Re: [renesys] The New Threat: Targeted Internet Traffic Misdirection

2013-11-26 Thread Christopher Morrow
On Tue, Nov 26, 2013 at 4:31 PM, Christopher Morrow wrote: > first, awesome, thanks... > > On Tue, Nov 26, 2013 at 4:09 PM, Stephane Bortzmeyer > wrote: > >> 68.164.80.0/20 >> 68.164.96.0/21 >> 68.164.126.0/23 >> 68.164.160.0/21 >> 68.164.192.0/21 >> 68.164.208.0/23 >> >> These addr

Re: [renesys] The New Threat: Targeted Internet Traffic Misdirection

2013-11-26 Thread Christopher Morrow
first, awesome, thanks... On Tue, Nov 26, 2013 at 4:09 PM, Stephane Bortzmeyer wrote: > 68.164.80.0/20 > 68.164.96.0/21 > 68.164.126.0/23 > 68.164.160.0/21 > 68.164.192.0/21 > 68.164.208.0/23 > > These addresses have no relationship with Iceland so we can say it's a > hijacking. But

Re: [renesys] The New Threat: Targeted Internet Traffic Misdirection

2013-11-26 Thread Stephane Bortzmeyer
On Wed, Nov 20, 2013 at 01:54:00PM -0500, Christopher Morrow wrote a message of 11 lines which said: > someone has already parsed out all route announcements from > ris/routeviews for the 2 specific incidents in question in the > article? and posted the contents somewhere for review? I didn't

Re: [renesys] The New Threat: Targeted Internet Traffic Misdirection

2013-11-20 Thread Christopher Morrow
someone has already parsed out all route announcements from ris/routeviews for the 2 specific incidents in question in the article? and posted the contents somewhere for review? I didn't see Renesys do that :( So, they've got some unsupported conclusions that are tough to get behind absent that dat

[renesys] The New Threat: Targeted Internet Traffic Misdirection

2013-11-19 Thread Stephane Bortzmeyer
Interesting study of what seems to be real BGP shunts: http://www.renesys.com/2013/11/mitm-internet-hijacking/