The hijacker forged Hetzner as the origin so origin validation passed, held the prefix from Friday night into Sunday morning, and Softaculous has no logs of any of it because none of the diverted traffic reached its servers.
Perspective Coverage
6 publishers
- Builder
- Builder 31%
- Operator
- Operator 54%
- Investor
- Investor 15%
Reality
- Evidence80
- Adoption45
- Hype gap−15
- Incentives60
- Confidence72
buildOne report1 publisher Attacker forged Hetzner's origin AS to make a 33-hour Virtualizor hijack pass RPKI
Origin validation checks the last AS in the path, so leaving AS24940 there was enough to look legitimate, and the attacker spent the window getting a certificate in Softaculous's name and serving updates from a clone.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap−12
- Incentives66
- Confidence55
Cisco's IOS XR hardening guide puts every reversible router secret behind Type 6
Cisco's baseline reads plane by plane, but the load-bearing part is the password section, where Type 7 obfuscation is declared reversible with freely available online tools and older releases used it for BGP and TACACS+ keys alike.
Publishers:sec.cloudapps.cisco.com
Reality
- Evidence74
- Adoption
- Not scored
- Hype gap−14
- Incentives58
- Confidence66
buildOne report1 publisher Route leak prevention moves into the protocol, and two Tier-1s are stripping the signal
Cloudflare says its RFC 9234 tracking found two large Tier-1 networks removing the Only to Customer attribute from routes they forward, blanking the leak signal for everyone behind them.
Reality
- Evidence55
- Adoption25
- Hype gap+12
- Incentives55
- Confidence50
buildOne report1 publisher Cross-node pod traffic: routing or encapsulation, and why that choice is a debugging decision
A dev.to walkthrough traces one packet from 10.244.1.5 to 10.244.2.5. The operationally useful part is not the hop count, it is which route table or outer header you get to read.
Reality
- Evidence42
- Adoption
- Not scored
- Hype gap+8
- Incentives22
- Confidence54