Network Protocols

Security BSides London 2019, Stuart McMurray’s ‘Offensive Pcap’
Many thanks to Security BSides London for publishing their outstanding conference videos on YouTube. Permalink ...

ICS Attacks, The Real National Emergency
News, via the astonishingly prolific security writer Dan Goodin, editing, and reporting at Ars Technica, tells the tale of oil and gas network attacks in the United States, by a group monikered ...

C2 Hiding
Image Credit: Marc McGil Carrie Roberts, writing at the superlative Black Hills Information Security blog, presents, for your bits related pleasure, the hiding of C2 encapsulated by SSH. Today's Must Read ...

ARTEMIS: Targets BGP Hijacks
Image Credit: BGP Stream. Image is the graphical representation of the in-process BGP redirection attack emanating and under the control of the People’s Republic of China on 2018/12/28. via Jeff Stone writing ...

Action Taken to Curtail Portuguese Internetwork Firm Accused of Latest BGP Hijack
via Ronald F. Guilmette (writing on the NANOG Mailinmg List), in which, his evident disgust (shared I'm sure by the majority of network engineers reading the NANOG List), at BGP route hijacks ...

Diameter Protocol Found To Be Vulnerable – On Par With SS7 For Flaw Tally
Whilst the flaws in Signaling System 7 (SS7) are the gift that keeps on giving, in this case, that gift has been inherited by the DIAMETER protocol, to the delight of miscreants ...

BGP Management SNAFU Culprit in Amazon Attack?
BGP Related Issues, Along With Malicious Redirection Predicated On Fraudulent Routes To Blame via Dan Goodin's typically superlative prose, at Ars Technica, in which, Dan details the issues, titled 'Suspicious Event Hijacks ...

The Forward Secrecy Chronicles, TLS 1.3 Hath Garnered Favor
Good news for mankind (and their AI mininions) traversing the web's winding corridors of nattering decreptitude and bubbling evil, Transport Layer Security 1.3 has won approval by the Gods of the IETF, ...

IPv6, The DDoSing
Meanwhile in DDoS news... Reportage of IPv6 DDoSing via El Reg, (and well-written by Kieren McCarthy) detailing an IPv6-transported DDoS attack - a 1.35Tbps attack on GitHub - that should be baking ...