Lanulos
Active member
I don't think they have any way to track tethering apps. They are just targeting users with high transfers.
Packets sent by the iPhone to the AT&T node have a TTL of 64. If they get a packet from your phone that doesn't have the TTL set to 64, they have good reason to suspect that the packet did not originate with your phone, but from something tethered to it. That is why the post I linked to says to set your computer's TTL value to 65; after it goes through the phone it will decrease to 64 and look like it came from the phone. (Each device or node the packet goes through reduces the TTL value by 1.) Maybe AT&T also has other ways to tell but those are probably more circumstantial than this way. Here is the link again:
Post • The Solution! • The Register Forums