I say yes, sabotage the botnet with friendly worms/bots. The owners of the infected computers don't know about the problem, don't care or don't know how to fix it.

I say vigilante action is okay, to protect ourselves (the people in the know adminning the networks and computers being attacked).

The New York Times (registration, yeah, yeah, yeah)

And this is Slashdot, where people don't like anti-privacy things such as having to log in. Not even the editors.

Gotta love the hypocrisy around here.