Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
There were BGP anomalies during the Venezuela blackout (loworbitsecurity.com)
472 points by illithid0 4 hours ago | hide | past | favorite | 244 comments




> When BGP traffic is being sent from point A to point B, it can be rerouted through a point C. If you control point C, even for a few hours, you can theoretically collect vast amounts of intelligence that would be very useful for government entities. The CANTV AS8048 being prepended to the AS path 10 times means there the traffic would not prioritize this route through AS8048, perhaps that was the goal?

AS prepending is a relatively common method of traffic engineering to reduce traffic from a peer/provider. Looking at CANTV's (AS8048) announcements from outside that period shows they do this a lot.

Since this was detected as a BGP route leak, it looks like CANTV (AS8048) propagated routes from Telecom Italia Sparkle (AS6762) to GlobeNet Cabos Sumarinos Columbia (AS52320). This could have simply been a misconfiguration.

Nothing nefarious immediately jumps out to me here. I don't see any obvious attempts to hijack routes to Dayco Telecom (AS21980), which was the actual destination. The prepending would have made traffic less likely to transit over CANTV assuming there was any other route available.

The prepending done by CANTV does make it slightly easier to hijack traffic destined to it (though not really to Dayco), but that just appears to be something they just normally do.

This could be CANTV trying to force some users of GlobeNet to transit over them to Dayco I suppose, but leaving the prepending in would be an odd way of going about it. I suppose if you absolutely knew you were the shortest path length, there's no reason to remove the prepending, but a misconfiguration is usually the cause of these things.


I guess one of the interesting things I learnt off this article(1) was that 7% of DNS query types served by 1.1.1.1 are HTTPS and started wondering what HTTPS query type was as I had only heard of A, MX, AAAA, SPF etc...

Apparently that is part of implementing ECH (Encrypted Client Hello) in TLS 1.3 where the DNS hosts the public key of the server to fully encrypt the server name in a HTTPS request. Since Nginx and other popular web servers don't yet support it, I suspect the 7% of requests are mostly Cloudflare itself.

(1) https://radar.cloudflare.com/?ref=loworbitsecurity.com#dns-q...


It’s also how browsers detect a website supports HTTP3. Browsers will request it just to check if they should connect to an https:// URL via HTTP3 (though they generally don’t block on it - they fallback to HTTP1/2 if it takes too long).

> It’s also how browsers detect a website supports HTTP3

It's one way, but a H1/H2 connection can also be promoted to H3 via the alt-svc header. The DNS method is slightly better though since it potentially allows a client to utilize H3 immediately from the first request.


Caddy supports it, and has quite a bit written about it: https://caddyserver.com/docs/automatic-https#encrypted-clien...

Caddy has supported it for several months now, although I do agree most the requests are in fact Cloudflare.

Wait, so you do not leak the host through DNS with this? I have not checked it out yet.

Encrypted DNS has existed for quite a while now through DNS over HTTPS, the missing link was that to connect to a website, you first had to send the server the hostname in plaintext to get the right public key for the site. So someone listening on the wire could not see your DNS requests but would effectively still get the site you connected to anyway.

The new development (encrypted client hello) is you no longer have to send the hostname. So someone listening in the middle would only see you connected to an AWS/etc IP. This will make blocking websites very difficult if they use shared services like cloudflare or cloud VPS hosting.


In principle, it means you could run multiple sites from the same IP and someone intercepting traffic to that IP (but not the client’s DNS path) couldn’t tell what site each connection was to. It mostly makes sense for CDNs, where the same IP will be used for many sites.

If you don’t use a CDN at all, the destination IP leaks what site you’re trying to connect to (if the domain is well known). If you use a CDN without ECH, you send an unencrypted domain name in the HTTPS negotiation so it’s visible there. ECH+CDN is an attempt to have the best of both worlds: your traffic to the site will not advertise what site you’re connecting to, but the IP can still be shared between a variety of sites.

It’ll be interesting to see how countries with lighter censorship schemes adapt - China etc. of course will just block the connection.


Even for China so-called "overblocking" where to censor a small thing you have to block a much larger thing, is a real concern with these technologies. There's a real trade here, you have to expend effort and destroy potential and in some cases the reward isn't worth it. You can interpret ECH as an effort to move the ratio, maybe China was willing to spend $5000 and annoy a thousand people to block a cartoon site criticising their internal policies, but is it willing to sped $50 000 and annoy a ten thousand people? How about half a million and 100K people ?

My read is you still leak the host with DNS. This only prevents leaking the host with SNI. A useful piece but not at all the holy grail.

Adguard Home and others can be configured to complete your DNS requests over HTTPS (using, for example, https://dns.cloudflare.com/dns-query).

That's not what this is about.

HTTPS is the name of a protocol, which is mostly used to make the World Wide Web work, but we do lots of other things with it, such as DNS-over-HTTPS aka DoH.

However HTTPS is also the name of a type of DNS record, this record contains everything you need to best reach the named HTTPS (protocol) server, and this is the type of record your parent didn't previously know about

In the boring case, say, 20 years ago, when you type https://some.name/stuff/hats.html into a web browser your browser goes "Huh, HTTPS to some.name. OK, I will find out the IPv4 address of some.name, and it makes a DNS query asking A? some.name. The DNS server answers with an IPv4 address, and then as the browser connects securely to that IP address, it asks to talk to some.name, and if the remote host can prove it is some.name, the browser says it wants /stuff/hats.html

Notice we have to tell the remote server who we hope they are - and it so happens eavesdroppers can listen in on this. This means Bad Guys can see that you wanted to visit some.name. They can't see that you wanted to read the document about hats, but they might be able to guess that from context, and wouldn't you rather they didn't know more than they need to?

With the HTTPS record, your web browser asks (over secure DNS if you have it) HTTPS? some.name and, maybe it gets a positive answer. If it does, the answer tells it not only where to try to connect, but also it can choose to provide instructions for a cover name to always use, and how to encrypt the real name, this is part of Encrypted Client Hello (or ECH)

Then the web server tells the server that it wants to talk to the cover name and it provides an encrypted version of some.name. Eavesdroppers can't decrypt that, so if many people share the same endpoints then eavesdropper can't tell which site you were visiting.

Now, if the server only contains documents about hats, this doesn't stop the Secret Hat Police from concluding that everybody connecting to that server is a Hat Pervert and needs to go to Hat Jail. But if you're a bulk host then you force such organisations to choose, they can enforce their rules equally for everything (You wanted to read News about Chickens? Too bad, Hat Jail for you) or they can accept that actually they don't know what people are reading (if this seems crazy, keep in mind that's how US Post worked for many years after Comstock failed, if you get a brown paper package posted to you, well, it's your business what is in there, and your state wasn't allowed to insist on ripping open the packaging to see whether it is pornography or communist propaganda)



> so if many people share the same endpoints then eavesdropper can't tell which site you were visiting.

Which is why it is so important/useful to Cloudflare but of much lower utility to most nginx users.


I assume that nuclear capability would rule out a target from this kind of snatch operation, and that this event will add pressure to proliferate.

Indeed. The DPRK was right from the start. They always were.

For the longest time I thought they'd gone too far, but now we're the clowns putting on a show.


Sure, but there must always be a fear that the military and public would not want to die in a nuclear inferno to defend national sovereignty. And may tolerate a coupe instead. Which then reduces the madness and the deterrent effect. The extra step the Dprk have taken is to try and build bunkers so that the regime could survive the destruction of the country. A step further into madness that goes beyond what western countries have been willing to accept.

The US built a lot of bunkers like this back in the 1950's.

https://en.wikipedia.org/wiki/Mount_Weather_Emergency_Operat...

https://en.wikipedia.org/wiki/Raven_Rock_Mountain_Complex

https://en.wikipedia.org/wiki/Project_Greek_Island

https://en.wikipedia.org/wiki/Cheyenne_Mountain_Complex

With the rise of solid fuel ICBM and then MIRV leading to the truly massive number of warheads pointed at the US, the US switched to airplanes for the most important continuity of government issues, figuring that the skies 30,000 above the US will largely be secure (presuming the plane is appropriately EMP shielded) due to the many US geographic advantages, and so it is the best place to ride out the initial attack and then take stock, get to somewhere safe, and figure out what to do from there.

https://en.wikipedia.org/wiki/Operation_Looking_Glass

https://en.wikipedia.org/wiki/TACAMO

https://en.wikipedia.org/wiki/Boeing_E-6_Mercury

But the North Koreans can have no illusion that the skies above their country will be safe: there are several major enemy airbases a few minutes from their border, their entire airspace is routinely surveilled and powers hostile to them have made large investments in stealthy air superiority fighters, so the air is not a safe place for the DPRK continuity of government plans. The DPRK does have trains but I would not consider those safe in the event of a major war, since rails are difficult to keep secret.

https://en.wikipedia.org/wiki/Taeyangho_armoured_train

So bunkers are the best they can do, given their circumstances.


Watching a civilized nation drop a nuclear bomb on an enemy really got into peoples heads.

What's worse is.. it worked.


You should read Blood Meridian.

there's a fair argument to make that a nation that drops a nuclear bomb on a city isn't "civilized"

The high end of the range of death estimates by the two atomic bombs is around 246,000. The estimated range of US military deaths from an invasion of Japan (Operation Downfall) was 250,000 to 1,000,000, and another 5 to 10 million Japanese. Dropping nukes was both barbaric and the more civilized option. Oppenheimer et al. deserve their acclaim.

Japan attacked the US first, and by Hiroshima the US had 110,000 dead in the Pacific theater. Imagine living through that before judging them.


> Dropping nukes was both barbaric and the more civilized option.

Also perhaps worth noting that after the first bomb the Japanese government was not planning to surrender. The second dropping moved things to a deadlock where half of the ministers—both in the small war council, and the larger full government—wanted to the surrender and the other half did not.

The Emperor had to be called in—an almost unprecedented action—to break the tie. Then, even after the Emperor had made his decision, there was a coup attempt to prevent the "surrender"† broadcast:

* https://en.wikipedia.org/wiki/Kyūjō_incident

I do not know how anyone can think that Japan would have stopped fighting without the bombings when two bombings barely got things over the line.

The book 140 days to Hiroshima by David Dean Barrett goes over the meeting minutes / deliberations and interviews to outline the timeline, and it was not a sure thing that the surrender was going to happen: the hardliners really wanted to keep fighting, and they were ready to go to great lengths to get their way (see Kyūjō above).

The Japanese knew for a year before the bombings that they could not win the war, but they figured that by holding out—causing more causalities of Japanese, Americans, Chinese, Filipinos, etc—the US would lose their resolve and terms could be negotiated so that Japan could (e.g.) keep the land they conquered in Manchuria, etc.

† A word not actually used by the Japanese in the broadcast.


> The estimated range of US military deaths from an invasion of Japan (Operation Downfall) was 250,000 to 1,000,000, and another 5 to 10 million Japanese.

I've read convincing arguments (sorry, I cannot find them now) that this reasoning is mostly bogus.

One, the decision of dropping the bombs wasn't coordinated with planners of Operation Downfall, so casualties weren't a consideration. As such, it cannot be "civilized" (because the intent to be civilized just wasn't there).

Two, those casualty numbers rest on arbitrary assumptions about what the Japanese would or wouldn't do that don't hold up to real scrutiny, and ignore a host of options other than "full scale invasion" or "nuke".

Three, you cannot discount the flex towards the USSR, an argument many Japanese to this day maintain was a major reason. Which wasn't a civilized reason either.


I think that lesson from World War Two is that civilization is all the things we do to prevent another World War Two from happening. And that what we owe to all the people in Hiroshima, Tokyo, Nanjing, the Warsaw Ghetto, Katyn, Bengal, Manzanar, and a thousand other places is to prevent anything like that from happening again.

Where will the planes land?

Those interstate highways are starting to look pretty good as the fuel guage drops

Aren't there bunkers near dc for that reason though?

According to some deep dives into the budget figures for the East Wing Ballroom .. there are new bunkers going in as we type .. and likely being networked underground.

Feels like our politicians and MIC higher ups are preparing themselves for nuclear war but not building the rest of us any bunkers

Why would anyone build bunkers for cattle?

It's felt like that for more than half a century: https://youtu.be/zZct-itCwPE

Not to mention the bunkers being built by various Silicon Valley billionaires, who by rights should be considered appendages of the U.S. state.

> And may tolerate a coupe instead

The US is vulnerable to that scenario as well, even though the military’s willingness to comply with literally textbook illegal orders is not encouraging.


“And may tolerate a coupe instead.”

I could tolerate a coupe but I’d prefer a sports car :-/


coup

> the military and public would not want to die in a nuclear inferno to defend national sovereignty

Erm, it's kind of demanded for people to go out and die to defend national sovereignty in nations that have a draft. For myself, I'd prefer to be vaporized than bleed out in a trench if it really comes down to it.


Realistically speaking you'll die of an infected and untreated burn wound though, the severe blast and burn area is just much much bigger than the fancy "everything just goes poof" core.

Yah, but you could enter the ruins of some shop, get some booze there, and walk straight into ground zero. Feeling the buzz. Getting tired...drifting away...

Vaporized is good with me. Not so keen to have my body melt over several days due to acute radiation exposure though...

Giving up is really very common in war.

Yeah I imagine we’ll see a cottage industry of small countries with nukes in ten-fifteen years.

Plenty of places have uranium and unless they are being watched like Iran they can just set up clandestine enrichment operations.


I think have thousands of artillery shells aimed at Seoul is the larger deterrent.

The nukes are to deter the US. They have been steadily increasing their missile range to first reach regional bases like Guam and now the all the way to the continental USA, and are now even launching a nuclear powered and nuclear armed ballistic missile submarine https://www.hisutton.com/DPRK-SSN-Update.html

The nukes are a bargaining chip (disarmament). Basically, if your country has the human and tech capital to develop a nuke, you probably should because it's free money.

I don't believe that NK's nukes deter the US from doing anything. Would NK nuke Guam and risk getting carpet-bombed with nukes for endless days and nights until even the ants are dead? Artillery on Seoul doesn't matter. The US would just ask SK to evacuate it.

The US doesn't do anything about the DPRK because it's not economically relevant (i.e. it doesn't have the world's largest oil reserves etc). In an ironic way, their economy being closed-off and mostly unintegrated with the Western world maintains the peace.


The nukes have many roles perhaps but I think the fully developed weapons are for retaliatory strike.

They are the North Korean leadership saying that if the US (or China or anyone really) tries to surgically decapitate them (like the US just did in Venezuela) then the nukes are used to take the attackers with them


Yes that's the orthodox doctrine of nuclear deterrent. To be truly effective you need a triad of land-based ICBMs, nuclear-armed submarines, and aircraft-based delivery systems so that your second-strike capability remains intact through any decapitation attempts.

If you don't have the triad then you need to brandish your capability more ostentatiously, like France does with its deliberate refusal to commit to a no-first-strike policy. This is (one of the many reasons) why North Korea does so much sabre-rattling: they don't have a (publicly known) nuclear triad for deterrence.


Just a note that the importance of the triad is a very American perspective on deterrence and most other countries don't seem to approach this the same way the US does.

The Russians really have a quad (they also have mobile, truck mounted ICBM's that form a significant part of their deterrent, offering some of the guaranteed second-strike advantages that the US gets from SSBN's- and which their SSBN program does not provide nearly as well as the USN does). The Chinese only recently added a manned aircraft leg of their triad with the JL-1. The Indians technically have a triad- just no silo based systems, all of their land based missiles are from TELs, and they only have two SSBN's and do not do alternate crews so more than 1/3 of the time they don't have any deterrent at sea. The Israeli's are not believed to have any sea-based ballistic missiles, their sea-based deterrent would be Popeye cruise missiles and so vulnerable to interception. The Pakistanis are still building their first sea-based deterrent. The French and the UK have no land-based missiles, they are only sea-based and airplanes. The South Africans invested in the Jericho missile more for its space launched capabilities than its warhead delivery abilities, and never really looked at anything sea-based, so far as is publicly known.


> To be truly effective you need a triad of land-based ICBMs, nuclear-armed submarines, and aircraft-based delivery systems

The core parts for MAD land-based missile silos (to soak up the enemy's missiles) and submarines (to ensure a second strike). Planes are largely a diplomatic deterrent inasmuch as they're easy to send out and easy to recall.

But Pyongyang isn't playing MAD. It's playing credible threat. And for a credible threat, you just need missiles. (On land or on subs.) The point is that you raise the stakes of e.g. a Maduro operation to risking Los Angeles.


P5 by triad capability:

  CN 3
  FR 2
  RU 3
  UK 1/2
  US 3
Looks like IN ought to get Airstrip One's seat?

> Artillery on Seoul doesn't matter. The US would just ask SK to evacuate it.

How do you evacuate 10 to 15 million(counting Incheon in) of people, fast? Where to?


Proportionally that's about evacuating all of California. Completely ridiculous, which is exactly why DPRK has installed all that artillery.

The importance of this is often exaggerated. It's significant, but it's not that significant. RAND Corporation modeled this, https://www.rand.org/pubs/research_reports/RRA619-1.html

It assumes ~130,000 casualties from a worst-case surprise attack on population centers by the North.

If a conflict started ramping up, evacuations would rapidly shrink this.

A significant deterrent, sure. But it rapidly becomes less and less meaningful as the DPRK builds its nuclear arsenal.


They're safe, but at what cost?

They drive old cars, have slow internet and can't visit the coliseum. They're not invited to the cool parties.


Nah, Kim will now wet his bed for weeks.

If any dictator willing to deliberately kill thousands for nothing knew he could wake up in a chopper the world would have been a better place.


Well, really any leader who dissatisfies the president of the US, really

NK is protected by China, a very credible force.

Maduro was protected by both China and Russia.

Maduro may have been aligned with them, but that is a completely different thing than being protected by them. The DPRK is actually protected by the PRC, in the sense that the PRC is willing to and historically did deploy millions of soldiers to push back Americans from North Korean territory.

But note that happened in rhe 1950s, when Mao was in power and the PRC was an upstart separatist regime with very limited recognition. Now China may want to act very differently.

The reason Mao helped Pyongyang still applies: namely, it would make China less secure to have on its border a regime allied to a great power other than China.

China, Cuba and Russia sent him air defences and some personal guards. What would China's millions do if Kim was kidnapped? Invade Seoul that had no say in it?

From where would an hypothetical operation to kidnap Kim be launched? Likely from SK or Japan, right? So yes, China could retaliate.

The operation against Maduro was launched from countries in the region aligned with the US.


This is only partially true.

China's primary concern is resource extraction from Venezuela, which is why Trump immediately clarified that they'd make sure China still got their oil deliveries.

Russia is stretched way too thin right now to do anything meaningful about it.

Venezuela was basically being run by Cuba. Maduro was really only a figurehead. The military and government was functionally run by imported Cubans which is why a coup wasn't possible.


From bgp hijacking? Almost certainly not.

It would probably rule out the type of decapitation strike the US did, but bgp hijacking is way way below on the escalation ladder.


Nuclear capability wouldn't necessarily rule out this kind of a decapitation strike, it's just that it's very hard to imagine this kind of an operation actually being successful in any nuclear-capable country.

The US couldn't just fly a bunch of helicopters to Pyongyang or Tehran and do the same within 30 minutes. Most likely every single one of those helicopters would end up being shot down.


Nuclear capability by itself isn't a complete deterrent. It has been widely reported that the US military has made contingency plans for a decapitation strike and seizure or destruction of nuclear weapons in Pakistan in case the situation turns really bad there. Real deterrence requires a credible second-strike capability on survivable platforms such as submarines.

> the US military has made contingency plans for a decapitation strike and seizure or destruction of nuclear weapons in Pakistan in case the situation turns really bad there. Real deterrence requires a credible second-strike capability on survivable platforms such as submarines.

The existence of a plan does not equate to the feasibility of its execution. A submarine-based deterrent is indeed the "gold standard" for survivability, but it is not the only standard. There is enough pain for the US that they wouldn't actually attack Pakistan.


>There is enough pain for the US that they wouldn't actually attack Pakistan.

The US does have the advantage that the surviving Pakistani nukes might very well end up flying to India instead :)


> There is enough pain for the US that they wouldn't actually attack Pakistan

These are the states whose Senators are in play this year [1].

Let's say Trump decides it's fuck-around-with-Islamabad-o'clock. He fucks around. Pakistan nukes at India. How many of those Senate seats flip as a result? I'm going to guess none.

Let's go one step further. Pakistan nukes Al Udeid and Camp Arifjan (both theoretically within range of their Shaheen-III). American troops are killed. Does the President's party lose any seats? At that point, I'd be willing to be on a rally-'round-the-flag effect.

The truth is there isn't political downside to the President fucking around with Pakistan. Its nuclear deterrent isn't designed to contain America. And it can't threaten us with maybe the one thing that could make Trump suffer, a refugee crisis.

[1] https://www.270towin.com/2026-senate-election/


> Let's say Trump decides it's fuck-around-with-Islamabad-o'clock. He fucks around. Pakistan nukes at India. How many of those Senate seats flip as a result? I'm going to guess none.

If America does something to pakistan, then pakistan wouldn't bomb India but rather America

In your scenario India did literally nothing. I know the rivalry but even then India has its own nukes and if India wasn't part of the plan then case would be on America

A much more likely scenario is that Pakistan's military would take over (Pakistan has never been really stable after its independence) and their ties with china would grow and China would feel threatened as well and if things go the same as venezuela that is that Trump says that they would control pakistan for time being (similar to venezuela) then China would be genuinely pissed and a WW3 conflict can arise considering China could send their military there and the possibility of nuke could be a choice if the war really happens between America/China but the possibility of it is really really slim and depends on how the war goes.


For nuclear deterrence to work in situations like this, it'd also be preferable to have sufficient conventional capabilities that your leadership isn't decapitated before you even notice it's happening. If the attacker is also nuclear-capable, there's little incentive for second person in the chain of command to kill themselves.

Similarly, if a head of state is killed by poison or other similar means, you could hardly expect nuclear retaliation when their successor later discovers what happened.


Didn't we just do something like that in Iran? Not helicopters, but we still secured the airspace just the same.

Securing airspace for fancy stealth bombers is rather different from securing airspace for helicopters you can shoot down with just about anything.

Maybe Pakistan, or Israel.

Well yes, the US could certainly easily kidnap leaders of friendly countries. It'd also presumably be very unlikely to result in a nuclear response from either.

Honestly from what we learned in the earlier attacks on Iran the USA probably could take a quick trip over to Tehran and grab the Ayatollah.

I think clanky covered this pretty well, but dropping bombs from high altitude stealth bombers and fighter jets is very very far from actually delivering and extracting soldiers from a location.

The US could probably bomb even Beijing, it doesn't really tell you anything that they were able to bomb Iran also.


It's odd that Iran was able to continue launching waves of ballistic missiles and drones at Israel after they had supposedly lost so much control over their skies that it would have been possible to hover a Chinook over Tehran for 5 minutes.

>It's extremely difficult to believe that the US could fly a bunch of helicopters to Pyongyang or Tehran and do the same within 30 minutes.

Would your answer change if China were somehow guaranteed to not intervene? Because I'm not sure the obstacle here is North Korean defenses, so much as Chinese intervention.

Tehran? I think it'd go more or less like Caracas did.


>Would your answer change if China were somehow guaranteed to not intervene? Because I'm not sure the obstacle here is North Korean defenses, so much as Chinese intervention.

No. The obstacle isn't Chinese intervention, the obstacle is that such an operation would have to be significantly larger and it would take longer. There would be much more air defense assets to suppress, and some of them would be impossible to effectively defeat.

A helicopter assault on either of those cities would in the most optimistic scenario take hours of preparatory bombing, which would give a plenty of time for nuclear retaliation by North Korea. Both countries would also certainly have better safeguarding mechanisms for their heads of state, during that bombing they would be evacuated and now you'd probably be looking at the very least at a weeks-long operation.

Assassination is a different thing, but I would suspect that for purely psychological reasons a rapid kidnapping operation like this would be far less likely to invite anything more than symbolic retaliation than a single targeted missile strike. This kind of operation would be far more confusing for the enemy than a simple assassination, and the window during which for example nuclear retaliation might make sense tends to be rather small.

>Tehran? I think it'd go more or less like Caracas did.

Tehran doesn't have a fancy air defense network, but it does have one. They'd have shot down every single helicopter. You don't even need fancy missiles, a bunch of .50cal machine guns will do the trick.


>I assume that nuclear capability would rule out a target from this kind of snatch operation

Why would it?

1. "Nuclear capability" is not binary. The available delivery mechanisms and the defensive capabilities of your adversary matter a lot.

2. MAD constrains both sides. It's unlikely that an unpopular Head of State getting kidnapped would warrant a nuclear first strike especially against a country like (Trump's) America, which would not hesitate to glass your whole country in response.

3. It's extremely risky to "try" a nuke, because even if it's shot down, does it mean your enemy treats it as a nuclear strike and responds as if it had landed? That's a very different equation from conventional missiles. E.g. Iran sends barrages of missiles because they expect most of them to be shot down. It's probably not calculating a scenario where all of them land and Israel now wants like-for-like revenge.


> an unpopular Head of State

Heads of state are generally pretty good at delegating the C&C of their nukes to people they are pretty popular with. That's orthogonal to popularity polls of the populace.


You still have to be willing to use the nukes. The threat has to be real or it doesn't work as a deterrent.

I think this is a situation where even if Venezuela had nukes, this still would have happened.


The choice is basically:

a. Don’t use nukes, everyone moves one rung up the ladder. b. Use nukes. Ladder is destroyed, everyone dies horribly.

Using nukes only makes sense if everyone is going to die horribly anyway. It’s an empty threat otherwise.


Counterpoint is that Ukraine, Qaddafi, and Assad already demonstrated the significance of maintaining certain capabilities. Vzla didn't have those capabilities before, much less publicly depreciate them.

Ukraine wouldn’t have been invaded if they hadn’t given up their nuclear weapons.

I have a few questions about that:

1. Did Ukraine control the nukes, or did Russia?

2. Could Ukraine keep them working on its own?

3. If nukes stop invasions, why do nuclear countries still get attacked?


1) It's complex. Formally, Moscow controlled the launch codes. However Ukraine designed and built the ICBMs, and are near the top of nations with the highest nuclear physicist per capita ratio.

On top of that the Soviet nuclear lockout systems are rumored to be much simpler than the American ones. Whereas the American system is rumored to be something like the decryption key for the detonation timings (without which you have at best a dirty bomb), the Soviet lockout mechanism is rumored to just be a lockout device with a 'is locked' signal going to the physics package. If that's all true, taking control of those nukes from a technical perspective would be on the order of hotwiring a 1950s automobile.

Taking physical control would have been more complex, but everything was both more complex and in some ways a lot simpler as the wall fell. It would have ultimately been a negotiation.

2) See above.

3) Which military nuclear power has been attacked by the kind of adversary that you can throw a nuke at? Yes, it doesn't remove all threats, but no solution does. Removing a class of threat (and arguably the most powerful class of threat in concrete terms) is extremely valuable.


> However Ukraine designed and built the ICBMs

Your computer is designed and built in China therefore your computer belongs to Chinese and China. Right?

> See above

Maybe you should see how good the Ukraine was at keeping their naval assets after they used the totally legal methods to obtain them. Maybe then you would have a clue on how good they could had maintained them.


> Your computer is designed and built in China therefore your computer belongs to Chinese and China. Right?

The previous owner was the USSR, who ceased to exist, and who Ukraine was a part of.

> Maybe you should see how good the Ukraine was at keeping their naval assets after they used the totally legal methods to obtain them. Maybe then you would have a clue on how good they could had maintained them.

Are you talking about the ships that weren't originally that Russia mostly scuttled on their way out of Sevastopal, in addition to stuff like a 70% completed nuclear powered carrier that even Russia couldn't maintain the sister to, and didn't fit in any naval doctrine that made sense for Ukraine?


> The previous owner was the USSR

Not quite.

> and who Ukraine was a part of

Oh, so there were some wedding contract what stated what in case the parties.. part - there would be the transfer and division of assets? When why Belorussia didn't received their part of the navy? Kazakhstan? Georgia? Baltics, because they surely "were parts of USSR"?

> Are you talking about the ships that weren't originally

That weren't originally what? I know you degraded to just throwing words with your blanket knowledge but again you can find out the fate of the ships the Ukraine used totally legit means to obtain from Russian Federation with a quite short trip to Wikipedia.


> Not quite.

Actually, exactly. We're specifically talking about the arsenal of the 43rd Rocket Army of the Soviet Strategic Rocket Forces. A force not reorganized until much later to be under the Russian Federation, and the relevant 1990 Budapest Memorandum occurred before the 1991 creation of the CIS.

Rather than a vague "not quite", would you care to elaborate?

> Oh, so there were some wedding contract what stated what in case the parties.. part - there would be the transfer and division of assets? When why Belorussia didn't received their part of the navy? Kazakhstan? Georgia? Baltics, because they surely "were parts of USSR"?

I think a divorce settlement is actually a pretty good model actually. Those other states rankly didn't have the means to keep them, but should have been otherwise compensated for that loss. However, as I described above, Ukraine literally designed and built large portions of these systems as was capable of keeping them.

> That weren't originally what? I know you degraded to just throwing words with your blanket knowledge but again you can find out the fate of the ships the Ukraine used totally legit means to obtain from Russian Federation with a quite short trip to Wikipedia.

I'm dyslexic and accidentally a word while editing. Are you incapable of telling what was meant by context, or where you just looking for a reason not to address the point made?


> Your computer is designed and built in China therefore your computer belongs to Chinese and China. Right?

The question is whether china would be capable of maintaining the equipment they created and have physical possession of, not whether they can root it without physical access.


Has any nuclear state had their leader kidnapped? Or seen significant incursions?

Most non-nuclear heads of state have never had their leader kidnapped, either.

Alternatively, we might have entered either a limited or a worst-case nuclear war scenario.

Russia may have just continually pushed the envelope until it became clear there wasn't a bright red line, and eventually someone would push the button.


The psychopaths in charge of Russia still like living comfortably.

Russia promised not to invade if Ukraine gave up the nukes.

No no no, some random American diplomat told a random Soviet diplomat during the East Germany negotiations that NATO wouldn't extend east at all.

No, it wasn't put on paper anywhere.

No, it wasn't mentioned (much) when the countries of eastern Europe all chomped at the bit to join NATO in the 90s.

No, it completely makes the Budapest Memorandum bunk.

No, the people of Ukraine absolutely do not have the agency to want to pivot towards the EU and become wealthy and stable like the former Warsaw Pact countries did. It must have been the CIA, so Budapest is bunk again!

(and other lies the war apologists tell themselves)


To be the devil's advocate, I don't think Russia foresaw a situation that had Ukraine looking to join NATO right after NATO had been used offensively for the first time ever to put its thumb on the scale of a civil war that didn't involve NATO countries.

s/devil/putin/

Sure, but I think these discussions are more enlightening when we model superpowers as rational actors within their ideological system rather than just whatever propaganda is locally convenient.

Not much of a change, TBF.

Even setting aside that Ukraine never had the technical means or infrastructure to operate/maintain those weapons, I don't think they would have dissuaded Russia or actually been used. Russia could turn them into a wasteland in response and 6 million people (including hundreds of thousands of men of military age) weren't even willing to stay in Ukraine, much less fight for the country. If Zelensky were to give an order to launch hypothetical nukes, I'd think there would have been a coup and no launch.

You don't think that Ukraine, the country that designed and built those ICBMs, and had one of the highest per capita counts of nuclear physicists could handle at least a few decades of upkeep on those nukes?

And the point of nukes isn't to launch them. By then you've already lost, you're just making good on your offer to make the other shmuck lose too.


> the country that designed and built those ICBMs, and had one of the highest per capita counts of nuclear physicists could handle at least a few decades of upkeep on those nukes?

They don't even need that. They just needed ambiguity.

Ukraine absolutely fucked up giving up its nukes, that's abundantly clear with the benefit of hindsight.


The idea that a nation state could not make use of the hundreds of nuclear weapons in its territory is just absurd. It's sillier than the people that think disk encryption will spare them the crowbar to the face. Beyond the whole chauvinistic idea that it was "Russians" that built them in the first place.

Zelensky is far too concerned with the human costs of war to use nukes, even if he could. He doesn’t have a napoleon complex.

Human costs of war is precisely the reason to use nukes.

Why not?

Russia invades. Ukraine launches nukes. Every major city in Ukraine is ash. Several major cities in Russia are ash. Millions die plausibly.

That scenario is not what would happen from an invasion.

Zelensky would not have used nukes to prompt the death of millions instantly. He would have proceeded with the same defensive war.

The false premise rests on: it's better for everyone to die than live under Russian occupation. That would overwhelmingly be chosen false by the population in question that is being invaded.

All those people that lived under Soviet Russia occupation, they were better off dead in nuclear fire than living under said occupation? Obviously not what the masses would have chosen (just look at what they did choose to do while living under Russian occupation - how many gave up their lives to fight back?). It's fundamentally why nuclear weapons as deterrant is largely fraudulent. They're solely viable as a last option against total oblivion at the hands of an enemy: it entails everyone dies, which means there has to be a good enough reason for everyone to die to justify use.


> All those people that lived under Soviet Russia occupation, they were better off dead in nuclear fire than living under said occupation?

As someone from a country that used to be under russia n boot - the fireball is preferable.


This isn’t how nukes would get used. They wouldn’t just fire them at cities to start with. It would most likely be something tactical, but perhaps end up escalating to insanity anyway

You don't leave room to escalate beyond use if nukes anymore. Russia's response to a tactical nuke would be to turn Ukraine into glass. All leaving additional escalation on the table does is make sure that you don't make good on your word to make everyone lose too.

> You don't leave room to escalate beyond use if nukes anymore. Russia's response to a tactical nuke would be to turn Ukraine into glass

Tactical nukes are in ambiguous territory. Russia launching a blizzard of nukes at Ukraine is difficult to distinguish from Russia nuking NATO. To turn Ukraine into glass, Russia would need to gamble that Washington and France trust it.


Sure, but that practically looks like Russia telling NATO what it's going to do, then most of NATO sitting at DEFCON 1 and being ready to respond the instant any Russian missiles look like they're not going towards Ukraine. NATO has no reason to inject themselves into a nuclear exchange more than diplomatically, and has the ability to respond well after they know where Russian missiles are going to land.

> that practically looks like Russia telling NATO what it's going to do

Which is indistinguishable from a Russian first strike. Russia glassing Ukraine is about as rational as it launching a first strike. So serious people would have to weigh–based on incomplete information–whether Putin is still in charge and if tens of millions of lives might be saved if we neutralise their silos first.

Outside nuclear holocaust, Russia, on launching a strategic nuclear strike on Ukraine, would have crossed a red line Beijing, New Delhi and Tehran each value. (The last because Russia's justification for glassing Ukraine is easily copy-pasted by Israel.)


> Which is indistinguishable from a Russian first strike.

It's really not. Once they've launched, it's pretty clear where they're going. All NATO needs is enough time to respond, and they absolutely have that.

> Outside nuclear holocaust, Russia, on launching a strategic nuclear strike on Ukraine, would have crossed a red line Beijing, New Delhi and Tehran each value. (The last because Russia's justification for glassing Ukraine is easily copy-pasted by Israel.)

If you look, their nuclear policy is to respond overwhelmingly to a nuclear strike. India for instance has officially said they "will not be the first to initiate a nuclear first strike, but will respond with punitive retaliation should deterrence fail". https://web.archive.org/web/20091205231912/http://www.indian... That's diplomatic speak for 'we reserve the right to glass you after any nuclear strikes in our territory'.


Or, MAD means that neither a nuke launch or an invasion happen in the first place.

Your comment highlights some tensions in deterrence theory, but it also oversimplifies over a few things.

If you notice, most countries with nuclear weapons also have published and publicized nuclear use policies. These documents usually highlight lines and conditions under which they will consider the use of nuclear weapons. This is by design. Ambiguity in nuclear policy invites miscalculation. Of course, you don't want complete certainty, lest you risk your enemy push right up to your line and no further; you want your lines defined, but a little blurry, so that the enemy is afraid to approach, much less cross. This is called strategic ambiguity. This is why Russia has been criticized a lot by policy experts for their repeated nuclear saber-rattling. They're making the line too blurry, and so Ukraine and their allies risk crossing that line accidentally, triggering something nobody truly wants to trigger.

In the case of a nuclear-armed Ukraine, given Russia's tendency to like to take over neighboring countries, they could include "threats to territorial integrity" as a threshold for going nuclear. They could also be a little more 'reasonable' and include "existential threat to the state" - which the initial 2022 invasion very much would fit.

What this looks like in practice is that Russia, in their calculations, would factor in the risk of triggering a nuclear response if they tried to take Ukrainian territory. Now, they may believe, as you seem to, that Ukraine would not risk the annihilation of its people over Crimea/Donbas. At which point, Russia would invade, and then Ukraine would have to decide. If Ukraine does not escalate, then they will lose deterrence and credibility for any future conflicts, assuming they survive as a state. If Ukraine does escalate, announces to Russia they will launch a nuclear attack to establish deterrence (reducing ambiguity that this is a full nuclear exchange), and then launches a single low-yield nuke at Russian invading troops, they place the ball back in Russia's court: Ukraine is clearly willing to employ nukes in this war - do you believe they won't escalate further, or do you believe they will launch their full arsenal if you continue?

This is essentially a simplified version of deterrence theory. The idea is to give the other side all possible opportunities to de-escalate and prevent a full nuclear exchange. If you do not back up your policy with actual teeth - by using nukes when you said you would - you're signalling something very dangerous.

This is also why nuclear-armed states do not tend to rely solely on their nuclear deterrence. They want a solid layer of conventional capabilities before they have to resort to their proverbial nuclear button. A strong conventional force keeps conflicts below the nuclear threshold, where deterrence theory tends to get very dangerous, very fast.


> Ambiguity in nuclear policy invites miscalculation

Most nuclear doctrines are ambiguous by design. ("Reserve the right," et cetera.)


>The false premise rests on: it's better for everyone to die than live under Russian occupation. That would overwhelmingly be chosen false by the population in question that is being invaded.

Well, Russian occupation usually means your town slowly undergoes mass extermination and genocide....

so yes? nuclear fireball is potentially preferred


If having nuclear weapons did anything at all to prevent cyber attacks, the US would not be getting constantly victimized by cyber attacks.

I think "this kind of operation" refers to the entire "we bombed your capital and stole your President" thing, not just the cyber component of it.

It seems extraordinarily unlikely we'd have attempted such a thing if Venezuela had nukes.


Probably, but there is also some speculation usa had help on the inside, so it probably depends on the nature and pervasiveness of that help.

I agree with that speculation, but if you keep your launch chain of command short enough (as the US does), nukes can also be a deterrent to a palace coup; doubly so for a foreign-backed one.

There's still a lot of information coming out, a lot of it conflicting, so that's hard to say.

And frankly, the Venezuelan military is absolutely tiny and has been facing the same economic issues as the rest of the country. They have 24 F-16s, but rumor is none of them work anymore, maybe some SU-30s, but those would be shot down pretty much as soon as they were scrambled. There was pretty heavy bombing before hand to knock out AA. And they bombed Chavez's tomb, which is quite a dick move of there wasn't any AA there; blowing up a graveyard for shits and giggles on an op is some shit even cartels have a little bit more respect than to do.

IDK, the whole thing seems like equally could have been mostly what it says on the tin, with no more than the normal intelligence HUMINT/SIGINT/*INT cloak and dagger crap to have the right intelligence.


I think by "this kind of operation" he means extrajudicially removing a sitting president (legitimate or not) of another country for trial elsewhere. Not cyber attack or espionage.

Oh, so the commenter is not actually talking about the BGP anomalies at all? He's just hijacking the comment section to advocate for nuclear proliferation?

What? That is awful logic.

Cool, but outside the scope of the TFA.

Try, https://news.ycombinator.com/item?id=46473348.


the popular conspiracy theory among Russian opposition is that Maduro exit was negotiated, so he will do small time at a Fed club and would preserve significant amount of his money (at least couple hundreds of millions), and after completing the time will end up with his money in Russia/Belarussia.

We can see that nobody was going to resist the operation in Venezuela, so it doesn't really matter that Venezuela doesn't have nukes. Using nukes isn't just a matter of pressing a button, it involves a lot of people and processes - thus any significant opposition inside the force or just widespread sabotage will make it unusable.


It strikes me as completely possible that the exit was negotiated. The fact that they knew his exact location and "luckily" nabbed him right before he went into some kind of panic room / bunker is certainly... something.

But it seems equally likely to me that he was sold out by somebody in the VZ government/military. And that the paltry military resistance was because they saw direct confrontation with the US as suicidal.


I think it is kind of both - the exit was ultimately negotiated because most of the VZ government/military either sold him or at least abandoned him and shown no interest in any further support of him.

Nuclear deterrent is absurd.

You have to assume everyone is willing to die over every single thing short of obliteration.

So what's the scenario then? Venezuela has nukes. The US abducts Maduro. Venezuela launches its nukes, everyone dies on both sides. Please, explain that laughable premise. Everyone in Venezuela dies for Maduro? Go on, explain it, I'll wait.

Back in reality: Venezuela has nukes. The US abducts Maduro. Venezuela shakes its fists at the sky, threatens nuclear hell fire. Nothing happens. Why? The remaining leadership of Venezuela does not in fact want to die for Maduro.


> So what's the scenario then? Venezuela has nukes. The US abducts Maduro. Venezuela launches its nukes, everyone dies on both sides.

US attacks, Maduro threatens to launch nuke(s) ... then what? Do you call bluff?

Maduro was capture in a militair base (as he did a Saddam, switching sleeping locations), he almost made it into a safe room. What if he had nukes and made it to the safe room. You know the expression "Cornered rat"... For all he knew, the US was there to kill him. The US killed his 30 Cuban bodyguards so high change Maduro thought its his end.

> "Cornered rat" refers to the idiom that even weak individuals become desperate and dangerous when given no escape, often applied to intense political or military pressure.

The scenario that you called, that nobody wants to die for Maduro, is you gambling that nobody want to die for him or not follow the chain of command! Do you want to risk it? No matter how many precaution you take, are you really sure that not one or more nukes go to Texas or Miami?

This is why Nukes are so powerful, even in the hands of weaker countries. It gives a weaker country a weapon that may inflict untold dead to the more powerful country (let alone the political impact). Its a weapon that influences decision making, even in the most powerful countries.


Your tone is unnecessarily condescending and confrontational, but your point is reasonable with respect to Venezuela and Maduro.

With Iran, North Korea, or Ukraine, the calculus is different.


> remaining leadership of Venezuela does not in fact want to die for Maduro

Now do this same exercise for Taiwan.


There is something in between 0 nuclear weapons used and all nuclear weapons used.

That's like arguing against the police arresting criminals because it will incentivize them to acquire weapons.

The only consistent action for the US to take, given they - and much of the world - do not consider Maduro the legitimate President of Venezuela, was to remove him from power.


Terrible take in the 2nd premise of your argument. Is Venezuela a sovereign nation or a colony? Can similar logic be applied against Russia or even the US?

> Is Venezuela a sovereign nation or a colony?

Reality is not that black and white. We may no longer have formal colonies, buy the world is still carved up by spheres of influence by the superpowers. Displease them and you'll find out how limited your sovereignty really is.


Of course it can, and it is. Such logic is behind the argument in favor of arresting Putin. Many have argued that should happen if he were to step on their nations' soil. The reason no one thinks seriously about going into Russia and enforcing open arrest warrants is that they fear the consequences, though maybe in light of Russia's revealed impotence that fear is unjustified.

The sovereignty of Venezuela is not the right argument here, because practical sovereignty is not absolute and there are just war grounds for Maduro's capture. The man was an awful tyrant.

However, just because there are just war grounds for Maduro's capture per se doesn't mean the operation was justified by just war principles. It wasn't. It takes more than just the fact that the ruler is tyrannical to justify an operation like this. Operations like this can risk civil war and all sorts of horrible fallout that also need to be considered. There must be a realistic plan following the removal of the tyrannical leader. As always, justice must be upheld always. And of course there are the procedural and legal aspects that Trump totally ignored.


I agree with you for the most part. The subtext to all of this is Maduro's close relationships with China and Russia of course.

And replace him with the just as illegitimate VP? What world is that consistent in?

This doesn't look like anything malicious, 8048 is just prepending these announcements to 52320.. If anything, it looks like 269832(MDS) had a couple hits to their tier 1 peers which caused these prepended announcements to become more visible to collectors.

If you were not already entirely reliant on American tech before, this ought to convince you to put jump in with both feet. What could possibly go wrong?

There is not really any reason to conclude that "american tech" was responsible for this attack. If anything, given all the sanctions Venezuela was under and how friendly they are with china, i would be surprised if they were using american tech in their infrastructure.

[Of course i agree with the broader point of dont become dependent on the technology of your geopolitical enemies]


It’s for sure another alarm signal for the EU to further reduce dependencies on our newest geopolitical enemy… the United States of America.

There are other attack vectors beyond infrastructure though when the population all have Android Smart Phones running Play Services and communicate using WhatsApp.

Most everyone in the world has a Google or Apple phone in their pocket. I'm not sure how much more reliant you can get.

It's pick-your-poison, really.

Technology is notoriously expensive to develop and manufacture. One must either have native capacity (and thus, the wealth) to do so, or must get it from someone else.

Other Western/US-aligned countries might have the ability to do so, albeit at geopolitical and economic cost, because the only thing you're likely to gain from kicking the US out of your tech stack and infrastructure is a tech stack and infrastructure free of the US. Meanwhile American companies will be developing new features and ways of doing things that add economic value. So at best, a wash economically. Maybe the geopolitical implications are enticing enough.

Places like Venezuela? Nah. They'll be trading the ability of Americans to jack with their tech infrastructure for the ability of the PRC, Non-US Western nations, or Russia to jack with their tech stack.

The geopolitics of technology are a lot like a $#1+ sandwich: the more bread you have, the less of someone else's $#1+ you have to eat.


There were reports they had considered Christmas Day and New Year's Day. I wonder if it was far enough along that you could see similar BGP anomalies around those times.

Not from the cloudflare dashboard, you can zoom out. The night of the attack doesnt even really stand out as abnormal when zooming out that far.

So you're saying I can't set an alert for these conditions and use the timing to place a quick bet on the geopolitical polymarket du-jour?

https://finance.yahoo.com/news/one-polymarket-user-made-more...


Yeah, I was thinking it definitely needs to be correlated to geopolitical tensions in some way. Polymarket data might be helpful in this case- and provides incentives for putting this kind of data together.

Was the OSRS economy affected by the strikes? I'm assuming they didn't disrupt internet access for most Venezuelan citizens but I have not looked into it yet.

Yes, it looks like it definitely was: https://x.com/eslischn/status/1104542595806609408

Unless I'm missing an update, it appears that this post is from 2019?

I'd say that an OSRS outage would be more likely to measurably affect the Venezuelan economy than the reverse.

Any osrs Venezuelan clans you’re looking to contact about this?

Fascinating find and investigation. While there isn't a solid conclusion from it, glad it was written up, perhaps someone will be able to connect more dots with it.

For a length-15 ASpath to show up on the internet, a whole bunch of better routes need to disappear first, which seems to have happened here. But that disappearance is very likely unrelated to CANTV.

Furthermore, BGP routes can get "stuck", if some device doesn't handle a withdrawal correctly… this can lead to odd routes like the ones seen here. Especially combined with the long path length and disappearance of better routes.


I wonder if this can be monitored on a global scale as a sort of predictor of “something gonna happen at country X”.

What would be the result of this? I think it would route data through Sparkle as a way of potentially spying on internet traffic without having compromised the network equipment within Venezuela, but I'm not familiar enough with network architecture to really understand what happened.

Maybe there would be some benefit in just dropping some packets. For example to WhatsApp, Telegram, Gmail servers. Could add a communication delay that could be critical and denies people a fairly reliable fallback communication method.

The effect of this would be traffic from GlobeNet destined for Dayco would transit over CANTV's network for a period.

I'm not sure why the author singled out Telecom Italia Sparkle.


I wonder what kind of capabilities the US army didn't use during this operation.

BGP is so unsecure that almost anyone can create chaos.

Even by accident!

or even by normal load from someone deciding to split a /8 prefix into /24's

Most BGP peers have router filters in place. It's not 1996 anymore. I remember the days of logging into a Cisco connected to a Sprint T1 and seeing a coworker had fat fingered a spammer's route, sending it to null0. Oops. How did that happen?

I worked as a contractor for a IoT gig that sold sim cards services for buses, trains et cetera.

The radio towers we used to access to obtain the accounting data (CDRs) all had the same very weak password.


Let’s be honest, that was a crazy operation. I wonder whether they really secured all chances of success, or just winged it with chances of not depositing the leader, and him being able to summon his diplomatic relations into 50 countries declaring war to the USA.

While on their way out, if the USA could set everything back to IPv6, that would be nice.


The outcome is less-crazy if one views it as assisting a palace-coup, partnering with a bunch of Venezuelan government and military insiders already seeking to depose Maduro, able to subtly clear the path and provide intel.

P.S.: In that scenario, it's quite possible for both groups of conspirators to benefit from denying it and saber-rattling:

* The (remaining) Venezuelan government gets to point to Big Evil America to unify (or crack-down-upon) an unhappy public, and they avoid being personally tarred as unpatriotic.

* Trump et al. get to "wag the dog" as distraction from crimes and mismanagement back home.


> him being able to summon his diplomatic relations into 50 countries declaring war to the USA.

As if. Dictators only do things that benefit themselves, and deciding to attack the US is suicide and/or world ending.


Took a long time to catch up with Bin Laden after he attacked the US.

Let’s be realistic.

Not easy to find one man in a haystack. Guerrilla warfare has always been insanely overpowered as a defense tactic anyways, as are terrorist attacks.

The US can realistically only be challenged militarily by Europe or Asia, assuming a unified continent, and the US is on the offensive. If it’s defensive, the US might put up a good fight against the rest of the planet.


we don't really have a way to tell if it was even real, it would actually be a rather trivial operation for the government during those times and the entire thing could have just been overplayed and/or involved collaboration from all sides.

none of those documents exist since it was probably never documented to begin with so we will never know I guess.


No one would lift a finger for him. Russia just watched. The Chinese too. They may be allies in words but in the end each dictator just care about themselves. Just like how Trump wouldn’t help any ally unless he got something out of it.

Of course they didn't. While I can't imagine Russia is exactly happy that it lost an ally in the Western Hemisphere, this kind of action is very much aligned with Putin's multi-polar worldview where the great powers leave each other to play empire in their respective spheres of influence. It helps justify things like invading Ukraine. I can imagine some in the Chinese military are over the moon right now, taking notes on how to force regime change in Taiwan.

> While on their way out, if the USA could set everything back to IPv6, that would be nice.

You actually think the US would leave things better than they found them?


Only when it's oil infrastructure.

They never ‘leave’ that.

There are BGP anomalies every day.

Alternative theory: Part of the operation caused power outages or disrupted some connections, the BGP anomalies were a result of that.

The data would make that more likely, because deliberately adding a longer route doesn't achieve much. It's not usually going to get any traffic.


The BGP anomalies were 24-hours~ before the power outage, so I'm not sure I follow what you're arguing.

What I mean is that cause and effect here could be different then the author thinks. We see some route changes, but those changes make no sense on their own since they wouldn't capture any traffic. That makes it more probable that BGP was not the attack, but that some other action caused this BGP anomalie as a side effect.

For example, maybe some misconfiguration caused these routes to be published because another route was lost. Which could very well be the actual cyber attack, or the effect of jamming, or breaking some undersea cable, or turning off the power to some place.


I think what the other commenter is saying is that the BGP changes happened 12 hours before any of the power loss/bomb drop, so that eliminates your primary cause.

I never understood the (now decade old) argument of 'parts of the Internet cannot be shut down'

Clearly and empirically, BGP can shut off parts of the Internet, just as Trump wanted to do in 2015.

https://finance.yahoo.com/news/dear-donald-trump-no-you-1322...



Symbolic link to the Cloudflare RPKI status for CANTV.

[1]:https://radar.cloudflare.com/routing/as8048ref=loworbitsecur...


Cyber-warfare capabilities on this level seem pretty horrific. What if you could simply turn off the power grid of Kyiv or Moscow in anticipation of a strike? That seems extremely disorientating. What if you could simply turn off the power grid indefinitely?

Russia attacks Ukrainian power grid on a weekly basis. Not only with cyber-attacks but with actual bombs. Over Christmas 750k homes in Kyiv were without power or heating. This is not a hypothetical it's daily reality for millions of people in Ukraine.

> What if you could simply turn off the power grid of Kyiv or Moscow in anticipation of a strike?

I expect every major world power has a plan to (attempt to) do precisely that to their enemies.

https://en.wikipedia.org/wiki/Graphite_bomb

> The US Navy used sea-launched Tomahawk missiles with Kit-2 warheads, involving reels of carbon fibers, in Iraq as part of Operation Desert Storm during the Gulf War in 1991, where it disabled about 85% of the electricity supply. The US Air Force used the CBU-94, dropped by F-117 Nighthawks, during the NATO bombing of Yugoslavia on 2 May 1999, where it disabled more than 70% national grid electricity supply.

I would not, however, take "Trump said something" as indicative of much. "It was dark, the lights of Caracas were largely turned off due to a certain expertise that we have, it was dark, and it was deadly" is both visibly untrue from the video evidence available, and is the precise sort of off-the-cuff low-fact statement he's prone to.


General Caine specifically said they utilized CYBERCOM (which is the US inter-branch hacking command) to pave the way for the special ops helicopters. I personally have no doubt that any (whether or not they all were) lights being out was due to a US hack. Some of the stuff that got blown up may well have been to prevent forensic recover of US tools and techniques.

I have no doubt they used cyberattacks and electronic warfare.

Trump just seems the worst person in the world to play a game of telephone with on such a subject.

For example: https://www.defensenews.com/air/2025/05/16/pentagon-silent-a...

> “The F-35, we’re doing an upgrade, a simple upgrade,” Trump said. “But we’re also doing an F-55, I’m going to call it an F-55. And that’s going to be a substantial upgrade. But it’s going to be also with two engines.”

> Frank Kendall, the secretary of the Air Force during former President Joe Biden’s administration, said in an interview with Defense News that it is unclear what Trump was referring to when he discussed an “F-22 Super,” but it may have been a reference to the F-47 sixth-generation fighter jet… Kendall said it is also unclear what Trump was referring to when he discussed the alleged F-55.


Also: “Everything’s computer!”

On the other hand, Trump has a track record of leaking capabilities.

Something like this more or less happened during the initial Israeli strike on Iran ?

From what I remember reading, they were able to gain air dominance not because Iranian air-defense was bad, but because it was put almost completely out of service for a brief period of time by people on the ground - be it through sabotage, cyber-warfare, drone attacks from inside, allowing the Israeli jets to annihilate them.


> not because Iranian air-defense was bad, but because it was put almost completely out of service for a brief period of time by people on the ground - be it through sabotage, cyber-warfare, drone attacks from inside,

Wouldn't that constitute air defense being "bad"? There are no "well technically it should have worked" in war. Failing to properly secure the air defense sites is bad air defense.


Not really. Ferrari is a great car, but with punctured tires or bad driver, it won't win any race.

Although I do agree, that in war only the final outcome is important. It's just that in this case it failed not necessarily because of technology, but because of humans.


A Ferrari with punctured tires isn’t a great car, it can’t drive. It’s an immobile, useless hunk of metal with a great engine and transmission, similar to disabled air defense systems: really expensive, useless hunks of metal.


The unquestioning logistical and intelligence support from the US military is truly formidable, and probably expensive.

Read about Stuxnet

It's been well known to be a major part of world power war plans for like 20 years now. Yes, it's a terrifying concept.

Russia tried. They haven’t managed to do anything very serious.

I don't think calling shutting down the internet horrific is appropriate at all in the context of bombings.

Ridiculous post. Power outages would kill a lot of people if sustained. A Carrington event would devastate modern society.

The only anomaly was military. As far as I can tell, Venezuela's AD was shut down, or told to shut down.

Didn't the US use Chinooks? They're supposed to be loud. And AD didn't take even one out.

If Venezuela as corrupt as most socialist countries, I have no doubt that someone in his inner circle gave him up.

Back in the days of our version of socialism we had Indian politicians selling out for $100K, leave alone $50M.


Look for the same with Greenland or Canada next :/

the rest of the world is weirdly too passive, there's a smell of shock

IMHO the rest of the world isn't asleep. Denmark's prime minister said the same as you, for example. US just got roasted at UN by inter alia, France, with ~20 countries either speaking the same or asking to speak on it. That's just from 30s with front page of nytimes.com.

In EU, so far I believe only the PM of Spain had the backbone to speak properly with anything that could be considered "strongly worded", proving that it's possible.

The others have been variants of "Celebrating liberation of the Venezuelan people from the illegitimate dictator, a new dawn for democracy! (oh and everyone (not naming names) please behave and try to be mindful of international law and human rights from now on)"

Not a single word about the dead, for one.

While the NYTimes headline names France as critical, here's Macron (still only posting) on Twitter: https://xcancel.com/EmmanuelMacron/status/200752538697719404...

Meanwhile POTUS is over there talking literally and openly about how US are "going to run things" and motivating it with taking the oil and how they don't really care about democracy one way or other.


This has happened because the party that rules Spain has ties to the dictatorship.

This goes so far that one of the ministers of the government met in Spain with Delcy Rodriguez, bringing her a few briefcases of something that hasn't been explained yet, despite her being subject to a travel ban in the EU.

Of course this is a progressive government so the EU said absolutely nothing about it.


Given that the nukes topic came up ... Will the US/Trump be so aggressive if Denmark has a few nukes that can hit the US? Or at minimum sink a invading fleet?

These actions by Trump are only reinforcing that we will see even more of a push for everybody to get their own nukes, even in Europe.

People do not need to yell "bad trump", to have his actions result in decisions being pushed forward like this.

Theodore: "speak softly and carry a big stick"... and nuke(s) is a BIG stick.


That just sounds like more 'strongly worded letters' which never go anywhere and they never do anything about.

It's over for the EU. They rested on their laurels for too long and cowardice rotted them from the inside.

I don't think Denmark will put even a smidge of resistance up. Trump is going to bark some orders, boots are going to hit the ground and it's fait accompli.


What does action (i.e. not-strongly-worded-letters, i.e. not words) look like?

Capture Trump?

Invade the US?

The idea the EU is some bureaucratic hellhole incapable of anything is really odd and nigh-universal - I'm used to righties adopting it from Brexit & antipathy for social demoracy, but I'm not used to see it as a despondent wailing from people otherwise sympathetic to it.

Note no one even mentioned the EU - it's so universal a reaction to "US is acting bad" that it came out of nowhere. Not to pick on you: when I was first replying, I also replied as if it was the EU! Had to go back and read the comment I was replying to and corrected myself before posting.


One non military but economical retaliation that would affect our industry is to stop respecting American’s intellectual property. Some variation of the trade bazooka. https://en.wikipedia.org/wiki/Anti-Coercion_Instrument

> What does action (i.e. not-strongly-worded-letters, i.e. not words) look like?

Europe withdraws from the non-proliferation treaty, publicly resolves to building and maintaining a European nuclear deterrent and greenlights members who have been militarily threatened (the Baltics, Poland and Denmark) to start clandestine programmes.

The last part doesn't even have to happen. Hell, none of it has to happen. But that would be playing from strength.

Unfortunately, Europe is not politically unified enough to do this. (Same for Asia.)


Any sort of pushback at all would be an improvement.

Even now, the EU Commission is trying to 'defuse' the Greenland situation by trying to invoke NATO's fifth article, as if that's worth anything without the will of the USA behind it. You know, instead of like actually drawing out plans for a military alliance, economic retribution (remember all those sanctions against Big Tech which fell apart the moment Trump made even the slightest comment against them?) or… just about anything.

Laws are worth even less than the paper they're written on, and no amount of naïve idealism (and calling it that is me being generous!) will change that. NATO membership is worthless other than as an aesthetic signifier.


Action probably looks like crash-starting multiple nuclear weapons programs. With or without the help of the british/french. Probably with.

I'd imagine programs from: the Nordics and Poland+Baltics. Maybe Germany, probably not.


What happens when you start making nukes and the US doesn't want you to?

Ssetting aside the whole non-proliferation thing, or expense (see NK), etc.

Let's get serious, please.


Sanctions come to my mind.

We would then hack you.

Why set aside expense? You do it anyway by whatever means necessary, like the DRPK. And if you’re a “western democracy” (also known as capitalist dictatorship) and you’re part of the ruling class, you still have the incentive to protect your assets, things you exploit in your country, land, natural resources, etc, that the US won’t be sharing or that they want to decrease supply when they take over through puppets or multinationals, and you can always force the public to pay for such a project, like all the times western peoples had to bail out or spend their taxes to benefit private corporations, but now it would look like it’s to protect sovereignty, which is a bonus of course, it would be to protect the local ruling class’s interests, but anyway. It’s clear the Americans will stop at nothing to acquire whatever it is they want, including indirectly violent means like ordering their financial institutions and tech giants to destroy whoever is on the way. The monster was always there since the Cold War and just now it dropped any pretenses.

I don't think anybody cares any bit about Maduro.

understandably, it's more about the acceleration in aggressiveness from Trump clan and the precedent of crossing the usual international red lines

Almost every country made some repudiation note. But I don't think we'll see anybody doing any actual thing because of that.

Not sure why this got downvoted; we're threatening it again, credibly enough that the Danish PM is telling them to shut up.

Yesterday:

> Adding to the alarm, Katie Miller, a right-wing podcast host and the wife of Trump adviser Stephen Miller, posted an image of Greenland superimposed with the American flag and the caption "SOON!"

https://www.nbcnews.com/world/greenland/trump-venezuela-atta...


> Not sure why this got downvoted

Fragile egos. Narcissists desperately need to feel good about themselves. They're caught in a cycle: feel worthless -> do bad things (feed the ego) -> feel worthless.


Whose egos?

a16z.

Same reason this post got flagged and died.

https://news.ycombinator.com/item?id=46356858


wait whose a16z. Can you provide me more context about it?

Also what was written in that comment if you can tell and why it died?

Another quick question but is there no storage of flag/died posts on hackernews? Seems like its possible with things like https://hn.live/ or I saw some other website like this as well. Perhaps, something like this can store flag/dead posts but I am not really sure if it has any use case but I am just curious what was written in that post.


It's not only downvoted, it was flagged, and dead. (flag accepted by moderator, no one else will see this comment thread without expanding)

Mr. Trump good.

Trump derangement syndrome bad.

If Mr. Trump does what you say eventually, then it was good. (see rule #1)

I see this frequently on HN since the re-election, won't speculate as to why: only way around the downvote is to criticize policy generically, untethered to time, with some sort of micro-focus like you're sharing new information about how things work, not discussing current events.


Ill speculate as to why, paid astroturfers are posting it. Look at Twitter, most accounts that post that insane trump loving crap are in third world countries.

Probably just a coincidence that Garry Tan and Marc Andreseen have so publicly aligned themselves with a cabal of pedophiles.

Of course, because this site is control of Mark Eggman Andrreesen.

> this site is control of Mark Eggman Andrreesen

You're mixing up your VCs?


The other weird anomalies I noticed were that we were out of soy milk. Asked my wife and we never run out of soy milk usually. Don’t know if it means anything but just putting it out there. The President did say he has capabilities.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: