3 ms·

Here's one: prosecuting the devs that currently spread malware, block (or warn users for) foreign sources that don't cooperate with law enforcement You don't n

by Aachen 1y ago

Here's one: prosecuting the devs that currently spread malware, block (or warn users for) foreign sources that don't cooperate with law enforcement You don't need an ID to find the person behind an IP address + timestamp. The line physically goes to a subscriber (yes, also with CGNAT: ISPs are required to keep logs for a reason). The police can do that in any country. Google isn't an elected government that I want to sit on that seat of power Besides, criminals by definition don't care about laws. Photoediting an ID is not particularly hard, but quite illegal. Tackling the source (the person) ought to help more than impacting everyone who uses a specific distribution mechanism

notepad0x90 1y ago
The devs that write malware are typically in a different jurisdiction, and how can you prosecute them if they're anonymous? That's what this measure does! The moment they use IPs to find devs and prosecute them , every malware dev will just use a vpn or Tor. or just use a compromised device to route their connection. This is a long running cat and mouse game. Criminals care about laws if breaking the law is difficult, because laws have consequences. ID verification isn't as simple as "hey, it's an ID, all is good", and now you're on the hook for the much more serious crime of faking IDs and defrauding. It doesn't need to prevent all criminals, it just needs to be a good enough measure that it reduces the amount of abuse significantly.