Security Incidents: Re: No one wants responsibility

["Craven, William" <William.Craven () IBX COM>]

I wonder if a unresponsive and/or uncooperative ISP would 'have time' if it
were clearly stated in an intrusion report that lack of response/cooperation
would result in the blocking of the ISPs subnet at your firewall for an
indefinite time period and notification to public security posting
identifing the ISP and your response so that others may do likewise if they
wish(censure if you will). The ISPs customers may have something to say if
they start to loose access to substantial portions of the Web.
I suggest this as a possible response to an unfriendly neighbor that
supports the pillage of the neighborhood by his houseguests. I would hope to
promote personal responsability and accountability in the neighborhood.
Bill C.

-----Original Message-----
From: Harlan S. Barney, Jr. [mailto:hsbarney () NYCAP RR COM]
Sent: Tuesday, September 19, 2000 10:10 AM
To: INCIDENTS () SECURITYFOCUS COM
Subject: No one wants responsibility


A few days ago, I received a reply to an intrusion attempt report that I
sent to a Canadian ISP.  He did not want any more reports (I have sent
two) as he did not have time and did not care about what his clients
did.

In browsing through the RR web pages I found that their AUP no longer
contains any reference to hacking, cracking or other intrusions.

Another report to a Korean bounced back.  They post a contact e-mail
address, but then never read their mail.