Do ISPs Ignore Security Researchers Who Point Out Zombied Machines?
from the not-such-a-good-thing dept
Over the last few years, we've all heard stories about how organized crime groups have taken to using botnets of "zombied" computers to run all sorts of scams and spam campaigns. ISPs have been somewhat slow to react. While they try to use fairly blunt instruments, like cutting off certain ports, many don't seem to have a very good process in place for tracking down and stopping customers whose machines have become unwitting members in a botnet. In fact, security researchers are growing frustrated that when they come across evidence of a hijacked computer, ISPs don't respond at all when told that a customer is causing trouble. There certainly are a few ISPs that are careful to help get rid of botnets, doing things like quarantining or cutting off certain users from their internet access until their machines are cleaned up, but most of the bigger ISPs don't appear to do very much at all. Of course, there is the other side of this story -- which is that when ISPs may be too proactive, it can often snag people whose machines aren't actually doing anything wrong. But, it certainly seems like completely ignoring reports with evidence of a botnet may be going to the opposite extreme.






Reader Comments (rss)
(Flattened / Threaded)
Of course they dont stop it
In major metro areas they can probably choose between DSL and cable, if one of those choices cuts you off for having viruses (a LOT of people have viruses) which one is going to loose customers?
[ reply to this | link to this | view in chronology ]
Re: Of course they dont stop it
I give our customers 5 working days to get their systems cleaned up, then if I do not see any improvement, I cut them off until they can prove to me their are clean.
[ reply to this | link to this | view in chronology ]
[ reply to this | link to this | view in chronology ]
dumbass system admins
[ reply to this | link to this | view in chronology ]
[ reply to this | link to this | view in chronology ]
[ reply to this | link to this | view in chronology ]
three reasons it'll never happen
2) people refuse to take responsibility for their actions
3) people refuse to take steps to mitigate the impact of 1&2
if people refuse to take responsibility for their actions, refuse to take responsibility for their computers, they will most assuredly refuse to take responsibility for their computer's actions.
[ reply to this | link to this | view in chronology ]
Hell yes they ignore it
[ reply to this | link to this | view in chronology ]
Add Your Comment