3 ms·
Dyn Research (née Renesys) was quoted in the article, and typically posts in-depth articles when this type of thing happens. [1] Based on the quote[2], I inter
by oasisbob 12y ago
Dyn Research (née Renesys) was quoted in the article, and typically posts in-depth articles when this type of thing happens. [1]
Based on the quote[2], I interpret the failure as someone attacking the routers themselves, overwhelming their control planes to the point where they can't sustain BGP sessions reliably.
[1] No post from them yet, would expect it to be at http://research.dyn.com/2014/12/ http://research.dyn.com/2014/12/ if/when they do the full write-up.
[2] "Their networks are under duress,” Mr. Madory said. “This is consistent with a DDoS attack on their routers,” he said, referring to a distributed denial of service attack, in which attackers flood a network with traffic until it collapses under the load."
- yourad_io 12y agoI did see that, but it didn't quite measure up to a legitimate data point. "under duress" clearly states that there is "duress", but "consistent with" is somewhat conjecture-y. If that is a verbatim quote, then Dyn is telling is that there was an attack (duress involved, no ifs buts or maybes). If that quote has been altered even slightly[1], we're back to "NK won't pick up the phone no more"[2]. [1] Any of these would remove the "attack" edge of this: Their networks... * seem to be under duress * (seem to be/are) down/nonresponsive [2] but we don't know if someone blew up the switchboard, or if they switched it off themselves.
- hhw 12y agoIf routers are being directly attacked, the router IPs can just be null routed, as they don't need to be reachable by the Internet at large to be the next hop for passing traffic between routers. Some networks use unadvertised IP space for their router point-to-point and loopback IPs for that reason. Guess it's not too surprising that North Korea doesn't have better network engineers.