Hacker News Reader

ugpubon Can an ISP do this? I'm no security expert, but this looks like a MITM attack

stackoverflow.com (actually, and through my ISP) points to 104.16.33.249 and that IP also shows my ISP's page - https://imgur.com/CgECUZR - so i don't think this is DNS hijacking; the DNS mapping is correct but the actual content has changed.

- I have paid the bills

- Clicking continue just goes into my ISP account panel and not to the actual site, so not really an "offer" popup or anything.

- Yes they definitely are. Most of the "my Internet" now points to their servers. I have no idea how long they're going to take to fix this.

ugpubon Can an ISP do this? I'm no security expert, but this looks like a MITM attack

I get a certificate error.

ugpubon Can an ISP do this? I'm no security expert, but this looks like a MITM attack

OP here. This ISP is pretty famous in several areas in my city (Bangalore, India). Can they legally do this? Isn't my browser sending each visited-domain's cookies to my ISP now? For example, one of the screenshot-ed sites is a very famous e-commerce site here. Doesn't this pose a security risk? I have no idea whom to complain to.