Question to geeks. As some of you know, i work sometimes on security matters.
Recently i am checking databases and reports for things like this:
http://www.kryptowire.com/adups_security_analysis.html
So my question is, do you think ISP should log connection attempts(but not payload) to such "compromised" destinations and proactively inform users, that their security is possibly compromised? Do you think it is good idea?
On my opinion such proactive measures will help users to stay secure, if ISP will inform them, that one of their devices(but ISP cannot know much details, which one exactly and etc, just fact that at specific time connection to bad server is done) possibly compromised, or they have botnet or some kind of infection on their computers.