You're Being DDOSed — What Do You Do? Name and Shame?

badger.foo writes "When you're hit with a DDOS, what do you do? In his most recent column, Peter Hansteen narrates a recent incident that involved a DNS based DDOS against his infrastructure and that of some old friends of his. He ends up asking: should we actively publish or 'name and shame' DDOS participants (or at least their IP addresses)? How about scans that may or may not be preparations for DDOSes to come?"

Comments

Let's see if this works

[erroneus]

There is a person who frequents here, famous for using hosts files as a security something or other some-such. I had gone for quite some time without having to see or hear from him but apparently has come back.

Apparently, he has been published and is therefore a celebrity or something like that. Anyway, he has a bizarre set of problems which include replying to his own posts pretending to be someone else, assertions that he had "blown away," "burned," "destroyed" or any other such juveline taunt. He apparently believes I and others are "Jorge Bastida" whoever that may be. His mental deficiencies are his reality and therefore he projects his notion of what normal healthy behavior is upon everyone else. He therefore believes multiple people are all one and has little to do than sit here and and attempt to belittle and berate them with commentary.

Of course his problems with reality extend into the realm of believing things which aren't "quite right." I attempted to point out that this sort of behavior is archived for, so far, "ever" on slashdot and that any searches for anything he might have written could be found by anyone including and especially [potential] employers. With all the stories about how government and employers use social networking (which slashdot nearly qualifies as being) I would think this would be obvious but pointing out the obvious is apparently blackmail. (please grow up... please... prove it by not responding to this!)

So with this, I lay shame and I believe I don't need to name. Will it work?

Re:not sure "shame" will have much effect

[girlintraining]

enough complaints with evidence would result in powerful diplomatic pressure to pursue criminal investigation and prosecution.

Diplomatic pressure? Uhh, no. My aunt recently had her car totally destroyed by a vandal; over $10,000 worth of damages. The police didn't even want to come out and wouldn't take a report unless it was over the phone. And this was with some pretty compelling evidence of who'd done it as well. What exactly makes you think it's somehow different when you spam the same information to a large number of people? Law enforcement is not available to people like you; you haven't paid your dues.

Appropriately here means neither going bat shit insane with sting operations and massive stupid publicity campaigns when targeting particular selective groups or doing nothing at all ie the typical balance, using the motoring analogy of, traffic control.

Pirating Britney Spears can net you a larger fine and longer jail term than hacking a bank. Please tell me more about this "typical balance" you speak of.

Of course if individuals were doing more than DDOS protesting playing games et al and involved for example in credit card fraud then real prosecution and criminal penalties should apply.

"real prosecution and criminal penalties" are levied against the politically active far more often and severely than those levied against people who were just trying to make a profit. You may recall the entire Occupy protest movement over the failure of the government to prosecute such individuals, who perpetuated a lot more than just "credit card fraud" against the American public. You might also recall now who's on all the government terror watch lists, in jail, or otherwise convicted of various crimes. I'll give you a hint: Not the multi-billion dollar thieves, but the victims.