Shamar @Shamar@qoto.org

@khird

Ok sorry let's be more specific.

Suppose that Eve controls several public IPs, a datacenter in the US, one in Europe and one in China. Eve is not necessarily evil, but she is uncooperative and cannot be trusted on this specific matter.

Alice is in Europe and want to ensure Bob (who is in the US) that when they connect to a certain Eve's IP, their packets will reach an ethernet in the US. What happen to the packets after they reach the target IP is out of scope for this question.
Bob trust Alice.

What experiment could they do to verify that such specific IP is routed to the same physical ethernet from both sources (their point of observation) and that such ethernet is actually in the US?

They want to exclude that (something like) BGP trickery can cause that specific public IP to be assigned to different ethernet in different continents.

While this might look as a theoretical problem, it's not.

That's why I wrote this is something for #networking #hackers and asked to boost in the hope it reach somebody deep enough in these low level waters that could actually help.

#infosec #security

@khird

What about comparing the #traceroute from different continents?

Or maybe there is a way to dump and compare the #BGP routes of an IP range and spot the duplication?

To be honest, these are deep waters for my #networking skills, so be patient with my dumb questions... but I really need an answer.

#InfoSec #cybersecurity #security

@acesabe

I'm not much interested where the server actually is, but where the first ethernet that receives the packets directed at such IP is located on Earth surface. Possibly at nation level, but at least at continental level.

I need to exclude the duplication of the public IP over different physical locations, say for load balancing issues.

I know DNS level load balancing is simpler and effective, but... I need to specifically exclude this sort of L3 tricks... for reasons.

(Not that I know anybody doing something like this, BUT I know I'm not an expert on global scale network machinery).

@jartigag

Thanks @khird!

This is a nice trick!
I didn't think of it.

I wonder: is there a way to exclude a tricky #BGP duplication of an #IP over different regions?

@jz

Consider https://freedombone.net

@olimex

Question for network hackers (please boost).

What's the safest way to prove that the ethernet responding to a certain public IP (v4) is located in a certain nation (or at least continent)?

I mean, I can use a geolocation db but I guess it could be outdated. Trace routing the IP and geolocating each hop through the db? Maybe better but... is there an even better way?

#networking #ip #geolocation #infosec #hacking #internet

Question for network hackers (please boost).

What's the safest way to prove that the ethernet responding to a certain public IP (v4) is located in a certain nation (or at least continent)?

I mean, I can use a geolocation db but I guess it could be outdated. Trace routing the IP and geolocating each hop through the db? Maybe better but... is there an even better way?

This post by @paolo has been censored on #Twitter.

Please boost it here.

#GAFAM #Privacy #SchremsII #Microsoft #Law

@hopeless

Well, you won't see any of my websites since I do NOT enable HTTPS when it's not needed.

I guess it's not a big issue to people from the rich western countries, but I want proxies to be able to cache the contents to improve accessibility over slow connections in poor countries.

And since I don't care profiling my visitors and do not distribute sensible contents, I wont waste energy on pointless cpu cicles.

@markosaric @codewiz