Sick PCs should be banned from the net says Microsoft

BBC News

[kaled]

[bbc.co.uk...]

Virus-infected computers that pose a risk to other PCs should be blocked from the net, a senior researcher at software giant Microsoft suggests.

The proposal is based on lessons from public health, said Scott Charney of the firm's trustworthy computing team.

I think this has been discussed before once or twice before - I think I argued in favour, but just in case I didn't, I am in favour now.

Kaled.

[rocknbil]

"There may be some who would say that Microsoft shouldn't be on the internet until they get their own house in order."

Says it all. I'm in agreement though, but the core problem being, who becomes the banning authority, and by what standards? I suppose M$ could impose this on their own O.S., and it's likely that they'd lose a lot of share. "Windows won't let me on the Internet, so I bought a Mac. Who needs Flash anyway . . . . "

<shudder> :-)

[engine]

Yes, they keep banging this drum.
Microsoft: Bot Infected PCs Should Be Quarantined [webmasterworld.com]

I agree with them, to an extent. Most of the time folks don't know their machine is infected with one of these pests.

[kaled]

the core problem being, who becomes the banning authority

I would think that has to be down to the ISPs - they can detect if spam is being sent from an account easily enough. They should also be able to tell if an account is taking part in a DOS attack, however, that may be trickier.

ISPs could also cooperate, i.e. share data and block certain sites - it should be possible to allow users through if they wish to risk it by doing something with the URL or perhaps using the port number.

Kaled.

[Rugles]

I would think the ISP's would be happy to help.

In fact, if I was operating a computer at my home or business that was launching a ton of spam or viruses into the world I would like to know about it myself. Sometimes you think that a computer is slow because its older, it would be great if my ISP phoned and said your machine is all virused up.

[graeme_p]

This is a VERY bad idea, at least the way MS wants to do it.

MS wants someone (themselves?) to install an app on every PC and internet connected device to scan it. What happens to people using an OS the app is not available for? How do you deal with multiple devices behind one router? What about the privacy implications of a mandatory scanner?

Sometimes you think that a computer is slow because its older

It might be slower than a new computer, but there is no reason it should be slower than it was when new, unless it has been infected of something is wrong with your OS.

Blocking on the basis of detected bad behaviour is fine. My own approach would be to allow victims to sue owners of machines who have facilitated crime by being negligent about security.