BGP-based blackholing/hijacking patented in Australia?

Thu Aug 12 14:12:35 UTC 2004

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Just to set the history straight - so it is on the record. RTBH -
Remote Triggered Black Hole filtering reemerged as a key security
reaction tool when two things happened:

1. When Chris Morrow and Brian Gemberling shared their Backscatter
Traceback technique with the world.
http://www.secsup.org/Tracking/

2. When we - Cisco - created uRPF Loose Check to allow for source
based RTBH
(see attached for lots of my links)

My first use of RTBH - what Pipe is saying they invented - was back
in 1991 to stop an attack on a network I was operating. It was a
technique taught to me from someone at JVNCnet. I'm not sure who that
person was - but Steve Johnson - who worked at JVNCnet at that time
and was later my boss confirmed that they were using RTBH every now
and then.

Also note that at least one of the anti-SPAM solutions have used RTBH
for years. MAPS (http://www.mail-abuse.com/) started in 1996.

So it really surprises me that "Pipe has applied for a patent." 

> -----Original Message-----
> From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On 
> Behalf Of Niels Bakker
> Sent: Thursday, August 12, 2004 3:11 AM
> To: nanog at merit.edu
> Subject: BGP-based blackholing/hijacking patented in Australia?
> 
> 
> 
> http://australianit.news.com.au/articles/0,7204,10394549%5E153
> 06%5E%5Enbv%5E,00.html
> 2004-08-10 (via InfoAnarchy)
> 
> "Pipe has applied for a patent for its method of blocking 
> access to  deceptive websites linked to fraudulent emails 
> that direct users to  fake bank websites to capture bank 
> account and password details. [..] "Pipe Networks managing 
> director Bevan Slattery said Pipe had been  testing a method 
> of enabling banks, ISPs and law enforcement agencies  to 
> notify Pipe of new phishing emails. "Pipe could then 
> distribute updated internet routing information to ISPs  via 
> the border gateway protocol, so internet users could not 
> reach the  fraudulent website."
> 
> The implications of this are scary.  Hijacking of IP space by 
> a private company, supported by the government?
> 
> 
> 	-- Niels.
> 
> -- 
> Today's subliminal thought is: 
> 

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQRt6x7/UEA/xivvmEQIMDwCgu728Asqpb5hJAC/PwJVzMJfPsW4AoNtu
y9Bg5VAUS8f3lqheCknRCrRx
=gB4B
-----END PGP SIGNATURE-----

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: SP Security Links.txt
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20040812/0def6c4e/attachment.txt>