3 ms·
Why not redirect _all_ DNS requests to the address of an informational HTTP server, saying "This computer is infected; here is how to fix it..." I am sure that
by justinsb 15y ago
Why not redirect _all_ DNS requests to the address of an informational HTTP server, saying "This computer is infected; here is how to fix it..."
I am sure that Geek Squad would pay a substantial amount of money to be listed as one of the repair options.
The idea that network administrators should have to spend hours hunting down these people is ridiculous. When/if they find them, they're just going to shut them off anyway.
If you're relying on the internet for anything important, you probably want to know that e.g. every key you type is going to some server somewhere.
- pmjordan 15y agoThe there's a certain fear of ISPs implementing work-arounds articulated in the article. I'm not surprised - the IP addresses in question can't ever be reliably reused if some ISPs set up special routes for them. And they will do exactly that if they suddenly get a flood of complaints about "the internet not working".
- justinsb 15y agoThat's a clearer explanation than I was able to parse from the article - thanks! It seems to me that the right thing to do is to implement the blanket redirect centrally. If ISPs want to implement something different for their traffic, they are free to do so. The IPs are probably now no good to anyone anyway - they will be in too many blacklists.
- pmjordan 15y agoI'm not trying to put words in Paul Vixie's mouth by the way, so "explanation" is too strong a word. It's just my interpretation. I'd agree that the article could go into more detail on why this is a bad thing long term; I'm sure there's more to it.