<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body dir="auto"> Hi <span style="background-color: rgba(255, 255, 255, 0);">Grzegorz,</span> <div><br> </div> <div> I'm sorry if I sound paranoid, computer security does that to some ;-)</div> <div><br> </div> <div> My registering for my Atlas account was a few years ago, so I don't remember all the details. But usually, new account creation can be scripted and fake accounts can rapidly created by a willing party. For that reason, account creation should not be the only measure against spam.</div> <div><br> </div> <div> Limiting the speed of account creation based on network address can help, but can be circumvented. One big step would be physical address or ID validation. Linking the virtual and physical worlds is harder to abuse.</div> <div><br> </div> <div> Another way to limit spam is to control the message. The form could give a few checkboxes or pre-defined messages but no place to write a message. If you cannot advertise stuff on the form, it's useless for most spammers. </div> <div><br> </div> <div> Some forms can be used to DoS email by not using rate-limiting. So, that form could limit the rate per _destination and sender_ like the Digest mode of mailing lists. One or two digests per day, and replies would be like a mailing list. I mean that RIPE would always be the sender or the receiver, ensuring privacy of email address of one party to the other.</div> <div><br> </div> <div> Now that I think of it, it's pretty much the messaging system of most forums with a front-end. Except that your username is the probe's ID?</div> <div><br> </div> <div> I think RIPE could do it, if it there is enough demand?<br> <br> <div id="AppleMailSignature" dir="ltr">Martin Boissonneault <div>Sent from my iPhone</div> </div> <div dir="ltr"><br> On Apr 23, 2019, at 07:10, Ponikierski, Grzegorz <<a href="mailto:gponikie@akamai.com">gponikie@akamai.com</a>> wrote:<br> <br> </div> <blockquote type="cite"> <div dir="ltr"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> <div class="WordSection1"> <p class="MsoNormal"><span lang="EN-GB">I thought about simple web form available only for logged users of RIPE Atlas. In this way all private data are hidden and RIPE can rate limit usage of the form. Message itself can be send to probe's owner via email from RIPE Atlas infra so sender identity also can be hidden. If somebody wants to switch to email communication then form can also be used to exchange email addresses.<o:p></o:p></span></p> <p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p> <div> <p class="MsoNormal"><span lang="EN-US">Regards,<o:p></o:p></span></p> </div> <p class="MsoNormal"><span lang="EN-US">Grzegorz</span><span lang="EN-GB"><o:p></o:p></span></p> <p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm"> <p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">Martin Boissonneault <<a href="mailto:ve2mrx@hotmail.com">ve2mrx@hotmail.com</a>><br> <b>Date: </b>Monday 2019-04-22 at 02:25<br> <b>To: </b>Carsten Schiefner <<a href="mailto:carsten@schiefner.de">carsten@schiefner.de</a>><br> <b>Cc: </b>"<a href="mailto:ripe-atlas@ripe.net">ripe-atlas@ripe.net</a>" <<a href="mailto:ripe-atlas@ripe.net">ripe-atlas@ripe.net</a>><br> <b>Subject: </b>Re: [atlas] Communication with probes' owners<o:p></o:p></span></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <p class="MsoNormal">The best might be for RIPE to contact the owner when the records don't match what is detected from the probe? <o:p></o:p></p> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">Some method to trigger a check could be added to the probe's profile, and there would not be ANY chance of email abuse by throwaway accounts? <o:p></o:p></p> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">Allowing users to contact probe owners has to be VERY well made to avoid all sorts of attacks and spam!<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> <div id="AppleMailSignature"> <p class="MsoNormal">Martin Boissonneault <o:p></o:p></p> <div> <p class="MsoNormal">Sent from my iPhone<o:p></o:p></p> </div> </div> <div> <p class="MsoNormal" style="margin-bottom:12.0pt"><br> On Apr 21, 2019, at 18:14, Carsten Schiefner <<a href="mailto:carsten@schiefner.de">carsten@schiefner.de</a>> wrote:<o:p></o:p></p> </div> <blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"> <div> <div> <p class="MsoNormal">Am 21.04.2019 um 19:59 schrieb Dave . <<a href="mailto:gboonie@gmail.com">gboonie@gmail.com</a>>:<o:p></o:p></p> </div> <div> <p class="MsoNormal">If this gets implemented, please add a checkbox where one can indicate whether one is a user or also can get things fixed in the AS where your probe is connected.<o:p></o:p></p> </div> <div> <p class="MsoNormal">Makes sense to me: +1.<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">Would then a reminder every 1/2/3 month[s] make sense that this is (still) the case aka. this flag to be set?<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">As the probe’s circumstances may change...<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"> <div> <div> <div> <p class="MsoNormal">Op vr 19 apr. 2019 om 12:37 schreef Paolo Pozzan <<a href="mailto:paolo.pozzan@telemar.it">paolo.pozzan@telemar.it</a>>:<o:p></o:p></p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"> <div> <div> <div> <p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">It seems a good idea. I don't think this will be abused and in case it would be easy to point out the spammers.<o:p></o:p></span></p> </div> <div id="gmail-m_887927473055014616111929e6-5cff-4c0f-aeae-a7d0fdc1c0b4"> <p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">Would this be useful also for other kind of messages?<o:p></o:p></span></p> </div> <div id="gmail-m_887927473055014616111929e6-5cff-4c0f-aeae-a7d0fdc1c0b4"> <p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p> </div> <div id="gmail-m_887927473055014616111929e6-5cff-4c0f-aeae-a7d0fdc1c0b4"> <p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">Paolo<o:p></o:p></span></p> </div> </div> </div> </blockquote> </div> </div> </blockquote> </div> </blockquote> </div> </div> </div> </div> </blockquote> </div> </body> </html>