3 ms·

Or, ISPs could simply block all service to offending IP addresses. The customer would see a notice: "The following IP address delivered N Gb of traffic over our

Or, ISPs could simply block all service to offending IP addresses. The customer would see a notice: "The following IP address delivered N Gb of traffic over our network as part of a malicious DDOS attack. Please patch or isolate the offending device and contact customer service at 123-456-7890 to restore service." I guess that wouldn't make your customers super happy, but it would probably be effective.

tomjen3 10y ago
It would be effective in pissing of customers, more angry calls to support, possibly less retention.
- deegles 10y ago
  If every service provider did the same it wouldn't affect retention. Besides, it seems many people only have one or two options anyways.
  - TeMPOraL 10y ago
    > If every service provider did the same it wouldn't affect retention. If that would somehow happen, you could use this miracle to solve most of the problems on this planet. This is literally the biggest issue of humanity - it's extremely hard to get people to coordinate. Doing so usually requires forcing various incentives to align. In this case, you'd most likely need a direct government involvement to make all ISPs behave.
    - oneeyedpigeon 10y ago
      > it's extremely hard to get people to coordinate That's exactly what government regulation addresses. A truly global approach would be nigh-on impossible, but it should be possible to get all ISPs in the states to come on board, for example.
  - benevol 10y ago
    > it seems many people only have one or two options anyways. The monopolistic structure of the economy is a problem the US suffers much more than other countries (by definition at the cost of the consumer). (Although the tendency to reinforce monopolies naturally applies to all countries.)
- jerf 10y ago
  Despite this, I consider it very likely in probably the next month or two that were going to see ISPs blocking people for this. All the objections as to why it's hard are true, but ISPs can't do nothing, either... a DDoSed internet generates angry customers and support calls too, along with everybody else being angry. And nobody else can do anything about it either; it's the best, if not the only, choice in the set of bad choices we now face. I'd be surprised if they aren't working on it right now.
kybernetyk 10y ago
IP spoofing is still a thing. Could take whole customer blocks of an ISP offline. New kind of attack I guess.
- daxorid 10y ago
  That's why the good lord invented egress filtering. No excuse for ISPs not to drop packets with spoofed src.
  - kybernetyk 10y ago
    That's what's happening in Europe and USA. But many 3rd world ISPs don't filter.

tomjen3 10y ago

It would be effective in pissing of customers, more angry calls to support, possibly less retention.

deegles 10y ago
If every service provider did the same it wouldn't affect retention. Besides, it seems many people only have one or two options anyways.
- TeMPOraL 10y ago
  > If every service provider did the same it wouldn't affect retention. If that would somehow happen, you could use this miracle to solve most of the problems on this planet. This is literally the biggest issue of humanity - it's extremely hard to get people to coordinate. Doing so usually requires forcing various incentives to align. In this case, you'd most likely need a direct government involvement to make all ISPs behave.
  - oneeyedpigeon 10y ago
    > it's extremely hard to get people to coordinate That's exactly what government regulation addresses. A truly global approach would be nigh-on impossible, but it should be possible to get all ISPs in the states to come on board, for example.
- benevol 10y ago
  > it seems many people only have one or two options anyways. The monopolistic structure of the economy is a problem the US suffers much more than other countries (by definition at the cost of the consumer). (Although the tendency to reinforce monopolies naturally applies to all countries.)
jerf 10y ago
Despite this, I consider it very likely in probably the next month or two that were going to see ISPs blocking people for this. All the objections as to why it's hard are true, but ISPs can't do nothing, either... a DDoSed internet generates angry customers and support calls too, along with everybody else being angry. And nobody else can do anything about it either; it's the best, if not the only, choice in the set of bad choices we now face. I'd be surprised if they aren't working on it right now.

kybernetyk 10y ago

IP spoofing is still a thing. Could take whole customer blocks of an ISP offline. New kind of attack I guess.

daxorid 10y ago
That's why the good lord invented egress filtering. No excuse for ISPs not to drop packets with spoofed src.
- kybernetyk 10y ago
  That's what's happening in Europe and USA. But many 3rd world ISPs don't filter.