nanog mailing list archives

Re: How should ISPs notify customers about Bots (Was Re: DNS Hijacking


From: "Paul Ferguson" <fergdawg () netzero net>
Date: Mon, 23 Jul 2007 18:04:12 GMT


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Sean Donelan <sean () donelan com> wrote:

On Mon, 23 Jul 2007, Joe Greco wrote:
So how do you connect to the real IRC server, then?  Remember that most
end users are not nslookup-wielding shell commandos who can figure out
whois and look up the IP.

If those users are so technically unsophisticated, do you really expect 
the other users with infected computers to figure out how to disinfect 
their computer and remove the Bots instead?


I would imagine that if we're talking about "unsophisticated" users,
the majority of them have no idea what IRC is anyway -- most of them
are using AIM, or Yahoo! IM, or....

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGpO2Uq1pz9mNUZTMRArtXAKD/gF0YM9MYcLA6AZ2InaNBrlgaHACgngiP
kzDzfUd+9BsdcbxDz1Z9xig=
=OoHG
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


Current thread: