News for hackers. Stuff that matters.

A comment on Taking control of all .io domains with a targeted registration. Parent comment

Re:Taking control of all .io domains with a targeted registr... by musicnarcoman on Tuesday July 11, 2017 @04:13AM (#14742403)
> This makes no sense - how did the attacker get between gandi.net and their technical partner in order to MITM them?

On the top of my head, bgp hijacking perhaps?

> MITMs aren't magic

No. But do not trust the network. Ever.

[ Parent | on HN ]
Re:Taking control of all .io domains with a targeted registr... by vertex-four on Tuesday July 11, 2017 @07:54AM (#14743360)
If it's BGP hijacking, there'll be evidence somewhere.

And no, don't trust the network, but "the network isn't trustworthy" is not a diagnosis, only a potential risk factor. "X entity used BGP hijacking to situate their router between me and Y" is a diagnosis.

[ Parent | on HN ]