The 0011 Blog

I’m working on a web 2.0 application for HP univsersal CMDB for my employer.  I’ve just included some interactive maps using Adobe Flex.  This proof of concept demonstrates the power of Javascript and Flex. 

http://tdg-i.com/img/screencasts/2008-02-28_1650.swf

Article #1 here

Article #2 here

Late in the (UTC) day on 24 February 2008, Pakistan Telecom (AS 17557) began advertising a small part of YouTube’s (AS 36561) assigned network. This story is almost as old as BGP. Old hands will recognize this as, fundamentally, the same problem as the infamous AS 7007 from 1997, a more recent ConEd mistake of early 2006 and even TTNet’s Christmas Eve gift 2004.

Just before 18:48 UTC, Pakistan Telecom, in response to government order to block access to YouTube (see news item) started advertising a route for 208.65.153.0/24 to its provider, PCCW (AS 3491). For those unfamiliar with BGP, this is a more specific route than the ones used by YouTube (208.65.152.0/22), and therefore most routers would choose to send traffic to Pakistan Telecom for this slice of YouTube’s network.

Since BGP relies on a transitive trust model, validation between customer and provider is important. In this case, PCCW (3491) did not validate Pakistan Telecom’s (17557) advertisement for 208.65.153.0/24. By accepting this advertisement and readvertising to its peers and providers PCCW was propagating the wrong route. Those who saw this route from PCCW selected it since it was a more specific route. YouTube was advertising 208.65.152.0/22 before the event started and the /24 was a smaller (and more specific) advertisement. According to usual BGP route selection process, the /24 was then chosen, effectively completing the hijack.

Because of the fast detection and reaction of the YouTube staff and cooperation with other providers, service for their (sub-) prefix was interrupted for about an hour and forty minutes for some lucky customers and, at most, a bit more than two hours. The exact duration of the outage depends on your vantage point on the Internet.

So, it’s heartwarming to know that two things are still true. It is still trivially possible to hijack prefixes (whether maliciously or inadvertently). I can go to sleep knowing that my neighbors are happily watching their LOLCATS.

Get the Flash Player to see this player.

This is an edit, and Eminem had nothing to do w/ this Revolution. cute video though.

This man is smart!

WELCOME TO THE POLICE STATE! This was featured today on the CBS Morning Show. The former NYPD officer who is a police consultant on that show said that this was a GANG RAPE and should be prosecuted as such. He said it was obvious that this was regular procedure in this department since they were so cold and calculating about it. He also said that these police should be looking at facing MAJOR FELONIES for violating bodily rights over these acts. He said that resisting arrest would be no escuse for the police doing this.

amazing!

Laura Ingraham just got Paul’d and B*TCH slapped! Ron Paul shows her what is up with U.S. foreign policy. He also explains that there is a document called the constitution and that we are meant to follow it.

read more | digg story