3 ms·
When are we going to hold individuals and companies legally responsible for the hardware they control? We already do this for other types of crimes such as rema
by driverdan 13y ago
When are we going to hold individuals and companies legally responsible for the hardware they control? We already do this for other types of crimes such as remailing scams. If you're going to have hardware on the internet you should be responsible for it. There should be penalties for being irresponsible. Ignorance is never an excuse.
- deleted 13y ago[deleted]
- HarryHirsch 13y agoIndeed. If I understand it right, the recent rash of NTP reflection attacks could have been prevented through egress filtering.
- kbar13 13y agothey already are being held responsible. At least in the United States, it's covered under federal law afaik: https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act The more likely problem is shady networks who either explicitly allow criminal activity or are just negligent. A good number of DoS attacks can be stopped just by origin networks implementing BCP38.
- mbesto 13y agoAnd then set the precedence that a person in Indonesia controlling a server in Iceland can be legally responsible in the US? How do we determine jurisdiction?