There are fundamental flaws in blaming the ISP's. If you want to keep going up the chain blaming those in charge, then you have to inherently blame the unix OS itself and all its developers for leaving the security holes in the OS to start with. Then for those of you who blame the ISP's for not disabling telnet for SSH, you can blame RedHat and all the other major distro's for including telnet in the distribution.
Could the ISP's do more to prevent the root access? Yes. Is it their responsibility? Yes. Is it their fault that someone was causing malice using their systems? No. You can't go blaming someone else for one person's actions.
Under the same argument being used by some, you could justify that a disassociated youth who commits murder is really the fault of society and not the youth. The youth still had to pull the trigger. Just like in this case, the youth still had to hack root access and begin the DDOS attacks.
The question is: How do you regulate actions such as this on the Internet. If the Internet is self-policing, then who takes responsibility for damage caused, and who enforces the penalties or punishments? If the Internet is policed? Who and how do you police it?
There are fundamental flaws in blaming the ISP's. If you want to keep going up the chain blaming those in charge, then you have to inherently blame the unix OS itself and all its developers for leaving the security holes in the OS to start with. Then for those of you who blame the ISP's for not disabling telnet for SSH, you can blame RedHat and all the other major distro's for including telnet in the distribution.
Could the ISP's do more to prevent the root access? Yes. Is it their responsibility? Yes. Is it their fault that someone was causing malice using their systems? No. You can't go blaming someone else for one person's actions.
Under the same argument being used by some, you could justify that a disassociated youth who commits murder is really the fault of society and not the youth. The youth still had to pull the trigger. Just like in this case, the youth still had to hack root access and begin the DDOS attacks.
The question is: How do you regulate actions such as this on the Internet. If the Internet is self-policing, then who takes responsibility for damage caused, and who enforces the penalties or punishments? If the Internet is policed? Who and how do you police it?