Schneier on Security

Clive Robinson • November 21, 2010 2:04 AM

OFF Topic:

@ Bruce,

I don't know if you have heard about the incident back in April where on the 8th around 0400 UTC China Telecom pushed out 40,000 or so incorrect route adverts and swallowd up around 15% of the internet traffic (BGP) routes into their network for 18mins or so.

This from ZDNet is boardering on OMG,

http://m.zdnet.co.uk/news/security/2010/11/18/...

But does make the valid point about the PK CA Cert hole.

Obviously no surprise that re-routing the traffic this way was possible, but a big surprise that China Telco could handle all the traffic with only a few milliseconds aditional trip time...

This suggest a way bigger capacity in their pipes than was originaly thought.

Oh then of course is the fact that some of the routes re-advertised successfully where US MIL etc routes so some possibly confidential information has gone China Telco's way.

A more restrained "butter fingers" analysis,

http://www.networkworld.com/news/2010/...

Oh and of course the Political Breakfast comment from the WP, and CNN (OhMyG think of the APT tack from war hawk types)

http://voices.washingtonpost.com/...

http://edition.cnn.com/2010/US/11/17/...

Clive Robinson • November 22, 2010 4:00 AM

Off Topic,

@ Bruce,

This made me smile this morning,

http://m.zdnet.co.uk/blogs/...

Basicaly it's a not well written piece about a German hacker (Tohmas Roth) who has used a Cloud based GPU array to crack a file containing SHA1 password hashs by brut force in under an hour for less than a couple of USD (average of about 3.5mins per hash).

Nothing technicaly new but oh boy the cost is dropping, but that is not what made me smile compare the ZDNet page with the much better written original,

http://stacksmashing.net/2010/11/15/...

Talk about cranking the handle on the sausage machine...