4 ms·

What if a hospital was disconnected from the Internet because it has some insecure IoT device in it? The truth is that this "enforcement action" will make abso

by costco 3y ago

What if a hospital was disconnected from the Internet because it has some insecure IoT device in it? The truth is that this "enforcement action" will make absolutely 0 difference because these devices were just used as proxies to launch attacks. There are a million other people offering this as a service. And it was a botnet with "hundreds of devices." That is literally nothing. People who want to live in this world where abuse emails are king and a bunch of Spamhaus type people lord over the Internet always weird me out.

2OEH8eoCRo0 3y ago
Hundreds is plenty if your objective isn't DDoS. https://www.justice.gov/opa/pr/us-government-disrupts-botnet-peoples-republic-china-used-conceal-hacking-critical https://www.justice.gov/opa/pr/us-government-disrupts-botnet... > China’s hackers are targeting American civilian critical infrastructure, pre-positioning to cause real-world harm to American citizens and communities in the event of conflict
- costco 3y ago
  I mean it's enough to make at the most a few thousand a month selling residential proxy plans on crime forums. Not really significant. There are orders of magnitude larger botnets (some 100k, 400k+ in size) you can read about on https://blog.netlab.360.com/ https://blog.netlab.360.com/. Edit: I agree it is important to do takedowns. Qakbot, GameOver Zeus, Emotet, Snake, etc all had actual espionage risk / were cumulatively involved in billions of dollars of theft. But this botnet seems sort of irrelevant.
mschuster91 3y ago
> What if a hospital was disconnected from the Internet because it has some insecure IoT device in it? Give them a remediation time of 24 hours. If that doesn't help, cut them off anyway, as that's the only thing that will force management to give their IT people actual staff and budget. Hospital IT is almost always a shitshow and that won't change until external pressure forces management's hand.
- FpUser 3y ago
  And if any patient dies / suffers / injured because of this jail whomever had this genius idea.

by costco 3y ago

2OEH8eoCRo0 3y ago

Hundreds is plenty if your objective isn't DDoS. https://www.justice.gov/opa/pr/us-government-disrupts-botnet-peoples-republic-china-used-conceal-hacking-critical https://www.justice.gov/opa/pr/us-government-disrupts-botnet... > China’s hackers are targeting American civilian critical infrastructure, pre-positioning to cause real-world harm to American citizens and communities in the event of conflict

costco 3y ago
I mean it's enough to make at the most a few thousand a month selling residential proxy plans on crime forums. Not really significant. There are orders of magnitude larger botnets (some 100k, 400k+ in size) you can read about on https://blog.netlab.360.com/ https://blog.netlab.360.com/. Edit: I agree it is important to do takedowns. Qakbot, GameOver Zeus, Emotet, Snake, etc all had actual espionage risk / were cumulatively involved in billions of dollars of theft. But this botnet seems sort of irrelevant.

mschuster91 3y ago

> What if a hospital was disconnected from the Internet because it has some insecure IoT device in it? Give them a remediation time of 24 hours. If that doesn't help, cut them off anyway, as that's the only thing that will force management to give their IT people actual staff and budget. Hospital IT is almost always a shitshow and that won't change until external pressure forces management's hand.

FpUser 3y ago
And if any patient dies / suffers / injured because of this jail whomever had this genius idea.