Hackers say Friday's massive DDoS attacks were just a dry run
Ignorant thinking out loud here. Is it feasible for certain infrastructure providers to team up and collect the ip addresses of the requests. This gives us a list of IPs with bots. THEN google, Facebook, Twitter, etc (major web properties) use this list to notify any of its users that one or more of their devices have been compromised and point them to a how to guide for securing it. Or more simple a script to patch it.<p>My thinking is that the only way to stop this is to get users to lock down their insecure devices.<p>A constant banner would annoy most people to action. Especially if it was really easy to issue a fix. Download and run. Script determines the actual device causing the harm and patches it. Possibly asking for a new password from user. I guess this assumes that a script could be written to issue a patch for the majority of cases. If not, then how is this device connected? Script could detect router and apply fix at that point.<p>So we need:<p>1. IP addresses for the sources of the attack load.<p>2. A way to distribute patches for those IP addresses.<p>I propose:<p>1. Those suffering the attacks can provide this.<p>2. Notify users via websites coordinating on displaying an alert with tools to patch.<p>Alternative solution to #2:<p>Can some part of the ISPs that connect these IPs be patched to detect and block malicious attacks?