Firewall Wizards mailing list archives

Re: FYI: DDOS services for sale...


From: ArkanoiD <ark () eltex net>
Date: Mon, 12 Nov 2007 20:39:43 +0300

Actually they do get away with it regardless of targets. Unless they
do some "real world" errors.

Same applies to law enforcement. Actually here in Russia if you want
"K department" to get an offending person you likely to do all the
investigation by yourself and present them with the proof ;-)

On Mon, Nov 12, 2007 at 08:29:57AM -0800, Dave Null wrote:
Sadly, unless they attack 'high profile' targets they pretty much do
get away with it. I would hope that various law enforcement agencies
would be concerned about people operating botnets that can number into
the 500k+ range, but a lot of them still view the whole thing as geeky
teenager shenanigans. This topic came up at a quarterly meeting I
attend and an FBI agent sitting near me said openly 'Well, why don't
contact us when these things happen' and that person was slammed with
a battery of 'because you don't do anything, nor do you care'. The
agent didn't agree with this assessment, but at the same time couldn't
think of any cases where DDoSers had gotten nailed for hitting the
'little guys'. As they said in the movie Mega Force, deeds..not words.

I think the biggest problem overall is that the botnet operators keep
their bots in countries that either don't understand or don't care
(and in a few cases, I wouldn't be surprised to find that their
botnets are state sponsored). At that same meeting I attended there
was a great presentation on botnets and the presenter explained the
challenges and frustration of trying to find relevant agencies and
helpful people to listen to his issues. However, he did come up with
two good points I'll pass along.

1. Look for regional CERT organizations. They, since they are in the
region and are computer security folks, will have a clue and will
probably be able to point you to the correct law enforcement agency.

2. If you are American*, call that country's US embassy and ask to
speak to the Security Director. Its the SD's job to be in touch with
various local law enforcement. The presenter said he had great results
talking to the regional SD on an issue

*Basing that off his experience, not sure how other countries set up
their embassies, but may work for you too. YMMV

   -noid
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

email protected and scanned by AdvascanTM - keeping email useful - www.advascan.com 



_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: