Comments on: Podcast: Worm 'phoning home' but getting no answer

Security watchers at McAfee say that Conficker is trying to communicate with master computers but isn't getting through.

[Bajamale]

The only way to slow down these hackers is to make the penalties so sever that it would make them think twice before affecting so many.

[ajhoughton]

The penalties in many countries are already pretty harsh.

The problem is that there is no proper international legal system in place, some states are co-operative, some are not, and in addition the privacy and Freedom of Speech advocates often intentionally get in the way of identifying these people (some of them apparently feel that privacy trumps law-breaking, especially if law-breaking is taking place in another country and/or isn't affecting them). On top of which, in many countries the policing infrastructure to deal with this type of thing simply isn't in place.

IMO what really needs to happen is that the Internet needs to be an independent state, with its own seat on the United Nations, and with a properly elected government (elected by its users) and its own legal system (including police, courts and the like). Then if people want to connect to the Internet, their countries' governments have to agree to the Internet police and Internet courts having jurisdiction over activities on the Internet within their territory. And we'd have to pay taxes to the Internet government to support this (but maybe this could be compensated for by reducing the taxes levied on Internet-based businesses by more conventional nation states).

Of course, this means that existing states would cede some power to the new Internet state, and it seems highly unlikely that they'd agree to that. But I don't think there's any doubt that it's the only long-term solution to the problem of illegal/unwanted activity on the Internet, since there's no way that all the nation states on the planet will agree on what is and isn't legal or even on whether or not it's a problem if someone breaks the law in one country while physically present in another.

[sgirard]

Another way to slow down these attacks is to get away from the OS monoculture we have with Windows operating systems carrying over 90% market share. 90% makes a very tempting (and lucrative) target for hackers.

If more people would use the various Linux distros, Mac OS, even Haiku or BeOS, we would all be better off.

By the way, if you are on Windows, why wouldn't you make yourself less of a target as a preemptive measure. This is something I have never understood.

[monkeyfun14]

@sgirard

Replacing a monopoly with a monopoly does nothing but transfer exploits over as long as 90% of the users are idiots then hacks will occur.

[gsekse]

All the hackers will do is "frame" the crime to someone they don't like. Hope it's not you. Going to court on a high tech crime is risky at best. Most morons still don't even have the slightest idea of how computers, let alone the internet, actually work. That is why congress keeps wanting to legislate the internet, even though everyone keeps telling them that it is a "GLOBAL" domain and can't be regulated by one country. Heck, even China has this problem.

[ajhoughton]

Well that's another reason for having an Internet police force and an Internet court. The judiciary in such a court can be trained up to *be* experts on how all of this works; similarly with the police.

[MyMobiSafe]

Conficker Not Targeting Smartphones - Windows Mobile Devices

Hello Team,
Today has been a busy day for the digital security team here at MyMobiSafe.com. We have had a lot of interest from people concerned with the Conficker virus relevant to their Windows Mobile Devices. I have done what I can to help curb these fears via my blog: http://community.zdnet.co.uk/blog/0,1000000567,10012477o-2000440756b,00.htm. Anything that you can do to help inform mobile users that this computer-based in nature and a mobile variant has not emerged is appreciated.

We know there are a lot of people scared by this virus, so we want to do what we can to at least mitigate these concerns within the mobile environment.

Thanks,
Eric Everson ? Founder
MyMobiSafe.com
[e-mail]