News for hackers. Stuff that matters.
Re:AWS IPv4 Estate Now Worth $4.5B by j16sdiz on Monday September 18, 2023 @02:39AM (#37552989)
Before you can "announce" a prefix, you need an ISP willing to peer with you.

BGP is a very insecure protocol. Most of its "security" are enforced by money and contract.

Re:AWS IPv4 Estate Now Worth $4.5B by greyface- on Monday September 18, 2023 @09:28AM (#37555799)
> BGP is a very insecure protocol.

Take a look at the state of RPKI. ROA validation is common these days, and ASPA validation will be common soon. You still need to manually validate that your peer truly represents the AS that they claim to, but if that's been done, ROA+ASPA validation prevents unauthorized announcements.

Absent RPKI, people have been filtering based on IRR for ages, which will not necessarily prevent unauthorized announcements, but will require an attacker to leave a paper trail when making one.