There is evidence that IP spoofing was _not_ used in the Krebs attacks: https://twitter.com/briankrebs/status/780139030939828224 https://twitter.com/briankrebs

There is evidence that IP spoofing was _not_ used in the Krebs attacks: https://twitter.com/briankrebs/status/780139030939828224 https://twitter.com/briankrebs/status/780139030939828224 This does not invalidate this presentation though. The recent IoT attacks are a new wave, but the point is: - if it's not IP spoofing - you can track the botnet and eventually destroy it. I'm not saying it's easy or hard, but that it's technically possible. - if the attack is IP spoofing, it's very hard to track it down and destroy the source.