News for hackers. Stuff that matters.
Re:Facebook Messenger, Instagram and WhatsApp Outage by oblio on Thursday December 10, 2020 @08:49AM (#25373642)
It's been a while since I studied routing, but have they fixed BGP security?

I remember reading about the protocol and thinking something like: this seems awfully "hippie-trust" levels of security.

Granted, this was 10 years ago so my recollection of BGP is super fuzzy :-D

Re:Facebook Messenger, Instagram and WhatsApp Outage by walrus01 on Thursday December 10, 2020 @08:50AM (#25373647)
nope. proper and full implementation of BCP38, MANRS, full RPKI validation of all IP ranges and such is a long distance away.

within trusted groups of ISPs where the admins all know each other, in certain specific geographic regions, it's better than others.. I would say that the number of ISPs I could call "fully compliant" with current best practices, in the Portland-Seattle-Vancouver area, is higher than in many other parts of the world.

Re:Facebook Messenger, Instagram and WhatsApp Outage by ficklepickle on Friday December 11, 2020 @08:00AM (#25385222)
How is shaw?

Anecdote: I was surprised to find they honour TTLs on their DNS service. Everyone else I have access to seems to return the new IP almost immediately, but shaw waits it out.

Re:Facebook Messenger, Instagram and WhatsApp Outage by curi0sity on Thursday December 10, 2020 @10:24AM (#25374634)
As someone interested in the internal workings of the internet, do you have any further reading on current best practices?
Re:Facebook Messenger, Instagram and WhatsApp Outage by walrus01 on Thursday December 10, 2020 @11:14AM (#25375229)
ARIN, RIPE and APNIC publish a great deal of useful documentation on how to set up BGP stuff properly in the modern era. And information for how to fully implement dual stack with ipv6.

As for other current best practices there's really a very great variety of disciplines involved in ISP operations, depending on what type of ISP it is. What's relevant for a GPON FTTH last mile provider might not be as relevant for a colocation/dedicated server ISP. Or for a WISP. My recommendation on that would be to pick the subject to research and make inquiries in the special interest groups dedicated to that (for instance, two way satellite, or automated billing/provisioning systems for hosting companies, or CRM systems, or whatever).

Re:Facebook Messenger, Instagram and WhatsApp Outage by dahfizz on Thursday December 10, 2020 @11:00AM (#25375091)
To be fair, BGP only runs between large network operators. The security / trust of routing agreements is mostly solved through business deals and contracts.