Blessed DoubleDirect, Who Hijacked Both Ways

Patron of ICMP redirect packets, mobile networks, and everyone who believes traffic always takes the right road.

Life

On 20 November 2014 Zimperium described DoubleDirect, a man-in-the-middle attack that abused ICMP redirect messages, meant to suggest better routes. By sending forged redirects, the attacker diverted the victim's traffic toward themselves in both directions and intercepted it. The technique was seen in real attacks against devices from several vendors, especially on the move.

Prayer

O Blessed DoubleDirect, who points out shortcuts leading to you, let our networks ignore unrequested routing advice. Amen.

How to celebrate

Celebrated by disabling incoming ICMP redirects on systems and gateways that do not need them.

A shortcut suggested by strangers leads straight into trouble.