4 ms·
Feds push for BGP security updates, but ISPs balk at mandates
- rapjr9 4y ago"network equipment vendor Juniper Networks argued that it might cost a large ISP "many millions of dollars" to fully deploy the BGPsec upgrade." And what will it cost to have your network go down? It is astounding that the security problems with BGP have been known for a decade or more and still little has been done about it. But then security for many things on the internet (cameras, IoT, consumer PC's) has been more or less ignored for the same length of time. I've always wondered why, and I did research in computer security. It seemed the decision was entirely intentional (and still is as shown by the ISP's response in this article), but I never got a good explanation for why. For BGP I heard that the ISP's could handle problems manually, but if an attack is automated or a peers (or many many peers) BGP routing goes haywire what happens then? What happens if every network connected camera starts offering new routes? What if network engineers are blackmailed? What if ransomware takes BGP routers offline? Is the government overstepping here or are there large real risks?
- bcrl 4y agoBGP is bad, but SS7 is worse in some regards given how SMS messages are abused for 3 factor authentication. At least over IP networks we can check SSL certificates.