Re: [ga] Re: [atlarge-discuss] Re: [nc-transfer] Re: [ncdnhc-discuss] WLS proposal

[Don Brown <donbrown_l@inetconcepts.net>]

         "especially true where it involves family members and most
         especially children.  How many murders will it take?  How many were
         r killed before there were stalking laws?

         Publishing identifying information, whether people like it or not, is
         .  It's bad enough that for a price, one can obtain just about
         anything.  We don't have to make it easy."

I don't think that we disagree, that there is a problem,  I do think,
however, that we disagree on the extent of the problem and the methods
to rectify it.

Frankly, I do not advocate, taking any freedoms (including inspecting
the WhoIs database) away from anyone.  On that point, I don't foresee
that we'll see eye to eye.

It is time, I think, to kill this thread.  There is no agreement in
the cards, as I see it . . . . .

Thanks, Lisa,

Thanks,


Tuesday, June 18, 2002, 9:42:17 PM, L. Gallegos <jandl@jandl.com> wrote:


LG> On 18 Jun 2002, at 20:50, Don Brown wrote:

>> I certainly emphasize with your concerns. However, sometimes we have a
>> tendency to go gunning for an isolated, but notorious, incident more
>> zealously, due to its notoriety or shock value.  Perhaps, sometimes we gun
>> for mosquitos with a double barrel shotgun, because we are closer to the
>> mosquito bite than anyone else.  That's understandable.
>> 
>> I don't profess to know the total answer, but I recognize the problem
>> from a larger scope, I think.
>> 
>> As long as there is fraud, spammers and other pests on the Internet,
>> the WhoIs information will continue to be a tool that ISP's use to
>> "attempt" to stop them. We use the WhoIs all the time to identify the
>> source of Spammers. We use the WhoIs to help verify credit card
>> charges and to prove that a business, which is applying for a Merchant
>> Account, is the legitimate registrant of the domain name represented by the
>> pages we print and "fax" to the potential acquiring Bank.

LG> If a privacy bureau is used correctly, you would have no problem 
LG> contacting the registrant for the information and permission for access to 
LG> his/her records for that verification.  You just mail to 
LG> <account@privacybureau.TLD> and the mail goes to the registrant. OTOH, 
LG> there are other ways to verify information for bank cards and Merchant 
LG> Accounts.

LG> Once again, most spam uses forged headers, so the whois does not help much 
LG> since it is not the domain holder doing the spamming.  You would have to 
LG> go to the IP address and find the source of the spam to have any luck.  If 
LG> it is, in fact, the domain name holder, contacting the ISP would have the 
LG> same effect in stopping the spammer or block the IP address from which it 
LG> came, which is the method I use most if I don't receive a response from 
LG> the ISP.

LG> As an ISP, if you have a spammer and you know it is one of your users, you 
LG> already have his information and can stop him.  You still don't need the 
LG> public whois.

>> 
>> If WhoIs goes totally anonymous, I think the first folks to jump at
>> it will be the nefarious ones who use us and abuse us all the time.
>> They do their own brand of stalking by trying to relay mail off of our
>> servers, using fraudulent cards to sign up for our services and attacking
>> us with Ping floods and other methods of trying to bring our network to its
>> knees.

LG> Again, there are methods for obtaining verification without having a 
LG> public whois published.  I don't think ping floods will be stopped by 
LG> publishing the whois personal identifying information.  All you need is 
LG> the IP address of the offender.  NIDS does wonders for tracking attacks 
LG> and mail relay attempts.  If it comes to a lawsuit, a court order will 
LG> always release the information.  It is not in limbo, just not published 
LG> for the world to see.

>> 
>> Personally, I have an unlisted telephone number at home and I pay the
>> telephone company extra for that.  My motivation is to not have sales
>> people or get rich quick screamers call me at home.  I already get
>> that at work.  On the flip side of that, our neighborhood has a
>> neighborhood watch program and our address and telephone number is
>> listed in that directory.

LG> My business is in my home and I had to publish my unlisted number in the 
LG> whois.  Now I seldom answer that phone because of all the crank calls.  I 
LG> have another line that is not published anywhere.  So if you were to call 
LG> the number that is now public information, you would get a voice mail 
LG> announcement.  My business associates and friends have other numbers at 
LG> which to reach me.  So what good is the whois to you?  Most of the numbers 
LG> I've called from the whois are voice mail or pager numbers.  I just feel 
LG> for those who cannot manage the cost of all the different phone lines, 
LG> pagers, cellphones, etc.  We in the US are pretty spoiled in that regard. 

>> 
>> I don't know the total solution to the WhoIs information.  I do know
>> that from a business standpoint, making most information anonymous
>> will certainly help the bad guys.  John Gotti would have liked to have been
>> the anonymous Don rather than the Teflon Don.  Given the latter, he would
>> have enjoyed much better country club golf.

LG> I don't think that would be the case at all.  Just because the information 
LG> is not pubslished, does not mean it is not available to those with 
LG> legitimate reasons to obtain it (with the registrant's permission, of 
LG> course or a court order).  As for the Gotti's of the world, had it not 
LG> been for informants, no whois would have had any effect on his conviction. 
LG>  That was probably not the best analogy, IMO.
   
>> 
>> I don't know that there is a right or wrong answer to this debate.
>> We do, however, need to blend the practicality with the risk
>> management of it somehow.

LG> As I said, the risk management is the privacy bureau concept.  The 
LG> registrant is only protected from having personal inforamtion published on 
LG> the internet.  He can still be reached and information released under 
LG> specific circumstances.  We are not talking about complete anonymity, but 
LG> protection of privacy.  It simply becomes an Opt-IN situation rather than 
LG> an opt-out and the public cannot simply grab personal information without 
LG> the person's permission.

LG> I am inundated enough with trash contacts and take extra steps to protect 
LG> my and my family's privacy now.  Also, FYI, most people who are stalked do 
LG> not make it public information either.  Doing so makes the situation 
LG> worse, as it encourages more of the same.  Because my testimony at 
LG> Congress stated that I was stalked, it is known.  Prior to that, I did not 
LG> make it public knowledge.  In addtion, every time it has been brought up 
LG> publicly, I pay an additional price in crackpot email and calls.  I would 
LG> tend to believe that there are many more cases like mine and that for the 
LG> same reasons that I have not made a public case of it, they have not 
LG> either.  This is especially true where it involves family members and most 
LG> especially children.  How many murders will it take?  How many were 
LG> injured or killed before there were stalking laws?  

LG> Publishing identifying information, whether people like it or not, is 
LG> dangerous.  It's bad enough that for a price, one can obtain just about 
LG> anything.  We don't have to make it easy.

LG> Regards,

LG> Leah

>> 
>> Thanks,
>> 
>> 
>> Tuesday, June 18, 2002, 12:12:38 PM, Jeff Williams <jwkckid1@ix.netcom.com>
>> wrote: JW> Barbara all assembly members, stakeholders or interested
>> parties,
>> 
>> JW>   INEGroup wholeheartedly and strongly agrees with Barbara's comments
>> JW> below.  Indeed it is not necessary for a registrants personal and
>> private JW> information such as home address and phone number to be listed
>> in Whois JW> data for their domain name.  In fact to do so is s severe
>> security risk JW> to that individual and a potential hindrance to law
>> enforcement in this JW> unfortunate age of cyber terrorism.  Law
>> enforcement agencies, such JW> as the FBI, CIA, NSA, or military
>> intelligence do not need to be JW> chasing false leads due to some
>> prankster using Whois data to JW> create false leads or false information
>> fraudulently using someone's JW> registration information of a Domain Name
>> that would include JW> their personal physical address or personal Phone
>> Number. JW> To make such information necessary as part of the registration
>> JW> of a Domain name is simply stupid and unnecessarily harmful, as JW>
>> well as partly counter productive..
>> 
>> JW> Barbara Simons wrote:
>> 
>> >> If you are opposed to spammers, then I would think that you would be
>> >> really upset with the whois database, which is a rich resource indeed
>> >> for spammers.
>> >>
>> >> Information about where I live has nothing to do with openness or the
>> >> lack thereof.  I am quite happy to have my email address made available
>> >> (but not to spammers - I wish).  But surely you would not accuse me of a
>> >> lack of openness if I were to refuse to provide my home address to the
>> >> world in order to obtain my own domain name.  (It is entirely
>> >> reasonable, by contrast, to require that I provide an accurate technical
>> >> contact).
>> >>
>> >> I have no idea how many children have their own domain names, but there
>> >> are obviously quite a few.  You might want to check out Chris Van Allen,
>> >> whose dad gave him the domain name pokey.org several years ago.  Chris
>> >> became somewhat famous when he was sent a cease and desist order by the
>> >> Prema Toy Co., the company that manufactures Gumby.  You can read about
>> >> Chris' adventures at www.pokey.org.
>> >>
>> >> To state the obvious, if a child has a website that has been purchased
>> >> by that child's parent, and if the parent is required to provide his or
>> >> her home address, most folks will be able to infer the address of the
>> >> child.
>> >>
>> >> Many parents seem to believe that information about their children
>> >> should not be posted for anyone in the world to view.  Many adults feel
>> >> the same about their own information.
>> >>
>> >> You might have made a similar argument about drivers' license records
>> >> being held by the California Dept of Motor Vehicles.  That information
>> >> was open, and as a result a young women's home address was located by a
>> >> stalker, and she was murdered.  I have heard about a woman who was
>> >> stalked based on her whois information, but I'm afraid I can't give you
>> >> a reference for that. Maybe someone else on one of these lists can.
>> >>
>> >> As far as political speech goes, I'm sure you are aware of countries and
>> >> times during which criticism of one's government can be life
>> >> threatening. And you don't have to go outside the US to find multiple
>> >> examples of abuses and harassment of law abiding citizens by some law
>> >> enforcement agencies.  If you have not been following the most recent
>> >> revelations about the FBI and its obsession with UC Berkeley, the Free
>> >> Speech Movement, and Clark Kerr, the then President of the University of
>> >> California, I shall be happy to forward to you a very detailed set of
>> >> articles published a couple of weeks ago in the San Francisco Chronicle.
>> >>  If the '60s are ancient history for you, there are recent abuses by the
>> >> LA Police Department, including the framing of innocent people, that
>> >> date back only a few years.  I can send you some references for those as
>> >> well.
>> >>
>> >> Openness does not mean that we must relinquish all notions of privacy if
>> >> we are to own a domain name.  Rather than forcing people to provide
>> >> information about where they are located, Congress should be requiring
>> >> ICANN to institute meaningful privacy protections on the whois database.
>> >>  Maybe then we could discuss whether or not the domain name owner's
>> >> personal information should be provided.
>> >>
>> >> Barbara
>> >>
>> >> P.S.  The early incarnation of the Internet, ARPANET, was about
>> >> maintaining communications after a devastating event such as the
>> >> dropping of nuclear weapons on the US.  It was *not* about openness, nor
>> >> was it about commerce. The openness that you and I both cherish came
>> >> into being because of the small clique of researchers and academics who
>> >> were the original ARPANET users.  I share your desire to maintain that
>> >> openness and to prevent the Internet from being regulated and restricted
>> >> to the point that it becomes a jazzed up Home Shopping Channel.  If the
>> >> Internet is to continue to be the open communications channel that it
>> >> has become, then it is critical that people have the ability to speak
>> >> without fearing that everything they say and do can be monitored.
>> >>
>> >> On 6/17/02 10:46 PM, "Micheal Sherrill" <micheal@beethoven.com> wrote:
>> >>
>> >> > Wait a minute.  I am all for protecting abused wives, children, and
>> >> > those seeking political asylum.  But, what does this have to do with
>> >> > the Whois function?  I agree that perhaps a felony conviction for a
>> >> > first time offense is harsh but please do not forget what this
>> >> > Internet was, and is all about, openness.  At this time this
>> >> > (openness) is being clogged by a proliferation of SPAMers that will,
>> >> > eventually, plug the pipe for any meaningful communication. If we do
>> >> > not have the means to track accurate information of those that seek to
>> >> > take advantage of all the resources that others fund how will we
>> >> > survive? Your arguments pluck at our heartstrings but they also try to
>> >> > pluck my pocketbook.  I mean, how many children have their own domain
>> >> > name?  And if they can afford it, why do they need to hide their
>> >> > identity?  It would seem to me that most children are trying to reach
>> >> > other children.  So why protect them from each other?  Besides, the
>> >> > children do not register the domain names, their parents usually do. 
>> >> > It has nothing to do with discovery.  Even more so, what Internet
>> >> > sites are dedicated to battered women that would somehow lead angry,
>> >> > misguided men to a safe house?  I do not think that any support group
>> >> > would purchase a domain name but would be smart enough and economical
>> >> > enough to go through a Web hosting company.  And what is even more
>> >> > perplexing is the reference to free speech.  Free speech is about
>> >> > openness.  We talk about things in the open!  So why the need for
>> >> > subterfuge?  If we have free speech on the Internet what makes sense
>> >> > about listing a false address for our cause? Anything else is already
>> >> > illegal, even via the USPS.  Plus, I have no idea what you are talking
>> >> > about in reference to trademark holders sending out cease and desist
>> >> > letters.  Overall, the logic of your complaint does not compute.
>> >> >
>> >> > Regards,
>> >> >
>> >> >
>> >> > Micheal Sherrill
>> >> >
>> >> >
>> >> > ---------- Original Message ----------------------------------
>> >> > From: Jeff Williams <jwkckid1@ix.netcom.com>
>> >> > Date:  Mon, 17 Jun 2002 19:55:34 -0700
>> >> >
>> >> > Barbara and all,
>> >> >
>> >> > We [INEGroup] agree with you here Barbara, and are in process of
>> >> > contacting the appropriate senate and House members that are
>> >> > involved in this rather arcane and misguided legislation being
>> >> > considered.
>> >> >
>> >> > I personally would suggest that anyone concerned about their personal
>> >> > safety, and privacy that are Domain Name holders do likewise without
>> >> > delay...
>> >> >
>> >> > Barbara Simons wrote:
>> >> >
>> >> >> I agree that accurate information should be provided for the
>> >> >> technical liaison.  What I'm saying is that a law that makes it a
>> >> >> felony to provide inaccurate information for the domain name holder
>> >> >> creates major problems regarding political speech, shelters for
>> >> >> battered women, children who own their own domain name, etc.  The
>> >> >> whois database is an open invitation for massive privacy invasion of
>> >> >> domain name owners (as opposed to technical contacts).  HR 4640 would
>> >> >> make it a felony in the U.S., punishable by up to 5 years in prison,
>> >> >> to provide false address information for the owner of a domain name. 
>> >> >> This would be a boon to trademark holders who are eager to send out
>> >> >> large numbers of cease and desist letters, and a blow to people who
>> >> >> care about protecting our privacy.
>> >> >>
>> >> >> I didn't mean to start a discussion about HR 4640, though I hope that
>> >> >> this has helped to make our US based members aware of this misguided
>> >> >> legislative proposal.
>> >> >>
>> >> >> Regards,
>> >> >> Barbara
>> 
>> JW> Regards,
>> 
>> JW> --
>> JW> Jeffrey A. Williams
>> JW> Spokesman for INEGroup - (Over 124k members/stakeholders strong!)
>> JW> CEO/DIR. Internet Network Eng/SR. Java/CORBA Development Eng.
>> JW> Information Network Eng. Group. INEG. INC.
>> JW> E-Mail jwkckid1@ix.netcom.com
>> JW> Contact Number:  972-244-3801 or 214-244-4827
>> JW> Address: 5 East Kirkwood Blvd. Grapevine Texas 75208
>> 
>> 
>> JW> --
>> JW> This message was passed to you via the ga@dnso.org list.
>> JW> Send mail to majordomo@dnso.org to unsubscribe
>> JW> ("unsubscribe ga" in the body of the message).
>> JW> Archives at http://www.dnso.org/archives.html
>> 
>> 
>> 
>> 
>> ----
>> Don Brown - Dallas, Texas USA     Internet Concepts, Inc.
>> donbrown_l@inetconcepts.net         http://www.inetconcepts.net
>> PGP Key ID: 04C99A55              (972) 788-2364  Fax: (972) 788-5049
>> Providing Internet Solutions Worldwide - An eDataWeb Affiliate
>> ----
>> 
>> --
>> This message was passed to you via the ga-full@dnso.org list.
>> Send mail to majordomo@dnso.org to unsubscribe
>> ("unsubscribe ga-full" in the body of the message).
>> Archives at http://www.dnso.org/archives.html
>> 
>> 


LG> --
LG> This message was passed to you via the ga@dnso.org list.
LG> Send mail to majordomo@dnso.org to unsubscribe
LG> ("unsubscribe ga" in the body of the message).
LG> Archives at http://www.dnso.org/archives.html




----
Don Brown - Dallas, Texas USA     Internet Concepts, Inc.
donbrown_l@inetconcepts.net         http://www.inetconcepts.net
PGP Key ID: 04C99A55              (972) 788-2364  Fax: (972) 788-5049
Providing Internet Solutions Worldwide - An eDataWeb Affiliate
----

--
This message was passed to you via the ga-full@dnso.org list.
Send mail to majordomo@dnso.org to unsubscribe
("unsubscribe ga-full" in the body of the message).
Archives at http://www.dnso.org/archives.html