[governance] 3322.org seized by Microsoft from Chinese DNS service provider

[Adam Peake]

On Mon, Sep 24, 2012 at 3:14 PM, Daniel Kalchev <daniel at digsys.bg> wrote:
>
>
> On 23.09.12 12:08, Norbert Bollow wrote:
>>
>> Krebs on Security: "Malware Dragnet Snags Millions of Infected PCs"
>>
>> http://krebsonsecurity.com/2012/09/malware-dragnet-snags-millions-of-infected-pcs/
>>
>> (I'm more concerned about the innocent third parties affected by this
>> kind of action, though. --Norbert.)
>>
>> "Last week, Microsoft Corp. made headlines when it scored an
>> unconventional if not unprecedented legal victory: Convincing a U.S.
>> court to let it seize control of a Chinese Internet service provider’s
>> network as part of a crackdown on piracy..."
>>
>
> This is an perfect example of abusing market share. In this case, the
> victims computers were infected because of flaws in the software supplied by
> Microsoft. The irony is that all those people paid Microsoft for that
> software.
>

no.  From the article Norbert sent:

"First, the short version of how we got here: Microsoft investigators
found that computer stores in China were selling PCs equipped with
Windows operating system versions that were pre-loaded with the
“Nitol” malware, and that these systems were phoning home to
subdomains at 3322.org."

Adam


> Instead of spending some effort to fix the software on the infected
> computers, Microsoft is taking the "cheaper" route to shut down the command
> centers of the botnet. Or so they think. Or so they try to make everyone
> think.
> The rest of the story is just collateral damages.
>
> I am more worried that Microsoft is not brought to court for letting those
> victims computers become infected in the first place. This is no different
> than letting a company sell medicine that is known to have bad side effects
> -- the US it seems has double standard here as in "No to Canadian drugs!"
> and "But Microsoft software is ok" :).
>
> Of course, the story with the shutdown domains remain, but the moral there
> is (and has been for years!): If you don't want to be subject to arbitrary
> US actions, don't register domain names with US-based registries and
> registrars.
>
> Daniel
>
>
>
> ____________________________________________________________
> You received this message as a subscriber on the list:
>      governance at lists.igcaucus.org
> To be removed from the list, visit:
>      http://www.igcaucus.org/unsubscribing
>
> For all other list information and functions, see:
>      http://lists.igcaucus.org/info/governance
> To edit your profile and to find the IGC's charter, see:
>      http://www.igcaucus.org/
>
> Translate this email: http://translate.google.com/translate_t
>

-------------- next part --------------
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.igcaucus.org
To be removed from the list, visit:
     http://www.igcaucus.org/unsubscribing

For all other list information and functions, see:
     http://lists.igcaucus.org/info/governance
To edit your profile and to find the IGC's charter, see:
     http://www.igcaucus.org/

Translate this email: http://translate.google.com/translate_t