Swiss ISP hijacks IP prefixes of high profile networks
bgpmon.net
bgpmon.net
If you have a /20, and some jackass starts announcing it, you announce 2 /21s instead.
You're screwed if you only have a /24, though, since everyone will filter /25s.
> Yes, as part of our investigation we did reach out and it sounds like it was related to a route optimizer.
[1]: http://www.bgpmon.net/large-hijack-affects-reachability-of-h...
Next, hire more security people who just want to take things apart. There's this weird culture around "oh no, he's a hacker" that prevents legitimately curious people from getting into security. It stinks.
After that, realize that your federally mandated audits are bullshit. They don't catch anything.
Then, hire a pentester to try his damnedest to break in. Forbid them from using paid-for tools and give them a chance to learn, but hire someone else afterwards if they're not able to do the job. Yeah.
Once you're done there, realize that your security is probably going to fail eventually, and just do the best you can with a good team of security experts and actually listen to them. Emphasis on the fucking listen to them.
It is an interesting thought - opening yourself to charges of criminal negligence for misconfiguring devices/software would be a big change for our industry.
All they did was announcing a better route for those prefixes and other routers obliged. I'm sure swamping their own network with unwanted traffic was punishment enough.