funsec mailing list archives

Way to go Brit's!


From: "Randall M" <randallm () fidmail com>
Date: Thu, 7 Dec 2006 06:08:10 -0600



1) SECURITY WATCH: British ISP Fires Back at Spammers
Plus: A botnet study; bad password education?

British Telecom has implemented a system whereby they can identify those
customers who are sending spam, especially those that trigger zombies in a
botnet. After identifying the offending customer, they quarantine or
terminate the account, depending on the activity. If quarantined, BT assists
the customer in remediating their PC and returning it to the control of the
owner. 

Well, this is something that has been a long time coming. Finally an ISP is
going to start protecting its customers from other customers, for a start.
When a client within an ISP is infected with botnet malware, typically their
first victims come from the same ISP. BT's new feature will identify these
zombies, block them from communicating with other customers and the
Internet-at-large and eventually get them cleaned.

Of course, there is concern that there will be false positives, but
StreamShield Networks, who's providing the technology to BT, is sure its
Content Forensics product will keep those to a minimum, if not avoid them
entirely.

We certainly hope that this live implementation will yield glowing reports
of decreased spam and malware originating from BT networks and that the
company announces an incredible improvement in response time for its
customers as the network become less congested with garbage traffic. This
will be needed to inspire other ISPs to adopt similar strategies.

In 2001, I spelled out what I termed the "Internet Penalties Plan," 
which basically described an identical process.



Thank You 
Randall M  

===================== 

“You too can have your very own Computer!” 

Note: Side effects include: 
Blue screens; interrupt violation; 
illegal operations; remote code 
exploitations; virus and malware infestations; 
and other unknown vulnerabilities. 


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread: