[147011] in North American Network Operators' Group
Re: Recent DNS attacks from China?
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Wed Nov 30 13:44:42 2011
To: "andrew.wallace" <andrew.wallace@rocketmail.com>
In-Reply-To: Your message of "Wed, 30 Nov 2011 10:24:21 PST."
<1322677461.68582.YahooMailNeo@web162104.mail.bf1.yahoo.com>
From: Valdis.Kletnieks@vt.edu
Date: Wed, 30 Nov 2011 13:42:58 -0500
Cc: "nanog@nanog.org" <nanog@nanog.org>,
Leland Vandervort <leland@taranta.discpro.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1322678578_2875P
Content-Type: text/plain; charset=us-ascii
On Wed, 30 Nov 2011 10:24:21 PST, "andrew.wallace" said:
> Before we see knee-jerk conclusions about who to blame, these attacks could
> be carried out by anyone. Is country even relevant in the cyberscape?
Reading comprehension, Andrew. Leland never said the Chinese were behind it,
he never even said the packets came from China. He said the packet origins
were from Chinese IP addresses.
And yes, country *is* relevant in the cyberscape. For starters, it defines how
much cooperation you'll get in tracking, arresting, and prosecuting the
offenders. The US has had a lot more success in apprehending Gary McKinnon than
the perpetrators of Titan Rain. It's almost certainly due to the fact that
McKinnon was in Glasgow and the Titan Rain people weren't.
--==_Exmh_1322678578_2875P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFO1nkycC3lWbTT17ARAonRAJ4zqWPy83YNt/o9bktCI8/jSLdmUgCg3iVQ
barTx8LT3SG7/gfTIaNAxbw=
=yEFo
-----END PGP SIGNATURE-----
--==_Exmh_1322678578_2875P--
