Live data from Hacker News

Please do not take down the Sality botnet

seclists.org

121–130 of 148 posts

Re: Please do not take down the Sality botnet

#121
post #56

Earlier quoted context omitted.

To prove a point- the current system of law is completely broken when it comes to dealing with malicious software. Law enforcement is a joke, to the point where reporting a botnet c&c located right in the US to the FBI will result in a six week run around before you finally get a phone call from someone in the right department, and this is assuming you've dealt with them enough to be on their quick list. Guess who mo…

The good thing is Congress is having hearings on cybersecurity, so clearly this will be fixed very soon.

yeah. can't wait to have pipes outlawed. Will have an excuse to drive to California when i need a new sink in the house.

Re: Please do not take down the Sality botnet

#122

The guy takes all the time to put this together, write this up, and is perfectly ok with the outcome, but instead of going to a coffee shop and doing this himself, he spends a lengthy amount of time writing up instructions and giving the criminals a chance to fix their injection problems before someone can take down the botnet. Baffling. Not only that, but this guy seems to know what he's doing and instead of someone…

What makes you think that he didn't post this and then immediately do it himself? It's called plausible deniability.

this actually will make it harder for him, as he just defined motive and means to the prosecution

Re: Please do not take down the Sality botnet

#123

The guy takes all the time to put this together, write this up, and is perfectly ok with the outcome, but instead of going to a coffee shop and doing this himself, he spends a lengthy amount of time writing up instructions and giving the criminals a chance to fix their injection problems before someone can take down the botnet. Baffling. Not only that, but this guy seems to know what he's doing and instead of someone…

I apologize in advance for the tone, but as a Russian I have a question - are you racist? Since Sergey Brin and Mila Yovovich are "russians", do you imply that Google and Hollywood are part of this botnet? The most famous hacker is Kevin Mitnick [american] and most recent hackers charged/arrested by FBI are also american citizens. Why don't you change "russians" to "americans"? Or may be "new_zealanders" [Kim dot com…

but i bet you never request your money back after an action movie depict a bad guy in the desert wearing a turban, right?

yeah, i thought so.

Re: Please do not take down the Sality botnet

#124

Earlier quoted context omitted.

No. "Racism is the belief that inherent different traits in human racial groups justify discrimination". If it's based on the current social or economical situation of Russia, it's prejudice, but not racism. Remember that Russians are "citizens of Russia", not a particular ethnic group.

I applaud your efforts at education! I observe however that their is an emergent definition of 'racism' which is quite a bit more broad than yours. Basically it is this "Assuming specific or stereotypical attributes about an an individual or group, based on that individual or group's membership in a definable group." This removes the typical restriction that it involve 'race specific traits' so things like 'Bankers a…

Race does refer geographic origin (among other things.) It does not include career or religion. I don't think that is related to what is being discussed at all.

Re: Please do not take down the Sality botnet

#125

Earlier quoted context omitted.

Lots of racism emerges partially as a result of some statistical basis in current social or economic situations that for whatever reason correlate to an ethnic group or nation of origin. (And racism is not solely about ethnic groups, it's also about nations of origin -- ethnic groups are just one of the classifications of humans that are considered "race", geographic ancestry is another.) It's not racism to recognize…

I think it depends on what one attributes the statistical fact to; it's only racism if we consider it inherent to the group. If we consider that to be a result of a particular condition that happens to be affect certain group at this point in time, and that any other group would have the same problem if subject to the same condition, I don't see how is that racism. I think your examples are clear prejudice (and no, I…

I suppose I just don't see what would motivate someone to slander an entire group of people based on the actions of a few. If someone is worried about cybercrime, they should say so rather than substituting "Russian" as a synonym for cybercriminal. To me that implies that cybercrime is an inherently Russian activity. Perhaps I am too quick to read racism against Russians into such an inflammatory use of the word "Russian" due to the amount of racial discrimination I have seen against Russian users while working in the game industry, where it is not uncommon to dismiss Russian gamers as probably a pirate or probably a hacker and to refuse them a level of support that would be provided to a person with a different accent or last name.

Re: Please do not take down the Sality botnet

#126

Earlier quoted context omitted.

I agree that it is a prejudice and should be avoided, but it's not completely groundless: According to industry analyses, Russia accounts for about 35 percent of global cybercrime revenue, or between $2.5 and $3.7 billion. That’s wildly out of proportion with the country’s share of the global information technology market (which is around 1 percent). http://themoscownews.com/siloviks_scoundrels/20111121/189221... It'…

Yes, when I was setting up a server I eventually had to apply a separate and more draconian set of firewall rules to IP addresses in Russia and China to avoid my logs just filling up with Junk, failed logins , attempts to access shady looking URLs which did not exist and HTTP requests filled with fragments of shell or SQL script. To be fair I'm sure this only represents a minority of the people in these countries but…

>"in Russia it probably looks like an attractive get rich quick for anyone with tech skills."

See also: 419 boys

It's not just Russia.

Re: Please do not take down the Sality botnet

#128

Earlier quoted context omitted.

Yes, when I was setting up a server I eventually had to apply a separate and more draconian set of firewall rules to IP addresses in Russia and China to avoid my logs just filling up with Junk, failed logins , attempts to access shady looking URLs which did not exist and HTTP requests filled with fragments of shell or SQL script. To be fair I'm sure this only represents a minority of the people in these countries but…

>"in Russia it probably looks like an attractive get rich quick for anyone with tech skills." See also: 419 boys It's not just Russia.

Nope , try buying something online with a Nigerian IP address.

Re: Please do not take down the Sality botnet

#129
post #102

I am reminded of the "wine blocks" sold (legally!) during the prohibition, which came with the following warning: After dissolving the brick in a gallon of water, do not place the liquid in a jug away in the cupboard for twenty days, because then it would turn into wine. http://en.wikipedia.org/wiki/Prohibition_in_the_United_State...

I can't help but think that must have tasted terrible!

It probably does. In Quebec, wine can only be imported and sold in state-controlled liquor stores.

As a loophole, dehydrated wine is imported, rehydrated, bottled, and sold in corner stores ("depanneurs"). It tastes rank.

Re: Please do not take down the Sality botnet

#130
post #56

The guy takes all the time to put this together, write this up, and is perfectly ok with the outcome, but instead of going to a coffee shop and doing this himself, he spends a lengthy amount of time writing up instructions and giving the criminals a chance to fix their injection problems before someone can take down the botnet. Baffling. Not only that, but this guy seems to know what he's doing and instead of someone…

To prove a point- the current system of law is completely broken when it comes to dealing with malicious software. Law enforcement is a joke, to the point where reporting a botnet c&c located right in the US to the FBI will result in a six week run around before you finally get a phone call from someone in the right department, and this is assuming you've dealt with them enough to be on their quick list. Guess who mo…

But download a Justin Beiber album and you get sued for $50k in a matter of days. System works perfectly!
Post reply on HN