China Telecom's BGP Hijacking [pdf]
> While one may argue such attacks can always be explained by ‘normal’ BGP behavior, these in particular suggest malicious intent, precisely because of their unusual transit characteristics – namely the lengthened routes and the abnormal durations.The investigation is pretty damning—it’s clear from the visuals that the traffic followed unusual routes. (Canada to South Korea via China, seriously?)Could there possibly be an innocent explanation where the channel through PRC somehow happens to be less saturated or otherwise faster?Could it be related to the recent objection by DoJ to the US—HK undersea link? I imagine such a link could enable even wilder hijacking scenarios.The article is from 2018, but it seems like it was an ongoing thing at the time of publication—is it still happening with no repercussions?I did get some laughs from the unsuccessful attempt at diverting US—Italy traffic, but overall it paints a bleak picture.