5 ms·
Couldn't a rogue government easily take down the internet this way? Seems like if one guy in Indonesia can take out Google by accident, a government entity coul
by jhull 14y ago
Couldn't a rogue government easily take down the internet this way? Seems like if one guy in Indonesia can take out Google by accident, a government entity could do the same.
- sudhirj 14y agoThe moment people realize that the rogue network was being malicious, they'd stop trusting it - ignoring all announcements it might make. It might take a few hours for order to be restored, though.
- antidoh 14y agoEnough time for a purge or to gain an advantage in an invasion. This might even be on checklists for such actions.
- JohnLBevan 14y agoWould it be possible to claim to own Google's IP, then on receiving the packets intended for Google forward them on to the real IP (without accidentally forwarding them back to yourself)? That way someone could hijack & interrogate these packets without being spotted (at least without causing service outage / only adding slight delay). Alternatively could they route these requests to a clone as an advanced phishing scam?
- ErikD 14y agoThat's what https is for. It should prevent them from doing anything useful with the packets.
- sp332 14y agoMaybe you can't read the data in the packets, but HTTPS doesn't do a thing about SIGINT (signals intelligence) which, on such a large scale, could give you a lot of valuable information.
- vegardx 14y agoNot unless you manage to forge a certificate at the same time. It has been done before, as SSL is based on more or less the same level of trust as BGP.
- stonemetal 14y agoThat is more or less the definition of a man in the middle attack. Hopefully if the website does something important(online banks, shopping, etc.), they have done something to mitigate that possibility.
- SoftwareMaven 14y agoWouldn't the packets that <evil network> forwarded on to the real Google just get routed right aback to them, because the rest of the world thinks they are Google? It might work for somebody like China, where they have two network interfaces, so can make all Chinese networks think they are Google on one interface, then forward things on to the real Google on the other. There might be a good reason for them to do it, too, because they are also likely a trusted CA, so could forge SSL certs, too.
- count 14y agohttp://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-pilosov-kapela.pdf http://www.defcon.org/images/defcon-16/dc16-presentations/de... It works :)
- parfe 14y agoThis exactly thing happened a few years ago. China rerouted about 10% of internet traffic, presumably by accident. http://www.theregister.co.uk/2010/04/09/china_bgp_interweb_snafu/ http://www.theregister.co.uk/2010/04/09/china_bgp_interweb_s...