It's context dependent. If I'm filming a movie and want to get a scene where a car is spewing smoke, and the FD runs up while I'm filming to put it out, that is troublesome to me.
It seems like this might be the case here where some minuscule portion of the botnet base is security research firms / etc. who have a reason to have the botnet software installed and don't want it deleted; in fact, it may even affect their livelihood to delete it.
We have to call the local FD if we want to do a controlled burn of a field or fence row. If we don't, nobody is surprised when they show up to put out the fire.
I have to imagine this is similar. If your livelihood relies on a botnet, and you don't at least let authorities know, my guess is you're not a researcher. . .
Your example doesn't make sense though given the context. You can't just light a car on fire for filming purposes. You're going to need to at the very least petition the local government, get a permit, and follow safety protocols that will likely include the presence of the fire department.
This reminds me of frivolous lawsuits. A doctor sees someone needing medical attention. The doctor performs CPR, break some ribs in the process, but ultimately saves their life. The person who would have otherwise died, sues the doctor for breaking their ribs while completely ignoring the good will that saved them from certain death.
It's Also why people normally get a permit or at least contact officials to tell them that they're going to do staging a scene that looks exactly like an accident/crime scene.
It isn't a strike against emergency responders for responding to a situation that someone has staged to look as close to the real thing as possible.
> It seems like this might be the case here where some minuscule portion of the botnet base is security research firms / etc. who have a reason to have the botnet software installed and don't want it deleted; in fact, it may even affect their livelihood to delete it.
This doesn’t make any sense to me: no ethical security firm is going to allow their resources to be used to attack other people, or complain if the FBI shut down the people attacking their clients.
Most of the time they had to have explicit "Bomb Squad" presence, and did things explicitly at bomb ranges.
One time they still managed to damage something outside of the vast location (an abandoned airport I believe) they were working within, and were banned from that location.
It seems like this might be the case here where some minuscule portion of the botnet base is security research firms / etc. who have a reason to have the botnet software installed and don't want it deleted; in fact, it may even affect their livelihood to delete it.