[102657] in North American Network Operators' Group
Re: YouTube IP Hijacking
daemon@ATHENA.MIT.EDU (Paul Ferguson)
Sun Feb 24 16:09:36 2008
From: "Paul Ferguson" <fergdawg@netzero.net>
Date: Sun, 24 Feb 2008 20:58:40 GMT
To: will@harg.net
Cc: nanog@nanog.org
Errors-To: owner-nanog@merit.edu
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- -- Will Hargrave <will@harg.net> wrote:
>Sargun Dhillon wrote:
>
>> So, it seems that youtube's ip block has been hijacked by a more
>> specific prefix being advertised. This is a case of IP hijacking, not=
>> case of DNS poisoning, youtube engineers doing something stupid, etc.=
>> For people that don't know. The router will try to get the most speci=
fic
>> prefix. This is by design, not by accident. =
>
>You are making the assumption of malice when the more likely cause is =
one of accident on the part of probably stressed NOC staff at 17557.
>
>They probably have that /24 going to a gateway walled garden box which =
=
replies with a site saying 'we have banned this', and that /24 route is =
=
leaking outside of their AS via PCCW due to dodgy filters/communities.
>
I guess you guys missed the news that Pakistan has "blocked" YouTube
due to [mumble]:
http://www.telegraph.co.uk/news/main.jhtml?xml=3D/news/2008/02/24/wpak32=
4.xml
AS Name
AS17557 PKTELECOM-AS-AP Pakistan Telecom
- - ferg
-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)
wj8DBQFHwdp8q1pz9mNUZTMRAt4kAKDxryR8tLk3ejGe0p2aBAvvIcanAwCg4JkC
a79WB3j06mIwUPdxUI+xweA=3D
=3DzTdh
-----END PGP SIGNATURE-----
--
"Fergie", a.k.a. Paul Ferguson
Engineering Architecture for the Internet
fergdawg(at)netzero.net
ferg's tech blog: http://fergdawg.blogspot.com/
