Using a series of scenarios, well-known security researcher Robert
Hansen dispelled this myth by illustrating a number of security
weaknesses that can actually arise from using private IP addresses. The
root cause of such problems appears to be when technologies rely on the
nonroutable properties of private IP addresses as a means to secure
themselves--the limited range of such addresses makes it trivial to
figure out the internal IP addresses.
The creator of the Metasploit penetration testing tool, HD Moore,
sums up the issues with RFC 1918. "The mobile aspect of laptops and
smartphones undermines any privacy or security feature based on control
of an IP address or DNS name. Cache poisoning is just one method of
exploiting this--many other attacks become possible when the attacker
can impersonate a trusted host."
For more on this story:
- check out this article at DarkReading
Related Articles:
New option for managing IP addresses
Keep that wireless network protected
Set your sights on compromised networks
By: Paul Mah for
.