<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Abe - <div class=""><br class=""></div><div class="">Static versus dynamic address assignment isn’t the problem - dynamically assigned IP address space can </div><div class="">still be tracked back to a given system (reference: RFC6302/BCP162 & RFC6269 for discussion of the </div><div class="">requirements and various related issues.) </div><div class=""><div class=""><br class=""></div><div class="">Tracking back to a particular server doesn’t really matter if all that happens is that the service is terminated </div><div class="">(as the culprit will simply appear elsewhere in the Internet with a new connection/server and start over.)</div><div class=""><br class=""></div><div class="">Alas, the situation doesn’t change unless/until there’s a willingness to engage law enforcement and pursue</div><div class="">the attackers to prevent recurrence. This is non-trivial, both because of the skills necessary, the volume of </div><div class="">attacks, the various jurisdictions involved, etc. – but the greatest obstacle is simply the attitude of “Why bother,</div><div class="">that’s just the way it is…” </div><div class=""><br class=""></div><div class="">With zero effective back pressure, we shouldn’t be surprised as frequency of attempts grows without bound.</div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">/John</div><div class=""><br class=""></div><div class="">Disclaimers: my views alone – no one else would claim them. Feel free to use/reuse/discard as you see fit. </div><div class=""><br class=""></div><div class=""><div><blockquote type="cite" class=""><div class="">On 23 Jul 2022, at 10:28 PM, Abraham Y. Chen <<a href="mailto:aychen@avinta.com" class="">aychen@avinta.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta charset="UTF-8" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Hi, John:</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">1) "... i.e. we’re instead going to engage in the worlds longest running game of “whack-a-mole” by just blocking their last known website/mail server/botnet and the wishing for the best… ":</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Perhaps it is time for us to consider the "Back to the Future" strategy, i.e., the Internet should practice static IP address like all traditional communication system did?</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Regards,</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Abe (2022-07-23 22:27 EDT)</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">On 2022-06-22 10:35, John Curran wrote:</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Barry -<br class=""><br class="">There is indeed a metaphor to your “rattling doorknobs", but it’s<br class="">not pretty when it comes to the Internet…<br class=""><br class="">If you call the police because someone is creeping around your<br class="">property checking doors and windows for<br class="">possible entry, then they will indeed come out and attempt to<br class="">arrest the perpetrator (I am most certainly<br class="">not a lawyer, but as I understand it even the act of opening an<br class="">unlocked window or door is sufficient in many<br class="">jurisdictions to satisfy the “breaking the seal of the property”<br class="">premise and warrant charging under breaking<br class="">and entering statues.)<br class=""><br class="">Now welcome to the Internet… paint all your windows black, remove<br class="">all lighting save for one small bulb<br class="">over your front entry. Sit back and enjoy the continuous sounds<br class="">of rattling doorknobs and scratching at<br class="">the windows.<br class=""><br class="">If/when you find a digital culprit creeping around inside the<br class="">home, your best option is burn down the place<br class="">and start anew with the copies you keep offsite in storage<br class="">elsewhere. Similarly if you find a “trap” (e.g.,<br class="">a phishing email) placed on your patio or amongst your mail…<br class="">discard such cautiously and hope your<br class="">kids use equal care.<br class=""><br class="">“Best practice” for handling these situations on the Internet is<br class="">effectively to cope as best you can despite<br class="">being inundated with attempts – i.e. most Internet security<br class="">professionals and law enforcement will tell you<br class="">that the idea of actually trying to identify and stop any of the<br class="">culprits involved is considered rather quaint<br class="">at best – i.e. we’re instead going to engage in the worlds longest<br class="">running game of “whack-a-mole” by just<br class="">blocking their last known website/mail server/botnet and the<br class="">wishing for the best…<br class=""><br class=""><br class="">Enjoy your Internet!<br class="">/John<br class=""><br class="">Disclaimers: My views alone - use, reuse, or discard as desired.<br class="">This message made of 100% recycled electrons.<br class=""><br class=""><blockquote type="cite" class="">On 22 Jun 2022, at 12:04 AM, <a href="mailto:bzs@theworld.com" class="">bzs@theworld.com</a> wrote:<br class=""><br class=""><br class="">When I lock the doors etc to my home I'll often mutter "ya know, if<br class="">someone is rattling my door knob I already have a big problem."<br class=""><br class="">I suppose when I'm home it might give me a warning if I hear it.<br class=""><br class="">There must be a metaphor in there somewhere.<br class=""><br class="">I do recall as a teen noticing that one of the closed store's on the<br class="">main drag's door was unlocked late one night walking home (this was in<br class="">NYC.)<br class=""><br class="">I saw a cop and told him and he scolded me angrily for rattling door<br class="">knobs, I could be arrested for that! But verified it, looked around<br class="">inside with his flashlight, and called it in.<br class=""><br class="">I forget how I noticed but I wasn't in the habit of rattling stores'<br class="">door knobs, I think the door was just a bit ajar.<br class=""><br class="">There must be a metaphor in there somewhere.<br class=""><br class="">On June 21, 2022 at 10:01 <a href="mailto:mpalmer@hezmatt.org" class="">mpalmer@hezmatt.org</a> (Matt Palmer) wrote:<br class=""><blockquote type="cite" class="">On Mon, Jun 20, 2022 at 02:18:30AM +0000, Mel Beckman wrote:<br class=""><blockquote type="cite" class="">When researchers, or whoever, claim their scanning an altruistic service,<br class="">I ask them if they would mind someone coming to their home and trying to<br class="">open all the doors and windows every night.<br class=""></blockquote><br class="">If there were a few hundred people with nefarious intent trying to open your<br class="">doors and windows every night, someone doing the same thing with altruistic<br class="">intent might not be such a bad thing.<br class=""><br class="">- Matt<br class=""></blockquote><br class="">--<span class="Apple-converted-space"> </span><br class="">-Barry Shein<br class=""><br class="">Software Tool & Die |<span class="Apple-converted-space"> </span><a href="mailto:bzs@TheWorld.com" class="">bzs@TheWorld.com</a><span class="Apple-converted-space"> </span>|<span class="Apple-converted-space"> </span><a href="http://www.theworld.com/" class="">http://www.TheWorld.com</a><span class="Apple-converted-space"> </span><<a href="http://www.theworld.com/" class="">http://www.TheWorld.com</a>><br class="">Purveyors to the Trade | Voice: +1 617-STD-WRLD | 800-THE-WRLD<br class="">The World: Since 1989 | A Public Information Utility | *oo*<br class=""></blockquote><br class=""></blockquote><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">This email has been checked for viruses by Avast antivirus software.</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://www.avast.com/antivirus" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://www.avast.com/antivirus</a></div></blockquote></div><br class=""></div></div></body></html>