3 ms·
This is also true of every intermediate router between you and the destination. TLS would not need to exist otherwise.
by likeabatterycar 2y ago
This is also true of every intermediate router between you and the destination.
TLS would not need to exist otherwise.
- stephen_g 2y agoMost intermediate routers don't have easily exploitable holes allowing attackers to take them over to MITM traffic though...
- op00to 2y agoI thought most internet routers in the US at least were pwned by the NSA. :D
- dmix 2y agoReminds me of a Dan Greer talk he gave at NSA from 2014 http://geer.tinho.net/geer.nsa.26iii14.txt http://geer.tinho.net/geer.nsa.26iii14.txt the basic gist is in the event of a cyberwar you could brick millions of peoples routers and their only natural solution would be to go to BestBuy to get a new one... which almost certainly is running a 4-5yr old linux/firmware version that is equally vulnerable. Of course this requires some remote access or lateral entry from other systems on the network, but it's an interesting thought experiment regardless.
- cesarb 2y ago> the basic gist is in the event of a cyberwar you could brick millions of peoples routers [...] but it's an interesting thought experiment regardless. I think this is already way past "thought experiment". In the day of the 2022 invasion of Ukraine by Russia, thousands of satellite modems were deliberately bricked.
- dmix 2y agoand https://en.wikipedia.org/wiki/VPNFilter https://en.wikipedia.org/wiki/VPNFilter The lack of major cyber wins in the invasion of Ukraine is still very surprising though. Maybe holding their cards for something big (something they didn't expect to win in "3 days"), or US really helped prepare Ukraine, or it's harder than it sounds :)
- likeabatterycar 2y agoYes they do. It's called BGP.