HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

Ross Harvey ross.harvey at appfolio.com
Wed Mar 30 23:49:52 CDT 2011


Wait a second, I'm pretty sure that in most contexts, a signature or
letterhead means not so much "this is real because it's so obviously
genuine", but rather:

"This is real or I am willing to take a forgery rap".

As it happens, that's good enough for many if not most non-cash
transactions. Now, there are societies where that doesn't work, but
they don't usually have a lot of networks.

On Wed, Mar 30, 2011 at 9:00 PM, Brandon Ross <bross at pobox.com> wrote:
>
> On Wed, 30 Mar 2011, Ronald F. Guilmette wrote:
>
>> So that _really_ begs the question... Why did Circle Internet and (apparently)
>> Level3's customer, BANDCON, blindly accept _any_ sort of assertion that the
>> crook who hijacked these two /16s had the right to use them?
>
> What makes you think it was blind?  The standard industry practice is to ask someone requesting to announce a route for a letter on the owner's letter head authorizing the announcement.  Is it really that hard to invent some letterhead and sign a letter?
>
> It's probably one of the easiest to circumvent "security" procedures ever.
>
> Frankly it's a giant waste of time and does nothing other than frustrate legitimate work.
>
> --
> Brandon Ross                                              AIM:  BrandonNRoss
>                                                               ICQ:  2269442
>                                   Skype:  brandonross  Yahoo:  BrandonNRoss
>




More information about the NANOG mailing list