republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » The Internets Biggest Security Hole
Search Topic:
Uniqs:
505
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Puzzled !!! »
« Trying to Uninstall AUTOCLICK Please help Me  
AuthorAll Replies


Dude111
An Awesome Dude
Premium
join:2003-08-04
USA


edit:
October 1st, @01:41AM

The Internets Biggest Security Hole

quote:
Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency.

The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination. [more]
»blog.wired.com/27bstroke6/2008/0···-in.html


nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T Midwest

This isn't a big surprise.

It is best to work on the assumption that every packet you send is potentially public, and to use encryption where that would be a problem.
--
AT&T dsl; Westell 327w modem/router; openSuSE 11.0; firefox 3.0.1


Cabal
Premium
join:2007-01-21
Boston, MA
reply to Dude111
I think we talked about this a while ago. Like, on August 26th.

SUMware
Premium
join:2002-05-21

said by Cabal See Profile :

I think we talked about this a while ago. Like, on August 26th.
Exactly! »Internet's Biggest Security Hole - Border Gateway Protocol
quote:
Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency.

The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination.

"It's a huge issue. It's at least as big an issue as the DNS issue, if not bigger," said Peiter "Mudge" Zatko, noted computer security expert and former member of the L0pht hacking group, who testified to Congress in 1998 that he could bring down the internet in 30 minutes using a similar BGP attack, and disclosed privately to government agents how BGP could also be exploited to eavesdrop. "I went around screaming my head about this about ten or twelve years ago.... We described this to intelligence agencies and to the National Security Council, in detail."
etc...


JohnInSJ
Premium
join:2003-09-22
San Jose, CA
quote:
"I went around screaming my head about this about ten or twelve years ago....
Must not be that big an issue then?

SUMware
Premium
join:2002-05-21

said by JohnInSJ See Profile :

Must not be that big an issue then?
Try reading the article.


JohnInSJ
Premium
join:2003-09-22
San Jose, CA
·SONIC.NET

said by SUMware See Profile :

said by JohnInSJ See Profile :

Must not be that big an issue then?
Try reading the article.
Reading is hard. Is there a video on youtube?


JohnInSJ
Premium
join:2003-09-22
San Jose, CA
·SONIC.NET

reply to Dude111
Yep, ok, I read it.

So, it's still saying anything you send over the internet is not secure (see post #2 above.) This is news? Yes, the specifics of this hole are a little new if you didn't have any idea how packets are routed, but they're not that surprising.

There is nothing to "fear" here. It's just another friendly reminder that your communications isn't secure just by virtue of the transport layer. Having worked in the telco industry for a while, I'm reminded of the early easy switch hacking days (hey, it's Woz!) cell phone scanning, etc. Eventually the telcos managed to get things cleaned up a little bit, but wow were we in danger for a while.

The bigger risk here is the "oops, I broke teh intertubes" effect when every shmo in the usual places attempts to hijack packets. You know, shmos like Pakistan.

Anyway, kids, remember that all your spam email might be readable by bad guys. Consider that the next time you click that Cea1is link.
--
My place : »www.schettino.us
-
Forums » Up and Running » Security » SecurityPuzzled !!! »
« Trying to Uninstall AUTOCLICK Please help Me  


Wednesday, 03-Dec 14:11:18 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9 years online! © 1999-2008 dslreports.com.
page compression OFF
Most commented news this week
· [119] AT&T Metered Billing Trial Hits Second Market
· [91] UDP BitTorrent Will Destroy The Interwebs!
· [85] EFF Challenges Telecom Immunity
· [70] Exclusive Screens Of Comcast's New Bandwidth Meter
· [61] Comcast Tries To Slow Verizon's Philly Entry
· [56] Comcast To Offer Bandwidth Use Tracker In January
· [49] T-Mobile Invisible Caps Return
· [44] Verizon Tops Consumer Reports Wireless Satisfaction Ratings
· [42] Cablevision Bumps HD Count To 68
· [28] Mega-ISPs, Consumer Advocates Demand Broadband Plan
Most people now reading
· Digital Transport Adapter Unboxing Photos [Comcast Cable TV]
· Coalition Government Possible? [TekSavvy]
· Is this a good thing for the net? [news,99366]
· [ Classes] Yep, the QQ'ers win again... [World of Warcraft]
· [Rant] Bestbuy receipt checker [Rants, Raves, & Praise]
· [northeast] Massive Verizon billing problems... [Verizon Fiber Optics]
· Maggots on the kitchen ceiling So Gross. Need Help!! [Home Repair & Improvement]
· Whats wrong here? [Automotive]
· [Other] VOIPo; what is the total cost per month? [VOIP Tech Chat]
· WoTLK Heriocs [World of Warcraft]