Saini and Ryan Stevenson after they found it was possible to use the Xfinity activation website to access customer data using nothing more than a customer account ID and that customer's house or apartment number. Although the online form for activation asks for a full address, it is only necessary to supply the number… [Continue Reading]