Revealed: The Internet's Biggest Security Hole

[BlackCryptoKnight]

So you thought the Kaminsky's DNS flaw was bad?

Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency.

The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination.

Read more

Worst part is that no "hacking" really is necessary.

The technique, devised by Pilosov, doesn't exploit a bug or flaw in BGP. It simply exploits the natural way BGP works.

"We're not doing anything out of the ordinary," Kapela told Wired.com. "There's no vulnerabilities, no protocol errors, there are no software problems. The problem arises (from) the level of interconnectivity that's needed to maintain this mess, to keep it all working."

BGP = Buss di Gate Protocol

[ramesh]

Perhaps the best thing to do is to encrypt all communication, no matter the destination....

[BlackCryptoKnight]

Perhaps the best thing to do is to encrypt all communication, no matter the destination....

Yeah, encryption of sensitive data is a must. That's the safest thing. Unfortunately it isn't practical to encrypt all traffic, but the effort needs to made to encrypt what absolutely needs to be kept confidential.

[danthony]

all of a sudden the Internet just got a hell whole lot scarier!!!

[RubberBand Man]

all of a sudden the Internet just got a hell whole lot scarier!!!

it was always scary we just never knew how scary

[kev007_2002]

always remember folks, its a computer and it can be hacked

[fire21]

always remember folks, its a computer and it can be hacked

True words. I agree totally as a lot of persons think the internet is a safe haven when its not.

[Bluntex_2]

Only a fool would have thought the internet was a safe heaven, I don't even post my pic on the internet much less to sent sensitive data, i preferr the the good ole fashion way DIP - Delivery In Person. lololo