nanog mailing list archives
Re: BGP Experiment
From: niels=nanog () bakker net
Date: Tue, 8 Jan 2019 18:17:21 +0100
Hi Saku,
After seeing this initial result I'm wondering why the researchers couldn't set up their own sandbox first before breaking code on the internet. I believe FRR is a free download and comes with GNU autoconf.We probably should avoid anything which might demotivate future good guys from finding breaking bugs and reporting them, while sending perfectly standard-compliant messages. Only ones who will win are bad guys who collect libraries of how-to-break-internet. There are certainly several transit packet of deaths and BGP parser bugs in each implementation, I'd rather have good guy trigger them and give me details why my network broke, than have bad guy store them for future use.
I fully agree with you. However, this doesn't give 'good guys' carte blanche to break stuff. I'm glad they've already taken action to improve their practices as confirmed by Italo Cunha in his earlier mail.
-- Niels.
Current thread:
- Re: BGP Experiment, (continued)
- Re: BGP Experiment Tom Ammon (Jan 08)
- Re: BGP Experiment niels=nanog (Jan 08)
- Re: BGP Experiment Jared Mauch (Jan 08)
- Re: BGP Experiment Töma Gavrichenkov (Jan 08)
- Re: BGP Experiment Steve Noble (Jan 08)
- Message not available
- RE: BGP Experiment adamv0025 (Jan 08)
- Re: BGP Experiment Tom Ammon (Jan 08)
- Re: BGP Experiment Stephen Satchell (Jan 08)
- Re: BGP Experiment Job Snijders (Jan 08)
- Re: BGP Experiment niels=nanog (Jan 08)
- Re: BGP Experiment niels=nanog (Jan 08)
- Re: BGP Experiment Jared Mauch (Jan 08)
- Re: BGP Experiment Owen DeLong (Jan 09)
- Re: BGP Experiment Eric Kuhnke (Jan 08)
- Re: BGP Experiment Randy Bush (Jan 08)
- Re: BGP Experiment Job Snijders (Jan 08)
- Re: BGP Experiment Tore Anderson (Jan 08)