Re: How to Handle ISPs Who Turn a Blind Eye to Criminal Activity?

[Gadi Evron <ge () linuxbox org>]

I am happy to hear about the panel.

Back to the subject at hand...

As things are today, ISPs' authority, responsibility, liability and 
technical difficulties differe considerably from country to country, and 
more over--are not regulated in many fashions (where this applies, can't 
regulate tech difficulty, can we?)

Further, as the swamp is so distorted and radiated, it is often difficult 
to accuse providers who try to cope.

Then we have providers who turn a blind eye to a level where they are 
black hat.

Then we have black hat providers which provide such services. As in 
criminal services.

The sad fact is, these are not just in Russia or China, but exist in the 
US and other western countries as well.

The time soon approaches when we need to clean house if we are to "clean 
the net". I suppose we may as well start with the lower-hanging fruit 
because the very idea of cleaning the net is propostrous.

There is no reason to gun for businesses, but if the businesses are in 
fact criminal (which is surprisingly easily defined, think RBN), and cause 
that much trouble, we can gun for them and feel good about it, too.

        Gadi.


On Fri, 12 Oct 2007, John Kristoff wrote:

> On Fri, 12 Oct 2007 08:00:46 GMT
> "Paul Ferguson" <fergdawg () netzero net> wrote:
>
> > Not intentionally trying to be retarded, but I've received
> > an enormous number of private responses.
> [...]
> > This question is part reality, part surreality.
> >
> > Let me ask you this: What would you do when you have alerted
> > (via abuse@ contacts) a notable ISP in the U.S. (not a tier one,
> > and not just one of them) about KNOWN, VERIFIABLE, and RECURRING
> > criminal activity in their customer downstreams?
> [...]
>
> Hi Paul, as you know, there is a scheduled panel discussion related to
> this topic at the ISP Security BoF.  I encourage anyone who isn't going
> to the peering BoF to participate.  We could also use another person on
> the panel.  Anyone who feels particularly passionate or who would bring
> a unique perspective to the panel I'd love to have you on stage or at
> least willing to come up to the audience mic.  Feel free to nominate
> your friends and I'll solicit them privately without attribution by you
> if you prefer and as appropriate.  :-)
>
> I'd be especially interested in questions, comments or other suggestions
> for me, the moderator, that might help steer the discussion to someplace
> useful.  I'd prefer to take those off-list please.
>
> Some additional BoF details here:
>
>  <http://www.nanog.org/mtg-0710/kristoff.html>
>
> John