Server Attack Foiled

[Jorj Bauer]

Originally Posted by Jason Dunn

I should probably be clear that I don't actually think people should be sued for not running Windows Update. ;-) But it does make for an interesting discussion, which is all I was hoping for.

I want to be there with you Jason, but more often than not I'm on the receiving end of this. I'm not sure if I want to raise public awareness by requiring better practicies (whether that be through a typically nonfunctional mechanism such as litigation, or through an unproved and untried mechanism such as licensing), or if I want things to continue the way they are to keep my job interesting.

[Jorj Bauer]

Originally Posted by Jason Dunn

I should probably be clear that I don't actually think people should be sued for not running Windows Update. ;-) But it does make for an interesting discussion, which is all I was hoping for.

I want to be there with you Jason, but more often than not I'm on the receiving end of this. I'm not sure if I want to raise public awareness by requiring better practicies (whether that be through a typically nonfunctional mechanism such as litigation, or through an unproved and untried mechanism such as licensing), or if I want things to continue the way they are to keep my job interesting.

[jeffmd]

While a user may not be held responsible fully, I think a LAW needs to be made where a host that is getting attacked can legally tell someones ISP to remove the offending computers net access, at which point the users computer needs to run a government or commity sactioned "cleaner".. something that will remove the backdoors and such and when the program gives the user a clean bill of health, the users net access can be reinstated. Also ISP's should simply drop repeated offenders who can't keep their computer from being infected.

This isnt a matter of someone stealing someones car and running someone over. This is more like someone selling drugs out of your trunk, only you don't know it. Or you might know it but just don't care. Or like someone installing a device in your glove box that siphons anthrax into your exhaust. You should be held SOME responability for not having any common sense to investigate what that white smoke is thats coming from your tail pipe on a hot summers day. ^^

[safelder]

Originally Posted by Jason Dunn

I should probably be clear that I don't actually think people should be sued for not running Windows Update. ;-) But it does make for an interesting discussion, which is all I was hoping for.

It's definitely an interesting question. You've actually got me thinking about a law review article. Any law students out there want to help me with research? Full byline credit if you do.

[aroma]

Hmmm... how about MUCH stiffer pentalties for the little pri**s that actually start the viruses and worms, instead of slapping them on the wrist and then offering them a six figure salary at a security firm.

[isilver]

I know there are a few internet providers out their that will stop the offending computer that is causing the attack. Once the connection is disabled the customer then calls tech support and is informed that they need to install proper firewall/virus protection/windows updates. Until the customer complies the connection is not re-established.

Should the person be held liable, I don't think so. Should the customer be forced to resolve the issue before they are permitted to connect to the internet again, absolutely.

[Darius Wey]

Originally Posted by aroma

Hmmm... how about MUCH stiffer pentalties for the little pri**s that actually start the viruses and worms, instead of slapping them on the wrist and then offering them a six figure salary at a security firm.

:rotfl:

Not *all* manage to secure a job though. These days, the penalties are becoming increasingly severe.

[bjornkeizers]

Originally Posted by Ed Hansberry

I am more convinced every day you need a licenese to get online just like you have a license to drive a car.

I've said the exact same thing for the past five years. Some people do the stupidest things, unwittingly harming innocent people in the process.

See, if you want to say.. open a virus and infect your PC, fine - but don't send it to all your friends!!! And some people I know still insist on installing new icons or fish tank screensavers because 'it's free!!!!!!!!' - despite my warnings.

We really need to be protected from the stupid people. They're slowly killing the internet.

[szamot]

Originally Posted by Karen

Not so much if it's hijacked, but if you leave it running in front of the beer store, unlocked, you would be more liable.

K

by the same token just becasue my wallet is sticking out of my pocket does not mean that you can just take it becasue the opportyinty is there. The same goes for the car, once stolen, it is out of your hands. I live in a really nice hood, my foresight tells me that if I leave my car running no one will take it, but if some scum decided to steal it, well then he assumes the risk and the responisbility for his actions.

[Ed Hansberry]

Originally Posted by bjornkeizers

See, if you want to say.. open a virus and infect your PC, fine - but don't send it to all your friends!!!

Most people don't know they did. The virus sends itself automatically just by them opening it. THis is why ISPs have started blocking outbound port 25, which is wrongheaded thinking to say the least.