<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/">
<channel>
<title>Techdirt. Stories filed under &quot;whois&quot;</title>
<description>Easily digestible tech news...</description>
<link>http://www.techdirt.com/</link>
<language>en-us</language>
<image><title>Techdirt. Stories filed under &quot;whois&quot;</title><url>http://www.techdirt.com/images/td-88x31.gif</url><link>http://www.techdirt.com/</link></image>
<item>
<pubDate>Tue, 19 Jun 2012 11:54:00 PDT</pubDate>
<title>FBI &#038; DEA Warn That IPv6 May Be Too Damn Anonymous</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20120619/03230119379/fbi-dea-warn-that-ipv6-may-be-too-damn-anonymous.shtml</link>
<guid>http://www.techdirt.com/articles/20120619/03230119379/fbi-dea-warn-that-ipv6-may-be-too-damn-anonymous.shtml</guid>
<description><![CDATA[ IPv6 has been around for quite some time at this point, but as we get closer and closer to moving the internet over to the system, it appears that American and Canadian law enforcement has <a href="http://news.cnet.com/8301-1009_3-57453738-83/fbi-dea-warn-ipv6-could-shield-criminals-from-police/" target="_blank">just noticed that it's not as easy to identify and track users</a>, and they're frantically raising concerns.
<blockquote><i>
FBI, Drug Enforcement Administration, and Royal Canadian Mounted Police officials have told industry representatives that IPv6 traceability is necessary to identify people suspected of crimes. The FBI has even suggested that a new law may be necessary if the private sector doesn't do enough voluntarily.
</i></blockquote>
The issue has more to do with record-keeping than technology.  As Declan McCullagh explains at the link above:
<blockquote><i>
ARIN and the other regional registries maintain public <a href="http://whois.arin.net/ui">Whois databases</a> for IP addresses, meaning that if you type in <a href="http://whois.arin.net/rest/net/NET-64-30-224-0-1/pft">64.30.224.118</a>, you can see that it's registered to CNET's publisher. ARIN tries to ensure that Internet providers keep their segments of the Whois database updated, and because it's been handing out IPv4 addresses blocks every few months, it currently enjoys enough leverage to insist on it.
<br /><br />
But for IPv6, ARIN will be handing out much larger Internet address blocks only every 10 to 15 years, meaning it loses much of its ability to convince Internet providers to keep their Whois entries up-to-date. That means it may take law enforcement agencies -- presumably armed with court orders -- longer to trace an IPv6 address such as 2001:4860:4860::8888 back to an Internet service provider's customer.
</i></blockquote>
Of course, some might see that as a feature, not a bug.  Either way, I would imagine that most service providers will bend over backwards to make sure that law enforcement can, in fact, track people down if necessary.  Too many service providers fold when the feds come knocking seeking information on people already.  As long as this is presented as a way to protect children or stop terrorists or whatever the favorite of the day is, it seems likely that ISPs will get things in order themselves.<br /><br /><a href="http://www.techdirt.com/articles/20120619/03230119379/fbi-dea-warn-that-ipv6-may-be-too-damn-anonymous.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20120619/03230119379/fbi-dea-warn-that-ipv6-may-be-too-damn-anonymous.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20120619/03230119379/fbi-dea-warn-that-ipv6-may-be-too-damn-anonymous.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>they-just-woke-up?</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20120619/03230119379</wfw:commentRss>
</item>
<item>
<pubDate>Thu, 22 Jan 2009 06:32:00 PST</pubDate>
<title>Man Sues Former Employer For Not Updating Whois... And Then Acting Stupid</title>
<dc:creator>Mike Masnick</dc:creator>
<link>http://www.techdirt.com/articles/20090121/0558113474.shtml</link>
<guid>http://www.techdirt.com/articles/20090121/0558113474.shtml</guid>
<description><![CDATA[ Eric Goldman has the details on a fascinating case involving a guy <a href="http://blog.ericgoldman.org/archives/2009/01/outdated_whois.htm" target="_new">suing his former employer for failing to update the whois info on their domain names</a> (which used his names as the contact) and then pulling a bogus astroturfing marketing stunt that people started blaming him for organizing.  Greg Meyerkord worked for Zipatoni, a "promotional marketing company."  While there, he was the contact name on their domain registrations.  He stopped working for Zipatoni in 2003.  However, in 2006 Zipatoni was the company behind the disastrously stupid "fake" viral marketing campaign known as <a href="http://www.businessweek.com/innovate/content/dec2006/id20061219_590177.htm?campaign_id=bier_innc.g3a.rssd1219o">All I Want For Xmas is a PSP</a>.  After that was exposed, blogs went to town making fun of Sony... and Zipatoni.  As part of that, people went to the whois and "outed" Meyerkord, including calling him <a href="http://consumerist.com/221617/meet-the-douchebags-behind-the-sony-psp-flog">a "douchebag."</a>
<br /><br />
Because of this, Meyerkord is suing Zipatoni, claiming a privacy violation.  A lower court rejected this argument, but an appeals court has sent it back, saying there could be an issue if Zipatoni acted with "malice."  That's probably going to be difficult, so the case may not be going anywhere.  Goldman notes that it's pretty ridiculous that Zipatoni left the incorrect whois on the domain for so long, but it's not that surprising to me.  With many registrars, it's pretty much a "set it and forget it" type of operation, where there's little need to ever review or change the info.<br /><br /><a href="http://www.techdirt.com/articles/20090121/0558113474.shtml">Permalink</a> | <a href="http://www.techdirt.com/articles/20090121/0558113474.shtml#comments">Comments</a> | <a href="http://www.techdirt.com/articles/20090121/0558113474.shtml?op=sharethis">Email This Story</a><br />
 ]]></description>
<slash:department>blame-game</slash:department>
<wfw:commentRss>http://www.techdirt.com/comment_rss.php?sid=20090121/0558113474</wfw:commentRss>
</item>
</channel>
</rss>