BGP is the yellow pages that hangs the internet together with string.

Pretty incredible blog about BGP here from @benjojo https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling

Talk to go with the blog: https://www.youtube.com/watch?v=6wMXEiFiueM&cbrd=1

Tl;dr - if you fuzz BGP attributes, you can very easily find ones which propagate to every router and crash routers. About half of vendors have easily reproducible issues. None of the vendors have bug bounty programmes. Or in other words, you can own the internet in your underpants.

Grave flaws in BGP Error handling

@GossiTheDog @benjojo I'm kind of impressed that anyone still has these issues, the huge Colt outage (actually wider than them) they mentioned was over a decade ago now...
@jcape I guess lightning strikes twice, since that same outage happened on June 2nd 2023, do you have a cite for the previous one?
James Cape (@[email protected])

274 Posts, 161 Following, 49 Followers ยท

Hachyderm.io
CERT/CC Vulnerability Note VU#472136

Information Leak and DoS Vulnerabilities in Redmi Buds 3 Pro through 6 Pro