The bit I had hoped to see at the end of this article: "and here's how we stopped these bogus routes at their upstream links, to prevent this problem from recurring". Disappointing to see so much analysis and no solution.
This has been a problem people thought had been happening for a while. It's only with this detailed analysis that the light is being cast on it. Now we can work on solutions. And we will.
Using BGP data to find Spammers
11–17 of 17 posts
Re: Using BGP data to find Spammers
#12Interesting that people sophisticated enough in internet routing protocols to squat on unused IP space can get paid more working for spammers than legitimate companies.
Why? Crime always paid more to compensate the added risk.
Re: Using BGP data to find Spammers
#13Re: Using BGP data to find Spammers
#14This was fascinating to me. It feels like a major failing that I could register routes for address space I don't control. Kudos to the authors for explaining things in a way that a novice networking guy like myself could understand.
Re: Using BGP data to find Spammers
#15Earlier quoted context omitted.
This has been a problem people thought had been happening for a while. It's only with this detailed analysis that the light is being cast on it. Now we can work on solutions. And we will.
Because Pakistan BGP-hijacking YouTube wasn't enough of a reason?
Re: Using BGP data to find Spammers
#16Interesting that people sophisticated enough in internet routing protocols to squat on unused IP space can get paid more working for spammers than legitimate companies.
Spam pays a lot. I mean, like, a lot. So it doesn't surprise me that some people can basically choose their own hours, work on something challenging and get paid well for doing it, all for a crime that Russia will never extradite them for, is going to be happier doing that than sitting in an office 9-5 and every other week on 24x7 on-call babysitting some Cisco firewalls.
Re: Using BGP data to find Spammers
#17Earlier quoted context omitted.
Because Pakistan BGP-hijacking YouTube wasn't enough of a reason?
That was a censorship attempt that was fat finger'd to cause a leak. We all knew what happened there.