Hacker News new | past | comments | ask | show | jobs | submit login

"propeller-head nerd who operates the 'technical' Internet" here...

I don't think it's too harsh, but it would never happen, of course. It would all go out the window the first time some large corporation was affected.

There are already solutions for this (filtering inbound announcements, RPKI, etc.), but people (ISPs) don't use them. BCP38 solved the "IP spoofing" issue years ago but AS's don't even implement that.

(Side note: IANA doesn't directly issue ASNs to entities. Here in the U.S., for example, you get them from ARIN. And they'll gladly give 'em out ($500 each).)




RPKI (http://en.wikipedia.org/wiki/Resource_Public_Key_Infrastruct...) is getting increasing use and looks to be the consensus solution among RIRs, ISPs, etc. Events like this, and there have been quite a few recently, will drive faster adoption.

HTTPS wasn't rolled out with 100% in a year or two either.

Disclaimer: I am an RPKI researcher.


In the history of the Internet (or at least the WorldWideWeb), how many times has a big corporation pulled this stunt, even accidentally? If the answer is 0 or even a number I can count on 1 hand, I say go for it. Even if it was an accident, this is the type of fuck up that deserves Internet death. Think of it like the digital equivalent of walking out onto a highway with a semi barreling down the center lane.




Consider applying for YC's first-ever Fall batch! Applications are open till Aug 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: