Wednesday, August 27, 2008

Revealed: The Internet's Biggest Security Hole

Revealed: The Internet's Biggest Security Hole | Threat Level from Wired.com
Two security researchers have demonstrated a new technique to stealthily intercept internet traffic on a scale previously presumed to be unavailable to anyone outside of intelligence agencies like the National Security Agency.

The tactic exploits the internet routing protocol BGP (Border Gateway Protocol) to let an attacker surreptitiously monitor unencrypted internet traffic anywhere in the world, and even modify it before it reaches its destination.

The pdf containing presentation slides can be found here