Comments

• Yuhong Bao

  2010-01-06 02:47:58

  Well, I wouldn't go so far to ban Windows entirely (espcially considering that it is only partly MS's fault), but banning zombie PCs in general is a good idea.

• Roy Schestowitz

  2010-01-06 03:05:14

  How would you go about implementing this?

• your_friend

  2010-01-07 05:59:29

  True, there's no reason to ban Windows operation, just ban their connection to any public network.
  
  One way to do this is to make people accountable for the poor security of their computers. A class action lawsuit should be launched against Microsoft for every business that has suffered downtime due to DDoS. Companies with large numbers of participating machines can be named as co-defendants. That would clean things up pretty quickly and I can't believe no one has thought of it ...
  
  perhpas they have. Looks like the legal groundwork was all worked out ten years ago, but no one has done anything. Ten years after articles like this put the blame on greedy companies, we now have free systems that take less money and staff but have no security problems. My bet is that the right lawyers simply have not caught up to the problem and potential solutions. The existence of obvious low cost alternatives, combined with a decade of tremendous costs should combine to make some very juicy lawsuits. It's time to lay the costs of non free software at the feet of it's owners.

• Yuhong Bao

  2010-01-07 06:51:07

  "A class action lawsuit should be launched against Microsoft for every business that has suffered downtime due to DDoS." I don't think so. As I said, it is only partly MS's fault, and when did it made sense to consider a class-action lawsuit just because a security vulnerability has been found in their software.

• Yuhong Bao

  2010-01-07 06:52:50

  "True, there’s no reason to ban Windows operation, just ban their connection to any public network. " Banning Windows operation on any PC, zombie or not, would likely be impossible anyway.

• your_friend

  2010-01-09 22:42:59

  No, it's not. Microsoft does what it can to exclude free software users from hardware and networks all the time. Ports are blocked by ISPs and Universities are blocking systems that are not "up to date". It would be simpler and more effective to block all Windows computers, Zombie or not, than to try to achieve the impossible and secure them.

• Yuhong Bao

  2010-01-09 23:35:57

  I was thinking of banning *local* Windows operation. But I agree that client-side detection and quarantine, like MS's NAP, is a bad idea. No need to detect Windows specifically, just detect botnet and worm network traffic on the network side and ban PCs that are sending them.

• Roy Schestowitz

  2010-01-09 23:46:09

  It would not cure those PCs. They would just move on to other targets that are more sensitive.

• your_friend

  2010-01-10 03:11:49

  Botnets are a Global problem but the correction is always local. They should be removed at the local nexus of power that Microsoft usually exploits to discriminate against free software users: ISPs and local government.
  
  The expedient solution is to block access at the ISP level to all Windows computers and this is already necessary. ISPs have periodically disconnected compromised Windows computers but never had a reason to block other kinds. It would be cheaper and more effective to block all versions of Windows. People die when hospital networks are clogged with malware traffic. The economic harm is also high. Individuals caught in Microsoft's monopoly trap are moving too slowly, so society must use other measures to protect itself.
  
  Tort law can be used as a slow solution by suing Microsoft companies that use Windows and ISPs that don't take effective measures. Microsoft is directly responsible in a way that only a non free software owner can be. Companies with large Windows deployments are guilty of gross negligence because everyone knows that a high proportion of Windows clients are always compromised. ISPs, such as Comcast, are also grossly negligent. The economic harm from botnets is easier to measure than MAFIAA cases that now clog courts against individuals with the nerve to share. Some smart, brave and honest lawyers stand to make a fortune from companies that are usually guilty of monopoly tactics.
  
  The harm Windows does should be stopped as soon as possible and Microsoft should pay for it. We've had more than a decade of excuses but nothing has changed. The slowest solution of all is the one that is ongoing, people realize that free software is a better deal. This would be more effective if society was better at protecting itself from Microsoft's anti-trust crimes. The sooner all of these crimes and problems are addressed, the better.

• Yuhong Bao

  2010-01-10 01:13:36

  It would not cure these botnet PCs, but it would stop them from connecting to the network, so the attempt by those PCs to send/receive botnet traffic will have no effect.

• Roy Schestowitz

  2010-01-10 01:29:00

  Yes, at the ISP level. Australia considers doing this already.

• uberVU - social comments

  2010-01-06 09:13:40

  Social comments and analytics for this post...
  
  This post was mentioned on Identica by schestowitz: Perhaps Time for Authorities to Ban #Microsoft #Windows http://boycottnovell.com/2010/01/05/denial-of-service-again/...