nanog mailing list archives

Re: ISP data collection from home routers


From: Francis Booth via NANOG <nanog () nanog org>
Date: Thu, 24 Mar 2022 10:12:29 -0400

That link is more reflective of the FCC circa 2011. More recent actions taken by the FCC under Pai had weakened 
consumer protections for data collected by ISPs and was reflected in multiple news articles from 2017-2019.

https://en.wikipedia.org/wiki/2017_Broadband_Consumer_Privacy_Proposal_repeal
https://transition.fcc.gov/Daily_Releases/Daily_Business/2017/db0328/DOC-344116A1.pdf
https://www.ftc.gov/news-events/news/press-releases/2019/08/ftc-revises-list-companies-subject-broadband-privacy-study

Including this relatively recent article by the FTC. The same FTC tapped by the FCC as being the more responsible party 
for enforcing privacy protections for consumers. They are even saying that their privacy study showed very little 
protections for consumer data being harvested by ISPs with few options to restrict their use.
https://www.ftc.gov/news-events/news/press-releases/2021/10/ftc-staff-report-finds-many-internet-service-providers-collect-troves-personal-data-users-have-few

On Mar 24, 2022, at 9:26 AM, Josh Luthman <josh () imaginenetworksllc com> wrote:

I'm surprised we're having this discussion about an internet device that the customer is using to publicize all of 
their information on Facebook and Twitter.  Consumers do not care enough about their privacy to the point where they 
are providing the information willingly.

Consumers should have legal say in how or wether their data are harvested and also sold.

They do. https://www.fcc.gov/general/customer-privacy


On Thu, Mar 24, 2022 at 9:12 AM Lady Benjamin Cannon of Glencoe, ASCE <lb () 6by7 net> wrote:
This is an enormous problem, see: 
https://www.ftc.gov/news-events/news/press-releases/2021/10/ftc-staff-report-finds-many-internet-service-providers-collect-troves-personal-data-users-have-few

Consumers should have legal say in how or wether their data are harvested and also sold.

Ms. Lady Benjamin PD Cannon of Glencoe, ASCE
6x7 Networks & 6x7 Telecom, LLC 
CEO 
lb () 6by7 net
"The only fully end-to-end encrypted global telecommunications company in the world.”

FCC License KJ6FJJ

Sent from my iPhone via RFC1149.

On Mar 24, 2022, at 3:44 AM, Giovane C. M. Moura via NANOG <nanog () nanog org> wrote:

Hello there,

Several years ago, a friend of mine was working for a large telco and his job was to detect which clients had the 
worst networking experience.

To do that, the telco had this hadoop cluster, where it collected _tons_ of data from home users routers, and his 
job was to use ML to tell the signal from the noise.

I remember seeing a sample csv from this data, which contained _thousands_ of data fields (features) from each 
client.

I was _shocked_ by the amount of (meta)data they are able to pull from home routers. These even included your wifi 
network name _and_ password!
(it's been several years since then).

And home users are _completely_ unaware of this.

So my question to you folks is:

- What's the policy regulations on this? I don't remember the features (thousands) but I'm pretty sure you could 
some profiling with it.

- Is anyone aware of any public discussion on this? I have never seen it.

Thanks,

Giovane Moura


Current thread: