[anti-abuse-wg] RIPE NCC Anti-Abuse Training: Next Steps & WG Input!

> On 23 Feb 2022, at 18:39, Gert Doering <gert at space.net> wrote:
> 
> Hi,
> 
> On Wed, Feb 23, 2022 at 07:20:48PM +0100, Tobias Knecht via anti-abuse-wg wrote:
>> I disagree with the idea of defining what abuse is for 3 reasons.
> 
> I do understand your arguments, but I'm not agreeing with the conclusion.
> 
> If we can't agree on "this is abuse" and "that is not", how can we ever
> agree on "we should do something against abuse!"?

Exactly. We have to have some definition to use for training, at the very minimum. 

> More extreme wording: why would I, as an ISP, need an abuse handling
> department if I can just declare "ah, no, this is all normal customer
> activity" instead?
> 
> So, yes, defining abuse is very hard - but if we ever want to reach
> a good level of common abuse squashing, we should find a common
> understanding.  Like "using other people's resources (bandwidth,
> money, time) without at least implicit permission, for personal gain".

For this training I think what we’re talking about as abuse is abuse that affects normal network operations. And I’d call out specifically that we’re not discussing ALL abuse online (maybe even touch on the other kinds of abuse that they might get reports for with an admonition to ‘pass them on to the downstream customer). We’re talking about abuse that LIRs are likely to get reports for. And many of these reports are going to be unactionable. 

I like the phrasing “abuse of the Internet” - implying that the abuse actually damages the ability of online services to interact effectively with one another. dDOS attacks, mailbombing, spam attacks (although the mail system is pretty robust), open proxies, etc. I think of it as abnormal traffic that is pushed on an unwilling recipient that disrupts the recipient’s use of the Internet. 

laura 


> (I, for one, consider half the web sites out there abusive, with
> cookie banners, insanely big graphics, and weird scrolling stuff - but
> I guess most web developers would not agree to that)
> 
> Gert Doering
>        -- NetMaster
> -- 
> have you enabled IPv6 on something today...?
> 
> SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
> Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
> D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
> Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279

-- 
The Delivery Experts

Laura Atkins
Word to the Wise
laura at wordtothewise.com		

Email Delivery Blog: http://wordtothewise.com/blog	






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ripe.net/ripe/mail/archives/anti-abuse-wg/attachments/20220223/80893d4a/attachment.html>