31–40 of 66 posts
Earlier quoted context omitted.
Hmm, isn't the Korean subnet allocation fixed? If an IP falls in that range, doesn't it belong to the Korean ISP? How can someone be assigned that IP by someone other than the ISP who owns it?
BGP has almost no security. Anyone can hijack any IP address, especially if you can find an unused /24 so that the owner isn't inconvenienced.
The link is resulting in a 404 for me
"In the end i will also solve the mystery of the REAL hosting location, with proof."
Earlier quoted context omitted.
BGP has almost no security. Anyone can hijack any IP address, especially if you can find an unused /24 so that the owner isn't inconvenienced.
So you can basically start telling the internet "I AM THIS IP" and eventually the internet will go "YOU ARE THIS IP" ?
Luckily, AFAIK, BGP is trust-based, so things go to normal pretty quickly.
Well, okay. Don't touch it. It ain't broken. I don't think there's anything wrong with showing people who are not network experts how easy it is to (believably) route things into nirvana. I guess the effects of fake routes being propagated could have been a lot worse than this. Why not promote some discussion and thought around BGP and friends? Maybe we can come up with something more resistant.
One thing a lot of people don't realize is that a good deal of how the internet routes traffic is simply determined by trust. Yes there are complicated legal agreements between AS's but when ti comes down to it any AS can advertise any route they want. Most edge routes are configured to simply trust routes as they come in. If they didn't we wouldn't have such a redundant infrastructure.
If the provider isn't filtering, sure.
> Most edge routes are configured to simply trust routes as they come in
Actually, edge routers are where your prefix filtering takes place. It's much more difficult to filter at the "core".
How is it possible to fake the ip of a server? I don't get it. If the A record resolves to the Korean IP, but the server isn't there, how does it reply?
WHOIS tells you where an IP is supposed to be located, but BGP determines where the IP is actually located. They don't have to agree and both can be hacked/spoofed.
WHOIS tells you the address of the organization (as they supply it) the IP addresses are allocated to, nothing more.
> BGP determines where the IP is actually located
No, BGP determines the path through the Internet, via various ISPs, that your packets take to get to their destination.
Earlier quoted context omitted.
BGP has almost no security. Anyone can hijack any IP address, especially if you can find an unused /24 so that the owner isn't inconvenienced.
So you can basically start telling the internet "I AM THIS IP" and eventually the internet will go "YOU ARE THIS IP" ?
In reality, most ISPs (that I've dealt with, anyway) do prefix filtering to prevent just this sort of thing.
Earlier quoted context omitted.
So you can basically start telling the internet "I AM THIS IP" and eventually the internet will go "YOU ARE THIS IP" ?
Yes. As far as I know, that's what happened when Iran started blocking YouTube in Iran and mistakenly blocked it in entire world. Luckily, AFAIK, BGP is trust-based, so things go to normal pretty quickly.
> Do not play with BGP. Well, okay. Don't touch it. It ain't broken. I don't think there's anything wrong with showing people who are not network experts how easy it is to (believably) route things into nirvana. I guess the effects of fake routes being propagated could have been a lot worse than this. Why not promote some discussion and thought around BGP and friends? Maybe we can come up with something more resistan…