nanog mailing list archives
Re: Spitballing IoT Security
From: "J. Oquendo" <joquendo () e-fensive net>
Date: Mon, 24 Oct 2016 15:53:25 -0500
On Mon, 24 Oct 2016, Steve Mikulasik wrote:
if we automatically blackholed those IPs as they get updated it could put a big dent in the effectiveness of Zeus.
That would involve someone lifting a finger and implement a config change. Much easier to implement BCP38 or was it RFC 4732? Would never work the moment someone has to lift a finger. /* I think I'll change my position on BCP38. It's pointless to try blocking spoofed source addresses because: * It doesn't solve every single problem * It means more effort for service providers * It requires more CPU processing power * Using it will generate smarter "black hats". https://www.nanog.org/mailinglist/mailarchives/old_archive/2004-10/msg00132.html */ -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM "Where ignorance is our master, there is no possibility of real peace" - Dalai Lama 0B23 595C F07C 6092 8AEB 074B FC83 7AF5 9D8A 4463 https://pgp.mit.edu/pks/lookup?op=get&search=0xFC837AF59D8A4463
Current thread:
- Re: Spitballing IoT Security, (continued)
- Re: Spitballing IoT Security Doug Barton (Oct 30)
- Re: Spitballing IoT Security Rich Kulawiec (Oct 30)
- Re: Spitballing IoT Security Jim Hickstein (Oct 30)
- Re: Spitballing IoT Security Eliot Lear (Oct 27)
- RE: Spitballing IoT Security Keith Medcalf (Oct 28)
- Re: Spitballing IoT Security Alan Buxey (Oct 29)
- Re: Spitballing IoT Security Chris Boyd (Oct 25)
- Re: Spitballing IoT Security Eliot Lear (Oct 28)
- Re: Spitballing IoT Security bzs (Oct 25)
- RE: Spitballing IoT Security Steve Mikulasik (Oct 24)
- Re: Spitballing IoT Security J. Oquendo (Oct 24)
- Re: Spitballing IoT Security Mike Hammett (Oct 24)
- Re: Spitballing IoT Security Hugo Slabbert (Oct 24)
- Re: Spitballing IoT Security Mike Hammett (Oct 24)
- Re: Spitballing IoT Security bzs (Oct 24)
- Re: Spitballing IoT Security Rich Kulawiec (Oct 26)
- Re: Spitballing IoT Security Eric S. Raymond (Oct 26)
- Re: Spitballing IoT Security Mel Beckman (Oct 26)
- Re: Spitballing IoT Security Eric S. Raymond (Oct 26)
- Re: Spitballing IoT Security Mel Beckman (Oct 26)
- Re: Spitballing IoT Security Ronald F. Guilmette (Oct 26)