nanog mailing list archives

Re: Someone’s Been Siphoning Data Through a Huge Security Hole in the Internet


From: Paul Ferguson <fergdawgster () mykolab com>
Date: Fri, 06 Dec 2013 11:14:32 -0800

...but you've got to love the headlines it creates. :-)

http://news.techeye.net/business/black-hole-found-in-the-internet

- ferg

On 12/6/2013 10:05 AM, Jared Mauch wrote:


On Dec 6, 2013, at 12:38 PM, Eugen Leitl <eugen () leitl org> wrote:


http://www.wired.com/threatlevel/2013/12/bgp-hijacking-belarus-iceland/

Someone’s Been Siphoning Data Through a Huge Security Hole in the Internet
...

In 2008, two security researchers at the DefCon hacker conference
demonstrated a massive security vulnerability in the worldwide internet
traffic-routing system — a vulnerability so severe that it could allow
intelligence agencies, corporate spies or criminals to intercept massive
amounts of data, or even tamper with it on the fly.
...

Yes, nothing new to see here, networks don't do BGP filtering well, no Film at 11?

I've detected 11.6 million of these events since 2008 just looking at the
route-views data.  Most recently the past two days 701 has done a large MITM of
traffic.

In other news, you can go read the other thread on this that happened already.

http://mailman.nanog.org/pipermail/nanog/2013-November/062257.html

- Jared





--
Paul Ferguson
PGP Public Key ID: 0x63546533



Current thread: