they already are being held responsible. At least in the United States, it's covered under federal law afaik: https://en.wikipedia.org/wiki/Computer_Fraud_and_

they already are being held responsible. At least in the United States, it's covered under federal law afaik: https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act The more likely problem is shady networks who either explicitly allow criminal activity or are just negligent. A good number of DoS attacks can be stopped just by origin networks implementing BCP38.