nanog mailing list archives
Re: YouTube IP Hijacking
From: "Patrick W. Gilmore" <patrick () ianai net>
Date: Mon, 25 Feb 2008 03:16:10 -0500
On Feb 25, 2008, at 2:32 AM, Hank Nussbacher wrote:
At 05:31 AM 25-02-08 +0000, Steven M. Bellovin wrote:Seriously -- a number of us have been warning that this could happen. More precisely, we've been warning that this could happen *again*; weall know about many older incidents, from the barely noticed to the verynoisy. (AS 7007, anyone?) Something like S-BGP will stop this cold. Yes, I know there are serious deployment and operational issues. Thequestion is this: when is the pain from routing incidents great enoughthat we're forced to act? It would have been nice to have done something before this, since now all the world's script kiddies have seen what can be done."we've been warning that this could happen *again*" - this is happening every day - just look to:http://cs.unm.edu/~karlinjf/IAR/prefix.php?filter=most http://cs.unm.edu/~karlinjf/IAR/subprefix.php?filter=mostfor samples. Thing is - these prefix hijacks are not big ticket sites like Youtube or Microsoft or Cisco or even whitehouse.gov - but rather just sites that never make it onto the NANOG radar.
How many of those would be stopped with transit providers filtering their downstreams? Which doesn't require rolling out a new technology like SBGP. And, I would argue, if we cannot even get transit providers to filter their downstreams, there is no way in hell we can get transit providers to filter on some RR or doing authentication on individual prefixes.
Let's start with the easy stuff. Walk before run and all that. -- TTFN, patrick
Current thread:
- Re: YouTube IP Hijacking, (continued)
- Re: YouTube IP Hijacking JC Dill (Feb 26)
- Re: YouTube IP Hijacking Steven M. Bellovin (Feb 24)
- Re: YouTube IP Hijacking Patrick W. Gilmore (Feb 24)
- Re: YouTube IP Hijacking Sean Donelan (Feb 24)
- Re: YouTube IP Hijacking Steven M. Bellovin (Feb 25)
- Secure BGP (Was: YouTube IP Hijacking) michael.dillon (Feb 25)
- Re: Secure BGP (Was: YouTube IP Hijacking) Jeroen Massar (Feb 25)
- Re: Secure BGP (Was: YouTube IP Hijacking) Sandy Murphy (Feb 25)
- Re: YouTube IP Hijacking Scott Francis (Feb 25)
- Re: YouTube IP Hijacking Hank Nussbacher (Feb 25)
- Re: YouTube IP Hijacking Patrick W. Gilmore (Feb 25)
- RE: YouTube IP Hijacking Tomas L. Byrnes (Feb 25)
- Re: YouTube IP Hijacking Josh Karlin (Feb 25)
- [admin] [summary] RE: YouTube IP Hijacking Alex Pilosov (Feb 25)
- Re: [admin] [summary] RE: YouTube IP Hijacking Danny McPherson (Feb 25)
- Re: [admin] [summary] RE: YouTube IP Hijacking Alex Pilosov (Feb 25)
- Re: [admin] [summary] RE: YouTube IP Hijacking Danny McPherson (Feb 25)
- Re: [admin] [summary] RE: YouTube IP Hijacking Danny McPherson (Feb 25)
- RE: [admin] [summary] RE: YouTube IP Hijacking Barry Greene (bgreene) (Feb 25)
- Re: [admin] [summary] RE: YouTube IP Hijacking Arnd Vehling (Feb 26)
- Re: [admin] [summary] RE: YouTube IP Hijacking Leo Vegoda (Feb 26)