News for hackers. Stuff that matters.

A comment on The NSA’s Hidden Spy Hubs in Eight U.S. Cities. Parent comment

Re:The NSA’s Hidden Spy Hubs in Eight U.S. Cities by subway on Monday June 25, 2018 @10:43AM (#17392767)
Trouble is, internet exchanges are often flat insecure layer 2 networks that operate on trust. Anyone on that network can suddenly decide to advertise anyone else's address space, and start receiving traffic.
[ Parent | on HN ]
Re:The NSA’s Hidden Spy Hubs in Eight U.S. Cities by walrus01 on Monday June 25, 2018 @12:18PM (#17393583)
Shitty IXes, maybe.

At a proper one a single IP address belonging to the exchange, which will be assigned to the router port of one member, is only allowed to appear from a specific single MAC address, and specific port on the ix switch, which corresponds with a physical fiber cross connect that matches a specific patch panel port.

[ Parent | on HN ]