Security threats Toolkit

Spamhaus hits out at ISPs, praises Microsoft

Dan Ilet ZDNet.co.uk

Published: 26 Apr 2005 15:05 BST

The chief technology officer of anti-spam campaign group Spamhaus hit out at ISPs on Tuesday, accusing them of failing to protect their customers from malicious attacks. Meanwhile he had high praise for Microsoft's Windows XP Service Pack 2.

In a panel session at IT conference Infosecurity Europe 2005, Richard Cox said that ISPs were ignorant of who their customers were and what problems they faced. "The majority of [networks] do not know who their customers are," said Cox. "If you have a problem, you will not get a response. They will not firewall your network, but they do firewall the customer support centre so you cannot get through."

Cox highlighted the problem of botnets — thousands of networked compromised PCs, typically used for malicious purposes such as spamming — as a problem for the Internet community. He said that ISPs should exclude botnet computers from using their service. "It is the network's responsibility to take [botnet] computers off the network."

Cox said that Windows XP Service Pack 2 had helped to reduce the number of botnets around the world. "SP2 has removed a number of vulnerabilities in XP," said Cox. "But what ever we put right in SP2, [hackers] will find a way around it."

But the Metropolitan police's Computer Crime Unit disagreed with Cox.

"The botnet issue is a rising problem despite the issue of SP2," said Detective Inspector Chris Simpson. "It is also the script kiddies [doing this]. We might joke about the impact of these people, but a 15 or 16-year-old with a 30,000-strong botnet might be able to wipe someone off the Internet, so they really do pose a threat to anyone with Internet presence."