4 ms·
I think you mean the BGP hack. https://blog.thousandeyes.com/amazon-route-53-dns-and-bgp-hijack/ https://blog.thousandeyes.com/amazon-route-53-dns-and-bgp-hi..
by 0xff00ffee 7y ago
I think you mean the BGP hack.
https://blog.thousandeyes.com/amazon-route-53-dns-and-bgp-hijack/ https://blog.thousandeyes.com/amazon-route-53-dns-and-bgp-hi...
That wasn't reaaaaly an AWS hack. BGP hacks are still an issue since it is mostly an honor system! There are no safeguards against this except fast admin.
- eyegor 7y agoWell, there was that too. What I was referring to was a specific issue that allowed you to add entries for domains in r53 which were already in use (in r53). I can't remember the specifics too well, but I think it was an api validation issue on one of the endpoints. It wasn't a "I own your domain now" so much as "I receive some of your traffic sometimes".