[anti-abuse-wg] personal data in the RIPE Database

Jeroen

“- Change the current contracts with all responsible companies where they will have to pay a fine if any of their ip's has been detected and confirmed to produce abusive traffic.
“

That will never happen and suggesting it is not helpful.

Nobody is ever going to agree to it and it’s completely unworkable.

Regards

Michele


--
Mr Michele Neylon
Blacknight Solutions
Hosting, Colocation & Domains
https://www.blacknight.com/
https://blacknight.blog/
Intl. +353 (0) 59  9183072
Direct Dial: +353 (0)59 9183090
Personal blog: https://michele.blog/
Some thoughts: https://ceo.hosting/
-------------------------------
Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845


From: anti-abuse-wg <anti-abuse-wg-bounces at ripe.net> on behalf of jeroen at hackersbescherming.nl <jeroen at hackersbescherming.nl>
Date: Wednesday, 1 June 2022 at 11:01
To: 'denis walker' <ripedenis at gmail.com>
Cc: 'anti-abuse-wg' <anti-abuse-wg at ripe.net>
Subject: Re: [anti-abuse-wg] personal data in the RIPE Database
[EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources.

Good morning Denis/everyone,

I believe that personal data in the RIPE public database is unwanted and adds no value at all to the public interest.

Removing personal data instead of replacing it with actual "responsible organisation" data is unwanted also.

To me as a public interest user personal data like assignments of ip addresses is the same as no data at all and should be avoided at all costs.

The fact that a real person can be responsible for an ip address shows how immature the solution actually is.

When i look at the abuse that online services receive my guess is that ~50% of online traffic is unwanted!
I'm currently crunching the numbers so i can back my statements but this is what i got so far.

Access log for one online service

Total different ip's : little over 11K
High risk ip's: 276 (combined hosting/rdp/etc)
Abusers: 21 (blocked in next update)

In the same period i blocked 173K requests (not IP still need to process this part)

This would mean in terms of abuse i would have to send thousands of abuse emails for this single service only (this would be just stupid) how effective will that be if u send them to a "responsible person"?

When i goto a grocery and steal or wreck something on purpose and get caught the police will come and i will get a big fine..... or even jail time.
When i catch an abuser in the Wild Wild West, the internet makes it cost me even more money! (shouldn't i be payed for catching them?)

Clearly the whole abuse part of Ripe isn't working and will never goto work as long as nobody can be held responsible for the actual damage that has been done.

I would like to suggest the following:

- Remove all personal data and replace with actual data from responsible companies
- Change the current contracts with all responsible companies where they will have to pay a fine if any of their ip's has been detected and confirmed to produce abusive traffic.
- Part of the fine will be payed to the company that caught the abuser and other part goes to Ripe for administrative costs.

With the above we move the problem away from the victims to the causers as it should have been from the beginning!
And yes the hosting companies will start crying about this since they never really had to take responsibility for their end-users and probably only see a small portion of the actual abuse since most abuse never get's reported since it costs the victims extra money....

If for some reason there is no company behind any personal registration i believe the resources should be removed from that member unless there is a very goo reason to keep a person responsible (i can't think of any)

I'm not good at putting documents or presentations together (Ripe 84), so my excuse for that but i do have the data to backup all of the above!

Kind regards,

Jeroen


-----Oorspronkelijk bericht-----
Van: anti-abuse-wg <anti-abuse-wg-bounces at ripe.net> Namens denis walker
Verzonden: dinsdag 31 mei 2022 19:27
Aan: Michele Neylon - Blacknight <michele at blacknight.com>
CC: anti-abuse-wg <anti-abuse-wg at ripe.net>
Onderwerp: Re: [anti-abuse-wg] personal data in the RIPE Database

Hi Michele

The proposal is here
https://www.ripe.net/participate/policies/proposals/2022-01

cheers
denis
proposal author


On Tue, 31 May 2022 at 18:07, Michele Neylon - Blacknight <michele at blacknight.com> wrote:
>
> Denis
>
>
>
> Where’s the actual proposal?
>
>
>
> I’d love to get my personal details removed – especially as they’re for an address I no longer occupy!
>
>
>
> Regards
>
>
> Michele
>
>
>
>
>
> --
>
> Mr Michele Neylon
>
> Blacknight Solutions
>
> Hosting, Colocation & Domains
>
> https://www.blacknight.com/
>
> https://blacknight.blog/
>
> Intl. +353 (0) 59  9183072
>
> Direct Dial: +353 (0)59 9183090
>
> Personal blog: https://michele.blog/
>
> Some thoughts: https://ceo.hosting/
>
> -------------------------------
>
> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business
> Park,Sleaty
>
> Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845
>
>
>
>
>
> From: anti-abuse-wg <anti-abuse-wg-bounces at ripe.net> on behalf of
> denis walker <ripedenis at gmail.com>
> Date: Tuesday, 31 May 2022 at 14:12
> To: anti-abuse-wg <anti-abuse-wg at ripe.net>
> Subject: [anti-abuse-wg] personal data in the RIPE Database
>
> [EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources.
>
> Colleagues
>
> I have raised an issue on the DB WG mailing list about publishing in
> the database the identity of natural persons holding resources. So far
> no one has been willing or able to support any public interest value
> in doing so. As things stand all personal data in the RIPE Database
> will have to be removed, or hidden from public view. If you have an
> opinion about this the conversation is here
> https://www.ripe.net/ripe/mail/archives/db-wg/2022-May/007432.html
>
> cheers
> denis
> 2022-01 proposal author
>
> --
>
> To unsubscribe from this mailing list, get a password reminder, or
> change your subscription options, please visit:
> https://mailman.ripe.net/

--

To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://mailman.ripe.net/


--

To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://mailman.ripe.net/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20220601/cded3c65/attachment.html>