3 ms·

This may be a dumb question as I haven't read the bill, but isn't this what CISA is supposed to help guard against in the future? If Linode has an easier way of

• pjc50 11y ago
  Dealing with DDOS has always been way below anti-piracy on in the priority of the relevant US authorities. It's very easy to do and hard to identify those ultimately responsible. Although every now and again a big botnet command-and-control network gets shut down. Nobody's interested in the defensive side of ""cyberwarfare"".
  • fanf2 11y ago
    Botnet takedowns seem to be mostly due to industry cooperation without significant help from the cops.
• MichaelGG 11y ago
  DDoSes are easy because ISPs don't want to filter traffic (BCP 38). If ISPs did this, then it wouldn't be so easy to spoof source IPs and much easier to block or track down offenders. I don't see how CISA is gonna change this. If the USG wanted to stop this stuff, they'd create a policy forcing ISPs to filter. Same as VoIP and fake caller ID. If the FCC really cared, they'd start fining.
• snowwrestler 11y ago
  CISA is really intended to address sophisticated attacks that depend on vulnerabilities or vectors, and therefore have distinct signatures. These signatures are what companies will share with the government and each other. A DDOS is usually just a dumb flood of traffic. There's no signature to share, and blocking IP addresses is usually pointless since big DDOS's come from large networks of hijacked personal computers.