Posts Tagged 'Abuse'

January 6, 2012

SOPA: Bad for Hosting

SoftLayer manages more than 100,000 servers in thirteen data centers around the world. We have more than 23,000 customers, and those customers are responsible for millions of websites (which get billions of pageviews every month). We're one of the largest hosting providers in the world, and we want to talk a little about the Stop Online Piracy Act (H.R. 3261 or "SOPA").

Many in our industry have already commented (and in some cases, "changed their minds") on SOPA and its equally evil twin, the PROTECT IP Act ("PIPA") in the Senate, but we wanted to share our perspective on the legislation. Even with these Dudley-Do-Right, Goody-Two-Shoes titles and their ambitious goals, SoftLayer opposes these bills in their current forms because they expose innocent and law-abiding hosting companies to uncertain liabilities.

Because this legislation has gotten quite a bit of attention in the past few months, you're probably already familiar with it, but if you haven't paid much attention, we can give you a quick summary: As you can read in the name of the bill, SOPA is being proposed to "Stop Online Piracy." SOPA is under consideration by the House Judiciary Committee, and its intent is to provide additional enforcement tools to combat foreign 'rogue' websites that are dedicated to copyright infringement or counterfeiting. That's a great goal, and SoftLayer does not oppose the intent of the Act ... As you saw from Kevin Hazard's blog post a few weeks ago, we have a team of people working all the time to track down and immediately address any violations of our terms of service (including copyright infringement), so we wholeheartedly agree that copyright infringement and counterfeiting are bad.

The way SOPA tries to address the problem is where we disagree with the bill, so let's talk about the most pertinent part of the bill for a service provider like SoftLayer. If SOPA were to pass, when a case of infringement is reported, we would have to "take such measures as [we determine] to be the least burdensome, technically feasible, and reasonable means designed to prevent access by [our] subscribers located within the United States to the foreign infringing site that is subject to the order."

What that means: We would be forced to turn off our customers' access to a small piece of the Internet.

How are we to do that? Well the "least burdensome, technically feasible, and reasonable means designed to prevent access" are not made clear, but most of the discussions about the bill have focused on changing the way the Doman Name System (DNS) resolves to an "infringing site." We'd be more or less ordered to break DNS ... DNS was designed to simply, accurately and quickly match a domain name with the IP address that domain's owner provides, and if SOPA were to pass, we'd have to tell DNS to behave correctly for every site EXCEPT the reported infringing sites. Again, that's not spelled out in the legislation, so it's like being given a job by someone who has no idea how to do the job nor whether the job is even possible to successfully complete.

And that's all assuming that the order to suspend access to an "infringing site" is legitimate. Many of the organizations that oppose SOPA have explained possible scenarios where orders could be filed under the guise of preventing copyright infringement. A competing site/business could claim:

"the operator of the site operates the site with the object of promoting, or has promoted, its use to carry out acts that constitute a violation of section 501 or 1201 of title 17, United States Code, as shown by clear expression or other affirmative steps taken to foster such violation."

In another scenario, a copyright holder could pull the trigger on an order simply at the thought that a user could infringe on a copyright on/via the "infringing site."

When the United States House of Representatives reconvenes after its winter recess, we will be watching intently with hopes that the Internet's response to the bill has effectively derailed it in its current form. As SoftLayer General Council Suzy Fulton mentioned in her post about Texas House Bill 1841, we've been working with an industry group called TechAmerica which submitted a letter to Congress about SOPA and many of the issues that could negatively affect our industry. Additionally, we've gotten involved with SaveHosting.org to speak out against laws that can hurt our customers.

As discussions continue about SOPA, we'll look for opportunities to share more of our insight with you here on our blog. Please let us know your thoughts about the legislation below.

-@toddmitchell

December 15, 2011

Fighting SPAM and Abuse on a Global Network

For better or worse, one of the most engaging posts on the SoftLayer Blog is "We are a No-Spam Network," written by Jacob Linscott in June 2007. When it was posted, it celebrated a completely clear Spamhaus listing page – quite an accomplishment for a large hosting provider (for reasons I'll illustrate below). Since the post was published, it has become a hotbed of conversation about any and all abuse-related issues. Google "SoftLayer SPAM," and you'll see the post show up as the second result, so a lot of Internet passers-by will come across the post and use the comment section as a platform to share abuse-related concerns they have for us.

That engagement is a double-edge sword: It's good because we hear the concerns people have. It's bad because the post was meant to be a celebration of the continuous work that the abuse department does, and uninitiated visitors seem to consider it a unilateral claim that we've beaten spam once and for all. In the course of responding to comments on that post, I shared an analogy to convey what it's like to run abuse for a large hosting provider:

Scenario

Let's say you're the security manager for a huge mall. This mall has 100,000 stores with people walking in and out 24x7x365. In this scenario, there are "good guys" and "bad guys" who walk into and out of the mall, and every person looks exactly the same. Some of those people are store owners while others are customers of those stores. As the security manager for the mall, you want to maintain the safest, most well-maintained mall in the world, so when you find bad guys walking in and out of your mall, you do everything you can to kick them out and keep them out. Sometimes those bad guys are store owners who attract and send the wrong crowd; sometimes they are bad guy customers of a good guy store owner.

How would you manage your mall? It's not possible to differentiate whether a store owner will be a good guy or a bad guy when they're applying to lease space in your mall, so you can't "keep the bad guys out" in that regard. You can't have a security team of 100,000 people monitoring what's happening in those 100,000 stores, much less have someone individually check the millions of visitors streaming in and out of the stores. What's a security manager to do?

If you look at how Las Vegas casinos address that concern, it's clear that your best bet is to install security cameras and have a team monitoring them all the time. You might not be able to watch everything at the same time, but you can document what's happening around your mall and respond if you notice something unusual (or if someone calls in to report that they've seen bad guys coming from a store in your mall).

That's the position we're in.

SoftLayer Abuse Team

SoftLayer's network is the mall, the stores are servers, the store owners are our customers (who are often responsible for several "stores"), and the good guys and bad guys are traffic into and out of the network. We try to differentiate good guys and bad guys, but even if we know that all good guys have purple eyes and all bad guys have neon green eyes, it's still difficult to look 26,000+ store owners in the eye every day as they're walking into and out of the mall.

We staff a team of people intent on clearing the bad guys from our mall, and we know that even though good guy store owners may inadvertently host their own bad guy customers, they want to remove those customers from their store as well, so they appreciate us helping them pinpoint those customers so they can be removed.

We keep an eye on our security cameras and get our security guards to the stores where bad guys are reported as quickly as possible. If no one reports that the people coming out of store #73,403 are all bad guys, it's hard for us to know that they aren't good guys ... Which is why we encourage anyone and everyone to report abuse-related concerns to abuse@softlayer.com so we can mobilize our security force.

As Edmund Burke once said, "When bad men combine, the good must associate; else they will fall one by one, an unpitied sacrifice in a contemptible struggle." Or more colloquially, "All that is necessary for the triumph of evil is that good men do nothing."

Given that illustration, the abuse team deserves a LOT of credit for the work they do behind the scenes. They are constantly investigating reports and working with customers to get remove any and all content that violate SoftLayer's MSA, and too often, that can be a thankless job. Fighting abuse is an ongoing process, and while the nature of the beast might suggest the overall war will never be won, we're always getting faster and stronger, so the individual battles are easier and easier to win.

-@khazard

October 15, 2011

Lower Latency: Neutrino Network?

SoftLayer is on the "bleeding edge" of technology, and that's right where I'm comfortable. I love being a part of something new and relevant. I also love science fiction and find that it's mixing together with reality more and more these days. Yay for me and my nerdyness! Beam me up Luke Skywalker! (I wonder how many nerds cringed at that statement!)

In a recent post from New Scientist, a test showed neutrino particles being clocked faster than the speed of light, and a dimension-hop might be the reason. Rather than go into the nerdy parts of the article that I'm sure you read before continuing to this sentence, I want to compare how SoftLayer would use this to our (and more importantly our customers') advantage: A neutrino network! We could have the fastest network in the world, and we could use the technology for faster motherboards and components too. Because that's how we roll.

BanzaiEnter science fiction. Let's say neutrinos were indeed using another dimension to travel. Like, say, the 8th dimension as referred to in "The Adventures of Buckaroo Banzai Across the 8th Dimension." This dimension also happens to be a prison used by the Lectroids of Planet 10 to store criminals. Go figure, right? Obstacles always come up, so if our neutrino network was targeted by those Lectroids, Dody Lira and the abuse team would have no problems taking them down ... After all, Lectroid's fiddling with data can be bad for business (Not to mention the possibility of Lectroid's using our network to come back to this dimension, wreak havoc, and eat all our junk food). Dody would have to upgrade some of the tools his team uses, like a Jet Car with an "Oscillation Overthruster" (which looks eerily similar to the Flux Capacitor) to travel in and out of the 8th dimension to hunt down those pesky Lectroids that won't comply.

Then, after Dody and crew wrangle the Lectroids (as I'm sure they would), we could offer the Lectroids email and Internet service. Bam! More customers on top of a supernatural network!

Coming back to reality (a bit), we have an interesting world ahead of us. Technologies we have only seen in movies and some we haven't even imagined yet are becoming reality! If they fall into the usable realm of SoftLayer, you can bet we'll be one of the first to share them with the world. But not before we get all the bugs (and Lectroids) out.

-Brad

June 27, 2007

Spammers Beware: We're on Guard

Something happened today that we feel everyone should be aware of: We currently have no SBL listings for our IP space and we were recognized by the Spamhaus Team as a proactive no-spam-tolerance network.

Our hard work here at keeping spammers off of the network, and our reaction when they do make it on has been recognized. If you visit the Spamhaus ISP page, type in softlayer.com. You will find something that is very rare and something we are very proud of. To be recognized in this manner means a great deal to us.

Abuse is something that happens, there is no way around it. What does matter is how we are perceived to handle the situation, and working day in and day out with other abuse desks and networks does indeed pay off.

-Jacob

Categories: 
Subscribe to abuse