It's interesting to note that, although in this case the HTTPS certificate presented by the attackers wasn't valid, they may have been able to acquire an apparently legitimate certificate if the misrouting's effect extended to the infrastructure of a certificate authority.
It's fascinating to watch cryptocurrency go through many of the same pitfalls that early banking went through. It seems like many of the problems crypto faces could be solved by opening a history book.
Comments
Ongoing discussion - posted 19 hours ago and still high up on the front page:
https://news.ycombinator.com/item?id=16914698
https://pulse.turbobytes.com/results/5adf2844ecbe40692e003ad...
Some traceroutes captured during the incident. The results that show "Target unreachable" were the ones seeing the hijacked paths.
It's interesting to note that, although in this case the HTTPS certificate presented by the attackers wasn't valid, they may have been able to acquire an apparently legitimate certificate if the misrouting's effect extended to the infrastructure of a certificate authority.
Transaction reversal would be nice, huh?
It's fascinating to watch cryptocurrency go through many of the same pitfalls that early banking went through. It seems like many of the problems crypto faces could be solved by opening a history book.