<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><div style="direction: inherit;">The one takeaway i get from this seems to be that the bad guys are perfectly aware of just where they can find loose or poorly implemented security and abuse policies - who is incompetent, who is malicious, who to abuse, who not to abuse</div><div style="direction: inherit;"> </div><div style="direction: inherit;">And action if any gets taken only after significant pressure is applied.</div> --srs</div><div> On 27-Aug-2016, at 2:39 PM, ox <<a href="mailto:andre@ox.co.za">andre@ox.co.za</a>> wrote: </div><blockquote type="cite"><div>On Sat, 27 Aug 2016 14:05:38 +0530 Suresh Ramasubramanian <<a href="mailto:ops.lists@gmail.com">ops.lists@gmail.com</a>> wrote: <blockquote type="cite">Curious - what factors would these be that you identified? </blockquote><blockquote type="cite"> </blockquote>But, at least two or more of the five factors are so very clear? imho the most obvious is: Effectively managing abuse depends on the interaction and relationship between two main and different techs of the Internet Those engineers that route and those that are system engineers The second most obvious thing, in my opinion, may be that if you ask ten of either of these what constitutes Internet abuse, you will receive at least two and as much as five (or more), different answers. and then there are so many other factors, what do you think the factors are? Andre <blockquote type="cite"> </blockquote><blockquote type="cite"><blockquote type="cite">On 27-Aug-2016, at 2:00 PM, ox <<a href="mailto:andre@ox.co.za">andre@ox.co.za</a>> wrote: </blockquote></blockquote><blockquote type="cite"><blockquote type="cite"> </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">On Sat, 27 Aug 2016 13:41:28 +0530 </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Suresh Ramasubramanian <<a href="mailto:ops.lists@gmail.com">ops.lists@gmail.com</a>> wrote: </blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Worth a read </blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><a href="http://krebsonsecurity.com/2016/08/inside-the-attack-that-almost-broke-the-internet/">http://krebsonsecurity.com/2016/08/inside-the-attack-that-almost-broke-the-internet/</a> </blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"> </blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Yes, the actual logs that Brian Krebs publishes, of the </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">conversations, underlines and serves as clear proof of those </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">factors which serves to obtuse anti abuse efforts. </blockquote></blockquote><blockquote type="cite"><blockquote type="cite"> </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Until this is resolved, Internet abuse will continue to be </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">difficult to manage. This makes it difficult for anyone one the </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Internet, including the Cyber Criminals themselves, to deal with </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Internet abuse effectively anyway. </blockquote></blockquote><blockquote type="cite"><blockquote type="cite"> </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">2c </blockquote></blockquote><blockquote type="cite"><blockquote type="cite"> </blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Andre </blockquote></blockquote><blockquote type="cite"><blockquote type="cite"> </blockquote></blockquote><blockquote type="cite"><blockquote type="cite"> </blockquote></blockquote> </div></blockquote></body></html>