full-disclosure - Core Internet Vulnerable

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: alerta at redsegura.com (Alerta Redsegura)
Subject: Core Internet Vulnerable - News at 11:00

If I recall well, a BGP speaker only sends/receives updates to route tables,
since the whole routing table is stored when the connection is initiated.
Therefore, closing a connection would only prevent further route updates
between the two attacked devices.

I don?t understand why this is considered as a "serious threat", or does it
have to do with the "de-sync" that would occur within the AS?

Thanks for any lights.

Regards,

I?igo Koch
Red Segura