Comcast’s Xfinity phone app login authenticaion

Topic

New Reply

Comcast has a login authentication option to use their Xfinity app on your phone to allow access in place of having the usual texts with a string of numbers sent to your phone. Presumably this is more secure.

I’m curious if anyone here is using that option.

 

Reply | Quote

Replies

Yes, it’s a “push notification” from the app on your phone I answer with a finger print id.  I got a couple other apps that use it.  I’d also be interested in feedback from other A/W members.

Desktop Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

Reply | Quote

I use my fingerprint to unlock my phone.  I have the Xfinity app, but I don’t use it.  The only texts that I get are once a month confirming that my automatic payment has been made.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

bbearren wrote:

I have the Xfinity app, but I don’t use it.

I don’t use the app either except to occasionally our Xfinity Mobile data usage, but this is just a standard finger print log-in.  But if I sign-in to the Xfinity website from a browser on my computer, I sometimes get the push notification option to the app instead of a text msg with a 6 digit sign-in code.  I tried it just now and only got the 6 digit code, not a push.

 

Desktop Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

Reply | Quote

I have been using the Xfinity app log in authentication for a while and it has been working fine. Then, starting over a week ago, when I log in to Comcast, either web email or the website, the Xfinity app on my phone has been pushing a notification that says:

Sign in request from My Sky
Do you want to allow this?

And below that it shows my username, the browser I am using, the IP address of my device, and my location.

All of the values shown there are correct. Because they show that the request is coming from my device I allow it. But it’s rather disconcerting that they say the request is coming from My Sky. How can I feel confident this isn’t a breach? (I know that Comcast bought Sky in 2018, a possible clue about what might be going on here)

Anyway, I posted a message to the Comcast support forums trying to find out why I am getting these requests that say they are from My Sky. It appears that I am not the only one who is experiencing this. Comcast basically are clueless. It has been over a week since they last posted anything to the thread and those posts basically were all requests for more information from me. Since then . . . silence.

My thread is here if you are curious (scroll down slowly when you first land there or it tends to skip over my post that started the thread):

https://forums.xfinity.com/conversations/email/what-is-my-sky-in-allow-access-request-in-xfinity-app-when-signing-in/671797c79771310e4076c2b0

1 user thanked author for this post.

windbg

Reply | Quote

opti1 wrote:

Sign in request from My Sky

It’s not a breach.  Part of comcast “Sky News” and apps.

https://corporate.comcast.com/company/sky/products

Desktop Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

Reply | Quote

That was my initial reaction and I mentioned that possibility in my posts to Comcast. The response I got back basically said they couldn’t find anything online about My Sky except for a connection to Yahoo(?) and that even though Comcast owns Sky they operate separately and there is no way anything from Sky would show up in Comcast.

At any rate, given the online environment we live in and the very real possibilities of being compromised one shouldn’t have to be faced with logging in to Comcast and getting back a request that My Sky is asking for access. Comcast should fix that, or at least explain that the My Sky request is legitimate and safe and not a breach.

Reply | Quote