You're Being DDOSed — What Do You Do? Name and Shame?

← Back to Stories (view on slashdot.org)

You're Being DDOSed — What Do You Do? Name and Shame?

Posted by Soulskill on Tuesday December 25, 2012 @10:32AM from the stop-drop-and-roll-doesn't-work dept.

badger.foo writes "When you're hit with a DDOS, what do you do? In his most recent column, Peter Hansteen narrates a recent incident that involved a DNS based DDOS against his infrastructure and that of some old friends of his. He ends up asking: should we actively publish or 'name and shame' DDOS participants (or at least their IP addresses)? How about scans that may or may not be preparations for DDOSes to come?"

7 of 336 comments (clear)

Min score:

Reason:

Sort:

not sure "shame" will have much effect by Trepidity · 2012-12-25 10:43 · Score: 5, Insightful

The vast majority of DDoS participants are infected computers in botnets, and their owners are typically unaware. Will they even notice your naming sufficiently to be ashamed? Maybe if it's a corporation it'd have some effect: publishing that you were hit by a DDoS that included X computers from BigCorp might make BigCorp look bad. But not so much if the botnet is a bunch of random home PCs.

--
10 PRINT CHR$(205.5+RND(1)); : GOTO 10
1. Re:not sure "shame" will have much effect by tnk1 · 2012-12-25 11:19 · Score: 4, Insightful
  
  Not sure we want to encourage providers to start nosing around in their customers' traffic more than they already do.... Just saying.
do something useful instead by swschrad · 2012-12-25 10:55 · Score: 1, Insightful

contact the ISPs involved, tell them they yank the bad boys' service or you will blackhole them.

--
if this is supposed to be a new economy, how come they still want my old fashioned money?
Yes name and shame will work! by Anonymous Coward · 2012-12-25 11:02 · Score: 2, Insightful

You're being 'ddosed' from thousands of different IPs - list them all!
Who cares if they're compromised computers - naming them will surely shame the botnet owners into submission!
Was this question asked by an idiot?
Not innocent by ElusiveJoe · 2012-12-25 11:20 · Score: 2, Insightful

Many of the DDOS nodes don't know they're being hijacked for a DDOS. Name and shame an innocent person?
They are NOT innocent. They let their computers be used in stealing, censorship, blackmailing, spam and other evil stuff. It doesn't matter if it is stupidity, ignorance or malicious intent.
If your car keeps hitting other cars you should hand over your license.
Re:It's a first step by symbolset · 2012-12-25 11:56 · Score: 4, Insightful

Censoring the Internet is never the right answer.

--
Help stamp out iliturcy.
Re:Why name and shame? by MysteriousPreacher · 2012-12-25 23:42 · Score: 3, Insightful

I think someone needs a hug and his meds.

--
-- Using the preview button since 2005