[anti-abuse-wg] personal data in the RIPE Database

Michele,

 

I have a question for u then.

 

What would happen if i can find more people that actually would want this
then u can find people that don't want this.

 

Would that make a difference?

 

I'm very curious on your answer.

 

Kind regards

 

Van: Michele Neylon - Blacknight <michele at blacknight.com> 
Verzonden: woensdag 1 juni 2022 13:05
Aan: jeroen at hackersbescherming.nl; 'denis walker' <ripedenis at gmail.com>
CC: 'anti-abuse-wg' <anti-abuse-wg at ripe.net>
Onderwerp: Re: [anti-abuse-wg] personal data in the RIPE Database

 

Jeroen

 

"- Change the current contracts with all responsible companies where they
will have to pay a fine if any of their ip's has been detected and confirmed
to produce abusive traffic.
"

 

That will never happen and suggesting it is not helpful.

 

Nobody is ever going to agree to it and it's completely unworkable. 

 

Regards

 

Michele

 

 

--

Mr Michele Neylon

Blacknight Solutions

Hosting, Colocation & Domains

 <https://www.blacknight.com/> https://www.blacknight.com/

 <https://blacknight.blog/> https://blacknight.blog/

Intl. +353 (0) 59  9183072

Direct Dial: +353 (0)59 9183090

Personal blog:  <https://michele.blog/> https://michele.blog/

Some thoughts:  <https://ceo.hosting/> https://ceo.hosting/

-------------------------------

Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty

Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845

 

 

From: anti-abuse-wg <anti-abuse-wg-bounces at ripe.net
<mailto:anti-abuse-wg-bounces at ripe.net> > on behalf of
jeroen at hackersbescherming.nl <mailto:jeroen at hackersbescherming.nl>
<jeroen at hackersbescherming.nl <mailto:jeroen at hackersbescherming.nl> >
Date: Wednesday, 1 June 2022 at 11:01
To: 'denis walker' <ripedenis at gmail.com <mailto:ripedenis at gmail.com> >
Cc: 'anti-abuse-wg' <anti-abuse-wg at ripe.net <mailto:anti-abuse-wg at ripe.net>
>
Subject: Re: [anti-abuse-wg] personal data in the RIPE Database

[EXTERNAL EMAIL] Please use caution when opening attachments from
unrecognised sources.

Good morning Denis/everyone,

I believe that personal data in the RIPE public database is unwanted and
adds no value at all to the public interest.

Removing personal data instead of replacing it with actual "responsible
organisation" data is unwanted also.

To me as a public interest user personal data like assignments of ip
addresses is the same as no data at all and should be avoided at all costs.

The fact that a real person can be responsible for an ip address shows how
immature the solution actually is.

When i look at the abuse that online services receive my guess is that ~50%
of online traffic is unwanted!
I'm currently crunching the numbers so i can back my statements but this is
what i got so far.

Access log for one online service

Total different ip's : little over 11K
High risk ip's: 276 (combined hosting/rdp/etc)
Abusers: 21 (blocked in next update)

In the same period i blocked 173K requests (not IP still need to process
this part)

This would mean in terms of abuse i would have to send thousands of abuse
emails for this single service only (this would be just stupid) how
effective will that be if u send them to a "responsible person"?

When i goto a grocery and steal or wreck something on purpose and get caught
the police will come and i will get a big fine..... or even jail time.
When i catch an abuser in the Wild Wild West, the internet makes it cost me
even more money! (shouldn't i be payed for catching them?)

Clearly the whole abuse part of Ripe isn't working and will never goto work
as long as nobody can be held responsible for the actual damage that has
been done.

I would like to suggest the following:

- Remove all personal data and replace with actual data from responsible
companies
- Change the current contracts with all responsible companies where they
will have to pay a fine if any of their ip's has been detected and confirmed
to produce abusive traffic.
- Part of the fine will be payed to the company that caught the abuser and
other part goes to Ripe for administrative costs.

With the above we move the problem away from the victims to the causers as
it should have been from the beginning!
And yes the hosting companies will start crying about this since they never
really had to take responsibility for their end-users and probably only see
a small portion of the actual abuse since most abuse never get's reported
since it costs the victims extra money....

If for some reason there is no company behind any personal registration i
believe the resources should be removed from that member unless there is a
very goo reason to keep a person responsible (i can't think of any)

I'm not good at putting documents or presentations together (Ripe 84), so my
excuse for that but i do have the data to backup all of the above!

Kind regards,

Jeroen


-----Oorspronkelijk bericht-----
Van: anti-abuse-wg <anti-abuse-wg-bounces at ripe.net
<mailto:anti-abuse-wg-bounces at ripe.net> > Namens denis walker
Verzonden: dinsdag 31 mei 2022 19:27
Aan: Michele Neylon - Blacknight <michele at blacknight.com
<mailto:michele at blacknight.com> >
CC: anti-abuse-wg <anti-abuse-wg at ripe.net <mailto:anti-abuse-wg at ripe.net> >
Onderwerp: Re: [anti-abuse-wg] personal data in the RIPE Database

Hi Michele

The proposal is here
https://www.ripe.net/participate/policies/proposals/2022-01

cheers
denis
proposal author


On Tue, 31 May 2022 at 18:07, Michele Neylon - Blacknight
<michele at blacknight.com <mailto:michele at blacknight.com> > wrote:
>
> Denis
>
>
>
> Where's the actual proposal?
>
>
>
> I'd love to get my personal details removed - especially as they're for an
address I no longer occupy!
>
>
>
> Regards
>
>
> Michele
>
>
>
>
>
> --
>
> Mr Michele Neylon
>
> Blacknight Solutions
>
> Hosting, Colocation & Domains
>
> https://www.blacknight.com/
>
> https://blacknight.blog/
>
> Intl. +353 (0) 59  9183072
>
> Direct Dial: +353 (0)59 9183090
>
> Personal blog: https://michele.blog/
>
> Some thoughts: https://ceo.hosting/
>
> -------------------------------
>
> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business
> Park,Sleaty
>
> Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845
>
>
>
>
>
> From: anti-abuse-wg <anti-abuse-wg-bounces at ripe.net
<mailto:anti-abuse-wg-bounces at ripe.net> > on behalf of
> denis walker <ripedenis at gmail.com <mailto:ripedenis at gmail.com> >
> Date: Tuesday, 31 May 2022 at 14:12
> To: anti-abuse-wg <anti-abuse-wg at ripe.net <mailto:anti-abuse-wg at ripe.net>
>
> Subject: [anti-abuse-wg] personal data in the RIPE Database
>
> [EXTERNAL EMAIL] Please use caution when opening attachments from
unrecognised sources.
>
> Colleagues
>
> I have raised an issue on the DB WG mailing list about publishing in
> the database the identity of natural persons holding resources. So far
> no one has been willing or able to support any public interest value
> in doing so. As things stand all personal data in the RIPE Database
> will have to be removed, or hidden from public view. If you have an
> opinion about this the conversation is here
> https://www.ripe.net/ripe/mail/archives/db-wg/2022-May/007432.html
>
> cheers
> denis
> 2022-01 proposal author
>
> --
>
> To unsubscribe from this mailing list, get a password reminder, or
> change your subscription options, please visit:
> https://mailman.ripe.net/

--

To unsubscribe from this mailing list, get a password reminder, or change
your subscription options, please visit:
https://mailman.ripe.net/


--

To unsubscribe from this mailing list, get a password reminder, or change
your subscription options, please visit:
https://mailman.ripe.net/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20220602/ef7503e0/attachment.html>