I think their responsibility during events such as these are to at a minimum block the ports effected inbound and outbound to the infected customer going as far as totally disconnecting them. Following that up by contacting the customer and explaining why they have been disconnected and where they can go to get the information for clean/secure their systems in order to be reconnected. If they have no IT staff they can bloody well got fisking hire some, either Permanently or on a consulting basis.
Miles -----Original Message----- From: Depp, Dennis M. [mailto:[EMAIL PROTECTED]] Sent: Monday, January 27, 2003 9:54 AM To: NT 2000 Discussions Subject: RE: SQL worm? What is the responsibility of the ISP's? I'm thinking particularly in the case of a small operation with no IT staff. Dennis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, January 27, 2003 9:49 AM To: NT 2000 Discussions Subject: RE: SQL worm? On Mon, 27 Jan 2003, at 8:38am, [EMAIL PROTECTED] wrote: > Someone might consider that part of the blame might belong to the > criminal(s) who wrote and unleashed the worm? Sure. I don't think anyone is saying otherwise. However, there is also such a thing as "criminal negligence". I think that should apply to the people running the insecure servers. Again, it's harming the Internet, and that includes systems that belong to our customers. If it was just their networks being toasted, I wouldn't care -- they made their bed, they can sleep in it. But their negligence is harming others, and that's a problem for everyone. -- Ben Scott <[EMAIL PROTECTED]> | The opinions expressed in this message are those of the author and do | | not represent the views or policy of any other person or organization. | | All information is provided without warranty of any kind. | ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
