Slashdot Mirror
Lycos Germany to No Longer Store IP Data
quaker5567 writes "The Register is carrying the story that Lycos Germany says it will no longer store dynamic IP addresses of its customers. According to the German Tele Services Data Protection and Telecommunications Act, ISPs are only allowed to store communications data for accounting purposes. Apparently, there is no requirement for German ISPs to keep a record of IP addresses. A decision by German ISPs not to keep logs on IP addresses would be extremely controversial as the entertainment industry is increasingly demanding that ISPs disclose the names of suspected file sharers."
This has always been an option for ISPs. I can see keeping IP info for a week or so in case there was an incursion but after that the only thing that it could be used for is informing (whether it was coerced or otherwise) on your customers ! As customers we must demand that our ISPs no keep long term IP records. There are plenty of options to connect to the internet and we as consumers must tell our ISPs that we will make this an important part of our bandwidth purchasing decision.
"It's so convenient to have a system where everyone is a criminal" - A. Hitler
... crackers have obsessively moved to Germany, and signed up for accounts with dynamic IP addresses.
Anonymous Coward
What happens when somebody does something more serious than steal music, are they just going to look the law enforcement trying to get information and shrug? I hope this does not mean that people will feel even more anonymous and get the gull to do things they wouldnt've otherwise.
What about data pertaining to spam and hack attempts? Wouldn't IP data be crucial for those purposes in addition to file sharing? Now don't get me wrong, I have zero respect for the RIAA/MPAA. But I'd have a great deal more admiration if they had simply put their collective foot down about the file-sharing privacy issue and left it at that.
Working in a DevOps shop is like playing in a band made up entirely of keytarists.
...think this is a good move on the part of ISPs to quit doing the government's dirty work for tracking down criminals. It's not a company's job to keep tabs on their customers for the sole purpose of turning them over to law enforcement.
On the minus side, it is very likely some kind of political backlash will occur and a law will be passed requiring ISPs to keep much more detailed records than they do even now...
-py
It is quite a sad state of affairs when a company does something that is popular with the people, and yet there is controversy because another company doesn't want it to be done.
This is the most artificial sense of the word "controversy," because it is completely artificial.
Sad, sad state of affairs.
fifth sigma, inc.
"A decision by German ISPs not to keep logs on IP addresses would be extremely controversial as the entertainment industry is increasingly demanding that ISPs disclose the names of suspected file sharers."
Entertainment industry be damned. What we should worry about is network and systems security, DDoS, botnets, zombies, and of course SPAM and PORN. I hope we will not have to block *.de on our SMTP relays and TCP/IP firewalls like we had with *.cn and *.ne. Hopefully Germans will know how to be responsible with their privacy and lack of control. Only time will tell.
Karma: Positive (probably because of superiour intellect)
If this IP block is known to be safe from identification, its certainly possible that crackers could choose to scan the area more heavily for exploits and rootable machines, making the block a source for malicious traffic.
On the other hand, it should make quite a selling point for tech-savvy customers in the area when in comparison with other ISP's. This may be effective protection against copyright lawsuits, providing enough obscurity that the regional enforcement agency choose not to pursue cases.
It should be interesting to see if this trend continues to other ISP's, and what effects occur as a result of this change
Business Voyeur
While everybody is obsessed about 'music' and 'file sharing', its time to think about what effect this will have on law enforcement... E.g. how will the police trace a criminal without the precious info?
Unlike most other nations' legal systems, human dignity and therefore privacy is central to the German constitution (this was a result of its being drafted in the wake of second world war). It follows that German copyright law does not trump privacy concerns; this was one of the reasons why Germany invented the levy-funded private copying system.
Fixing copyright
If you're smart enough to run a server your certainly smart enough to A) pay for a static address B) set up dynamic redirection.
Aside from the fact that this would never happen in the US you've brought up essentially a stupid, non-point.
Quack, quack.
Alleged child molester, RIAA recording artist, same thing.
This isn't just good news for unauthorized file sharers. It's also good news for spammers, who assuredly will race to use any ISP which does not log IP allocations. Untraceable senders are great both for direct spammers, who will benefit from their untouchability, as well as indirect spammers, who will benefit from having infected spam relays on the net for a much, much longer time.
While it's nice to know that this will make it more difficult for the **AA to come knocking on your door, this removes one of the three big A's in security: auditing. If a machine with a dynamic IP address is engaging in malicious behavior, this makes it much more difficult for the ISP to identify the account associated with the behavior. This is a real problem if you want to disable machines that are compromised and are being used for spamming/DDOS/whatever. I hope that there are provisions for the ISP to keep the data for a short period of time and/or keep interesting data available for investigative purposes.
Doesn't sound like a joke to me.
Where do I sign up?
Germany, I think.
That the birthplace of the Gestapo and the SS may well become one of the last remaining strongholds of personal liberty and privacy in the world.
Oh, wait. They've seen this before, haven't they?
-- Alice Uber Deutchland
The meaning of your Life is up to you. Mean well. -- Me, 9/11/2001
These actions would just be extending that to the ISPs themselves. If they have no need for the data, it must be disposed of, or not collected in the first place.
Of course, given that this means there is no accountability through the ISP for the actions of users, I know I won't be allowing random IPs from Germany to connect to my email servers!
I can't believe all this crap I'm hearing about "what if somebody does something bad and the ip address isn't logged" shit.
What fucking country did you grow up in where monitoring your every move IN CASE you MIGHT break a law was tolerated. When did we let our privacy and freedom get JACKED from us?
Real IDs, IP monitoring, etc... This kind of shit was UNTHINKABLE here in the US before the 1980's, and now, because we believe everything we're told about bad things happening if we don't do it, we've given away all of our freedoms and tolerate monitoring and intrusion that was considered science fiction material 20 years ago.
Other countries are NOT following our example- Spain didn't turn itself into a police state after the train bombings, politicians there went as far as to say "we are NOT at war", whereas, hear in the US, politicians say just the opposite, and we buy that shit!!!
Land of the Free, my ass....
</flame>
The other day I was able to walk down the street, go into a shop and buy some milk - get this - WITHOUT ONE PERSON ASKING ME TO IDENTIFY MYSELF!.
Can you imagine all the possible marketing information I squandered selfishly by not informing a central database about this action (this report not included). The cash I used was totally UNTRACEABLE!!! it could have come from anywhere. Not only that, but the person behind the counter was happy to undertake the transaction without me identifying myself (obviously some kind of terrorist).
I could have been going to use the milk for a BOMB!, would the authorities have had any way to check this? NO!!!!
When did everything become like this?
Oh wait - it has always been like this in Democracies.
Move along... there is no sig here.
24/7 camera surveillance in your (not "you", specifically) would be another.
I don't think it's funny, no, it's serious. What the heck do you have against consenting adults making, distributing, and viewing erotic imagery and texts? To the point you classify it with spam and trojans, cite it as worse than those things in fact, and think you get to BLOCK IT AT THE ROUTER? Just what have you been smoking?
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Friends don't let friends enable ecmascript.
BTW, bear in mind that data protection is nothing less than part of a constitutional civil/human right in most civilized societies, making it illegal (even for the state to tolerate) that unnecessary records are being kept on anyone by public officials or private entities. Thus creating (let alone preserving) traffic logs by flat-fee ISPs (other than for very short-term performance/quality assurance or intrusion detection) that can only be used for spying on users or clandestine gathering of data for unsolicited commercial exploitation have no legitimate purpose whatsoever.
The article also mentions that another case (Holger Voss vs. Deutsche Telekom / T-Online) is currently being heard by a court; Wikipedia has some more background information on Holger Voss and on another case which is probably related.
quidquid latine dictum sit altum videtur.
Apparently, there is no requirement for German ISPs to keep a record of IP addresses
There is not only no requirement to keep the data, the ISPs (and everybody else) are prohibited to keep personal data (which includes anything that might identify an individual) unless immediately required for conducting their business or explicitely allowed by the customer. In other words, people are suing because the providers are not complying to German Datenschutz (data protection) laws.
How is it controversial to treat customers with respect by not recording information not absolutely necessary to provide service to them? When I go into Office Depot, I can buy supplies, pay cash and leave. They don't ask me my address, my religion or my political opinions; all they care about is that my money is the right color, as it should be. Other business should consider doing the same thing: If you don't need the information in order to provide the product or service, don't ask for it. If you don't need to retain the information once the product or service is provided, don't keep it.
I have run my businesses that way for years; it saves a lot of paperwork hassles. Too many businesses see additional information collected from customers as a business asset they can sell. Which turns it into more data that can be prostituted into use for other purposes, not all of them good. Correction, most of them definitely bad.
The lessons of history teach us - if they teach us anything - that nobody learns the lessons that history teaches us.