[arin-ppml] BGP Hijacking Definition

[Hank Nussbacher]

On 06/05/2019 17:09, Keith W. Hare wrote:

RFC7908

-Hank

> Töma,
>
> Prop-266 uses the phrase "BGP hijacking" but does not define it. Without a careful definition of "BGP hijacking", it is not possible to define the difference between intentional and accidental hijacking.
>
> Keith
>
> -----Original Message-----
> From: Töma Gavrichenkov [mailto:ximaera at gmail.com]
> Sent: Monday, May 6, 2019 9:44 AM
> To: Keith W. Hare <Keith at jcc.com>
> Cc: arin-ppml at arin.net
> Subject: Re: [arin-ppml] BGP Hijacking Definition
>
> On Mon, May 6, 2019 at 4:26 PM Keith W. Hare <Keith at jcc.com> wrote:
>> If an organization uses a IPv4 prefix allocated/assigned
>> to some other organization (the DoD 30.0.0.0/8 for example)
>> within their internal network and filters out all references
>> at the edges of their network so that the general public
>> never sees any references, is that BGP Hijacking?
> The prop-266 establishes a difference between intentional and
> occasional hijacking.
>
> Now, consider a case when a Chinese ISP accidentally leaks 30/8 away.
> Imagine the newspaper headlines next morning, given that 30/8 is
> formally allocated to the DoD.
> Imagine Joe Sixpacks talking about the issue, treating that as a
> direct violent attack against the DoD, almost (if almost) an act of
> war.
> After that, consider the PR consequences when ARIN (APNIC etc.)
> decides that was accidental and thus just fine.
>
> This is one of the scenarios that makes me worry the most: exposing
> the cute and simple network address registry to all sorts of
> politicians with their ambitions.
>
> --
> Töma
> _______________________________________________
> ARIN-PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> https://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.