On 23 Feb 2022, at 18:39, Gert Doering <gert@space.net> wrote:

Hi,

On Wed, Feb 23, 2022 at 07:20:48PM +0100, Tobias Knecht via anti-abuse-wg wrote:
I disagree with the idea of defining what abuse is for 3 reasons.

I do understand your arguments, but I'm not agreeing with the conclusion.

If we can't agree on "this is abuse" and "that is not", how can we ever
agree on "we should do something against abuse!"?

Exactly. We have to have some definition to use for training, at the very minimum. 

More extreme wording: why would I, as an ISP, need an abuse handling
department if I can just declare "ah, no, this is all normal customer
activity" instead?

So, yes, defining abuse is very hard - but if we ever want to reach
a good level of common abuse squashing, we should find a common
understanding.  Like "using other people's resources (bandwidth,
money, time) without at least implicit permission, for personal gain".

For this training I think what we’re talking about as abuse is abuse that affects normal network operations. And I’d call out specifically that we’re not discussing ALL abuse online (maybe even touch on the other kinds of abuse that they might get reports for with an admonition to ‘pass them on to the downstream customer). We’re talking about abuse that LIRs are likely to get reports for. And many of these reports are going to be unactionable. 

I like the phrasing “abuse of the Internet” - implying that the abuse actually damages the ability of online services to interact effectively with one another. dDOS attacks, mailbombing, spam attacks (although the mail system is pretty robust), open proxies, etc. I think of it as abnormal traffic that is pushed on an unwilling recipient that disrupts the recipient’s use of the Internet. 

laura 


(I, for one, consider half the web sites out there abusive, with
cookie banners, insanely big graphics, and weird scrolling stuff - but
I guess most web developers would not agree to that)

Gert Doering
       -- NetMaster
--
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279

-- 
The Delivery Experts

Laura Atkins
Word to the Wise

Email Delivery Blog: http://wordtothewise.com/blog