How to Disable Comcast Xfinity Public Wi-Fi

UPDATED with model numbers of Xfinity routers affected.
Those who use Comcast's Xfinity-branded residential-gateway broadband routers, which combine a cable modem with an Ethernet and wireless router, could soon find themselves becoming mules for the company's publicly available network. Comcast announced recently that it is starting to turn on a second Wi-Fi signal in its customers' home routers that could be used by anyone with an Xfinity account — even total strangers who happen to be driving by.
The company has already activated this feature on hundreds of thousands of routers in parts of Florida, Minnesota, Pennsylvania and New Jersey, and in the Houston and Washington, D.C., metro areas. It intends to turn on millions of these hotspots in the coming months.
MORE: 12 Things You Didn't Know Could be Hacked
It's not immediately clear which models of gateway routers are affected, but Comcast states on its website that the feature is not available to those subscribed to Comcast's Economy Internet package.
A Comcast Internet technical-support representative told us after this story was first published that the Arris TG862G and Technicolor TC8305 models support the public Wi-Fi hotspot feature, while Cisco and SMC models do not as of yet. While the Cisco devices do have two antennas, they're only for dual-band Wi-Fi in the home, said the tech-support rep. The SMC models have only one antenna.
If you use one of the affected models, you might want to turn the home hotspot feature off. While we don't expect there to be severe security risks with the second network being opened up, it is likely that more people using your hotspot could slow your overall Internet connection.
Prevent that from happening by tuning off the home-hotspot feature. Make sure your Comcast username and password are handy, and follow these easy steps to turn off the second signal in your Comcast router.
1. Go to http://customer.comcast.com.

2. Log into your account.

3. Select Users & Preferences from the top navigation bar.

4. Click "Manage Xfinity WiFi" under the Service Address section.

5. Select "Disable Xfinity WiFi Home Hotspot" in the dialog box that pops up. If you don't see the option to enable or disable the home hotspot, the feature may not have been activated in your area, or your modem/router combination may not be compliant.

6. Save your changes.
Follow Cherlynn Low at @CherlynnLow and on Google+. Follow Tom's Guide at @tomsguide, on Facebook and on Google+.
Most ISP's don't give you a choice. You are forced to used these combo units.
First, Comcast will not be able to activate this on Arriss, Cisco, or SMC routers because they don't have the necessary hardware to do so.
Second, I am pretty sure these routers are specifically developed to allow multiple WiFi networks in order to enable better public WiFi. Right now, routers let you setup a guest wifi, 2.4ghz wifi, and over 5ghz wifi. So making one dedicated to Comcast public wifi is totally possible. However, this will treat that access point as a completely different IP.
The only security risk is that a person has all but 1 set of numbers for your IP address. However, at any time your whole IP address can be reference over the internet.
It won't eat at your connection or consume your bandwidth. Cable connections use Channel bonding where they can connect to 4-16 channels. Each one allows for 30mb/s of speed. Something tells me these ones will be on their own separate channel.
I think what they will probably do is offer to not rent out your router for being a hotspot, or allow you access to the free hotspot without a subscription fee. That's usually the hurdle most cable companies have with giving away equipment. The monthly rental fee.
Keep in mind that wifi radios are not 100% efficient in handling multiple users. If your wifi radio can do 100mbit/s on clieent, then if you add an additional client and both want full speed, then both will not get 50mbit/s under a completely fair que. The overhead of dealing with more than one client will cause the sppeeds for both clients to be less than 50mbit/s, you will be more likely to see around 45Mbit/s or less. The only way to avoid this will be to have a completely separate wifi radio and antenna running on a completely different non overlapping channel in roder to prevent the public network from impacting the home user's wifi.
Furthermore the CPU will have to be significantly faster. (as you create more network activity, pingtimes slow down. If you have a program such as ixchariot, you can demonstrate this yourself. Have a rate limited benchmark go between 2 systems, and then have 2 other systems on the same network start their own rate limited transfer, even if you are only using 25% of the available network capacity, ping times will increase as the router is doing more work. On enterprise networking hardware, it is negligable, but for home routers, especially less powerful ones, it becomes more noticable and you can easily add a few extra milliseconds to your ping times if a hotspot user decides to create a constant connection, even if the throughput needed is low, if there are many connections, it will impact the performance of the hom user. Furthermore, traffic shapping will open the door for denial of service. Even on a router such as the WRT1900 AC, that dual core 1.2GHz CPU will struggle to maintain 400mbit/s while using QOS, and from my experience with doing QOS benchmarks with ixchariot on consumer routers, even a low bandwidth datacenter style workload (lots of cmall packets stressin different priority levels, will cause the router to work really hard to manage the traffic, and thus you can get a high CPU load with only a small amount of traffic)
One issue that seems to not be getting enough attention, How many comcast customers are getting the ful upload and download speed that they are paying for? (most do not and in those cases, allowing a hotspot user to get even 1KB/s will mean 1KB/s less that you can use for your home network because they are already unable to provide you with your full speed.
If I were stuck with something like this and was unable to opt out, I would either buy my own modem and not use theirs, or I would take it apart and physically cut the PCB trace going to the wifi amplifier to make sure that the the wifi network cannot be used.
PPS can a comcast customer in the effected area try loggint into one of those hotspots and see if the WAN IP is any different, if not then this means that some people can have fun going to the homes of people they do not like, or choose random homes, and then do things like have personal challenges "how fast can I break every single rule on this side, and get the account banned, and the make many more accounts until they decide to do an IP ban (and can it be done for the most popular websites)
Or if you know that the person loving in the target home is a gamer, then see if they play on any servers that use some form of ban link, and and just wreak havoc.
Overall, this is 100% bad for the customers stuck hosting those hotspots. For all, it will mean a drop in performance (PS if the same wifi radio is used, see if 802.11b is still supported
Since additional processing takes place for pretty much all network traffic, even low bandwidth usage on wifi will negatively impact the WAN performance of wired computers.
The only way that I can see this as acceptable, is if they are able to implement it in a way where hotspot usage will have no measurable impact on the home users performance (meaning even enterprise test equipment should be 100% unable to measure any impact at all) (meaning they have to make a consumer networking device that exceeds even backbone level bandwidth providers in their ability to manage network traffic).
Comcast do allow you do use your own.
The free wifi do NOT use the renter data cap.
i don't know where you get that idea but it is totally false.
First of all when you sign up for comcast, and I use comcast, you have a box that you check which clearly says "rent equipment", if you check this box, or leave it checked as the case may be, then you will receive a comcast modem and will be billed 7 dollars a month, for what is basically a 25 dollar modem. Keep in mind, we are not talking about the tv box, which is a different thing. All you have to do is to uncheck this box and buy your own modem.
Our system is called FON, and it does not uses your internet bandwidth, it uses the same router but that router is capable of handling 2 wifi signals and lots of signal.
My current speed is +-123mb and I suffer nothing when others are connected to my router, in fact they are NOT connected to my network in any way (unless someone found out a secutity flaw).
The advantage is that I have free internet outside my home as long as I have a fon network at the range of my WIFI.
Except the vast number of research studies saying it is safe. Along with the fact that every living thing on Earth is bombarded by radio waves and has so since the beginning of life. Given that the universe pumps out radio waves. Which is the static you hear on radios or used to see on analog TVs.