I'm in complete agreement.

The "rights to the process" argument is absurd. A user has a right to control what is running on the machine and who has access and control over that machine, just because a worm or virus maliciously usurps that power doesn't give any other individual the right to also usurp that power to defeat it. Two wrongs do not make a right. The proper process would be to block the offending IP address if they are distrupting your network, contact the offending computer's Internet service provider and/or contact the individual who owns the offending computer if possible and have them terminate the worm.

I think this is about like proper chain of command and proper authority for control. If a terrorist group hijacks a plane or holds a building hostage, you don't break into the army's arsenal or steal police equipment to combat the terrorists. You contact the authorities and let them handle it.

Noone but the owner of the machine has the authority to change settings on it unless otherwise given to a 3rd party through agreements (such as microsoft for updates, etc). You can block the IP address, contact the ISP of the computer to disconnect it temporarily and inform the user, contact the authorities, or contact the user himself directly, but it is illegal to "hack" a computer to turn off a process... even if it's one that causes you or your business harm.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/134/17737#17737