Re: China would *never* do that ...

[Larry Seltzer <larry () larryseltzer com>]

Imagine you're the Chinese. "They think we can pull that off? This could
be useful..."

Of course misconfiguring your router is not hard to do. About 6 years ago
a Turkish ISP tried (accidentally I'm sure) to jack the entire Internet
this way.
(http://www.renesys.com/blog/2005/12/internetwide-nearcatastrophela.shtml)

But if you're expecting to take advantage of the rerouting in order to
co-opt a network it's a lot harder, and I can't imagine you could pull it
off in 18 minutes. Assuming the traffic wasn't encrypted, in which case
you're probably screwed, you'd need substantial information on the
workings of the network and it would all have to be set up correctly from
the get-go or it would be obvious that something was wrong.

(me on all this:
http://blogs.pcmag.com/securitywatch/2010/11/did_china_hijack_the_internet
.php)

LJS

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On
Behalf Of Rob, grandpa of Ryan, Trevor, Devon & Hannah
Sent: Friday, November 19, 2010 1:25 PM
To: funsec () linuxbox org
Subject: [funsec] China would *never* do that ...

"A U.S. report to Congress that suggests there is Chinese state support
for internet
network hacking activities is "full of Cold War thinking and political
bias," China's
Foreign Ministry said Friday."

http://www.cbc.ca/technology/story/2010/11/19/china-hacking-.html

(You will notice they never said it wasn't true ...)

======================  (quote inserted randomly by Pegasus Mailer)
rslade () vcn bc ca     slade () victoria tc ca     rslade () computercrime org
*Microsoft* is going to write the software that spies on me? I
feel better already.                               - John D. Goulden
victoria.tc.ca/techrev/rms.htm blog.isc2.org/isc2_blog/slade/index.html
http://blogs.securiteam.com/index.php/archives/author/p1/
http://www.infosecbc.org/links http://twitter.com/rslade
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.