News for hackers. Stuff that matters.

A comment on The Pirate Bay – North Korean hosting? No, it’s fake. Parent comment

Re:The Pirate Bay – North Korean hosting? No, it’s fake by StavrosK on Monday March 04, 2013 @04:54PM (#5321255)
Hmm, isn't the Korean subnet allocation fixed? If an IP falls in that range, doesn't it belong to the Korean ISP? How can someone be assigned that IP by someone other than the ISP who owns it?
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by wmf on Monday March 04, 2013 @05:22PM (#5321424)
BGP has almost no security. Anyone can hijack any IP address, especially if you can find an unused /24 so that the owner isn't inconvenienced.
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by jfim on Monday March 04, 2013 @11:16PM (#5322873)
Considering the ever impending IPv4 exhaustion, couldn't we just "re-use" NK's IP range, since they're unlikely to need them soon?
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by djcapelis on Monday March 04, 2013 @11:54PM (#5323006)
They actually do run services on those ranges and make use of at least a portion of their IP space.
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by antihero on Monday March 04, 2013 @06:39PM (#5321807)
So you can basically start telling the internet "I AM THIS IP" and eventually the internet will go "YOU ARE THIS IP" ?
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by jlgaddis on Monday March 04, 2013 @08:19PM (#5322260)
In theory, yes.

In reality, most ISPs (that I've dealt with, anyway) do prefix filtering to prevent just this sort of thing.

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by antihero on Tuesday March 05, 2013 @12:28PM (#5325857)
What is prefix filtering?
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by claudius on Tuesday March 05, 2013 @02:16PM (#5326648)
To tell anybody ‘I AM ISP A’ you will have to connect physically to some ISP C. C will then (hopefully) check you and if you go ‘I AM ISP A’ he’ll ignore you and don’t tell anyone unless you’re really ISP A and he determined you to be this guy.

There are rather obvious limits, however, for example you will likely have to believe your ISP C if he says ‘I AM ISP B NOW, TOO’. If you then connect to another ISP D, and tell him ‘I KNOW ISP B’, D will have to decide whether to trust you (likely if you are a large telecom company) or not (if you just happen to have two 10 MBit/s lines to C and D each).

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by runn1ng on Monday March 04, 2013 @07:35PM (#5322055)
Yes. As far as I know, that's what happened when Iran started blocking YouTube in Iran and mistakenly blocked it in entire world.

Luckily, AFAIK, BGP is trust-based, so things go to normal pretty quickly.

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by rakslice on Tuesday March 05, 2013 @12:09AM (#5323051)
Did you mean Pakistan?

http://www.ripe.net/internet-coordination/news/industry-deve...

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by jlgaddis on Monday March 04, 2013 @08:24PM (#5322291)
> Anyone can hijack any IP address

Not quite.

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by zorlem on Monday March 04, 2013 @05:13PM (#5321377)
It is, but apparently the upstream provider doesn't filter the ICMP reply packets (with SRC IP of the Korean ISP), which are sent by thepiratebay servers.
[ Parent | on HN ]