<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body> <div dir="ltr"> <div dir="ltr">I was expecting something like this for a long, long time, to be honest. What you now have is something created for want of that mythical beast, the internet police, which nobody ever seems to be.</div> <div id="ms-outlook-mobile-signature"> <div><br> </div> <div style="direction:ltr">--srs</div> </div> </div> <hr style="display:inline-block;width:98%" tabindex="-1"> <div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> anti-abuse-wg <anti-abuse-wg-bounces@ripe.net> on behalf of Alex de Joode <adejoode@idgara.nl><br> <b>Sent:</b> Thursday, April 11, 2024 12:32:24 AM<br> <b>To:</b> Serge Droz <serge.droz@first.org><br> <b>Cc:</b> anti-abuse-wg@ripe.net <anti-abuse-wg@ripe.net><br> <b>Subject:</b> Re: [anti-abuse-wg] LEA Transparency Report 2023</font> <div> </div> </div> <style id="x_axi-htmleditor-style" type="text/css">  </style> <div dir="" style="font-size:10pt; font-family:"Source Sans Pro",sans-serif; background-image:none; background-repeat:repeat; background-attachment:fixed"> <span style="font-size:10pt">The EU is working on implementing the e-Evidence directive. </span> <div style="font-family:"Source Sans Pro",sans-serif; font-size:10pt"><br> </div> <div style=""><span style="font-size:10pt">This means any-and-all EU based LEO's can request data from RIPE NCC and RIPE NCC needs to supply the data if it has the data available. No 'let us check' no 'you can have this via our website' answers possible anymore. This will most likely be extended for signatories of the 'Budapest convention', the US is very eager to have access to this data also. (There is the public data, but to know who pays for a resource is of course easier to check as the banks know a lot more about their clients than RIPE). </span> <div class="x_x-axi-signature" style="font-family:"Source Sans Pro",sans-serif; font-size:10pt"> <br> </div> <div class="x_x-axi-signature" style=""><span style="font-size:13.3333px">https://commission.europa.eu/law/cross-border-cases/judicial-cooperation/types-judicial-cooperation/e-evidence-cross-border-access-electronic-evidence_en</span><br> <div class="x_x-axi-signature" style="font-family:"Source Sans Pro",sans-serif; font-size:10pt"> -- <div>IDGARA | Alex de Joode | alex@idgara.nl | +31651108221 <br> </div> </div> </div> <br> <span style="font-size:10pt">On Wed, 10-04-2024 19h 28min, Serge Droz via anti-abuse-wg <anti-abuse-wg@ripe.net> wrote:</span><br> <blockquote style="font-family:"Source Sans Pro",sans-serif; font-size:10pt; margin-left:10px; padding-left:10px; border-left:1px solid rgb(204,204,204)"> <div class="x_message-content"> <div class="x_message-content-body"> <div dir="auto">Hi Randy<br> <br> Agreed and I'm not saying we should just hand everything over on a gold plate to LE. Bien we cannot just say no all the time, but should actually come up with solutions we feel are good or a good compromise.<br> <br> I expect LE to understand our issues, but we should understand theirs <br> <br> Best<br> Serge</div> <br> <br> <div> <div dir="auto">On 10 April 2024 16:25:26 UTC, Randy Bush <randy@psg.com> wrote:</div> <blockquote style="margin:0pt 0pt 0pt 0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex"> <pre><blockquote style="margin:0pt 0pt 1ex 0.8ex; border-left:1px solid #729fcf; padding-left:1ex"><div dir="auto">In a recent talk Jane Easterly said: "The private sector has promised<br>better security for yeas but has not delivered. This has to change".<br></div></blockquote><div dir="auto"><br>was this not in the context of software and platform safety? easterly<br>has been riding that hobby horse for a few years, and with serious<br>justification.<br><br>but i agree that the RIRs could be clearer in what they can and can not<br>do for LE. and there needs to be a balance of visibility and privacy.<br>LE is always gonna want more; that's their job, and we need them. but,<br>as jeff schiller said (in the ietf protocol design context) "Law<br>enforcement was not supposed to be easy. Where it is easy, it's called<br>a police state."<br><br>randy<br><br></div></pre> </blockquote> </div> <div dir="auto">--<br> Dr. Serge Droz<br> Director, Forum of Incident Response and Security Teams<br> <a href="https://first.org" data-saferedirecturl="redir.hsp?url=https%3A%2F%2Ffirst.org" data-saferedirecturl="redir.hsp?url=https%3A%2F%2Ffirst.org" target="_blank">https://first.org</a></div> </div> <div class="x_message-content-body"><font color="#999999">--<br> <br> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: <a href="https://mailman.ripe.net/" data-saferedirecturl="redir.hsp?url=%68%74%74%70%73%3A%2F%2F%6C%69%73%74%73%2E%72%69%70%65%2E%6E%65%74%2F%6D%61%69%6C%6D%61%6E%2F%6C%69%73%74%69%6E%66%6F%2F%61%6E%74%69%2D%61%62%75%73%65%2D%77%67" data-saferedirecturl="redir.hsp?url=https%3A%2F%2Flists.ripe.net%2Fmailman%2Flistinfo%2Fanti-abuse-wg" target="_blank"> https://mailman.ripe.net/</a><br> </font></div> </div> </blockquote> </div> </div> </body> </html>