[nsp-sec] Why do a route hijack for 1 second?

[Smith, Donald]

Donald.Smith at qwest.com gcia

> -----Original Message-----
> From: Hank Nussbacher [mailto:hank at efes.iucc.ac.il] 
> Sent: Monday, July 20, 2009 11:13 AM
> To: Smith, Donald
> Cc: 'nsp-security at puck.nether.net'
> Subject: RE: [nsp-sec] Why do a route hijack for 1 second?
> 
> On Mon, 20 Jul 2009, Smith, Donald wrote:
> 
> > As Chris stated I believe this is accidental.
> > If you knew you could do a route hijacking you should also 
> be aware that EVERY time you did it would show up on some 
> bodies radar no matter how short of a time you did it. So 
> ever time you do it that is a good chance it gets noticed.
> > You wouldn't do it on a regular basis unless you were dumb:)
> 
> They may not be aware that someone is monitoring that 
> specific /24.  And 
> they might also figure who would see a 1 second next-hop change.
I will concede the possibility that this is the explanation but in that case 
the "bad guy" isn't too smart because there are a lot of people watching bgp changes:)


> 
> -Hank
>