The YouTube outage over the weekend – a result of propagating bad BGP routing information – really makes you wonder. What if the propagation had been for PayPal’s home page – or some other major financial services site? Wouldn’t that have provided the ultimate phishing opportunity?
Categories
One reply on “YouTube Outage”
Yes, it would be a great phishing opportunity, particularly since it’s trivial to get a valid SSL certificate for a domain if you can get that domain’s mail: so all you need to do is broadcast a route for a domain’s DNS service or its web and mail servers and you’re good to go.