funsec mailing list archives

Re: Fwd: [Infowarrior] - GOP pushing for ISPs to record user data


From: Dan White <dwhite () olp net>
Date: Mon, 24 Jan 2011 22:54:59 -0600

On 24/01/11 19:30 -0800, Paul Ferguson wrote:
---------- Forwarded message ----------
From: Richard Forno <rforno () infowarrior org>
Date: Mon, Jan 24, 2011 at 7:28 PM
Subject: [Infowarrior] - GOP pushing for ISPs to record user data
To:


January 24, 2011 2:24 PM PST
GOP pushing for ISPs to record user data

by Declan McCullagh

http://news.cnet.com/8301-31921_3-20029393-281.html

Unfortunately the topic of ISP data retention is getting more narrowly
focused into something that might get enacted.

In the past, more generic attempts of big brother tracking fell along the
lines of:

   Who's downloading kiddie porn
   Who's bullying who in an email
   Who's destroying the RIAA/MPAA
   Who's plotting to kill us

And when congressional aides 'floated' the idea, they probably went to a
range of large internet companies, and would have gotten:

   Tier-1s: We just pass bits. Really, that's all we do. We can't really
help you and wish you the best.

   Content Providers (Youtube, Facebook): We don't deal in kiddie porn, and
if you know of infringing content, we'll be more than happy to remove it.
We don't really know *who* uploaded this content as we don't have a
business relationship with any of our users and as such have a pretty
limited idea of who they are.

   ISPs: You want us to keep what? That's not how it works. Keeping track of
which URLs our customers are visiting, or what they're sending in their
emails, isn't possible with the equipment we have today, and would cost a
lot of money to implement. Our business model just doesn't justify that
kind of expense.

At which point people came to their senses and realized that regulating the
internet was a bad idea.

However, there is *some* data that gets retained over time by ISPs, and
that doesn't eat up a huge amount of disk space, such as DHCP logs, and
maybe Apache access logs, that will probably end up being the focus of
whatever eventually gets passed into law. 

My hope is that whatever laws we end up with are ultimately based around
traditional warrant based prosecution rather than 'give us all your logs on
the first of every month'.

-- 
Dan White
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: