Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Huge Internet Security Hole Demonstrated » Old news?
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Post a:
Post a:
The DNS exploit is bigger... »
« So encrypt your traffic  

Ignite
Premium,VIP
join:2004-03-18
UK
clubs:

Re: Old news?

Perhaps nothing more interesting than ensuring all your BGP peers are using MD5 authentication would mitigate this.
keyboard5684

join:2001-08-01
Youngsville, PA
·Teliax VOIP
·WestPAnet Inc.
·WestPAnet Inc. CA..


1 edit

Re: Old news?

This is true, MD5 which many carriers no longer seem to care about because you can just set 1 or 2 hop BGP.

MD5 should always be setup but it is a longer call with the carrier and sometimes a pain. You usually have to email or send the password to them because you cannot read 7j8j$8e%wVG&6G6Ky6jI#8o!LMt over the phone. So it is a little pain so carriers, or more there techs, just try not to encourage it. You have to specifically request it so it is the ISP fault as well.

But these little tricks are usually just bad configuration/setup. The ISPs and carriers can set up a very secure exchange. DNS exploits too, a lot of this just goes to security, do it right the first time.

Laziness and lack of caring, just people doing there job. Tell you what, pay techs what they deserve and get the right ones in there to do the job. It has to do with undercutting by the ISPs and by the carriers.

EDIT: What about we start using a newer version of BGP? We have been stuck on 4 for a long time. Maybe we all move up to BGP6 or something? Developed yet?

sporkme
drop the crantini and move it, sister
Premium,MVM
join:2000-07-01
Morristown, NJ
·Optimum Online

said by Ignite See Profile :

Perhaps nothing more interesting than ensuring all your BGP peers are using MD5 authentication would mitigate this.
That would do nothing to solve this...
Forums » Huge Internet Security Hole DemonstratedThe DNS exploit is bigger... »
« So encrypt your traffic  


Wednesday, 09-Dec 18:04:33 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [198] Sprint Sued For Distracted Driving Death
· [99] AT&T Launching New 24 Mbps U-Verse Tier
· [81] 3G Network Test Says AT&T Is Tops
· [72] Mediacom Unveils 105 Mbps Pricing
· [66] Sprint Poised For A Turnaround?
· [63] WPA Cracker: Test WPA-PSK Networks In 20 Minutes
· [51] The Future Of Wi-Fi Is Bright
· [47] Site Leaks Yahoo, Verizon Fed Data Share Pricing
· [45] AT&T Hints At Usage-Based iPhone Data Pricing
· [44] Microwaving Your Innards Is Not 'Extreme'
Most people now reading
· MicroSoft Discontinues Sale of Windows 7 Family Pack in US [Microsoft Help]
· Is sleeping similar to being dead? [General Questions]
· Windows 7 boot manager editing questions [Microsoft Help]
· [ Classes] ATTN Death Knights - Post your spec for critique! [World of Warcraft]
· HoR, PoS and FoS [World of Warcraft]
· Man Downloads Child Porn "Accidentally," Faces 20 Years [Security]
· whole house ups [Home Repair & Improvement]
· HOA Headaches [General Questions]
· Adobe Flash Player version 10.0.42.34 [Security]
· Comcast refused to install 400' feet. [Comcast HSI]