By continuing to use the site or forum, you agree to the use of cookies, find out more by reading our GDPR policy

FOR MORE THAN an hour at the beginning of April, major sites like Google and Facebook sputtered for large swaths of people. The culprit wasn't a hack or a bug. It was problems with the internet data routing standard known as the Border Gateway Protocol, which had allowed significant amounts of web traffic to take an unexpected detour through a Russian telecom. For Cloudflare CEO Matthew Prince, it was the last straw. BGP disruptions happen frequently, generally by accident. But BGP can also be hijacked for large-scale spying, data interception, or as a sort of denial of service attack. Just last week, United States Executive Branch agencies moved to block China Telecom from offering services in the US, because of allegedly malicious activity that includes BGP attacks. Companies like Cloudflare sit on the front lines of the BGP blowback. And while the company can't fix the problem directly, it can call out those that are slow to contribute defenses. On Friday, the company launched Is BGP Safe Yet​, a site that makes it easier for anyone to check whether their internet service provider has added the security protections and filters that can make BGP more stable. Those improvements are most effective with wide adoption from ISPs, content delivery networks like Cloudflare, and other cloud providers. Cloudflare estimates that so far about half of the internet is more protected thanks to heavy hitters like AT&T, the Swedish telecom Telia, and the Japanese telecom NTT adopting BGP improvements. And while Cloudflare says it doesn't seem like the Rostelecom incident was intentional or malicious, Russian telecoms do have a history of suspicious BGP meddling, and similar problems will keep cropping up until the whole industry is on board. "With that last big route leak from a few weeks ago out of Russia, it was a point at which our engineering team said enough is enough, it’s time for us to start naming and shaming the companies who aren’t doing this right," says Cloudflare CEO Matthew Prince. "Anything that goes wrong anywhere on the internet, we get blamed for it, which is right! Our customers pay us to make sure their internet connections are fast and secure and reliable. So BGP is one of these really frustrating areas that we can’t solve ourselves." BGP is like a GPS mapping service for the internet, enabling ISPs to automatically choose what route data should take over the internet's vast landscape of networks. But really BGP is like using a GPS mapping service run by your opinionated relatives. Your cousin's stepfather says "Oh, take this route. It'll be fast and safe and you get to pass the house with the great Halloween decorations," and you just have to trust him. If he doesn't know what he's talking about—like an ISP advertising a bad BGP route—you could end up stuck in endless mall traffic. The cryptographic tools, route filters, and best practices Cloudflare and other organizations have been promoting are like a sixth sense for detecting when you're getting bad advice. They run actual checks on the BGP routes other ISPs are "announcing," or offering, to make sure they're legitimate and that no one is advertising a problematic route. Visit OUR FORUM to test your ISP.

Microsoft has officially released the final build of Windows 10 2004 to Insiders in the Release preview ring and plans on releasing it to everyone in May as the "May 2020 Update". On Tuesday, Microsoft released the Windows 10 10 2004 version 19041.207 to Insiders on the Slow ring and have announced today that this is the final build to be released to all users in May. Starting today, Windows 10 2004 19041.207 has been moved to the Release preview ring so it can be further tested in production environments before the final release in May. "We are now getting the Windows 10 May 2020 Update (20H1) ready for release and releasing Build 19041.207 to Windows Insiders in the Release Preview ring. We believe that Build 19041.207 is the final build and we will continue to improve the overall experience of the May 2020 Update on customers’ PCs as part of our normal servicing cadence," Microsoft's announcement on the Windows Insider blog stated. As part of this rollout, only 50% of the Windows Insiders in the Release ring will receive the final build automatically at first. Other Insiders in the Release ring can perform a manual Windows Update check to download and install the May 2020 Update. Microsoft is offering businesses who are testing the May 2020 Update in their organization free support for severe issues that are discovered. "This support offering is intended to help resolve issues with business use case scenarios and is limited to Windows 10 Enterprise and Pro editions customers. Microsoft states that there are known issues with Windows Mixed Reality on Windows 10 2004 and that users of this technology should hold off on installing the update until a fix is released. If you run into a severe issue that prevents you or other users in your organization from using a device or compromises the security of personal data, you can use our online form to request assistance directly from Microsoft Support¬—at no cost to you," Microsoft offers. Microsoft states that there are known issues with Windows Mixed Reality on Windows 10 2004 and that users of this technology should hold off on installing the update until a fix is released. Compared to previous Windows 10 feature updates, Windows 10 1909 November 2019 Update was more of a service pack than a new feature-rich version. The Windows 10 2004 (20H1) release will feel more like a feature update with a variety of new features such as a new optional update experience, improved Task Manager, a new Cortana experience, improved Windows Search, and more. Learn more by heading to OUR FORUM.

China fears that once the coronavirus pandemic has passed, Britain will reconsider allowing Huawei to help operate its 5G telecommunications network. The top line: Huawei's access is crucial for China's influence and its ability to conduct espionage. But Beijing's coronavirus lies have fueled British concerns about entrusting Huawei with critical infrastructure. Which explains, then, why Huawei's vice president, Victor Zhang, has just published an open letter urging Britain to stick by its original decision. Fittingly, Zhang's opening and closing sentences carry the Chinese government's favorite propaganda line of the moment: that it is "only by working together" that we can beat the coronavirus. Of course, the "working together" narrative isn't actually about encouraging global cooperation, but rather about discouraging any criticism of China as some kind of attack on humanity. Zhang also laments the "groundless criticism from some about Huawei’s involvement in the U.K.’s 5G rollout ... without presenting any evidence." Seeing as how Huawei is a corporate agent of the Chinese Communist Party, and that its software is designed to provide deniable signal intercept-interact capabilities, Zhang's lamentations ring somewhat hollow here. Regardless, the Huawei executive has good reason to be concerned. In January, British Prime Minister Boris Johnson's Conservative government authorized Huawei to build out noncritical areas of Britain's 5G network. That decision reflected a U.K. Joint Intelligence Committee assessment that limited Huawei 5G access was compatible with British security. But according to The Guardian, the U.K. intelligence community is now pushing for increased restrictions on Chinese access to cutting edge research. First, China's deception over the original coronavirus outbreak in Hubei province isn't the key motive for the shifting U.K. attitude here. Instead, this harder line reflects Joint Intelligence Committee assessments (supported by U.S. intelligence sharing) that Chinese intellectual property theft poses an increasingly unacceptable threat to priority British security and economic interests. This is largely down to Chinese cyber-espionage activities and the deployment of Chinese Ministry of State Security and People's Liberation Army intelligence officers and agents to infiltrate British companies and research institutions. Learn lots more by signing onto OUR FORUM.