News for hackers. Stuff that matters.

A comment on The Pirate Bay – North Korean hosting? No, it’s fake. Parent comment

Re:The Pirate Bay – North Korean hosting? No, it’s fake by wmf on Monday March 04, 2013 @05:22PM (#5321424)
BGP has almost no security. Anyone can hijack any IP address, especially if you can find an unused /24 so that the owner isn't inconvenienced.
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by jfim on Monday March 04, 2013 @11:16PM (#5322873)
Considering the ever impending IPv4 exhaustion, couldn't we just "re-use" NK's IP range, since they're unlikely to need them soon?
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by djcapelis on Monday March 04, 2013 @11:54PM (#5323006)
They actually do run services on those ranges and make use of at least a portion of their IP space.
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by antihero on Monday March 04, 2013 @06:39PM (#5321807)
So you can basically start telling the internet "I AM THIS IP" and eventually the internet will go "YOU ARE THIS IP" ?
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by jlgaddis on Monday March 04, 2013 @08:19PM (#5322260)
In theory, yes.

In reality, most ISPs (that I've dealt with, anyway) do prefix filtering to prevent just this sort of thing.

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by antihero on Tuesday March 05, 2013 @12:28PM (#5325857)
What is prefix filtering?
[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by claudius on Tuesday March 05, 2013 @02:16PM (#5326648)
To tell anybody ‘I AM ISP A’ you will have to connect physically to some ISP C. C will then (hopefully) check you and if you go ‘I AM ISP A’ he’ll ignore you and don’t tell anyone unless you’re really ISP A and he determined you to be this guy.

There are rather obvious limits, however, for example you will likely have to believe your ISP C if he says ‘I AM ISP B NOW, TOO’. If you then connect to another ISP D, and tell him ‘I KNOW ISP B’, D will have to decide whether to trust you (likely if you are a large telecom company) or not (if you just happen to have two 10 MBit/s lines to C and D each).

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by runn1ng on Monday March 04, 2013 @07:35PM (#5322055)
Yes. As far as I know, that's what happened when Iran started blocking YouTube in Iran and mistakenly blocked it in entire world.

Luckily, AFAIK, BGP is trust-based, so things go to normal pretty quickly.

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by rakslice on Tuesday March 05, 2013 @12:09AM (#5323051)
Did you mean Pakistan?

http://www.ripe.net/internet-coordination/news/industry-deve...

[ Parent | on HN ]
Re:The Pirate Bay – North Korean hosting? No, it’s fake by jlgaddis on Monday March 04, 2013 @08:24PM (#5322291)
> Anyone can hijack any IP address

Not quite.

[ Parent | on HN ]