Re: blue security folds

[nocfed <nocfed () gmail com>]

On 5/17/06, Peter Besenbruch <prb () lava net> wrote:
> Mike Adams wrote:
> > I'm really disappointed.
> >
> > All this will do is give all the other scumbag spammers out there proof
> > that using these tactics will work, and they will be able to extort
> > anyone.
> >
> > Who will be next, Trend Micro? Fortinet? Symantec? SANS?
>
> If they actually do something effective against spam, then yes. Blue
> Security was effective in hitting spammers in the pocketbook. Therefore,
> they were targeted. More than that, the spammers began targeting broader
> swaths of the Internet, taking out Typepad, Livejournal, and Tucows. The
> attacker, a person whose handle is "Pharma Master," basically stated, if
> he couldn't spam, there would be no Internet. Given that botnets are so
> cheap, that was not an idle threat.
>
> Bill Gates, I would personally like to thank you for creating a monopoly
> operating system that is so easy to compromise. I'm sure Pharma Master
> thanks you as well, though he may never publicly express it. He really
> should consider a generous donation to the Bill and Melinda Gates
> foundation as a token of appreciation. Any Mafia boss worth his salt
> would do the same.
>
> --
> Hawaiian Astronomical Society: http://www.hawastsoc.org
> HAS Deepsky Atlas: http://www.hawastsoc.org/deepsky

And if the ISP's could get their act together then most of the botnets
would be no more.  This _IS_ something that can be controlled, to an
extent.  Many of the network administrators need a course in
Networking 101 which will greatly assist in tracking down the source
of attacks.  If botnets are required to use their own IP's then how
hard would it really be to track them down and disable them?
Disruption of the end users connection and a flag on their account
should clean them up, although not 100%.  So if you want someone to
blame, blame the ISP, blame the hosting service, and blame the end
user.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/