Comcast Cuts Infected PCs' Network Connections

fidget42 writes "I just noticed this article over at Infoworld. It seems that Comcast is finally doing something about the machines on their network that are being used by spammers. They are now cutting off service to those customers who have computers that have been hijacked by spammers. Now, if only other broadband ISPs would start policing their user base ..."

Comments

Other ISPs start to do this?

[garcia]

Now, if only other broadband ISPs would start policing their user base ..."

ATTBI (back in 2002) was disabling people's account for being infected with worms... People's modem CFG file would be set to disabled.cfg and they would have block sync but wouldn't be permitted onto the network.

If Comcast took over from ATTBI and is using parts of their existing network, I just can't understand why modems were not being disabled recently for infection by worms.

Re:Other ISPs start to do this?

[TykeClone]

But that's a bummer to get disconnected if you were to need to download stuff like updated antivirus signatures or fixit tools to get the machine back into shape.

A better solution...

[SmackCrackandPot]

... would be to put the network connection onto a quarantined sub-net where all the necessary virus removal tools were available. Once the machine was cleaned up, it would be allowed general network access again.

Re:Yes Yes!

[Anonymous Coward]

Because we all know Corporations policing is a VERY GOOD THING!tm

It's presumably a terms-of-service violation so technically you're in breach of contract and they can do what the hell they want.

Re:Yes Yes!

[OECD]

Because we all know Corporations policing is a VERY GOOD THING!tm

Well, a coworker brought in his virus-ridden computer for me to take a look at, precisely because Comcast threatened to turn off his pipe. The interesting thing is that he knew he had a problem, but because he could work with a slower computer he didn't take care of it. So at least one zombie box that would have been 'put up with' by its owner is now off the net.

OTOH, I'm worried about the precedent this sets. Who knows what other things will bring the 'death penalty' from the ISPs? What ports will be shut down because 'you don't need them'?

Re:Plot by virus scan companies?

[rebeka thomas]

I think so.

My sister's university would not allow her PC back on the school network after they cut ALL student network access in the wake of MyDoom, until it could be verified by a tech at the school that she was running Norton AV.

Her PC runs Debian and only Debian. It took more than a month for her to find a sane enough tech in admin to realise that it was pointless trying to do so. All of the rest tried the different bullshit techniques telling her why all PCs are a problem regardless of OS.

The most classic was one of the last techs, a supposedly bright 35 year old guy who came around with a warezed copy of NAV to attempt installing on her PC. He not only knew what Linux was when he recognised it, but told her to make her PC secure she'd have to install Windows and THEN put NAV on.

Business Plan

[bludstone]

I have a suggestion.

Write up a small business plan based around these knocked-off-the-network infected PCs.

You can charge "$50 + travel fees. Usually under $100" to clean their computer, and get them back online. Yeah. It's a fee, and many people wont be happy about paying it. But, at the same time, it'll teach them a lesson about security on their pc. If they dont want to pay it again, theyll have to do their own security stuff.

You see politics, I see opportunity.

The only real trick to this would be streamlining with comcast, which is next to impossible.