sporkme
drop the crantini and move it, sister
Premium,MVM
join:2000-07-01
Morristown, NJ
 ·Optimum Online
| reply to Ignite
Re: Old news?
said by Ignite  :Perhaps nothing more interesting than ensuring all your BGP peers are using MD5 authentication would mitigate this. That would do nothing to solve this... |
|
keyboard5684
join:2001-08-01
Youngsville, PA
 ·Teliax VOIP
 ·WestPAnet Inc.
·WestPAnet Inc. CA..
1 edit | reply to Ignite
This is true, MD5 which many carriers no longer seem to care about because you can just set 1 or 2 hop BGP.
MD5 should always be setup but it is a longer call with the carrier and sometimes a pain. You usually have to email or send the password to them because you cannot read 7j8j$8e%wVG&6G6Ky6jI#8o!LMt over the phone. So it is a little pain so carriers, or more there techs, just try not to encourage it. You have to specifically request it so it is the ISP fault as well.
But these little tricks are usually just bad configuration/setup. The ISPs and carriers can set up a very secure exchange. DNS exploits too, a lot of this just goes to security, do it right the first time.
Laziness and lack of caring, just people doing there job. Tell you what, pay techs what they deserve and get the right ones in there to do the job. It has to do with undercutting by the ISPs and by the carriers.
EDIT: What about we start using a newer version of BGP? We have been stuck on 4 for a long time. Maybe we all move up to BGP6 or something? Developed yet? |
|
Ignite
Premium,VIP
join:2004-03-18
UK
clubs: | reply to wentlanc
Perhaps nothing more interesting than ensuring all your BGP peers are using MD5 authentication would mitigate this. |
|
