BGP is unsafe on Virgin Media's network
19-04-2020, 20:24
|
#1
|
FORMER Virgin Media Staff
Join Date: Dec 2010
Location: Warrington
Posts: 4,737
|
BGP is unsafe on Virgin Media's network
BGP is the method in which various networks/ISPs exchange routing information with each other. Routing is how your ISP knows when you want to connect to an IP address, where that IP address exists on the internet. When you connect to 1.1.1.1, BGP is what lets the ISP know where to route that packet to in order to get to Cloudflare (who owns 1.1.1.1). The internet relies on BGP.
Unfortunately, it's susceptible to attacks. Numerous internet outages have been caused by BGP hijacking. You know those times every now and then when you lose access to large chunks of the internet, seemingly with no pattern to it? That's usually a BGP hijack. Often caused by a misconfiguration from some other ISP - but occasionally caused by a nation state, it can mean anything from blocking your internet access to having all of your data routed through China (Without you knowing).
Anyway, Cloudflare is trying to secure BGP and have set up this website to track its progress: https://isbgpsafeyet.com/
On that page there's a test you can do - and Virgin Media currently fails this test.
Now to be absolutely clear - most ISPs will fail this test today. But make no mistake, this is a serious issue and one that Virgin should work towards fixing - for your security and privacy.
(I've cross-posted this over onto the VM forums).
|
|
|
19-04-2020, 20:37
|
#2
|
laeva recumbens anguis
Cable Forum Team
Join Date: Jun 2006
Age: 68
Services: Premiere Collection
Posts: 43,468
|
Re: BGP is unsafe on Virgin Media's network
__________________
Thank you for calling the Abyss.
If you have called to scream, please press 1 to be transferred to the Void, or press 2 to begin your stare.
If my post is in bold and this colour, it's a Moderator Request.
|
|
|
19-04-2020, 20:45
|
#3
|
FORMER Virgin Media Staff
Join Date: Dec 2010
Location: Warrington
Posts: 4,737
|
Re: BGP is unsafe on Virgin Media's network
I feel AAISP are doing some unnecessary damage control there.
|
|
|
19-04-2020, 21:12
|
#4
|
laeva recumbens anguis
Cable Forum Team
Join Date: Jun 2006
Age: 68
Services: Premiere Collection
Posts: 43,468
|
Re: BGP is unsafe on Virgin Media's network
And they believe Cloudflare are over-egging the pudding.
__________________
Thank you for calling the Abyss.
If you have called to scream, please press 1 to be transferred to the Void, or press 2 to begin your stare.
If my post is in bold and this colour, it's a Moderator Request.
|
|
|
20-04-2020, 13:06
|
#6
|
Sad Doig Fan!
Join Date: Aug 2007
Location: Barry South Wales
Age: 69
Services: With VM for BB 250Mb service.(Deal)
Posts: 11,802
|
Re: BGP is unsafe on Virgin Media's network
|
|
|
21-04-2020, 20:19
|
#7
|
cf.member
Join Date: Feb 2018
Posts: 78
|
Re: BGP is unsafe on Virgin Media's network
|
|
|
23-04-2020, 11:12
|
#8
|
cf.member
Join Date: Oct 2007
Posts: 78
|
Re: BGP is unsafe on Virgin Media's network
It's really not an issue.
|
|
|
23-04-2020, 13:03
|
#9
|
FORMER Virgin Media Staff
Join Date: Dec 2010
Location: Warrington
Posts: 4,737
|
Re: BGP is unsafe on Virgin Media's network
It's not an issue that people need to be paranoid about (And I admit Cloudflare has caused a bit of panicking with their messaging on this one), but it is an issue all the same.
With the rise of SSL everywhere, it's perhaps less of an issue but it's still problematic when a nation state gets involved.
|
|
|
23-04-2020, 16:07
|
#10
|
Dr Pepper Addict
Cable Forum Team
Join Date: Oct 2003
Location: Nottingham
Age: 62
Services: Aquiss FTTP (900M), Sky Q TV, Sky Mobile, Flextel SIP
Posts: 29,577
|
Re: BGP is unsafe on Virgin Media's network
Its a load of fuss over very little.
Its like saying "walking to the shops" is unsafe.
Technically, yes it is, you may have an accident, or be mugged, but its highly unlikely.
__________________
Baby, I was born this way.
|
|
|
23-04-2020, 16:38
|
#11
|
FORMER Virgin Media Staff
Join Date: Dec 2010
Location: Warrington
Posts: 4,737
|
Re: BGP is unsafe on Virgin Media's network
I don't agree with that analogy. It's arguably less likely to happen than a road accident, but much more severe if it does happen.
Pretty much any country in the world could publish a BGP route that redirects traffic to themselves. That means everyone from China to Libya could disrupt major parts of the internet, accidentally or deliberately, on a whim and at any time.
Given how we're all working remotely at the moment, even a small blip could cost billions.
Yes, as I said it's unlikely to happen but it has happened several times. Remember, people dismissed preparing for a pandemic because it was so unlikely to happen.
|
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT +1. The time now is 14:28.
|