Sorry this is a bit off topic from the original story but you mentioned false WHOIS info. This is so true. In fact until i even bought or operated a website with "security" in it's title i had false info, not for mailicious resons, not it wasnt pure intentions either.

After i bought a website containing the word security i had an email in my inbox a week later asking me to verify my whois info, which i promptly did :)

I think the problem lies with people hosting the services, if they don't know this malicious activity is happening they shouldn't be operating such services. We let people "who know what they are doing" operate stuff that only "certified" people need to be operating.

Also, anyone who drives or supplies a car in a robbery is an accomplice am I right? So why wouldn't someone who offered web services for a malicious cause be an accomplice?

very good article btw.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/496/35427#35427