UK Broadband (BT Openreach) not requiring longin credentials???

[ricko_uk]

Hi,
at my previous place I had broadband contract with Plusnet and the new place by Utilities Whareahouse. Both of them are just service providers but the connection, the network and the entire equipment is installed and maintained by BT Openreach so identical for both service providers.

The one operated by Plusnet requires username and password (with any router) in order to access the network. But Utilities Wharehouse does not require any login. Literally you can plug your laptop on the wire that runs into the house and without any login the internet appears within a few seconds and runs perfectly and at full speed.

How is that possible or even allowed??? Should it not need authentication/login??? That is basic security...!!!

Thank you

[coppice]

Hi,
at my previous place I had broadband contract with Plusnet and the new place by Utilities Whareahouse. Both of them are just service providers but the connection, the network and the entire equipment is installed and maintained by BT Openreach so identical for both service providers.

But Utilities Wharehouse does not require any authentication or login of any sort. Literally you can plug your laptop on the wire that runs into the house and without any login or authentication the internet appears within a few seconds and runs perfectly and at full speed.

How is that possible or even allowed??? Should it not need authentication/login??? That is basic security...!!!

Thank you

What exactly do you expect to be authenticating? Its normal for the modem in your home to just connect to the internet and go. Your modem/router/ whatever may apply a firewall to protect things in your home from malicious actors on the internet, but that doesn't need authenticating. If you use wifi, things around you home need to very securely connect to that, or passers by can make use of your system.  As far as your ISP is concerned they provide service on a wire or fibre into your home, and you use it. You keep paying., They keep providing.

[ricko_uk]

Thank you @Coppice, I clarified better my OP.

In the previous place the router needs login details to the Plusnet account in order to have access to the internet. And the same I found in any other places I have been. But Utilities Wearhouse does not. Surely that's not right...

BTW, I am not talking about WiFi, just the wired broadband. i.e. for the wired router to access the internet (copper connection to the cabinet then fiber from the cabinet onwards).

[Monkeh]

The authentication is your front door key.

[Someone]

The unit(s) that do(es) the authentication/credentials/metering is being pushed out to the carrier/wholesaler side, you get a dumb pipe like back in the old POTS days. So eavesdropping and theft is easy, but so is setup.

What are you worried about? I only see plusses to this setup.

[AndyBeez]

What exactly are you plugging into? Here in the UK the router will have authentication preset on the management page. Theoretically it is possible to connect a PC direct with an ethernet cable to the white FTTP NTE or 'PON' box, and get a valid IP. But the connection's protocol might be wrong - I will have to try that sometime. Even if this works, the issue is the PC has no network firewall.

[nali]

Not sure what you mean by "Literally you can plug your laptop on the wire that runs into the house" - do you have Ethernet as your incoming connection from the street?

My house has FTTP with the modem and ISP router are seperate devices. The modem was already here when I moved in last year as it was left by the last occupants, power was on and the fibre was linked but no IP.

When I had the connection reinstated all the installer did was phone back with the modem's MAC (or whatever) and connect up the ISP's router and that was it so obviously they whitelist connections. In your case that might be in the roadside cabinet.

[NiHaoMike]

Make sure you're actually getting a public IP, it's possible the converter box they installed is a router and not just a dumb fiber to copper converter.
BTW, as of well over a decade, most residential ISPs in the US use the MAC address of the modem to authenticate.