Slashdot Mirror


The Internet's Biggest Security Hole Revealed

At DEFCON, Tony Kapela and Alex Pilosov demonstrated a drastic weakness in the Internet's infrastructure that had long been rumored, but wasn't believed practical. They showed how to hijack BGP (the border gateway protocol) in order to eavesdrop on Net traffic in a way that wouldn't be simple to detect. Quoting: "'It's at least as big an issue as the DNS issue, if not bigger,' said Peiter 'Mudge' Zatko, noted computer security expert and former member of the L0pht hacking group, who testified to Congress in 1998 that he could bring down the internet in 30 minutes using a similar BGP attack, and disclosed privately to government agents how BGP could also be exploited to eavesdrop. 'I went around screaming my head about this about ten or twelve years ago... We described this to intelligence agencies and to the National Security Council, in detail.' The man-in-the-middle attack exploits BGP to fool routers into re-directing data to an eavesdropper's network." Here's the PDF of Kapela and Pilosov's presentation.

2 of 330 comments (clear)

  1. obama! obama! obama! by Anonymous Coward · · Score: -1, Offtopic

    vote for him or serve four more years under bush!

  2. Re:The man in the middle by EdIII · · Score: -1, Offtopic

    You are way off. I don't know what mental ward let you on a computer, but I think they need to up the dosage.

    Your reference of female genitalia by the medical term leads me to believe you've never seen one.

    If you could read, you could see that I was trying to point out that a complete collection of all porn on the internet would most likely contain imagery you would not find appealing. I made a simple analogy about how a lot of guys, younger and older, like to make funny statements about how they would like to be a gynecologist as if every woman's vagina they were exposed to would be a good thing.

    And listen, kid. I've got zits older than you. Don't pretend to be the wise sage when you're not.

    Well old man, don't pretend like you are dispensing insightful observations when you really just an asshole who can't read and likes to insult people to make his statements sound better. I run into people like on you on the internet quite often. Attacking a person's character or traits NEVER supports any of your arguments, but tends to bring the overall discourse down to a level that belongs on preschool playgrounds. People such as yourself always remind me that age is never a reliable indicator of maturity and sophistication.

    Your vitriol laden attack does not contain anything relevant to my post at all.

    Oh, and sex is dirty. That's the coolest thing about it. Get over it. Or don't. Whatever suits you.

    What part of my post indicated I thought sex should be clean? Or that it was not dirty? I don't need to get over anything, as I am not the one that has the problem. You obviously can't read which is why you had some sort of psychotic emotional reaction to my post and lashed out in anger.