Slashdot Mirror
The Internet's Biggest Security Hole Revealed
At DEFCON, Tony Kapela and Alex Pilosov demonstrated a drastic weakness in the Internet's infrastructure that had long been rumored, but wasn't believed practical. They showed how to hijack BGP (the border gateway protocol) in order to eavesdrop on Net traffic in a way that wouldn't be simple to detect. Quoting: "'It's at least as big an issue as the DNS issue, if not bigger,' said Peiter 'Mudge' Zatko, noted computer security expert and former member of the L0pht hacking group, who testified to Congress in 1998 that he could bring down the internet in 30 minutes using a similar BGP attack, and disclosed privately to government agents how BGP could also be exploited to eavesdrop. 'I went around screaming my head about this about ten or twelve years ago... We described this to intelligence agencies and to the National Security Council, in detail.' The man-in-the-middle attack exploits BGP to fool routers into re-directing data to an eavesdropper's network." Here's the PDF of Kapela and Pilosov's presentation.
Must have the world's largest collection of online porn.
Which would figure, actually.
Help stamp out iliturcy.
I find the thought of this genuinley scary. Correct me if I am wrong, but we would have to change the BGP protocol itself to fix this issue. That isn't going to happen anytime soon I reckon, so I guess there is nothing we can do but encrypt senstive transmissions and hope for the best.
Hell, lets 'fix' SMTP while we're at it... ;)
Depends on how much you value your privacy, Mr. Stephen P Wallagher of 4242 Green Leafy Forest Terrace, Springfield, Ohio 55538, Phone number 1-900-Hot Dude, alias "Lovestospooge."
fixed.
If you can read this, I forgot to post anonymously.
Let's put it this way. Email right? It's delivered between hosts completely unencrypted. Imagine you could sniff all the email passing into, say, the white house.. would that be worth something?
Note, I've also given you the hint to prevent this bullshit from being a problem.
So we need to destroy the White House?
Yes. Someone had managed to re-open the goatse.cx site again.
if you don't believe me, you know there is only one way to find out
A hacker marauding by the name "Goatse" exposed it quite effectively some years back.
I record my sleeptalking
... testified to Congress... disclosed privately to government agents... described this to intelligence agencies and to the National Security Council
So in other words, the US government knows about the issue. This is the United States government, people! Obviously there is nothing to worry about. Like, come on, as if the US government would allow eavesdropping on the information highways to even be possible. Like come on, srsly.
Fixed SMTP is called X.400.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
Monoculture is bad? Good thing Internet Explorer offers a different take on W3C standards...
I kid, I kid.
DATABASE WOW WOW
Heh. Standards should be the starting point, not the end goal (or, in IE's case, the work of fiction based on the screenplay based on a True Story of one man and his chair).
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
No, it gets sent through Dick Cheney's hotmail account.
Home Depot? The store that sells wood is spying on my Internet access?
Enterprising hacker hijacks BGP and Rickrolls the whole world in 3... 2... 1...
What, you didn't get your secret decoder server?
XMPP
Climate Progress - Hell and High Water
If that's the British DHS, the American counterpart is Home Depot, and it should be obvious why they'd want to spy on people.
So they can tell if you have been going to Lowe's?
Climate Progress - Hell and High Water
if you don't believe me, you know there is only one way to find out
I believe you! I BELIEVE YOU!!
"Three eyes are better than one" -- Lieutenant Columbo
He meant the Department of Homeland Depot. It's the privatization of government, don't you know.
Equine Mammals Are Considerably Smaller
The one we all want to know more about is Victoria's Secret Service. I demand congressional hearings on, you know, that! Etcetera!
Equine Mammals Are Considerably Smaller
You called? Sorry I'm late
The Internet's Biggest Hole Revealed at http://goatse.cz/
Home Depot? The store that sells wood is spying on my Internet access?
Yeah, they really know how to put the thumbscrews on.
I'll be right on that dude. I've been looking for a way to escape NAT, moving to Japan is the perfect solution!
Win a signed Stephen Carpenter ESP Guitar from the Deftones: http://def-tag.com/?r=0008781
Heay! That's my private info!
I am now sending a federal law DMCA notice demanding you take my information down.
BTW, please don't run a Slashdot front page story on my DMCA takedown notice & info.
-
- - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
Whew! Good thing you clicked the "Anonymous Coward" box when you posted that!
-
- - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
Why can't I mod something "tragic"?
http://www.dieblinkenlights.com
"Be sure to drink your Ovaltine".
Or so you would think, but they probably monitoring traffic to /. as well, so now they have his IP. Probably he is now at work, but with his login, they will be able to link it to the times he logged in at home.
Then some more cross referencing and he is on his way to Gitmo.
Don't fight for your country, if your country does not fight for you.
Yes. Definitely a good idea on my part.
Shit.
Attention deficit disorder is a complicated issue, spanning several major... HEY LET'S GO RIDE BIKES!