alicexbt [ARCHIVE] on Nostr: 📅 Original date posted:2022-06-09 📝 Original message:Hi Bitcoin Developers, ...
📅 Original date posted:2022-06-09
📝 Original message:Hi Bitcoin Developers,
Based on this [answer][1] from 2014, bitcoin nodes are vulnerable to BGP hijacking. There was an incident in March 2022, twitter prefix was hijacked and details are shared in 2 blog posts:
https://isc.sans.edu/diary/rss/28488
https://www.manrs.org/2022/03/lesson-learned-twitter-shored-up-its-routing-security/
'nusenu' had written an article about Tor network being vulnerable to BGP hijacking attacks: https://nusenu.medium.com/how-vulnerable-is-the-tor-network-to-bgp-hijacking-attacks-56d3b2ebfd92
After doing some research I found that RPKI ROA and BGP prefix length can help against BGP hijacking attacks. I checked BGP prefix length and RPKI ROA for first 10 IP addresses returned in `getnodeaddresses` in bitcoin core and it had vulnerable results.
Has anyone written a detailed blog post or research article like nusenu? If not I would be interested to write one in next couple of weeks?
Looking for some "technical" feedback, links if this was already discussed in past with some solutions.
[1]: https://bitcoin.stackexchange.com/a/30305/133407
/dev/fd0
Sent with Proton Mail secure email.
📝 Original message:Hi Bitcoin Developers,
Based on this [answer][1] from 2014, bitcoin nodes are vulnerable to BGP hijacking. There was an incident in March 2022, twitter prefix was hijacked and details are shared in 2 blog posts:
https://isc.sans.edu/diary/rss/28488
https://www.manrs.org/2022/03/lesson-learned-twitter-shored-up-its-routing-security/
'nusenu' had written an article about Tor network being vulnerable to BGP hijacking attacks: https://nusenu.medium.com/how-vulnerable-is-the-tor-network-to-bgp-hijacking-attacks-56d3b2ebfd92
After doing some research I found that RPKI ROA and BGP prefix length can help against BGP hijacking attacks. I checked BGP prefix length and RPKI ROA for first 10 IP addresses returned in `getnodeaddresses` in bitcoin core and it had vulnerable results.
Has anyone written a detailed blog post or research article like nusenu? If not I would be interested to write one in next couple of weeks?
Looking for some "technical" feedback, links if this was already discussed in past with some solutions.
[1]: https://bitcoin.stackexchange.com/a/30305/133407
/dev/fd0
Sent with Proton Mail secure email.