Live data from Hacker News

There were BGP anomalies during the Venezuela blackout

loworbitsecurity.com

131–140 of 476 posts

Re: There were BGP anomalies during the Venezuela blackout

#131
post #41

Earlier quoted context omitted.

Indeed. The DPRK was right from the start. They always were. For the longest time I thought they'd gone too far, but now we're the clowns putting on a show.

[flagged]

NK is protected by China, a very credible force.

Re: There were BGP anomalies during the Venezuela blackout

#132
> When BGP traffic is being sent from point A to point B, it can be rerouted through a point C. If you control point C, even for a few hours, you can theoretically collect vast amounts of intelligence that would be very useful for government entities. The CANTV AS8048 being prepended to the AS path 10 times means there the traffic would not prioritize this route through AS8048, perhaps that was the goal?

AS prepending is a relatively common method of traffic engineering to reduce traffic from a peer/provider. Looking at CANTV's (AS8048) announcements from outside that period shows they do this a lot.

Since this was detected as a BGP route leak, it looks like CANTV (AS8048) propagated routes from Telecom Italia Sparkle (AS6762) to GlobeNet Cabos Sumarinos Columbia (AS52320). This could have simply been a misconfiguration.

Nothing nefarious immediately jumps out to me here. I don't see any obvious attempts to hijack routes to Dayco Telecom (AS21980), which was the actual destination. The prepending would have made traffic less likely to transit over CANTV assuming there was any other route available.

The prepending done by CANTV does make it slightly easier to hijack traffic destined to it (though not really to Dayco), but that just appears to be something they just normally do.

This could be CANTV trying to force some users of GlobeNet to transit over them to Dayco I suppose, but leaving the prepending in would be an odd way of going about it. I suppose if you absolutely knew you were the shortest path length, there's no reason to remove the prepending, but a misconfiguration is usually the cause of these things.

Re: There were BGP anomalies during the Venezuela blackout

#133

I assume that nuclear capability would rule out a target from this kind of snatch operation, and that this event will add pressure to proliferate.

Cool, but outside the scope of the TFA.

Try, https://news.ycombinator.com/item?id=46473348.

Re: There were BGP anomalies during the Venezuela blackout

#134

Earlier quoted context omitted.

Ukraine wouldn’t have been invaded if they hadn’t given up their nuclear weapons.

Russia promised not to invade if Ukraine gave up the nukes.

To be the devil's advocate, I don't think Russia foresaw a situation that had Ukraine looking to join NATO right after NATO had been used offensively for the first time ever to put its thumb on the scale of a civil war that didn't involve NATO countries.

Re: There were BGP anomalies during the Venezuela blackout

#135

I guess one of the interesting things I learnt off this article(1) was that 7% of DNS query types served by 1.1.1.1 are HTTPS and started wondering what HTTPS query type was as I had only heard of A, MX, AAAA, SPF etc... Apparently that is part of implementing ECH (Encrypted Client Hello) in TLS 1.3 where the DNS hosts the public key of the server to fully encrypt the server name in a HTTPS request. Since Nginx and o…

Wait, so you do not leak the host through DNS with this? I have not checked it out yet.

Re: There were BGP anomalies during the Venezuela blackout

#136
post #107
post #41

Earlier quoted context omitted.

Indeed. The DPRK was right from the start. They always were. For the longest time I thought they'd gone too far, but now we're the clowns putting on a show.

Sure, but there must always be a fear that the military and public would not want to die in a nuclear inferno to defend national sovereignty. And may tolerate a coupe instead. Which then reduces the madness and the deterrent effect. The extra step the Dprk have taken is to try and build bunkers so that the regime could survive the destruction of the country. A step further into madness that goes beyond what western c…

“And may tolerate a coupe instead.”

I could tolerate a coupe but I’d prefer a sports car :-/

Re: There were BGP anomalies during the Venezuela blackout

#137

Earlier quoted context omitted.

Ukraine wouldn’t have been invaded if they hadn’t given up their nuclear weapons.

Even setting aside that Ukraine never had the technical means or infrastructure to operate/maintain those weapons, I don't think they would have dissuaded Russia or actually been used. Russia could turn them into a wasteland in response and 6 million people (including hundreds of thousands of men of military age) weren't even willing to stay in Ukraine, much less fight for the country. If Zelensky were to give an ord…

You don't think that Ukraine, the country that designed and built those ICBMs, and had one of the highest per capita counts of nuclear physicists could handle at least a few decades of upkeep on those nukes?

And the point of nukes isn't to launch them. By then you've already lost, you're just making good on your offer to make the other shmuck lose too.

Re: There were BGP anomalies during the Venezuela blackout

#139
post #41

I assume that nuclear capability would rule out a target from this kind of snatch operation, and that this event will add pressure to proliferate.

Indeed. The DPRK was right from the start. They always were. For the longest time I thought they'd gone too far, but now we're the clowns putting on a show.

They're safe, but at what cost?

They drive old cars, have slow internet and can't visit the coliseum. They're not invited to the cool parties.

Re: There were BGP anomalies during the Venezuela blackout

#140

Earlier quoted context omitted.

Ukraine wouldn’t have been invaded if they hadn’t given up their nuclear weapons.

Why not? Russia invades. Ukraine launches nukes. Every major city in Ukraine is ash. Several major cities in Russia are ash. Millions die plausibly. That scenario is not what would happen from an invasion. Zelensky would not have used nukes to prompt the death of millions instantly. He would have proceeded with the same defensive war. The false premise rests on: it's better for everyone to die than live under Russian…

Or, MAD means that neither a nuke launch or an invasion happen in the first place.
Post reply on HN