4 ms·
It would be nice if there was some sort of system in place to resolve attacks at the source. Sounds like a really hard problem though. Based on reports ISPs can
by apitman 2y ago
It would be nice if there was some sort of system in place to resolve attacks at the source. Sounds like a really hard problem though. Based on reports ISPs can identify which routers are causing problems. With more invasive routers they might even be able to identify the specific devices. Then I guess they inform the customer via email or something? What happens if customers don't do anything about it?
Also what's to prevent attackers from sending tons of bogus alerts to ISPs to muddy the waters and undermine the entire system?
- mschuster91 2y ago> Then I guess they inform the customer via email or something? What happens if customers don't do anything about it? They get disconnected and have to provide evidence they cleaned up shop before getting reconnected. > Also what's to prevent attackers from sending tons of bogus alerts to ISPs to muddy the waters and undermine the entire system? Do I care about multi billion dollar companies having to hire a few thousand employees actually skilled to investigate abuse reports? No.
- account42 2y agoThis is exactly how you get hosting providers threatening to nuke your server if you don't respond in an unreasonably short time even though there is nothing actually wrong with it. No thanks.
- mschuster91 2y agoHence why I mentioned that ISPs have to, gasp, hire people to investigate. Someone complains about portscans or has indicators of a server being compromised? That is something the ISP can easily verify on their own.