Unless you can figure out a way to uncompromise ~10e8 systems *and
keep them that way*. Because as long as those systems are out there,
spammers have the ability to make other people pay for their spam
Maybe we shouldn't care, provided that it's not the receivers who
pay.
Or third parties. Good point. Provided it's the pwn3d's machines
legitimate owners, I'm inclined to agree with you.
What does it take to get ISPs to monitor the situation, and to send
out those kinds of notices to potentially thousands of customers?
Some do this to some extent already. I don't know how many; I suspect
it's very few, but have no specific evidence either way. (The one I
work for, for example, has a few rudimentary efforts in this direction
in place. Perhaps it helps that our customer base is smaller than most
mass-market providers'.)
To get it to happen on a large scale, you have to make it cheaper to do
that than to ignore the issue - where "cheaper" is as perceived by the
people responsible for the decision, which is not the true cost.
What does it take to get those customers' attention when notified?
The ISP I work for finds that getting cut off from the net usually
works in those few cases where a phone call from us doesn't. Perhaps
we're unusual in this regard. (And cutting the offending machine off
from the net solves the immediate problem even in those cases where it
doesn't get the customer's attention.)
If it were happening enough, we might have to institute some kind of
cleanup fee. But, usually, we find that customers are glad to be told
when their machines get zombied - and in this respect I suspect we
_are_ unusual; our customers are mostly smallish businesses and
generally don't get blustery and "that can't be" when told we're seeing
misbehaviour emanating from their machines. (The ones that aren't SMEs
are mostly ex-staff or friends thereof, not completely at arm's-length,
which both self-selects for sanity and predisposes them to believe such
a report from us.)
/~\ The ASCII Mouse
\ / Ribbon Campaign
X Against HTML mouse(_at_)rodents-montreal(_dot_)org
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
https://www.irtf.org/mailman/listinfo/asrg