SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : The *NEW* Frank Coluccio Technology Forum -- Ignore unavailable to you. Want to Upgrade?


To: Frank A. Coluccio who wrote (2655)4/30/2001 8:36:34 PM
From: Frank A. Coluccio  Respond to of 46821
 
Some responses from ISPs to the contents of the previous post [#2655]:

--------

"How quickly can CN be firewalled anyway?"

--------

> How quickly can CN be firewalled anyway?

"As quickly as you can write route-map filters"

--------

"About as long as it takes to add an import filter on your router?"

--------

"i don't know that it will be that easy.

surely, not all of china connects through a single AS.

as well, i suspect that the same hackers would be able to manage a dial-up
into some extra-china ISP."

--------

> Time to drop AS4134.

"That might backfire. If they learn that the only way to get stuff
through is for it to not come from AS4134, thye might try to make it
appear to come from elsewhere. We might all learn just what sort of
BGP filters AS4134's neighbors have applied ..."

---------

"The folks in the US who counterattack might be well advised to
reconsider doing so. I would imagine that traffic from the US would be
closely monitored. Any new hacking tricks that these counterattacks
might use would then be recorded and analyzed. These techniques could
then be used by them to further attack the US."

--------

"Is it worthwhile to bother given the low rate and
relatively low proficiency of attacks so far?

They're trying to make a statement, sure, and doing
some vandalism in the process. But it doesn't appear
from any firsthand reports I have or news reports
I've seen so far that any serious damage has
been done anywhere. Dropping a country due to
annoyance is a pretty serious step. If their
ministry were directly encouraging all out serious
attacks that would be a different thing, but I don't
see any justification to do anything yet.

Feel free to correct above impression of damage if
you have better info than I do so far."

--------

" just love the way (some) Americans bleat about their
supposed constitutional rights to have their packets
passed between any given pair of networks, but (perhaps
others) are quite happy to route-map out entire
subcontinents on the basis there might be a few
(i.e. statistically insignificant number of)
trouble makers there... Somehow I just can't
imagine someone suggesting AOL / Earthlink
(& I've seen plenty of 'interesting' packets
from there) are blackholed for the same reason
would get away with this on NANOG."

---------

> I just love the way (some) Americans bleat about their
> supposed constitutional rights to have their packets
> passed between any given pair of networks, but (perhaps
> others) are quite happy to route-map out entire
> subcontinents on the basis there might be a few
> (i.e. statistically insignificant number of)
> trouble makers there...

"AS4134 is totally black hat. 100% rogue and haven for spammers and crackers.
They have a bogus replybot which gives automated bullshit excuses to abuse reports."

> Somehow I just can't imagine someone suggesting AOL / Earthlink
> (& I've seen plenty of 'interesting' packets
> from there) are blackholed for the same reason
> would get away with this on NANOG.

"because aol/earthlink actually bother to respond to abuse reports (albeit
slowly).

AS4134 basically tells you to f--- off and eat your spam and tolerate
their script kiddies."

---------

"Is that the right AS number? ARIN and APNIC have no knowledge of it... RIPE
says:

as-block: AS3354 - AS4607
descr: ARIN ASN block
remarks: These AS numbers are further assigned by ARIN
remarks: to ARIN members and end-users in the ARIN

---------

" 'cant block them all, so might as well block none' "?

"Why make script kiddies life easier?"

---------

> The folks in the US who counterattack might be well advised to
> reconsider doing so. I would imagine that traffic from the US would
> be closely monitored. Any new hacking tricks that these
> counterattacks might use would then be recorded and analyzed. These
> techniques could then be used by them to further attack the US.

"Oh for the love of god, 15 web sites get defaced and it's suddenly worth
trying to deny internet access to a billion people?"

"They watch a story on the news, and think "wouldn't it be kewl if...". Any
excuse or boredom will do, and then the media blows it out of proportion
because it makes for an interesting story. I bet it's probably the same
number of hacks that you'd see on a normal day, just against another
country's www..gov's instead of their own."

---------



To: Frank A. Coluccio who wrote (2655)5/1/2001 4:39:45 AM
From: axial  Respond to of 46821
 
Frank, that's what I missed most when the Cold War turned to peace...the invective.

"...the mildew dog government of the U.S..."

You just can't buy insults like that, over here.



To: Frank A. Coluccio who wrote (2655)5/11/2001 4:08:35 PM
From: Elsewhere  Read Replies (2) | Respond to of 46821
 
It's (Cyber) War: China vs. U.S.

That one's over:

Thursday May 10 8:12 AM ET
Chinese Hackers Call Off Attacks
dailynews.yahoo.com

But life on the Net doesn't get boring, here's a new security-related issue, the sadmind worm:

CERT Advisory CA-2001-11 sadmind/IIS Worm
cert.org