UFB - GPON and Security

Forums › New Zealand Broadband › UFB - GPON and Security

MattHNZ

23 posts

Geek
+1 received by user: 9

Topic # 111056 23-Oct-2012 08:13

Hi All,

This is about my 3rd post in the history of GeekZone.... so go easy on me :-)

I've been looking at the detail behind the Fibre / UFB solution that Chorus have started rolling out.

So this stuff is using GPON (Gigabit Passive Optical Network), right?

Correct me if i'm wrong: but from what I have read it's possible that up to 32 houses may be sharing the same SFP or connected to the same fibre node.

Does anyone know what measures are in place to stop a person from connecting directly to the fibre in their home and sniffing the traffic that the other 31 people in the neighbourhood are receiving?

Ok so it's not the end of the world we're only talking about home users here.. but whats to stop me from listening in on my neighbours VOIP conversation? (Well, at least the downstream part)

Food for thought? or is there one key thing I'm missing here?

Cheers

Matt

sbiddle

26636 posts

Uber Geek
+1 received by user: 6143

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 704893 23-Oct-2012 08:28

GPON supports AES security for the downstream, with 128bit being fairly common in GPON deployments.

freitasm

BDFL - Memuneh
60845 posts

Uber Geek
+1 received by user: 11724

Administrator

Trusted

Geekzone

Lifetime subscriber

Reply # 704895 23-Oct-2012 08:47

MattHNZ: Ok so it's not the end of the world we're only talking about home users here.. but whats to stop me from listening in on my neighbours VOIP conversation? (Well, at least the downstream part)

Not "talking about home users" only. We are talking real money (Internet banking, online credit card usage, online bet, accounting software, etc). We are talking about people running businesses from home, or people working from home.

Security is a real concern, regardless if it's a business or a home connection.

But as sbiddle said above, encryption is a common thing in deployments.

You should worry more about using free, open, unencrypted WiFi around town.

Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) |

My technology disclosure | Business Transformation | Enterprise Content Management |

MattHNZ

23 posts

Geek
+1 received by user: 9

Reply # 704900 23-Oct-2012 09:04

Thanks for your replies guys.

Is anyone able to confirm that we are running encryption here in NZ with the UFB roll out?

mercutio

1387 posts

Uber Geek
+1 received by user: 134

Reply # 704922 23-Oct-2012 09:41

MattHNZ: Thanks for your replies guys.

Is anyone able to confirm that we are running encryption here in NZ with the UFB roll out?

regardless of any encryption on the gpon link, you're more likely to have the US or NZ governments tapping your connection and rerouting traffic after it gets off the gpon link, and you'd be better off using encryption to your end point of any data.

Zeon

3395 posts

Uber Geek
+1 received by user: 397

Trusted

Reply # 704958 23-Oct-2012 10:41

The prism should stop you from receiving the downstream traffic from other customers I would have thought. Upstream is shared but encrypted. At the end of the day copper is far less secure and easier to tap.