Hello, welcome to the Wednesday, November 7th, 2018 edition of the Santernet Storm Center's

Stormcast. My name is Johannes Ulrich. And today I'm recording from Jacksonville, Florida.

I think it was last week that BGP, the Border Gateway Protocol that controls routing on the Internet was in the news again

because traffic that was really just supposed to go from the U.S. West Coast to the East Coast

was routed through China.

Oracle has a nice block of its Internet Intelligence Team by Duck Motry, and it goes into some detail about

how things like this can happen, and why this may not necessarily be all malicious, but just

a mistake. So it's always difficult, of course, to speculate over motivation, but one of the things that Doug

brings up in his blog post is that Verizon with its presence in Asia and some of the peering

relationships it maintains, it is actually possible that a leak like this happens accidentally.

The problem with routing on the internet is that it often

doesn't really consider sort of geographic distance, but really more logical distance, number

of hops and really what's cheaper, which often results in ISPs trying to find the first spot

possible to hand traffic over to another company

to then finally route it to its destination.

But well, overall, a good reminder that this is why we worry about things like TLS and the details

about TLS configurations and the like. So make sure traffic is

encrypted and encrypted well as soon as it leaves your system. And Google today released

a security update for Android. That's the usual monthly update. As common for Google, you'll get it in various

packages, one that just includes sort of the core security updates, one that includes security

updates for the operating system, plus drivers that are specific to Google sold devices.

Now, one important part about this particular update is that this is the last

...