funsec mailing list archives

Re: McColo: Major Source of Online Scams and Spams Knocked Offline


From: Michael Collins <mcollins () aleae com>
Date: Thu, 13 Nov 2008 10:42:56 -0500

We used to see, with worms, that people would put up rules blocking  
that particular port for two weeks, and then pull 'em down.  The net  
result was that you'd see a spike in the same worm two weeks after the  
initial outbreak.  I think the problem we're dealing with here is more  
of a basic unwillingness to look at a global common solution.  It'd be  
too much like a government, and who wants to be that?

On Nov 13, 2008, at 9:06 AM, Peter Evans wrote:

On Thu, Nov 13, 2008 at 08:28:57AM -0500, Rich Kulawiec wrote:
And that's the most interesting part of the story. Clearly, many of  
us
"out here" could see that McColo, like Atrivo/Intercage, was a major
source of badness.  Why couldn't the providers servicing them -- who
quite obviously had access to far more data than any of us -- see the
same thing?

      Basic human nature, Greed, a tinge of sloth and allow to ferment
      for 6 months before consuming.

      Given the current mess, would you throw away a steady income?

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: