Slashdot Mirror


Broadband Access Leading to Internet Breakdown?

TwistedSpring asks: "As bandwidth costs become cheaper and more people adopt cable or DSL over standard dial-up connections, the time it takes to distribute worms and other unwanted or malicious material (read: spam) across the Internet decreases. After noting the current surge in Internet worms and the so-called Darwinist evolution of these things into more and more powerful incarnations, I wonder: will the proliferation of broadband Internet access deal a serious blow to current freedoms on the Internet?"

"Spam, adware, worms and viruses are now able to propagate much faster than ever before. Worms are also growing bigger, more advanced, as it's possible to transfer more viral code in less time. It's as if slow dial-up lines acted as a kind of immune system that prevented effective propagation of worms and made DDoS attacks so much less significant.

I'm not only worried about viruses and spam levels. Part of the reason the MPAA and RIAA are taking such an interest in Internet activity is that file sharing has become so much easier with the availability of broadband, and as usual there are murmerings of regulation. Before the broadband revolution, the involvement of the MPAA and RIAA in Internet affairs was small, and their argument was less convincing.

As broadband grows, will regulation become necessary not just to prevent illegal distribution of copyrighted material but more likely to protect Internet users from themselves (we're already seeing ISPs adding spam e-mail filtering to their default services, for example)? Will the Internet fall in popularity as it becomes more and more frustrating and dangerous to use, or will we simply see a massive improvement in coding practices and more secure software?"

116 of 505 comments (clear)

  1. the time to distribute patches and fixes... by extra+the+woos · · Score: 5, Insightful

    Obviously, the time to distribute fixed and patches goes down as well. As does the ability to spread the word about things going around... I see the "always on" thing as more of a security risk than the higher speed, definately.

    --
    replacing it with NEW Folger's Crystals! (lets see if they notice the difference)
    1. Re:the time to distribute patches and fixes... by BigDuke · · Score: 4, Funny

      And remember don't use Outbreak ... oops I mean Outlook. Its not a virus its just a carrier!!

    2. Re:the time to distribute patches and fixes... by Ronny+Cook · · Score: 5, Funny

      Our company uses Outlook and it's perfectly sa%&^S#^M^?NO CARRIER

    3. Re:the time to distribute patches and fixes... by Canberra+Bob · · Score: 4, Insightful
      And remember don't use Outbreak ... oops I mean Outlook. Its not a virus its just a carrier!!


      The scary part is that we find this comment funny because of the truth in it. M$ has been responsible for a disproportionate number of the worms going around through Windows INsecurity, and yet sadly they will be the first company approached for any legislation relating to this.

    4. Re:the time to distribute patches and fixes... by Cow007 · · Score: 2, Informative

      patches and fixes are useless beacause they come around after something happens after its already to late to prevent it. Im willing to bet that a large portion of the code in M$ Windoze is thoes patches and fixes. No number of patches fixes or anything can fix Windows.

      --
      411 Y0UR 8453 4R3 8310NG 70 U5!! -NSA
    5. Re:the time to distribute patches and fixes... by EvilAlien · · Score: 3, Insightful
      Disproportionate? Simple statistical analysis of threats, impact, etc, cannot do reality justice. If the MS monoculture represents a very dominant 90% of the desktop market, and monoculture factors into things as suggested, then you would expect the impact due to proliferation of threats targetted at the dominant population to be "disproportionate", regardless of relative insecurity. Why bother writing a virus targetting some obscure platform like MacOS? The "disproportion" of Linux servers detailed in recent reviews is easy to write off by the same sort of reasoning, so if we are going to even pretend to be rational while espousing the virtues of Open Source, then we must make clear arguments which are as devoid of bias as possible.

      The fact which most knee-jerk anti-Microsoft ranters try to avoid is that the patches and technology exists to very adequately secure a Windows desktop. The problem is users who refuse to do so.

      You want to see all hell break loose? Put Linux, which requires more clue to operate than Windows, on the desktops of 90% of the users. They'll all be autologging in as root, randomly running rootkits that look like useful apps, leaving restarded services on like portmap, telnet, and wu-ftpd.

      PEBCAK.

      'nuff said.

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
    6. Re:the time to distribute patches and fixes... by div_2n · · Score: 3, Insightful

      "The fact which most knee-jerk anti-Microsoft ranters try to avoid is that the patches and technology exists to very adequately secure a Windows desktop."

      What, like shut down almost all retarded services that come preinstalled and turned on like IIS?

      "You want to see all hell break loose? Put Linux, which requires more clue to operate than Windows, on the desktops of 90% of the users."

      As opposed to auto logging in as adminsitrator by default as almost all Windows XP machines come loaded from OEM's?

      At least that lesson has been learned and Redhat et al should know better and make it extra difficult to set root to autologin and make root password requirements very strict while not so strict on the users so as to encourage them to use their non-root accounts.

    7. Re:the time to distribute patches and fixes... by Pig+Hogger · · Score: 3, Funny
      Our company uses Outlook and it's perfectly sa%&^S#^M^?NO CARRIER
      Odd, he didn't SEEM to have broadband...
    8. Re:the time to distribute patches and fixes... by Kaboom13 · · Score: 3, Insightful

      IIS does not come turned on, and at least in XP pro it is not part of the default install. Furthermore, OEM XP installs normally don't have any user passwords period. If OEM's shipped Linux you can bet they'd set it up to run as root anyway, just to avoid the hassle of tech support when people can't figure out why the password box comes up when they want to install Bonzi Buddy. Add to that even if they did have a seperate root account, they'd have to set some sort of default password and most people would never bother to change it. You don't score points with the clueless by adding in more steps and hassle for security reasons they don't understand. That said, I run Windows at home, and with only the most basic precautions (and yeah I run as Administrator cause I'm lazy, and use Outlook cause it sinks with my PocketPC) I've never gotten so much as a virus or piece of spyware. Windows or Linux, it comes down to the users anyway.

    9. Re:the time to distribute patches and fixes... by steeviant · · Score: 3, Insightful

      Strangely, Outlook Express is the most prolific propagator of email viruses, yet it has significantly less features than Eudora.

      It's not Outlook's PIM features that make it a handy target for virus makers, it comes down to a few 'features' of both Outlook and Outlook Express that virus makers use to their advantage.

      Microsoft do seem to be slowly catching on, and making modifcations to their applications, but it doesn't stop people using old versions.

      Handy features of Outlook & Outlook Express for virus makers:

      * Storing every email address in a handy database
      without any way to disable the feature

      * Not properly protecting the email address cache
      with encryption or any other method

      * Providing the ability to view rich HTML content
      including scripts and ActiveX inside the email
      program

      * Conveniently truncating file extensions from
      incoming attachments

      I'm aware that things have been done recently to prevent these kinds of attacks, but some of the misfeatures mentioned above are still in the latest versions of Outlook & Outlook Express.

      The reason that people pick on OE and Outlook is that they are the sort of mistakes that wouldn't have been made if security had been a priority when the applications were created.

      Simply put, in my experience Outlook and Outlook Express have demonstrated their lack of security by having features useful to virus makers, and by propagating email viruses with the help of clueless users. Many of the email viruses I have seen wouldn't have been spread if one or more of the features I mentioned was not present in the email clients used.

      Hope that helps to clear things up.

    10. Re:the time to distribute patches and fixes... by TwistedSquare · · Score: 2, Funny
      Outlook cause it sinks with my PocketPC

      Aha! Two Microsoft products sunk with one fell swoop?

  2. We are all here, aren't we? by ObviousGuy · · Score: 5, Interesting

    The web is in danger of nothing. More importantly, the Internet is more important to commerce than ever before.

    Unless a large, physical attack on the wires carrying all this data occurs, everything is pretty much A-OK.

    --
    I have been pwned because my /. password was too easy to guess.
    1. Re:We are all here, aren't we? by z0ink · · Score: 4, Interesting

      Actually, a few smaller attacks could be more damaging. Imagine if the location of NOC's across the US were exposed and attacks were carried out on them. Goodbye internet, hello 404 (if you're lucky enough to have a dns to attempt resolving domains).

      --
      Steal This Sig
    2. Re:We are all here, aren't we? by Epistax · · Score: 4, Funny

      It would have worked too if it weren't for you meddling kids!

    3. Re:We are all here, aren't we? by andynz · · Score: 5, Funny
      Correction. Goodbye US internet. The rest of us would be fine and dandy.

      We would be without Slashdot though. Good god, productivity could skyrocket!

    4. Re:We are all here, aren't we? by DNS-and-BIND · · Score: 2, Interesting
      The Internet isn't a military, disruption-resistant network any more, and hasn't been for some time now. Most of the links go through the USA. Tracerouteing from Japan to the UK goes through America, etc.

      Good job with the knee-jerk anti-Americanism though. Always good for a few quick mod points.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    5. Re:We are all here, aren't we? by nicklott · · Score: 3, Funny

      Flights from Japan to the UK also go through the US... it's in the way.

    6. Re:We are all here, aren't we? by Anonymous Coward · · Score: 2, Funny

      don't laugh. A recent study has shown that reading slashdot at work was directly responsible for the tech slump.

  3. Depends on your definitions by dartmouth05 · · Score: 5, Interesting

    I suppose it depends on how you define the current freedom. I don't believe that it is going to lead to increased censorship. I don't believe it is going to lead to increased tracking or monitoring (although certainly other things, like the recent FBI/DOJ request for increased wiretapping ability may do just that).

    I think that it will lead to increased filtering on the ISP side of things. More ISPs will be using Spam Assasin and similar programs behind the scenes. Undoubtedly, some legitimate e-mails will be caught by these SPAM traps, and the end-user might not have access to them.

    Personally, since Dartmouth College starting running virus scanners and SPAM filters and the like, I constantly get e-mails where the "suspicious" file was automatically removed, and although most of those removals were viruses, I also lose legitimate files that are sent to me. As an end-user, I don't have access to change the settings or tell the system that a file is, in fact, OK. Instead, I have to e-mail the person back and ask them to resend the file to my AOL account.

    I suspect that as more people use cable and DSL and the malware increases, this behind-the-scene tinkering will increase.

    A serious blow to current freedoms on the Internet? I'm not sure. A pain in the ass? Absolutely.

    1. Re:Depends on your definitions by MagicDude · · Score: 4, Interesting

      Slightly offtopic, but I always wondered if it wouldn't be a better idea for virus checkers not necessarily to delete all viruses. Certainly, there are known viruses out there it could delete, but there are also files that the virus software has to make a judgement call on some file it has never seen before. Thus sometimes it ends up deleting useful files. Couldn't the software merely add a large red "WARNING - WE THINK THIS FILE IS A VIRUS. DON'T OPEN IT UNLESS YOU KNOW ARE EXPECTING THIS FILE AND KNOW WHAT IT IS" at the beginning of the E-Mail text so you know that something out there wants to make sure that you're being careful about this file?

    2. Re:Depends on your definitions by CajunArson · · Score: 4, Insightful

      The problem with this is that so many warnings will show up that users will ignore them anyway and get infected. My Linux email client always warns me before opening up attachments and I just click OK. Since there are not Linux email viruses out now, not a big problem. However, if there was one, the popup box would not help me since I instinctively click through it. This is not even considering an entire class of people (I like to call them Darls) that will intentionally try to open dangerous attachments. It really doesn't take a large number of Darls to screw up the fun for everybody.

      --
      AntiFA: An abbreviation for Anti First Amendment.
    3. Re:Depends on your definitions by iminplaya · · Score: 3, Insightful

      I believe it's already been proven that it doesn't work.

      ...will we simply see a massive improvement in coding practices and more secure software?

      This seems to be the only real workable and fair solution.

      --
      What?
    4. Re:Depends on your definitions by s20451 · · Score: 5, Funny

      Warning - We think this file is a virus. Don't open it unless you are expecting this file and know what it is.

      [checkbox] Don't show me this message again

      --
      Toronto-area transit rider? Rate your ride.
    5. Re:Depends on your definitions by ThosLives · · Score: 2, Insightful
      I can typically send myself executables, zips, and whatever else by making a copy, changing the extension to '.txt', then sending the renamed file . At the destination, just change the extension and run with it. I have always been amazed that Windows uses the extension to determine the content type.

      If your provider filters even '.txt' files, just pick something like '.let-me-pass', and I bet that would get through. 'Course, this works because you *know* you have to change the extension and such. I've had to resort to this to get around my work's filters.

      --
      "There are a dozen opinions on a matter until you know the truth. Then there is only one." - CS Lewis (paraprhase)
  4. Freedom? its a paradox by jeffmeden · · Score: 3, Interesting

    99% of the people you ask would say not having broadband would be the biggest blow to their freedom on the internet... unfortunately we have to take the good with the bad, or start kicking people off the net...

    1. Re:Freedom? its a paradox by Pikhq · · Score: 3, Funny

      Kicking people off the net? Sounds great! Let's kick the person who thought the CD drive was a drink holder off first!

      --
      echo "rm -rf ~/* ; echo "echo "Exit" ; exit" > ~/.bashrc ; exit" > ~user/.bashrc
    2. Re:Freedom? its a paradox by Neil+Blender · · Score: 2, Funny

      99% of the people you ask would say

      Ah, Slashdot: Home of the made up sweeping statement.

    3. Re:Freedom? its a paradox by mattkinabrewmindspri · · Score: 2, Insightful

      I hate to tell you this, but there are more than one person who think that's a cup holder. I talked to three during just 6 months as a tech support.

  5. Err Darwin? by taniwha · · Score: 4, Insightful

    Come on - the virus and worm anaology is a great one to make lots of ... but they aren't evolving under Darwinian survival of then fitest .... if anything it's more of a creationist sort of thing with rival gods throwing their latest creations into the world to battle it out with nature (ie the rest of us who provide the medium for them to live in) and each other

    1. Re:Err Darwin? by Atmchicago · · Score: 4, Insightful

      Yes, until a worm can "mutate" randomly into different strains, and if some of these mutations prove to be beneficial, then we have Darwinian evolution. However, having it randomly change "if" statements to "while" statements, or other such changes, wouldn't work too well, and changing or adding other things most likely wouldn't get anything useful.

      --

      You can lead a horse to water, but you can't make it dissolve.

  6. Film at 11... by douglips · · Score: 3, Interesting
  7. Is the problem the "how" or the "with what" by MrChuck · · Score: 4, Interesting
    As I see it, it's that the users are using Windows, not that they are coming in high speed.

    While unix boxes went through 25 years (since ARPA contracted UCBerkeley to make this "TCP" thingy) of evolution on networks that were, in retrospect, pretty safe.

    The Morris Worm in '88 woke a lot of us up, but we've known for decades about "doors" and "locks" and such.

    Windows is/was/and will be a consumer operating systems whose main impetus is features to push sales. Security hasn't appeared to be on their radar screen except as a check box ("did you think about security?" Um, yeah. "Good enough for us. Ship it").

    I'm getting hammered by spam and worms and EVERYTIME I nmap back to the sender (okay 0.001% of senders, randomly chosen as I get pissed off), it's a windows box.

    I love broadband.

    I love VOIP to mom and video and streaming stuff to relatives (all legal)

    I hate the bad neighbors running windows. The metaphorical slaughterhouse next door.

    1. Re:Is the problem the "how" or the "with what" by furiousgeorge · · Score: 5, Insightful

      >>As I see it, it's that the users are using
      >>Windows, not that they are coming in high speed.

      Ahh..... bullshit.

      Most of the worms and trojans and crap that are going around lately are all user spawned. They haven't crawled in through a remote exploit. They've been emailed to/downloaded by some genius who will execute any damn thing. I swear, these people would probably pick up a used syringe off the ground and jab it into their own arm to see what would happen.

      Do you think it would be any different if the world was all running Linux? Or Solaris? Or MacOS. Please - stupid people will be stupid no matter what OS you put in front of them. It isn't going to change anytime soon.

      >>I'm getting hammered by spam and worms and
      >>EVERYTIME I nmap back to the sender (okay
      >>0.001% of senders, randomly chosen as I get
      >>pissed off), it's a windows box.

      Geee --- and what percentage of computers out there are windows boxes? What a shocking correlation.

    2. Re:Is the problem the "how" or the "with what" by 10101001+10101001 · · Score: 2, Insightful

      I agree with your point that it's not high broadband. Most worms are small enough to only take 8 seconds are less to send. Even being always on is hardly anything, since most dial-up users stay on for hours at a time. I don't think that the morris worm really woke up people as much as you say it did. Neither has Windows worms.

      The major difference is until recently, there weren't that many machines online relatively and in the interim *nix in all its forms (though not really Linux, specifically) had the chance to fix most bugs. *BSD have too because they got to hear the same problems. Because Linux includes *BSD tools and GNU tools (based in idea off of Unix tools), it's at about the same level of security checks as *nixes.

      Now, that that's covered, you should realize that spam receiving isn't something that only Windows users suffer. And most spam relays spoof their address.

      Windows machines are ideal candidates more because their admin is less likely to properly admin (aka, security patch) things which are inately on. More of the core system hasn't been tested, while on *nix security flaws tend to be in auxillary programs (apache has become more core and hasn't had the same level of testing as say finger...and the Linux kernel is also relatively new) where less testing has occurred.

      Overall, this means more Windows systems (by percentage, not by populace) are infected and that coupled with populace and broadband means more spam, not more worms. After all, you can get/send 1,000 spam messages a day, but worms tend to be incompatible with each other meaning stable systems tend to only stay infected with two or three worms. More broadband just makes you a better spam relay, which means more clogging of the internet. I don't think it'll cause any more of a collapse than P2P has. At the same time, I wonder if at some point ISPs will start trying to regulate e-mail more to save costs from all the junk being sent through them. The most ironic part to me is not only how little people seem to care about their machines, but that there's been no citizen outcry trying to sue for violating of their machines.

      --
      Eurohacker European paranoia, gun rights, and h
    3. Re:Is the problem the "how" or the "with what" by MrChuck · · Score: 4, Insightful
      Do you think it would be any different if the world was all running Linux? Or Solaris? Or MacOS.

      Yeah. Yeah I do. Because those OSs don't have (1) a dirty syringe attractor and (2) a dialog box that pops up and says "Would you like to jam this into your arm?".

      The underlying windows platform is flawed. There are WEEKLY buffer overflows and it's clear that aside from the VAST amount of unsecure old code in it, that new code is rife with holes too.

      How many times was outlook fixed to stop running code in preview mode (hint, it's >1).

      In bending over backwards to make it easy for users to run things on windows, they leave themselves open. Anyone recall when the "good times virus" that promised a worm from opening an attachment was ridiculous because no program would treat data as executable code!? I miss that now.

      Re: nmapping back?
      When I scan 200 machines and ALL of them are running windows and ALL of them are sending me mydoom, that's not just bad luck of the draw.

      I was blocking 140 mydoom.a messages a minute the day AFTER it started.

      Most of the worms and trojans and crap that are going around lately are all user spawned

      By "lately" you just mean that 12 or so since new years. I guess when you have so many, it's hard to recall back to last summer and the previous 30 security holes.

      When a client groused about the cost of an antivirus program for scanning mail at their college, I pointed out that the WHOLE cost should be borne by the Windows support group. The 10-20% of the school taht wasn't using windows had no (zero, none, nil, nada) need for filtering out viruses that autoexecute in their environment.

      At another (very very large wall st) client, I was delighted to see security and a manager show up and FIRE someone for using outlook. 3 warnings about it and AGAIN, he brought a virus in. They'd figured the cost of each incident and banned it. Bravo!

      So YES, driving a line of cars through town filled with explosives is bad, even if you tell them not so smoke.
      Letting a former addict go hang out with crackheads and spend lots of time with them is BAD.

      Letting ignorant Windows users have machiens that can be reached for the net is BAD. That windows machine is just jonesing for a virus fix.

    4. Re:Is the problem the "how" or the "with what" by iwadasn · · Score: 2, Interesting

      OK, time for more insanity. All I want is a box that only runs java. Simple as that. Give it a microkernel and a JVM, push everything possible into the VM, and have it only run java, with all the policies set appropriately.

      Then there are not buffer overflows, no root exploits, and when you double click something in an email it will run without disk access or net access, or basically anything else that could hurt you. Virii would immediately crash, anything else would work fine.

      The real problem is not the executables, it's that they get so many damn permissions for no good reason. EVERY single executable should the first time it asks for disk access pop up one of those boxes saying what it is trying to do and do you want it to..
      [allow once] [allow always] [allow always for this file] [disallow] ....

      Then the problem would be over. Your normal apps would get all they need (and nothing more) the first time they run, and spyware and malware would be almost impossible to slip through.

      Much better to start everything out in a small sandbox and ask the user each time the boundaries need to be increased than to just let it do what it needs to and hope it isn't a virus.

      Basically, if you could get everything you needed in java (web browser, email client, office suite [the most difficult task], jboss, mail server, databse [hsql], etc...) and you could netboot it then the people at work would have extremely safe and secure boxes where they could just do work, rather than always worrying about attack.

      It'd also let you run without protected or virtual memory, and thus the 30% performance boost would just about wipe out the cost of doing everything in java. Most client machines shouldn't be swapping these days anyway.

    5. Re:Is the problem the "how" or the "with what" by Welsh+Dwarf · · Score: 2, Insightful

      You can't patch a stupid user, but you can set the attachment -x so that the .scr.jpg doesn't get run.

      Also, may I remind you that a standard desktop Linux install has 0 open ports, so good luck with your buffer overflow.

      --
      Ask 8 slackers a question, get 10 awnsers (a citation, but I can't remember from who)
  8. fix mail by lophophore · · Score: 4, Insightful

    Email is one of the biggest threat vectors.

    When email gets fixed (through authenticated access), the worms and virii will need to find a new way to spread.

    This is in addition to the more obivous effect of cutting down the overall flow of spam.

    --
    there are 3 kinds of people:
    * those who can count
    * those who can't
    1. Re:fix mail by MrChuck · · Score: 5, Interesting
      Except for all the other threats.

      More of consequence in my mind are the MILLIONS of machines acting as bots for a DDOS attack. It's less spam (spam is bad, m'kay?) than the ENOURMOUS connection points that are running and spreading viruses that can harm me.

      My house has been Windows-free since it was on the Internet (1983 or so). When I helped remove a rootkit from a brother of a friends linux box (again, a nat box woulda done wonders), he looked at my rack with ~9 working machines (the others are elsewhere) and asked which windows *I* ran. I looked at the SGI, Sun, NeXTs, Alpha and couple Intel boxes and said, "none. But I have a linux box to play games on."

      My systems are generally fine until 5000 windows boxes running worms wake up and decide to visit and visit and visit until my bandwidth is used up.

      Spam annoying as hell.
      Viruses dangerous to everyone around.

    2. Re:fix mail by cgreuter · · Score: 2, Insightful

      When email gets fixed (through authenticated access), the worms and virii will need to find a new way to spread.

      Feh! All you need to do to fix email is to, at the ISP level, go through every incoming message and strip out every executable attachment, be it a .EXE file, HTML with scripting or a Word document with embedded scripts. That would do it then and there with almost no loss of functionality.

      But you know it won't happen, because Uncle Joe will get annoyed when he can't click-and-run the self-extracting e-card someone sent him and then he'll switch to some ISP that doesn't offer this particular service, never knowing what he's opening himself up to.

      I once told a friend to stop using Outlook Express because it's a virus-launching platform. He wouldn't because he couldn't find another free mailer that was as nice as it. Security is one of those invisible things that nobody notices. It's really hard to get ordinary people to take it seriously.

  9. ISPs by Joe+U · · Score: 5, Insightful

    Wasn't IPv6, combined with proper filtering supposed to curb these problems?

    Alot of the blame falls on the ISP, they helped turn the Internet into a always-on appliance, now they have to make it robust.

    Why does my ISP allow packets off my network that obviously don't originate from it? Is it considered a feature to allow DoS attacks? Why is port 25 open by default? Why isn't NetBIOS closed by default? Where is the IPv6 testbed that my ISP was supposed to have had 3 years ago?

    Granted, the average Joe User can be an idiot, but part of the ISP's job is to make the Internet more idiot-proof.

    1. Re:ISPs by joe90 · · Score: 5, Insightful
      Granted, the average Joe User can be an idiot, but part of the ISP's job is to make the Internet more idiot-proof.


      The Internet is not AOL. The "idiots" computer is part of the Internet when it's connected. The ISP's job is to provide network connectivity to the rest of the network - NOT to make the Internet more idiot proof.

      --

      Fast, cheap & reliable. Pick two.
    2. Re:ISPs by timmarhy · · Score: 5, Insightful

      no no NO. i can't believ this is +5 insightful. the job of the internet SERVICE provider is just that, to provide the internet service. heaven forbid a world where isp's start to apply upstream filters and controls on my account. besides the obvious costs with these kinds of things there are the applications this might break, and no one will know it's breaks them till it happens. isp's you provide me with internet access, and it'll decide what i do with it from there thank you.

      --
      If you mod me down, I will become more powerful than you can imagine....
    3. Re:ISPs by Anonymous Coward · · Score: 2, Insightful

      (Posted anonymously because I prefer to give no way to connect my online personality and my job. Yes, I work for an ISP.)

      Let me tell you something. The ISP can do one of two things. They can give you a connection to the Internet, or they can shut that connection down. That's about it.

      You can get fancy and do things based on looking at the IP header, usually blocking ports or such, but that's it.

      Do you have any idea how much data streams through an ISP, even a relatively small one? Do you have any idea how hard it is just to work at all, let alone work well? Are you willing to pay the extra money every month for the machines that would be necessary to do whatever it is you think ISPs should do for your protection?

      That's the fundamental problem, you see. The business is freakishly competitive and the margins are slim. If the net was being filtered for your protection, you wouldn't buy it, because you'd want the cheaper service available from the next guy.

      Remember, we're not talking you personally, we're talking about all the people who really need the mythical "protection" you vaguely allude to.

      You probably think that it would be cheap or effectively free to "protect" users from themselves, and you couldn't be more wrong. Even basic email spam filtering/marking and virus checking can be a couple of bucks per month, per user. (And that's only workable because people actually will pay for it. They aren't going to pay for us selectively blocking their internet activities for what seems to them to be random reasons.)

      You're not paying enough for your internet connection for your ISP to hold your hand. (And by extension, anybody elses... maybe you personally don't need it, I'm talking customers in general.)

    4. Re:ISPs by Geoffreyerffoeg · · Score: 2, Insightful

      If you close off ports, allow knowledgeable users to open them if they agree to suffer the consequences.

      Having an e-mail server would be a great boon for me. Having a web server not on port 8080 would be nice. Being able to use Windows Networking to get to my files across the Internet would be really nice.

      When I want these, I go to my router, log on, open the ports on my hardware firewall, do what I need, then close off the ports. Speaking of which, I need to close my DMZ off....

  10. Nonsense... by bobbyque · · Score: 3, Interesting

    How could you make a case to go back to dial-up? How about ditching your phone and just using snail mail? I have difficulty seeing how faster communication is ever bad. Not perfect, certainly, and the flaws need work, but the the advantages far outweigh the disadvantages.

  11. I work for an ISP... by grioghar · · Score: 5, Interesting

    ...And every little old lady that comes in and purchases a DSL circuit for email makes me cringe.

    All I can think is that she's just another virus infection waiting to happen on my network.

    For some, it's senseless and stupid to have a broadband connection. I mean, my bread and butter requires that people DO have a DSL circuit, but there's no sense of responsibility with their internet connection.

    People bitch all the time about spam, and how to get rid of it. That same person comes in and has a SMTP relay cleaned off their system a month later. They can complain about it, but they don't realize they're part of the problem as well.

    Then there are those that come in and tell me to my face "Bah, I don't care if I have a virus, it just makes things a little slower." Those people piss me off the most. Those same people get pissed when I shut their connections off because they're sending out 20 messages/second, drowing their outbound pipe.

    I swear. Sometimes I think owning a computer should require a license.

    --
    Can you ping me now? Gooood! | Manhappenin.Net - Things to do
    1. Re:I work for an ISP... by mmurphy000 · · Score: 4, Interesting
      For some, it's senseless and stupid to have a broadband connection. I mean, my bread and butter requires that people DO have a DSL circuit, but there's no sense of responsibility with their internet connection. People bitch all the time about spam, and how to get rid of it. That same person comes in and has a SMTP relay cleaned off their system a month later. They can complain about it, but they don't realize they're part of the problem as well.

      I've been amazed that more ISPs don't bundle some sort of hardware firewall, like a SOHO router/NAT box, with their service. It would appear to be in their own interests to promote the use of those things, as they'd help slow the propogation of worms a fair bit. Larger ISPs should be able to get them for dirt cheap, as there isn't much more to one of those routers than there is in a cable or DSL modem.

      Now, I know, NAT isn't perfect and causes problems -- I run into a fair amount of "d'oh" moments myself when I want to do something, like BitTorrent, and my port isn't open. But, for "little old ladies" and the like, you'd think it'd be a net benefit to the ISP to distribute the firewalls.

      Any ideas, besides hardware cost and "how do I set this up" support costs, why ISPs don't do this more?

    2. Re:I work for an ISP... by grioghar · · Score: 2, Insightful

      I push routers to everyone I can. We don't give them away for free, but we do price them competitively so that we can be their one-stop shop.

      We don't support them though. It's the mindset that we're not a free service to take advantage of; we're here to make money. If you have a problem that is addressable, we'll take care of it. What we're not here to do is teach you how to use your computer for free.

      Want tutorials? Sure, we'll come in and show you how to use your machine all day long.

      $75/hour onsite, $65/hr in-shop.

      That's what people also don't get. Your ignorance isn't my problem. What *is* my problem is when your ignorance causes my network problems. Then I flip the switch, and your connection drops.

      People have to get burned once or twice before they realize the flame is hot.

      --
      Can you ping me now? Gooood! | Manhappenin.Net - Things to do
    3. Re:I work for an ISP... by SmackCrackandPot · · Score: 2, Insightful

      ...And every little old lady that comes in and purchases a DSL circuit for email makes me cringe.

      My retired neighbors are all getting DSL, so they can videophone their children, organise community web pages and brush up on their card games. So there are practical reasons why they want DSL.

      But it completely amazes me that home computers come configured with so many open TCP/IP ports. Rather than having the various services disabled as default, the recommended solution is to require even more software (firewalls, virus scanners, adfilters, ... ).

  12. My Take... by ItMustBeEsoteric · · Score: 5, Interesting

    I work at a local mom and pop computer store, and it seems like somewhere around half of all PCs brought in with problems stem from broadband used improperly.

    We had one guy come in, who had always-on Comcast cable, the same provider I use myself. He had bought a PC from us roughly 2 weeks before, and was hell bent that the "piece of shit" we sold him was to blame. Of course, no antivirus, no firewall, AOL for broadband added...so much spyware. That AdAware count was, I kid you not, 3,250 or so.

    As a person who has to deal with people like this quite often, it's not hard for me to see the side of an ISP who would LIKE to impose restrictions. There is also part of me who wouldn't be against it. As much as I would like unfettered access, I know most people (those on /. aside) can't deal with it. They destroy the usuability of their PCs with it.

    So I have mixed feelings on all this. What would I like to see? You have no fetters, at first. Then, you start acting as a spam relay or something, you get restrictions (I know, this happens, and I applaud for it). You act as a waypoint to spread viri and trojans, cut back another notch. And so on. This should all be spelled out in the license agreement, but I think it's nearing necessary.

    Internet usage is not a RIGHT. It's a PRIVILEDGE. And it's one you should have to be responsible to keep.

    1. Re:My Take... by grioghar · · Score: 5, Interesting

      Internet usage is not a RIGHT. It's a PRIVILEDGE. And it's one you should have to be responsible to keep.

      Word, brother. I love it when people come in and bitch about how slow their new computer is that they just bought from us a month ago.

      I smile, nod, and ask them to bring it in, usually to scoffs. They get the machine here, I fire it up, and there's Gator, WeatherBug, DateManager, Kazaa, iMesh, etc.

      I smile, nod, and tell them it's going to be $65 (our hourly in-shop rate) for me to clean it up because their problem is a software one. Either that, or I can restore their machine back to the way it was when they bought it for free.

      As much of a BOFH that makes me sound, I get pleasure out of the looks on their face when torn between their ignorance and their wallet.

      Worse part is, they could do the same thing I'm gonna do for free at home if they had a clue.

      Like they say, you get paid for what you know, and pay for what you don't know...

      --
      Can you ping me now? Gooood! | Manhappenin.Net - Things to do
    2. Re:My Take... by Fortress · · Score: 5, Insightful

      It's easy to look down on uninformed people who want to learn how to use the Internet, and complain that they are the ones ruining it for all of us. You could instead take the opportunity to teach these newbies how to protect themselves online. Why did you sell him a PC with no firewall or antivirus? There are free versions of each available, so I see it as partly your responsibility for selling a machine that was so wide open to attack. As to Internet usage being a priviledge rather than a right, I couldn't disagree more. It is this sort of elitist rhetoric that gives all of us geeks a bad name. The Internet is for all of us, not just the few that you or anyone else determines is worthy of it.

    3. Re:My Take... by ItMustBeEsoteric · · Score: 2, Interesting

      AOL isn't the biggest problem. After all, dial up cuts down on these things ;).

      We *try* to either sell, if that's not working, point to free AV or firewall utilities, like I said earlier.

      AdAware is on every PC out our door. Got service done? You now have AdAware, instructions on how to use it on your receipt. We also pop AV and Firewalls when we can.

      Bear in mind though, I'm not the salesperson who deals with customers. I'm the tech who're in the back or on-site 98% of the time. And there's only so much I can do in that positition if the sales guys don't follow through.

    4. Re:My Take... by Some+Dumbass... · · Score: 2, Funny

      It's easy to look down on uninformed people who want to learn how to use the Internet, and complain that they are the ones ruining it for all of us. You could instead take the opportunity to teach these newbies how to protect themselves online.

      Considering that there seem to be hundreds or even thousands of uninformed people or every one informed one, perhaps some sort of mass-mailing would be in order?

      Just send everyone an e-mail or two with a subject line like "Latest Microsoft Security Patches". Attach the latest Microsoft patches and include instructions to install them. That'll straighten everyone out!

      Oh, and tell your everyone to send those e-mails to their friends, just in case.

    5. Re:My Take... by redmoss · · Score: 2, Insightful

      I would say the "privilege" vs "right" argument is not framed correctly. Instead it is more of a "private" vs "public" rights argument. I wouldn't care about people's machines getting infected, etc if they were not continuously acting as spam-bots, zombies, etc. Once the user who owns the machine allows it to start generating "internet pollution" like this, I think a little bit of personal responsibility is in order.

      Thus, instead of looking at it as "LARTing clewless n00bs", we should look at it as "policing internet pollution". I imagine most people would support fines and/or restrictions for people who drive damaged and dangerous cars on the highway, putting everyone else at risk. IMHO, this situation is analagous to restricting internet access for those people who ignore repeated warnings about securing their online machines.

  13. Darwin = change by tomstdenis · · Score: 4, Insightful

    Those who change will survive. E.g. learn to patch your system, avoid insecure behaviour and tighten up your network [e.g. firewall, NAT, etc...].

    Those who don't will find their computer experience horrible and "die off" as far as the market is concerned.

    Tom

    --
    Someday, I'll have a real sig.
  14. Depends (Bad Guys Restrict My Freedom, Too) by reallocate · · Score: 2, Interesting

    Like most things, it depends.

    If worms, virii, spam, etc. don't become more damaging than they are now, the status qou will be maintained.

    If, on the other hand, bad guy capabilities increase until someone does something that takes lives and/or billions of dollars, then I think we'll see legislation to deal with it seriously.

    Don't forget, too, that if the internet becomes too damn annoying or risky to use, people will stop using it. Seems to me that's a more likely way that my internet freedom will be restricted.

    --
    -- Slashdot: When Public Access TV Says "No"
  15. Re:More mod abuse by Anonymous Coward · · Score: 3, Funny

    You must be new here.

  16. I, for one.. by Orgazmus · · Score: 5, Insightful

    am going to write that lame joke you thought I would.

    Instead i would like to say that the Internet is not a medium that should be regulated or cencored.
    If the dumb users are getting hurt by its wildness, that same darwinism should do its work.

    And if we will see more secure software? Dont hold your breath.

    --
    The system had the verbosity of HTML combined with all the readability of compiled assembly viewed as bitmap images
  17. Connection? by ADRA · · Score: 4, Interesting

    I don't know about you all, but if you have an open node in the net you WILL be owned on 56K or broadband. The virus might -spread- faster, but it won't destabilize the long term growth of the net.

    You'll be surprised at how fast ISP's implement manditory transparent virus/worm filering if the problem ever reaches the levels that you're implying. 2/4 ISP's that I've dealt with filtered back orifice without notifying customers.

    Question:
    Would anyone mind spending $2/month extra for an ISP to implement manditory WORM/Virus filters? If you want to play with them, use your LAN! This would solve all the worlds hunger problems!!!

    --
    Bye!
  18. Simple Solution #1 by Anonymous Coward · · Score: 2, Funny

    Just load Windows XP and Office onto a Pentium 2 with 64mb of RAM - that'll slow those dang worms to a halt if not the PC itself.

    Potentially the most useful Windows box ever built.

  19. I wound't say that broadband is the problem by adamshelley · · Score: 2, Insightful

    You are missing the point.

    Look at what is causing all of these outbreaks. Windows/Windows users.

    If there were no windows users, none of the current virus epidemics would be a problem.

    You think that virus's on another mainstream OS would take over? Doubtful.

    Consider the distribution of OS's left (-windows): you get a melange of flavors. Virus writers would have to be far more sophisticated to hijack that number of dissimilar systems with one set of code.

  20. A pair of sci-fi books that touch on this... by Anonymous Coward · · Score: 2, Informative

    Starfish by Peter Watts, ISBN: 0812575857
    and its sequel
    Maelstrom by Peter Watts, ISBN: 0812566793

    The second book focuses more on the viral evolution but they are both good books overall

  21. For crying out loud, INSTALL A FIREWALL, already! by mbessey · · Score: 4, Insightful

    I still find it mystifying that any ISP would allow/encourage users to directly connect completely unprotected machines to a high-speed internet connection.

    Sure, Windows could be better in terms of security, but that wouldn't even be a problem if all those insecure services were behind (even a minimal) firewall.

    -Mark
    (My DSL account came with a "free" firewall-enabled router)

  22. Re:More mod abuse by Anonymous Coward · · Score: 3, Funny
    I fear it is worse than that.

    I need to verify this, but it appears there is an epidemic of of conceited self-victimizing individuals who tragically suffer from grand, paranoid delusions about their posts being intelligent yet relocated.

  23. Bill Gates in a meat grinder by dolfin · · Score: 2, Insightful

    Well, as long as his coding slaves continue to release patches for unexploited exploits, I think those of us that work in the wierd world of windows server support will continue to have jobs. Irregardless of how big the worms get. Broadband is happening, metropolitan wireless networks are becoming a reality, and society almost completely shuts down if the internet stops responding. We're already driving down the road and I don't see too many off-ramps to save us from complete immersion.

  24. Perhaps IPv6 could actually help here.... by Bombcar · · Score: 2, Interesting

    One virus vector is plain old portscanning......

    But you can't portscan 340282366920938463463374607431768211456 possible addresses very fast.

    But IPv6 is a ways off, yet.

    What we will see is an emergence of firewalls, etc, that make things more difficult for spam and viruses.

    And my guess is that the backbones will also grow, as there is a lot of dark fibre left over from the internet boom. And for the RIAA, I think the genie is out of the bottle. Even mailing disks around would perpetuate it.

  25. Not breakdown, probably divide by fembots · · Score: 5, Insightful

    A digital divide is probably more likely, as most people on broadband are accessing fuller multi-media experiences while poor souls have to avoid big-combo sites.

    I think from the history of technology advancement, things always get bigger, better, faster, strong etc, and they usually don't break themselves down in the process.

    Take our transportation for example, when the gravel roads got too crowded, we paved them, then widened them, then built highway motorway causeway, then we moved to train, light-rail, bullettrain.

    At first we only tried to travel a short distance if you had to do it by foot, when we have cars, we want to travel further and eventually it is too far for cars, and we move to flights etc etc.

    The cycle just keeps going.

  26. This is not the looming threat. by Sheetrock · · Score: 5, Insightful
    The general consensus is that bandwidth is infinitely expandable.

    The problem is the transformation of most nodes of the Internet from peers to clients. That's what's going on with broadband; they lure you to the service with speed and reliability then after you're in they let you know you can't run any services and they're putting a mandatory (and poorly-run) spam filter on your incoming mail.

    You're no longer part of the network. You're only a consumer and spectator. Spam is bad but RBLs like SPEWS and the admins that force them on their users can be worse. There used to be a time when you could hook into the Internet and go pretty much anywhere you wanted to go; today everybody wants to lock you down and force you to pay for things you once enjoyed for nothing or move to a different server because of some political battle over spam. When people like John Gilmore get screwed for running a mailserver, or a website like Something Awful has its business operations hampered, I can see the writing on the wall.

    We need to get back to the days of having Internet access being a utility, much like electricity or water, where one could hook in and use it any way one will. The looming threat is control, lockdown, and homogenization that promises to render this medium as stale as commercial radio.

    --

    Try not. Do or do not, there is no try.
    -- Dr. Spock, stardate 2822-3.




    1. Re:This is not the looming threat. by pavon · · Score: 4, Insightful

      You're no longer part of the network. You're only a consumer and spectator.

      No you are not. You can contribute to the content on the internet in a million ways. You can add content to forums and Wikis. You can chat with friends in IRC and IM. You can write email to anyone. You can have your own site at places who will give you space for free. Or you can pay for space on a multitude of hosts, at a wide range of pricing options. You can contribute to the internet as much as anyone on an unfettered T1.

      The only thing you can't do is be a system administrator. And that is a good thing. These connections need to be administered - improperly administrated computers are what make virus and spam possible. 99% of people on broadband are not qualified to administer network security, and it is absolutely rediculus for slashdotters to get angry at them for failing to live up to that expectation. The ISP's are the IT department for the home user, and they need to start acting like it.

      If you wan't to be your own system administrator, there are accounts for that. You will be much happier if you just get one, and everyone will be happier when the stability of the internet is not dependant on average users being network security experts.

    2. Re:This is not the looming threat. by Stray7Xi · · Score: 2

      No everyone isn't qualified to be a system administrator. But I certainly rather be on an internet that anyone can be a system adminstrator then one where the only qualification needed to be one is money.

  27. TOS reflect interesting trends by RLiegh · · Score: 3, Interesting

    I have mediacom cable internet. Quite fast but if DSL was here, I'd consider taking it. Why? because mediacom does not allow servers.

    Reading through thier various offers is interesting. Not only do they not want home users to run servers, but they even want to limit servers to certain business users, too.

    In my opinion, this is going to lead to less people offering content on the web, as the bandwidth becomes more restrictive, and your choices decrease down to a few broadband options.This is in direct contrast to the mid-90's promise of the net where it was seen that anyone would be able to put up any thing.

    I feel very sad, myself: I pay boupcoup bucks for a good connection (at least, compared to dialup) but I can't do jack shit with it (at least I can't do 2/3rds of what any healthy geek would want). Barely seems worth it.

  28. A good reason to use encryption by MacDork · · Score: 3, Interesting

    If your messages are encrypted, then you don't have to worry about automated programs kicking them for their content or attachments. That will be up to the decrypting party. I pity the ISP that starts blocking messages because they are encrypted.

    Learn how to cryptographically sign your mail on Mac OS X 10.3

    1. Re:A good reason to use encryption by homer_ca · · Score: 5, Informative

      Yeah, and not just humans either. The worms are starting to use encryption too. Some versions of Bagle are spreading themselves in password encrypted Zip files, with the password in the message body. The pace of the arms race is incredible. Antivirus vendors then updated their scanners to scan the message body for the Zip file password and decrypt the attachment. The virus writers then started sending the password in a bitmap attachment to foil the virus scanners.

      Of course that story was from 2 weeks ago so it's old news. This week the latest variant has no attachment at all. It's just HTML that exploits an IE bug that downloads the worm from the infected computer that sent the message.

    2. Re:A good reason to use encryption by frdmfghtr · · Score: 2, Interesting

      The virus writers then started sending the password in a bitmap attachment to foil the virus scanners.

      Seems to me that this is a natural virus filter. People who are dumb enough to open virus-laced e-mails will be too lazy or won't be smart enough to go through the hoops to open the virus payload, and those smart enough to go through the hassle will also be smart enough to recognize the trap they're facing and just delete the darned thing.

      Although, as has been said before, "never underestimate the power of the stupid."

      --
      Government's idea of a balanced budget: take money from the right pocket to balance...oh who am I kidding?
  29. Troll? Truthfull regardless... by Eric_Cartman_South_P · · Score: 3, Funny
    "...will the proliferation of broadband Internet access deal a serious blow to current freedoms on the Internet?"

    No, because with a cable modem connection I can order a Powerbook faster than ever.

  30. Network Biology by StuWho · · Score: 4, Insightful
    As networks become ever more complex, they become increasingly like ecosystems.

    The best defense against viruses is a healthy immune system, and an organism gains a healthy immune system through exposure to germs and viruses.

    The current "epidemic" of viruses serves only to strengthen the immune systems various groups are developing to regulate the wider ecosystem - the net.

    There will always be change, and one of the drivers of change is chaos.

    --
    "If you think nobody cares if you're alive, try missing a couple of car payments." Earl Wilson
  31. So, will you eat your comments if you're wrong by sulli · · Score: 2, Funny

    like Bob Metcalfe did when he predicted "gigalapses" of the internet?

    --

    sulli
    RTFJ.
  32. Broadband or Human Nature? by The-Dalai-LLama · · Score: 5, Insightful

    I think the proliferation of broadband has helped the internet become a more valuable tool for the average 2.5-kids-having-explorer-driving-all-American-fami ly, which has caused it to be a greater part of all our lives. As such, it is now on the radar for the type of people who are threatened by anything beyond their control.

    The more we become dependent on the internet, the more interest there will be in regulating it. The level of freedom, possibility, and power that the internet affords to the average person is simply unprecedented. Freedom of the press belongs to those who own a press. With the advent of the internet, the average soccer-mom now has a press that can publish to the entire world for pennies.

    Attempts to regulate and lock-down the net are inevitable. It is the nature of those who seek power for themselves to deny and control the power afforded to others.

    The possibility of always-on connections spewing a constant stream of malware and sludge is just an excuse. The proliferation of broadband is dangerous because it put the issue on the map and a very high level of power in the hands of the people.

    The Dalai Llama
    Citizen of a nation where freedom of speech, bought with the blood of heroes, is used to spread pr0n and reality TV shows.

  33. ISPs can deal with this... by Tony+Hoyle · · Score: 2, Interesting

    Just put a clause in the contract. If a PC is put onto the network without antivirus and firewall and it gets infected (thus becoming a threat to the ISP), the account is immediately terminated without right of appeal.... in theory ISPs could already do this (as infected machines are often spam vectors and spamming already has such penalties) but an explicit contract stops them saying they didn't know.

    Publicise it... make sure that the ordinary users are given every chance to comply (a CD that automatically installs Norton should do it), and that's 90% of the problem solved.

  34. Thank God for noisy fans by StuWho · · Score: 2, Funny

    If it wasn't for cheap and noisy PC's which can't be left on because the racket they emit is disturbing to their owners, this could become an epidemic.

    --
    "If you think nobody cares if you're alive, try missing a couple of car payments." Earl Wilson
  35. Re:It's not the broadband by vigilology · · Score: 2, Insightful

    Often on talk radio I hear them discussing 'controversial' issues like how the internet is bad because of all the "porn sites popping up out of nowhere" and how it - the internet - needs to be heavily regulated. FFS. The problem is not the road; the problem is that shitty car that you're driving!

  36. pet peeve by geekoid · · Score: 2, Insightful

    Irregardless is not a word.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  37. What about a test to be allowed to use the net? by i8a4re · · Score: 3, Funny

    Make a standard, fairly simple test that you must pass before you are allowed onto the internet. This test only needs about 3 questions. First, can you turn on the computer by yourself. Secondly, can you setup and or access e-mail by yourself. Thirdly, when you set up your e-mail, you should immediately e-mail the licensing agency. They should respond with an e-mail that completely looks like a virus. If you open the program attached, you fail. This program should promptly erase your hard drive so you will pose less of a threat.

    --

    If I drive fast enough at the red light, it'll appear green.
  38. Re:It's not the broadband by Disevidence · · Score: 2, Funny

    didn't read article.... didn't understand story.... don't grasp implications... I"LL BASH MICROSOFT INSTEAD!!

    --
    Think nothing is impossible? Try slamming a revolving door.
  39. No bandwidth... Users of it by Joe5678 · · Score: 2, Insightful

    Look at all the big worms we've had so far this year. They haven't been exploits of security holes, they've all been worms that people receive in their e-mail and then double click on.

    Sure with broadband their double clicking takes action faster, but I don't really think that's the problem. The problem is that there are so many more people online now than there was two years ago, and a large chunk of them do not have the knowledge to deal with viruses in their email. Double click now, worry later.

    People do NOT pay attention to what they are opening, I do IT for a small business, and we haven't had any machines infected yet. All of the viruses are caught at the mail server and replaced with a text attachment stating "THERE WAS A VIRUS ATTACHED BUT IT HAS BEEN REMOVED BY THE VIRUS SCANNER.TXT" and the same people day after day will forward me the message or call me on the phone and ask if the message is a virus.

  40. To fix the problem by fdiskne1 · · Score: 4, Insightful

    Yeah, I know. Everyone has their own fix for the problem, but I really think these steps would take care of most of it.


    1. Free firewall software from an ISP for all Windows boxes. I really don't think ZoneLabs would charge too much for an ISP to distribute the free version of ZoneAlarm. Ditto that for AdAware or Spybot S&D.

    2. Free virus-scanning of all email. Don't scan for spam and forward through all virus-stripped email just in case it contains important information. I know, most viruses are ONLY viruses, but you never know what may come later.

    3. Have ISPs monitor port 25. If traffic is seen, test it for an open relay. This could be part of the contract the customer would sign. If it's an open relay, block it and tell the customer to clean up the machine if they want it open.

    4. Once a new major virus such as MSBlast hits, monitor for it's traffic and block appropriately or take them offline until it's fixed. Of course the virtual network with cleaning tools is a good idea, also.

    If this doesn't happen (and I don't expect it to) people with computers HAVE to learn that running a computer hooked up to the Internet is a responsibility. If they can't learn how to manage it properly, they should hire someone to do it. You have to maintain your car and people don't complain too much about it. If they do, people may feel sorry for them, but that's as much slack as they get. Don't fix it? Don't drive.

    --
    But why is the rum gone?
  41. Oh, don't be silly by Jonboy+X · · Score: 2, Insightful

    Please, more powerful tools, in the hands of people who know how to use them, lead to greater productivity, not pandemonium. Did the evolution of muzzle-loader muskets into M-16's spark a global surge in violence? D'oh, bad example...okay, the growth of axes into chainsaws helped mankind...deforest our planet at an astonishing rate. There must be a good example here somewhere. Single-prop airplanes into 737's...lead to air and noise pollution. Well, you see where I'm going with this. More powerful tech is only bad if someone uses it in a bad way...which someone always does.

    --

    "In a 32-bit world, you're a 2-bit user. You've got your own newsgroup, alt.total.loser." -Weird Al
  42. Is bandwidth really getting cheaper? by CatGrep · · Score: 2, Interesting

    "As bandwidth costs become cheaper and more people adopt cable or DSL over standard dial-up connections,"

    Where is this happening? Cable connection runs in the $40-$50/month range right now. A couple of years ago you could get them for about $35 in my area.

    There really doesn't seem to be any price pressures on broadband access yet. Most places have either DSL or Cable. Some places have both. Neither the telcos (who do DSL) nor the Cable cos seem inclined to compete on price yet. Maybe when wireless broadband or broadband over powerlines become more common you'll start to see some competition.

    After noting the current surge in Internet worms and the so-called Darwinist evolution of these things into more and more powerful incarnations,

    It's not exactly Darwinian evolution. These things don't mutate on their own, people change them.

  43. They've already tried. by Chazman · · Score: 3, Insightful
    However, this is something the gov't could demand (gotta stop those waskiwy tewowists).

    Can you say "Clipper chip"?

    Unfortunately, governments (and especially ours) aren't exactly known for learning their lesson the first time around. This is likely a battle we'll have to fight again, and soon.

    --
    -----Chaz
  44. Bandwidth is very good it kills faster by gelfling · · Score: 2, Funny

    More bandwidth is good because then bad germs will kill more weak hosts faster.

  45. ISP Irresponsibility by Big+Jojo · · Score: 4, Insightful

    ISPs that can't be bothered to filter out the viruses are the primary cause of all this damage.

    Today, almost all viruses are weapons to attack home PCs, installing spambots. If the ISPs had even been marginally responsible as these epidemics started, rather than fostering the spread of ever-more-dangerous virii, today's problems would be several orders of magnitude less than they are.

    That has nothing to do with broadband per se. It has to do with trying to make a buck by externalizing all costs ... changing the Internet from a place where organizations were responsible, to one where irresponsibility became the norm.

    There are lots of real-world examples of people being held responsible for their actions. You can't just go screwing people to give them AIDS, for example. Or firing guns into crowds. And there are plenty of places where littering gives reasonable fines (hundreds of dollars).

    ... oh yeah, ISPs are corporations, and corporations are lately expected to be irresponsible. Thats F*CKED, end of story.

  46. Newcomers versus Old Timers by __aadhrk6380 · · Score: 3, Insightful

    Isn't that what this is all about? The noobs don't know how to swim, but they are hell bent on jumping into the deep end.

    I have moderated some large message boards, by way of an analogy. They always start off with a small group of people that get comfortable with the tone of voice, the technology involved, and they then set the trend for that one site. If the tone is right (i.e., inviting) tons of people start showing up. If you build it, they will come and all that. You'd think that would be a good thing, but it invariably leads to becoming "a victim of your own success".

    You get people that have no idea what have gone on before, but show up and start demanding to be heard. Major soap box time. And God help 'em if they don't get taken seriously, or get criticized because they are reinventing the wheel or any of a number of other things.

    This dovetails nicely with the /. article asking questions for Mike Godwin about legal issues on the web. Let's face it, and check me here, but stupid is still free as best I know. Sadly, it is the best some can afford.

    Is there a crackdown on surfing habits in the future? Maybe. On the whole, it probably wouldn't be a bad thing since most issues would be related to security type items (antivirus requirements, firewalling, OS patches, etc) as has been noted. Would things like this impact the "old timers"? Probably not, and the noobs wouldn't even know the difference anyway.

    Remember, the question wasn't about freedom of speech, copyright issues, IP, etc., but the propagation of crap.

    Broadband connection, analog connection, it doesn't matter. The abuses are the same (read "deranged indifference" as abuses). It's like the Austin Powers movie where the guy gets run over by a steam roller. The end result is the same, it just takes a lot longer than getting hit by a Porsche. The outcome is inevitable, in my mind. It is just a matter of how quickly we get there.

  47. Saving people from themselves... by OneFix+at+Work · · Score: 5, Informative

    I've found that most folks like to be told how to make their computers more secure and decrease their chances of infection/spyware...

    I have made it standard practice to install 3 applications on all Windoze machines that I fix anything on...

    1) Install Avast! Home Edition and set it to do automatic updates of both the Core Program and Virus Database. Because most people don't pay for Anti-Virus upgrades after their free trial version runs out...not to mention the fact that Avast! is better than Norton and most for-pay AV apps anyhow...

    2) Install Spybot Search & Destroy and make sure that the primary user(s) see what the result of the initial scan is (shock value) with instructions on how to use the app...

    3) Install FireFox (no link needed) with the follofing userContent.css...

    If they still insist on using IE I will install Google Toolbar and enable popup blocking...

    I then proceed to replace any spyware apps with free non-spyware apps (WeatherBug -> Weather Pulse, etc)

    As for a firewall, I talked most into buying a wireless router (generally a cheap 802.11b router) to use as a firewall and future network upgrades. I don't think any windoze software firewalls are very good...IPTables is about the ONLY software firewall that I trust...

    After doing this, I find that these systems stay fairly clean and have much fewer problems. Not to mention the owners of said machines tend to be much happier afterward.

    1. Re:Saving people from themselves... by OneFix · · Score: 2, Insightful

      ZoneAlarm is more software to be exploited...with a hardware firewall/router, there is no way for an outside system to access a system directly without some sort of user intervention (forwarding a port or putting an IP in a DMZ)...

    2. Re:Saving people from themselves... by bcrowell · · Score: 2
      OK, this is going to sound like the typical Slashdot Linux-fanboy sarcasm or whatever, but seriously I'm really just curious...

      I have never run Windows, and I have never needed any of this stuff. Do you really get your Windows box owned just because Windows is insecure out of the box? Or are these people clicking on e-mail attachments, or downloading all kinds of closed-source freeware (Kazaa,...) and then acting surprised that it does bad stuff?

      My mother bought a new Windows machine, and instantly got it owned. I mean like, bought the box on Friday, and noticed it was acting funny while she was eating her cheerios on Saturday morning. My Mom is not stupid. She has a PhD. I laughed and said, "Mom, don't you know better than to click on e-mail attachments?" She swore up and down that she hadn't. Really, I'm not just trying to flame Windows, but is Windows really so bad that getting your machine taken over is this kind of instantaneous process? Or are we really talking about people who swear they haven't done anything stupid, but really Dad's been porn-surfing, or the kids have been file-sharing MP3s?

      It just seems crazy to me that anyone would buy a proprietary OS, and then pay for proprietary apps whose sole purpose it to fix security holes in their proprietary OS.

  48. The modern consumer Internet by MrChuck · · Score: 2, Interesting
    Earthlink filters port25. And I'm grateful for it. That said, I have a box elsewhere that also listens with AUTH only on 587 (mail submission port). Living the high life am I.

    I also have an IPv6 tunnel to that remote (by 3k miles) box. Protocol 41/port25 is not filtered :)

    The all new, shiny, "UhOh"'s (this decade) style CONSUMER internet is not the [D]ARPA-Net that some of us grew up with. Not even the "rough town" internet of the mid 90s to the late 90s.

    No this is the network for those people who believe that one network of the Internet is the "intranet." Where even those that thought SMB and IPX were good ideas were considered "technical." (I remember the first time I deal with a Novell network, asking my friend the admin how to turn off the curses interface and get to the real command line. "No, that's it." I setup my Sun IPC to do print and file service and his box with PC-NFS and asked why they thought novell was worth $20k) (the IPC was fairly used at the time, but BSDi 1.0 was just out too, for less on them Pentium/33s).

    The consumer net has people who need protection. Perhaps under the banner of "to help them" but just as important is to protect ME from them.

    I long ago proposed that AOL, Compusa, Prodigy (the trailer park of the Internet) and those guys have OC48's between them and a 56k modem to the rest of us. Didn't happen and now those people are all around dumping sewage into our streams.

    I'm about set to refuse mail that DIDN'T come from an IPv6 address and regress.

    So filter port 25. The net is in crisis from the consumer FatPipe providers.

    Motivate the vendors (MS, but also the Linux distros, Sun and everyone else to NOT COME OUT OF THE BOX WITH 20+ ports listening!!).

    I clean up hacked Linux and Sun regularly. We need "echo" on for WHAT good reason? If Sun can't come up with a simple CLI tool to manage inetd.conf (it's a perl script), then they shouldn't be playing on the net.

    Linux needs rpc's by default why?

    99%* of linux user use packages built by strangers for what good reason? (at least with source, 1 of thousand of users can LOOK at mutt-1.4i.tar.gz that md5 checksums to:
    a67bcdf1a1cd53d61ccd3ebf3993ba59

    With a binary, it's a crapshoot.

    The internet is a bad neighborhood and some folks need protecting and we need protecting from some folks. Just don't tell gramma that we're walling her IN, just 'splain that the wall is to keep the baddies OUT.)

    --
    Mr Cranky
    (in my 22nd year of using this new fangled "network" thingy. Archie was good enough for me.)

    * ok, I made up 99% but anyone have real numbers that frighten less?

  49. Things ARE improving behind the scenes by J.+T.+MacLeod · · Score: 4, Informative

    I work for a small ISP, and things are absolutely improving behind the scenes. Most old broadband network designs were not built with the present day in mind. It was, perhaps, shortsighted, but who saw this coming?

    We're installing dedicated spam/virus filtering machines. We're changing our network drastically, going from a very simple network structure to one where every DSL bridge's ATM channel is carried up to a router doing Proxy-ARP, so we can cut out broadcast traffic and regulate traffic for every customer's connection (cutting down on both viruses spread via broadcast traffic as well as DoS attacks).

    On top of that, we police the network to find users with viruses, then call them and, if they can't do it themselves, clean their PCs for free.

    Things are definitely picking up on the ISP end. Now if only the customers would take a few steps...

  50. Strange definition of freedom by geekee · · Score: 3, Insightful

    "I'm not only worried about viruses and spam levels. Part of the reason the MPAA and RIAA are taking such an interest in Internet activity is that file sharing has become so much easier with the availability of broadband, and as usual there are murmerings of regulation. Before the broadband revolution, the involvement of the MPAA and RIAA in Internet affairs was small, and their argument was less convincing. "

    If you're using the internet to violate copyright laws, that is not an exercise in freedom, but instead an exercise infringing on someone elses rights. The fact that you weren't caught before doesn't mean the internet is becoming less free. It means there is less anarchy on the internet.

    --
    Vote for Pedro
  51. Solutions? by Gldm · · Score: 2, Informative

    Well there's solutions to some of these problems, but nobody would really want to implement them.

    Let's talk about spam and adware: Outlaw it. Why is it proving to be so hard to kick congress off their fat lazy asses and make it easier for people to smack these bitches where it hurts, their wallets? Given what happened with the do not call list you'd think this would be a piece of cake. Why is adware even permitted to exist? You'd think with all the heightened security concern that methods of running unwanted code without a user's consent or knowledge of its installation would be a major issue.

    Viruses/worms/trojans: Change the way email works. Step one, NO ATTATCHMENTS. Seriously, why the hell are we using email to shuttle files around? It was not designed for this. What alternative is there for people to share files? I dunno, maybe P2P? Or maybe personal web servers? But wait, that's bad, then broadband providers would have to allow upstream that isn't horribly crippled or god forbid minor webservers on their networks. Let's look at the advantages of sending a link to a file on your machine in an email versus attatching the file:

    1. Reduced mail traffic. If your mail goes out to a 100 person list, and only 5 people care to check out the file, only the bandwidth for those 5 is used.

    2. Traceable distribution path. We know where the file came from, even if it's malicious code, someone is accountable for hosting it. It's just slightly harder to infect a user's machine, start up a webserver unknowingly, host a file, and trojan a link into their emails than just spew an .exe to their entire adressbook via their ISP's mail server.

    Peer to peer copyright infringement: Face it, it's here, it's not going away. Either make what people want to watch and hear available when they want it for a price they won't balk at, or suffer. I mean how impractical is this? Itunes doesn't seem to be having any problems. Maybe it's not so much people are unwilling to pay for a movie or a CD as they are unwilling to go down to a store and get something overpriced or find out it's out of stock. Maybe it's easier to consume TV by watching exactly the episode you want of the show you like without having to plan your day around it. Not everything downloaded is even available for sale. People want it, but companies aren't supplying it, so they're going the less than legal route to get it. There will always be piracy for any medium, people taped CDs and the radio and copied VHS tapes. P2P is just making access to content easier. If there isn't enough legal content or the access isn't easy enough, guess what people will go to instead? I would rather pay what the average monthly cable bill is and be able to search for and download whatever TV episodes or movies I wanted to watch than pay it to have to wait for them to come on so I could watch them or record them. It's not about the money.

    --

    Introducing the new Occam Fusion! Now with sqrt(-1) fewer blades!

  52. Dialup not standard by leandrod · · Score: 2, Insightful

    Let's take a look at your assumptions.

    > standard dialup

    There is no such thing. Dialup just happens to be cheaper if you don't use the Net heavily, and to be universally available. There ain't anything standard about it.

    Nor is broadband what people really need. Rid them of the actual dialing time delays, and they will live happily with 128Kbps or even 64Kbps. This would be somewhat cheaper, would make these users less interesting to be targetted by spammers, and would help webdesigner go slow with flash and fancy graphics.

    So what we need is competition in the last mile Net connections, so that this bandwidth madness is checked.

    Now, perhaps MS users should be required to have firewalls by default, and to give permission for ISPs to routinely check them for virii, spyware and the such? Perhaps partition all ISPs in MS Windows and the sane world, the MS Windows world being firewalled at the ISP so that MS Windows users can only do so much harm to their fellow sufferers?

    --
    Leandro Guimarães Faria Corcete DUTRA
    DA, DBA, SysAdmin, Data Modeller
    GNU Project, Debian GNU/Lin
  53. Well you have the real answer by Sycraft-fu · · Score: 2, Insightful

    Turning off connections and refusing to turn them on until the problem is fixed. If ISPs started doing this, people would start patching, geting anti-virus software and so on. Your average person doesn't care if they get infected since it doesn't affect them in ways they notice. Not having Internet, they'll notice and care about. What's more, they'll probably have to pay to have it fixed, either by taking it to a shop or buying software. This gives them even more incentive to prevent future occurances.

  54. my $0.02 by kendoka · · Score: 2, Funny

    Who says it hasn't happened already? I remember when the Internet only exercised censorship over advertisements. Now the ads are free, the naked girls aren't, and if you wanted to see how a bomb works the FBI and the CIA will fight over who gets to shoot you first.

    (Not that I ever download, or condone the use of pornography, or building bombs. Please don't shoot me, Ashcroft. =))

  55. Microsoft leading to internet breakdown. by handmedowns · · Score: 2, Interesting

    I'd like to point out that I haven't been infected by a worm or virus yet. Thats not to say my system is bug free.. though linux does have its ups when it comes to security. As far as spam goes, mail delivery needs to be redesigned. And not one of these dumbass MS solutions of a nickle an email.

    --
    The road between democracy and tyranny is paved with secrecy in the name of security.
  56. Microsoft is taking care of that by Sycraft-fu · · Score: 2, Interesting

    Windows XP has a software firewall that is simple, but works pretty well for most users. Stateful, permits outbound, denys inbound. It will allow inbound upon user request (in the config menu) or program request (not sure how that works). It's off by default.

    However, it's not going to be for long. Service Pack 2 is going to turn it on by default. This will cause plenty of whining and MS bashing, I'm sure, but hopefully it will help a little bit.

    However the main problem these days is with attachment-clicking syndrome. Most viruses don't come through exploits, they just come through e-mail. For every one like Blaster that uses an exploit there are 500 like Bagel that go via e-mail attachment. People need to learn to quit opening random attachments.

  57. The internet went to hell May 5, 1992 by sdo1 · · Score: 2, Interesting
    The internet went to hell May 5, 1992 and it has never recovered. That was the day that AOL started allowing their users to post to usenet. Breakdown? No, it's been breaking down for nearly 12 years.

    -S

    --
    --- What parts of "shall make no law", "shall not be infringed", and "shall not be violated" don't you understand?
  58. Mitigation by rixstep · · Score: 2, Interesting

    There are mitigating factors, and ironically most of it is tied to the baby Bells and their competitors.

    Every communication line is multiplexed. In other words, a telephone trunk line open to the public at large may actually only be able to handle 1/10 of the total possible traffic.

    But broadband lines have been multiplexed much worse.

    So that as long as everyone does not use broadband, the speeds are high; but as soon as everyone goes over to it, guess what will happen?

    And then those who want the speed they had in the beginning will get a new offer: pay twice as much again and you can have it back. And so forth.

    So things are faster now, but it's not a constant upward curve.

  59. Broadband access vs. human global mobility by Noco · · Score: 4, Interesting

    This idea of broadband access creating a "breeding ground" for new malicious code as well as allowing the code to be spread more rapidly and universally seems to parrallel the problems that have been facing public health officials for the last century.

    With the increase in human mobility due to cars, trains, planes, etc. more people can come in contact from disparate places more rapidly and more often. This has resulted in once isolated diseases with limited scope becoming important health concerns. SARS is a prime example. Toronto became an infected city, though thousands of miles away from the epicenter. Yet we develop technology to aid in the detection and treatment of diseases. We don't, though, regulate people's movement. Temporarily there might be economic forces that isolate areas (i.e. airline travel stops due to lack of demand) but such effedts are temporary.

    I don't see a need to necessarily worry that broadband access's negative effects will trigger overregulation. Instead, I think that systems will be developed that mimic biologic systems. Oftentimes, evolution has produced solutions to complex problems in very elegant ways that we could not have developed using traditional methods.

  60. not a very good argument by hshana · · Score: 2, Insightful

    I don't see how the two are closely related. IMO, more broadband will increase freedom because it will give more people more access to larger amounts of information. Also, an "always on" connection will encourage more people to host their own websites and share even more information. As the threat from viruses increases, those who don't take the time to learn about and protect themselves from the risks will be removed from the pool of people participating. I think people will quickly learn to buy virus software and click the "yes, I want to install that update" button. The internet is too great a resource for people not to invest the time and effort to maintain their link to it.

  61. ISPs become more sophisticated too by HuguesT · · Score: 3, Insightful

    Today's broadband ISPs are a bit more sophisticated than the shabby dialup operations of yesteryear. Now they offer as standard spam & viruses filtering, NAT, real routers as opposed to modems, and more.

    Also more and more mere users have come to understand the importance of patching, disabling services, not trusting attachments etc and even Microsoft is supposed to be shipping some kind of firewall software as standard now.

    Things are not as one-sided as it looks.

  62. Most Linux install disks will clean a PC by Skapare · · Score: 2, Funny

    Most Linux install disks will clean a PC. Not only will they clean the PC of the infection, but they will also clean it of spyware, as well as greedware. And it's free.

    --
    now we need to go OSS in diesel cars
  63. Not an accurate estimation by ScrewMaster · · Score: 3, Insightful

    The advent of widespread broadband access, per se, is hardly cause for a breakdown in basic Internet functionality. Talk about inferring cause and effect. What is responsible is a breakdown in the caliber of the network user. Prior to the Internet being opened for public access, you had primarily large-scale governmental, corporate or institutional users, any of whom are (presumably) a harder target than the average Dell owner with a Surfboard. By the logic of this post, it would make perfect sense to restrict everyone to 110 bps Baudot communications in order to make it harder for worms to proliferate. That's ridiculous. What needs to be done is to secure the network, by both the end user and the connectivity provider. Blaming high transfer rates is, well, like trying to cure diarrhea by tinkering with the plumbing in your bathroom. If you try to treat a problem symptomatically, rather than analytically, you are unlikely to find a cure.

    --
    The higher the technology, the sharper that two-edged sword.
  64. Earplugs! by Phidoux · · Score: 2, Funny

    Earplugs! Haven't you ever tried them? They work wonders with my noisy PC... Huh?! What did you say?

  65. *Internet* breaking down? by Jugalator · · Score: 3, Interesting

    Are you sure about that? I thought it was signs of some *software* breaking down. Keep in mind that the vast majority of regular users who doesn't have much insight in security are coincidentally also using one of the least secure operating systems with Internet access.

    Maybe the inter... ahem, software would heal with new development philosophies?

    --
    Beware: In C++, your friends can see your privates!
  66. This is the most foolish headline I've seen on /. by Voltas · · Score: 3, Insightful

    The internet is a free scale network. If you look up some of the information behind such a network you would realize a few KNOWNS

    Believe it or not a free scall network and the Internet:

    Can not be destroyed
    Can not be owned
    Individual or single entitites on it only have minimel impact (HUBS having the most influeance, and I don't me devices)
    No one can even fully understand the complete workings of the internet.

    These are almost FACTs, I know some may despute them but with out going to deep into the concepts I can asure you that Broadband or a Nuclear War will not destry the internet (Though it might lower its usage a little)

    --
    -- Disclaimer: I can't really back up anything I post on /. --