We used to see, with worms, that people would put up rules blocking that particular port for two weeks, and then pull 'em down. The net result was that you'd see a spike in the same worm two weeks after the initial outbreak. I think the problem we're dealing with here is more of a basic unwillingness to look at a global common solution. It'd be too much like a government, and who wants to be that?
On Nov 13, 2008, at 9:06 AM, Peter Evans wrote: > On Thu, Nov 13, 2008 at 08:28:57AM -0500, Rich Kulawiec wrote: >> And that's the most interesting part of the story. Clearly, many of >> us >> "out here" could see that McColo, like Atrivo/Intercage, was a major >> source of badness. Why couldn't the providers servicing them -- who >> quite obviously had access to far more data than any of us -- see the >> same thing? > > Basic human nature, Greed, a tinge of sloth and allow to ferment > for 6 months before consuming. > > Given the current mess, would you throw away a steady income? > > _______________________________________________ > Fun and Misc security discussion for OT posts. > https://linuxbox.org/cgi-bin/mailman/listinfo/funsec > Note: funsec is a public and open mailing list. _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
