Re: HOB and DMCA

[David Lundy <dlundy () PACIFIC EDU>]

At Pacific we have received eight notices in the past week.  All Pacific computers are NATed and the NAT addresses are 
recycled.  A NAT address is retained for 30 minutes past the last connection.

Of the eight DMCA notices, three appeared to be valid based on traffic.  They had a high number of connections over a 
period of time that would likely be BitTorrent activity as reported.  The other reports were for IPs that were not 
NATed at the reported time.  We do not allow systems outside our firewall to initiate connections except to our 
approved servers.  I believe HBO and others take the directory entries that point to file sharers and use that 
information, but don't actually see if the file is accessible.  The timestamp apparently does not mean they connected 
to the purported sharing system at that time.

Dave Lundy


----
David Lundy
Associate IT Security Officer
University of the Pacific
Stockton, CA 95211
Email: dlundy () pacific edu
Voice: 209-946-3951
Fax: 209-946-2898

> > > Tracy Mitrano <tbm3 () CORNELL EDU> 4/30/2007 10:45 AM >>>
We have had a bunch of mismatches too from HBO.  Tracy


On Apr 30, 2007, at 1:29 PM, Sarah Stevens wrote:

> Dick,
>
> I have not heard of these notices.  Can I see a copy of one of  
> yours, or the discussion on the other listserv to which you refer  
> in your email?
>
> My interest lies in the way that automated takedown notices are  
> generally sent.  Crawlers frequently receive inaccurate takedown  
> notices because of the manner in which they gather information.  I  
> would like to see the takedown notice and the site which the notice  
> refers.
>
> Sarah Stevens
> President
> Stevens Technologies, Inc.
> --------------------------
> Sent from my BlackBerry Wireless Handheld
>
> ----- Original Message -----
> From: Dick Jacobson <Dick.Jacobson () NDSU NODAK EDU>
> To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
> Sent: Mon Apr 30 09:38:03 2007
> Subject: [SECURITY] HOB and DMCA
>
> There is apparently discussion on the REN-ISAC list about invlaid DMCA
> notices from HBO.
>
> We continue to get the takedown notices from HBO.  I have tried to
> contact the contact listed in the notice via phone and email but  
> have not
> gotten a response from them.
>
> Can someone confirm that the takedown notices are bogus and can be  
> ignored
> or does someone have a contact at HBO that will actually respond ?
>
>
> ---------------------------------------------------------------------- 
> -
> Dick Jacobson                 e-mail : Dick.Jacobson () ndus NoDak edu 
> NDUS IT Security Officer      office : IACC 206, NDSU
> ND HECN MultiUser Host SysAdd phone  : 701-231-7385
> ---------------------------------------------------------------------- 
> -