Forest Global Training Partners

Cyber Risks · Krebs on Security

ISP Privacy Proposal Draws Fire

Summary: ARIN, one of five regional Internet address registries, is set to consider a proposal later this month at its Toronto meeting that would ease rules requiring ISPs to publish address and phone number information for their business customers. The proposal's author, Wholesale Internet CTO Aaron Wendel, says the current policy forces ISPs to publish their customer lists, while critics including Jeff Chan of Surbl.org and PayPal security team members Andy Steingrubel and Jon Orbeton say it would obstruct spam, botnet and malware mitigation and make address ownership less transparent.

What you should know: Security teams rely on registration contact data to notify operators of cracked servers and to trace abuse; if that data effectively requires a court order to obtain, the routine work of botnet and malware mitigation slows or stops - while snowshoe spammers, whom Spamhaus has already tied in numbers to Wholesale Internet's address space, gain cover.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related