3 ms·
The BGP examples are a little far fetched. Few adversaries have that capability, and when someone fucks with BGP, the world knows about it.
by lawnchair_larry 15y ago
The BGP examples are a little far fetched. Few adversaries have that capability, and when someone fucks with BGP, the world knows about it.
- tptacek 15y agoWow is that ever far from true.
- bonzoesc 15y agoThat was DEF CON 17 when somebody BGP'd the whole LAN through their datacenter in NYC, right?
- marshray 15y agoJust about every ISP in the world, from the backbone providers to small ISPs in Pakistan, has the capability. More often than not, it happens by 'accident'. http://www.renesys.com/blog/2008/02/pakistan_hijacks_youtube_1.shtml http://www.renesys.com/blog/2008/02/pakistan_hijacks_youtube... If you were very selective about it, and pulled it off without any disruption, you could get away without anyone noticing. Or, do it from a third-world ISP, and say "It was an accident whaduyagonnadoaboutit".
- amalcon 15y agoIf there are big BGP changes, the world notices. If the BGP for the specific netblock your site is hosted on changes, the world probably does not notice. Your users will see slightly degraded performance (actually, in some cases it will improve), and (presumably) a number in the NSA will be <1% higher for a few minutes, but that's about it. I've worked on software that literally (intentionally) publishes BGP updates every ~10 seconds. It didn't bother anyone, because it wasn't playing with many addresses.