[tophat9000]

So they were advertising bad routes via bgp to the rest of the world.. but bgp is an external routing protocol..

that should not impact there internal routing protocol (ospf likely) that should be handled the local keycards access.... even if they were running ibgp

Got to be some dumb ass network design they have there

[frogjerk]

Management traffic should not ride the same network routing as those providing services internal or external.

Keycard access, terminal server access, and other management protocols should be independent of that type of traffic as it can affect or be affected by bandwidth and blackhole route issues.

[tophat9000]

I ran a theoretical hack scenario back in 2000 and my attack plan was to Sever all the external management connections 1st and then collapse the internal network

Something makes me think something else went on as a network collapses that bad shouldn’t happen

Interesting in my scenario the motivation was to make money by shorting a company stock before the attack so went the company went dark for a day the stock would be driven down any you could clean up on the short postion

Considering Facebook was getting hammered on capital hill and then this crash the same day

I’d be curious if there was any major shorts of their stock in the days leading up to this. Because they did take a stock hit yesterday

[brianl703]

It’s been a while since I worked on them, but the keycard access systems I dealt with stored a local copy of the access card database, so a network outage wouldn’t disable them.

[ro_dreaming]

I worked at a university that used BGP internally (iBGP) as well as externally (eBGP). We used it to do virtual segmentation on our LAN - we had different VRF’s (virtual routing & forwarding) subsystems for different ‘groups’ of items. We had “students” in one group, and that way they had the same firewall policies across the entire campus - regardless of if they were on wired, wireless or even connected via VPN. Same for staff, faculty, and then other systems (like phones, infrastructure - wireless APs, door controllers, etc.). Each one had specific firewall policies and access rules to either talk inside, or outside. Infrastructure devices NEVER talked outside - period.