The Pirate Bay – North Korean hosting? No, it’s fake

Post by youngerdryas » Tue, Mar 05, 2013, 3:03 AM UTC

derleth wrote: post #46

youngerdryas wrote: post #13

Earlier quoted context omitted.

Yes, let's make internet freedom a joke. But we already have anonymous for that. Edit: The real tragedy is the people excusing NK so they can have their way. I'm not saying they are dumb, just unlucky at thinking. Edit2: No defense of hackivists making a mockery of themselves? How much does TPB make?

> The real tragedy is the people excusing NK so they can have their way. I've read this sentence a few times, left, come back, and re-read it a few times, and I still can't really make heads or tails of it. Are you saying that people doing this (pretending their website is hosted in North Korea) makes light of the suffering of people who live in North Korea? I don't understand how you can conclude that: The whole poi…

Post by jfim » Tue, Mar 05, 2013, 4:16 AM UTC

wmf wrote: post #27

StavrosK wrote: post #20

Earlier quoted context omitted.

Hmm, isn't the Korean subnet allocation fixed? If an IP falls in that range, doesn't it belong to the Korean ISP? How can someone be assigned that IP by someone other than the ISP who owns it?

BGP has almost no security. Anyone can hijack any IP address, especially if you can find an unused /24 so that the owner isn't inconvenienced.

Post by rakslice » Tue, Mar 05, 2013, 5:09 AM UTC

runn1ng wrote: post #34

antihero wrote: post #31

Earlier quoted context omitted.

So you can basically start telling the internet "I AM THIS IP" and eventually the internet will go "YOU ARE THIS IP" ?

Yes. As far as I know, that's what happened when Iran started blocking YouTube in Iran and mistakenly blocked it in entire world. Luckily, AFAIK, BGP is trust-based, so things go to normal pretty quickly.

Post by damian2000 » Tue, Mar 05, 2013, 6:10 AM UTC

Post by jlgaddis » Tue, Mar 05, 2013, 10:14 AM UTC

windexh8er wrote: post #47

jlgaddis wrote: post #36

Earlier quoted context omitted.

> when ti comes down to it any AS can advertise any route they want If the provider isn't filtering, sure. > Most edge routes are configured to simply trust routes as they come in Actually, edge routers are where your prefix filtering takes place. It's much more difficult to filter at the "core".

Very true, but where is the core? I've setup many BGP peering sessions, and yes all of those direct edge connections into tier 1 providers is generally filtering prefixes longer than /24. These are where the big propagation problems happen. Whoops, I just advertised my internal network (including a bunch of /31 and /32s) to the Internet either clobbering route tables (capacity problem) or stomping routes. This is why…