MW-Blog

I’m doing this with a bit mixed feelings since I know I might be blocking away valid users. But I feel this is the only way to start showing ISPs and other companies that they can’t go on doing whatever they like.

So, what am I talking about? First read this. Read it well. A Telstra offshoot in New Zealand hired AKILL, a well known botherder. Now, even though I think that the “sentence” AKILL got was utter BS, that has nothing to do with this. And I don’t think people who serve their sentences should be haunted for the rest of their lifes. But what I am strongly against is HIRING THEM _AND_ PAYING THEM MONEY BASED ON THE CRIMES THEY DID. Did I make it clear enough?

[SNIP]

He said it was not the equivalent of hiring a bank robber to advise on bank security.

TelstraClear had spoken with the police who investigated the hacking and they considered Justice Potter’s rulings.

They also spoke with Mr Walker and his mother with the purpose of “finding out where his mind was at”.

He only gave presentations and was used in an advertisement and he did not have access to computers on the TelstraClear network.

[/SNIP]

Honestly? Fuck that and cry me a river. You don’t need to pay criminals to wake up companies. You can do that by other ways. Only thing they’ve succeeded in is send a  message to all the wannabe AKILLs that “yea sure, infect machines, ddos and threaten others and do crime as much as you want. We’ll hire you and pay good money when you get caught.”

And thus, a /16 IP block belonging to Telstra New Zealand landed on a blocklist. I’m sorry if outsiders suffer from this but I can never accept what they did. And I suggest others react also. I’m not saying my decision suits everyone. What I am saying is that the only thing that will drive a point to these guys is that they see a mass reaction. And don’t be stupid and DDOS them or anything. That’s just as wrong as what AKILL did.

Penetration Testing
Fitsec Ltd - The Evil Eye Penetration Testing Service
http://www.fitsec.com/en

This entry was posted on Wednesday, March 25th, 2009 at 2:25 pm and is filed under General InfoSec. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.