Well, that's not common anywhere as far as I know, but you didn't say why is it a bad analogy.
I any case let me clarify what was my purpose as it seems I'm not good at analogies. The point is that you're attacked using compromised computers so it is incredibly stupid to retaliate to the source of the attack.
Is incredibly stupid to assume you are not liable for what you own; that's the reason why the cardholders gets in trouble by lending his credit card to friends or not reporting it has been stolen. The same thing with cars; if someone else drives you car you are in big part responsible for what the car is being used for (i.e. a friend and a bank robbery)
