> On Sun, Nov 16, 1997 at 06:04:15PM -0800, Linus Torvalds wrote:
>
> > For an ISP, strange corner-case behaviour (if there is any) is still
> > a lot better than a dead machine.
>
> It could also be helpful if when the f00f trap was triggered, a
> message were logged along the lines of:
>
> F00F attack detected from process <PID> owned by user <UID>
>
> This would allow the system's BOFH to pay a visit to said user to
> retract the foreskin of ignorance and apply the wire brush of
> enlightenment, or whatever local custom dictates when someone
> intentionally tries to shut down a system.
>
This is SORELY needed.. Unlike many network attacks, this sort of logging
will most likely lead to the actual attacker (or at least a user with a
hacked account)..