On Fri, 8 Jun 2001, Young, Beth A. wrote:
> At some point, people have to take responsibility for their actions or in
> this case, their home computer. I am not saying that ISPs can't do some
> stuff (Good net neighbor policies, like no smurf amplification, don't allow
> other sites IP address outbound from your network, block small services,
> etc), I agree with you there. BUT it is unreasonable to expect ISPs to take
> on the whole security burden.
I'm not saying they should take on the entire burden, just the parts that
it's reasonable for them to do.
>
> This might be an bad analogy but here it goes: You don't blame the
> Department of Transportation for bad drivers. Every body that owns a car is
> responsible for the operation of their vehicle, including safety measure and
> insurance in case something does happen. Why can't we expect those same
> people to take responsibility for home computers?
I do blame the DoT for bad road surfaces, improper banking on curves, and
other things within their perview.
>
> Should we make home computer users attend a mandatory licensing class and
> teach them safe computing (getting a drivers license)? Maybe we should have
> a ticketing system and if they guilty of 3 network violations, they have to
> attend class again (the dreaded traffic review course). Or if all else
> fails, suspend their access to the network for a year?
That's a very tempting thing. All of the professional certification
courses hope to eschew to be that driver's license-type thing. However,
the analogy is fairly apt, as the vehicle manufacturers need to produce
safer vehicles, the road builders and fixers need to do so well *and*
people need to drive responsibly. Each piece of that isn't predicated on
the others having already been done.
> Now, how do you do that world wide? It always come down to that final
> question....How do you get world buy in?
Peer pressure mostly. Certainly the whole world has bought in to that for
BGP advertisements, DNS, and IP addressing, so it's neither without
precedent nor terribly onerous to expect.
Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
[EMAIL PROTECTED] which may have no basis whatsoever in fact."
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
