Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Cracking Down on Cyberspace Land Grabs
Kevin Poulsen, SecurityFocus 2003-06-11

The people who keep the Internet running are coming to terms with address space hijacking, an old scam that's turned suddenly nasty.

Comments Mode:
Cracking Down on Cyberspace Land Grabs 2003-06-11
Node Runner (1 replies)
This kind of scam goes way back to the early phreaking days in the 80's, and probably longer. Just read old issues of Phrack to see what I mean. I think social engineering attacks like this can be greatly reduced, because they all rely on poor authentication systems to be successful. Public-key cryp...

[ more ]  [ reply ]
Cracking Down on Cyberspace Land Grabs 2003-06-12
Randy
I agree and think ARIN should make it manditory for Net Block owners to utilize two factor authentication or at the least some form of digital signiture. I'm going to check with Qwest today to see about limiting changes to a PGP signiture....

[ more ]  [ reply ]
It does make you wonder... 2003-06-12
Anonymous
In these days of NAT and name-based virtual hosting, are there any companies that *really* legitimately need a /16? Or worse, a /8? Sometimes I think that if we just went through and reassigned large blocks that are mostly going to waste, we'd have plenty of address space and wouldn't have to mess...

[ more ]  [ reply ]
Cracking Down on Cyberspace Land Grabs 2003-06-12
blacklight
I didn't know that there are /16s still available, given how fast the Internet has spread (or exploded). I do agree that the very least ARIN and Internic owe their customers, who are presumably large orgs and ISPs, is issuing them a certificate that they can use to sign their e-mail communication. ...

[ more ]  [ reply ]
Take the blocks back... 2003-06-13
Anonymous
They shouldn't give back the blocks to the 'owners'!

1) These people aren't using the blocks

and addresses are getting hard to find

2) These people share part of the blame

by not "watching their back yard"

I mean - just to hand a class B back to

these corp's that are all firewalled??

...

[ more ]  [ reply ]
Cracking Down on Cyberspace Land Grabs 2003-06-14
Anonymous (1 replies)
The amount of companies that have *LOADS* of address space and never use it is rediculous -- take Ford's unannounced 19.0.0.0/8 for example.

I give props to the hijackers; at least they're putting the address space to good [maybe not] use.

...

[ more ]  [ reply ]
Cracking Down on Cyberspace Land Grabs 2003-06-16
Anonymous
Don't forget Halliburton.

CIDR: 34.0.0.0/8

NetName: HALLIBURTON

route-views2.oregon-ix.net> sh ip b 34.0.0.0/8

% Network not in table

route-views2.oregon-ix.net>

Personally I'd like to see IPv6. I could use my own /64 on occasion! :-)...

[ more ]  [ reply ]
Cracking Down on Cyberspace Land Grabs 2003-06-17
Anonymous (1 replies)
I agree that the large blocks should be reassigned.

As a project, I have been building a spreadsheet, through tracking spam, on the blocks owned by various enities, and I have found a number of large blocks that are mostly going to waste. Many of the blocks are in the hands of large corporations...

[ more ]  [ reply ]
Cracking Down on Cyberspace Land Grabs 2003-06-17
Anonymous (1 replies)
Encryption, authentication, and digital certificates are nice and all, but these are not pratical for businesses. What happens if the person responsible for this info loses it, leaves the company or is fired? What happens if a disaster takes out the whole building where this info is kept? Can an ...

[ more ]  [ reply ]
Cracking Down on Cyberspace Land Grabs 2003-06-24
Flagan
This is where good practices come into play - why can't the authentication include a list of company officers with contact information?

What about documenting, and then backing up the documentation? Offsite storage?

Taking these steps should already be happening.

They should also be part o...

[ more ]  [ reply ]
Cracking Down on Cyberspace Land Grabs 2008-02-11
Anonymous
someone needs to check up on jason smathers,do you remember from aol that stole and sold all the e-mail addresses for money,he may be at it again in avon,indiana...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus