Re: [logs] Thoughts needed

From: dgillettat_private
Date: Mon Dec 17 2001 - 13:11:28 PST

  • Next message: Gibson, Jerry,, DMDCWEST: "RE: [logs] Thoughts needed" 

    On 17 Dec 2001, at 11:26, Steve Nichols wrote:

> We have this yahoo that said if we don't release one of our dns records to
> him he is going to DDos us.
> Then he gave me his business card.
> 
> 1. If he does, legally what can we do?

  Tell the world.  If enough admins block his /15, his users will 
lynch him.

> 2. Can I go and kick his ass?
> 
> He has a /15 ( 255.254.0.0 ) ( 2 B's )
> He is leasing the IP's from verio.
> I am going to block the /15
> 
> 
> Thoughts?
> 
> Steve Nichols
> Internet Manager

  Ordinarily, I'd say complain to his ISP, but given that it's Verio 
that may not do you much good at the moment.


NOTE:
  On the one hand, DDoS (as opposed to simply DoS) is hard to defend 
against -- blocking his /15 is too little, too close to home to 
achieve much.
  On the other, that first D implies that he intends to use a bunch 
of machines scattered around the net, almost certainly without their 
owners' permission.
  If he's not bluffing, I think you would be doing the net at large a 
public service if you passed his info along to someone who takes 
extortion and mass compromise of systems seriously -- I'd like to 
think the FBI qualifies on both counts.

David Gillett



---------------------------------------------------------------------
To unsubscribe, e-mail: loganalysis-unsubscribeat_private
For additional commands, e-mail: loganalysis-helpat_private

    This archive was generated by hypermail 2b30 : Mon Dec 17 2001 - 14:24:33 PST