Security Incidents mailing list archives

Re: Re: China Experience ?


From: Alif The Terrible <measl () mfn org>
Date: Tue, 23 Jul 2002 12:24:49 -0500 (CDT)


On Tue, 23 Jul 2002, kevin.chen wrote:

DEAR Paul Gear:

    Somebody feel that they cann't contact the china's  Response Team.
    But in china,there are many Response Teams which work to prevent the balckhat.
    Your unawareness of their existances doesn't mean they are not there ,
    but only shows ur lack of understanding of them              

Good Morning Mr. Chen,

        As a network operator of both small (> /20) [part time], and
large (< /17) networks, I have a few comments.

        While I agree that there are various CERT POCs that can be reached
with varying degrees of success for true CERT-level events, however, these
are not really the reason that I, and many others, have completely wiped .cn
IP space off of our respective Internet maps.

        The issue with .cn space is a complete, TOTAL lack of responsiveness
to the everyday issues: spam, scanning, the skript-kiddies who spend *months*
at their Hax0r hobbies without being removed from the networks they inhabit,
etc.  I formally gave up on .cn IP space late last year on all networks under
my direct control, as the effort (several hours a week of reports that
were all completely ignored) simply wasn't worth the return (the one or two
"real" connections a week we had with .cn space).

        Network operators in China seem to have forgotten that no network is,
or can be, forced to carry anybody's traffic.  And if I am going to carry
their traffic, their are going to HAVE to be responsive to my everyday
headaches (when those headaches live on .cn space).

        China (Chinanet in particular) is quickly removing itself from the
rest of the IP world by providing "safe harbor" to every form of miscreant
who is willing to pony up a few dollars/yen - and when China finally realizes
that there is nobody left who is willing to carry their traffic, it will be
too late. 

-- 
Yours,

J.A. Terranson 
sysadmin () mfn org

If Governments really want us to behave like civilized human beings, they
should give serious consideration towards setting a better example:
Ruling by force, rather than consensus; the unrestrained application of
unjust laws (which the victim-populations were never allowed input on in
the first place); the State policy of justice only for the rich and 
elected; the intentional abuse and occassionally destruction of entire
populations merely to distract an already apathetic and numb electorate...
This type of demogoguery must surely wipe out the fascist United States
as surely as it wiped out the fascist Union of Soviet Socialist Republics.

The views expressed here are mine, and NOT those of my employers,
associates, or others.  Besides, if it *were* the opinion of all of
those people, I doubt there would be a problem to bitch about in the
first place...
--------------------------------------------------------------------



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: