[#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)

Thu Feb 2 03:25:01 UTC 2012

On Wed, 1 Feb 2012, Jimmy Hess wrote:

> What the internet really needs is  Tier1 and Tier2 providers participating
> in the internet who  "care", regardless of the popularity or size of
> netblocks or issues involved.   And by "care", I mean,  providers
> efficiently investigating reports of hijacking or rogue announcement,  and
> taking switft responsible actions, without  bureaucratic processes
> requiring   years   and reams of paperwork, or any attempt to shrug off
> responsibility they have as intermediary.

I agree completely, however the boondoggle in large networks often isn't 
the people in the trenches, it's the management buy-in that's often needed 
to take what could be perceived by non-technical types as as a risky 
(exposure to litigation or other legal/contractual entanglements) 
and unusual action of filtering out bad advertisement XYZ.  I've been 
through similar actions that ended up resulting in litigation. 
Depositions aren't fun.

In many big outfits like that, getting management to wrap their heads 
around something like this requires a cultural shift from the mindset 
where actions like this are usually initiated by legal/LEO action.

jms