Slashdot Mirror
Bill Would Require ISPs, Wi-Fi Users To Keep Logs
suraj.sun notes CNet reporting on bills filed in the US House and Senate that would require all ISPs and operators of Wi-Fi hotspots — including home users — to maintain access logs for 2 years to aid in law enforcement. The bills were filed by Republicans, but the article notes that the idea of forcing data retention has been popular on both sides of the aisle over the years. "Republican politicians on Thursday called for a sweeping new federal law that... would impose unprecedented data retention requirements on a broad swath of Internet access providers and is certain to draw fire from businesses and privacy advocates. ... Each [bill] contains the same language: 'A provider of an electronic communication service or remote computing service shall retain for a period of at least two years all records or other information pertaining to the identity of a user of a temporarily assigned network address the service assigns to that user [i.e., DHCP].'"
Logging for 2 years? Who is going to pay for the storage costs, backups, etc.? I'm not going to foot the bill for it or get fined because my cheap Linksys router dies after six months of use and I lose my logs.
Posts not to be taken literally. Almost everything is sarcasm.
Home users are really gonna do this. Oh and they will all patch their machines too.
Yeah, because jail is fun.
Does that mean we will receive a stipend for storage in order to keep said logs for two years? If the government is going to require me to keep them, then they need to enable me with at least 3 terabytes of storage!
"My immediate reaction is "WTF? What kind of moron doesn't make things 64-bit safe to begin with?" Linus
Most people don't know how to turn on WEP or WPA encryption on their wireless routers let along find how to turn on logging and setting a backup routine to keep years of data. Heck most people/governments/companies cant keep years of data on their own PC.
I wonder how many of these lawmakers are in compliance of this purposed law.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
The unintended consequence of this is that every user on a system is going to get a fixed ipv6 ip and ipv4 traffic would be gradually phased out. Why bother with the administrative burden of issuing an IP address via dhcp and tracking it, when, you could have an ipv6 theoretically assigned to a customer for the life of a device.
This is my sig.
they just *had* to get the children involved in this somehow.. the full title of the legislation is:
Internet Stopping Adults Facilitating the Exploitation of Today's Youth Act
I discovered that if I log my wifi router to /dev/null, it works really fast and never seems to fill up, how excellent!
I want to delete my account but Slashdot doesn't allow it.
Rorschach's log, Feb 20th, 1985
8:50 AM:
Internet connection activated by the scum of this city. Repugnant person scouring 4chan. May be a furry. Must investigate.
9:27 AM:
Wifi user connected to Google Docs. Probably writing communist pamphlet. His web document is shouting to Google's server "save me." I pull internet connection and icmp back "no".
9:45 AM:
Somebody killed one of my servers tonight. Server logs say "slashdot". Might be planning something big.
etc...
is too clueless to secure his wireless router, how the heck is he/she/it going to know how to maintain a 2 year log file of every access?
Wonder if this measure as proposed would apply to wifi networks restricted/encrypted and thus obviously not intended for public use (cracks or the like notwithstanding).
10.10.10.10 Assigned to 01:23:45:67:89:01 20090220135000
Going to be when the 1st bit is a setting made by me and the MAC address is easily Spoofable.
What next - everyone must register the MAC addresses of all their network kit and sanctions if you change it ?
More idiocy from people that dont understand how stuff works.
The Republicans want this "in the interest of national security" so they can stop the terr-rists.
The Democrats want this so they can save the children from all of that evil kiddie porn, and also so the **AA can better control the media you consume, kill P2P and net neutrality, and bill you for it appropriately.
They both want stuff like this so they can control the citizens better.
Where's the party who doesn't want any of this shit and thinks the government has much, much more important stuff on its plate right now?
What happens when some user with a haphazard setup suffers major data loss due to poor backup patterns? I doubt they'll be subject to jail time. Unless the (American) government provides a reliable way of storing this information for the required period.
Bored at work? Play Game!
My first thought was basically how the heck can people even comply with this if they wanted to. Not all wireless routers have means to export logs, and most lose their logs after a reboot, etc.
Even if you have the space and the will to archive the logs, it doesn't mean that the hardware will allow you to do so.
Anybody who values liberty should be willing to spend some time in jail, rather than submit to an unconstitutional tyrannical law.
I say "unconstitutional" because it is illegal for congress to order me, in my private home, to keep logs. Their authority ends at the interstate border. In regards to my private Wifi service, the only authority I have to obey is my home state legislature, since I operate completely and wholly within the state.
"I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
Wish I had one of those handy forms, but it boils down to this:
Even if I kept logs, if they can hack my network, they can hack my logs. In fact, it would probably be easier than the initial hack.
"If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
Remember that post about geeks thinking they are lawyers?
Anybody who values liberty should be willing to spend some time in jail, rather than submit to an unconstitutional tyrannical law.
Translation: the Land Of The Free is dead. You shouldn't even have these thoughts otherwise.
I say "unconstitutional" because it is illegal for congress to order me, in my private home, to keep logs. Their authority ends at the interstate border. In regards to my private Wifi service, the only authority I have to obey is my home state legislature, since I operate completely and wholly within the state.
Do you have an ISP? It won't matter once they get to them.
Communicating yet, but, does that actually constitute interstate commerce? I thought that was all the feds were supposed to be able to legislate?
Light travels faster than sound. This is why some people appear bright until you hear them speak.........
I have written a number of articles explaining why data retention policies are terrible in words that the average user can understand. The biggest one, IMO, for the average person, is the amount of personal information that their ISP would have to keep on them, and how that would make their ISP an identity theft goldmine for criminals.
"... anybody who values liberty should be willing to spend some time in jail...."
So you can get butt raped, oh, and have a permanent criminal record that will stain your credibility with every employer you will ever try to deal with for the rest of your life, all for the sake of defending an ideal that you going to prison isn't going to make a whit of difference for because lawmakers aren't about to change the laws just because a few pussy little nerds (who, by the way, are the only people that are remotely likely to care about this) might spend some time in jail for "civil disobedience".
My liberty means plenty to me. My life, and my future, means more.
Get some perspective, dude.
How exactly do they expect people to keep access logs?
I can draw up a budget, and system to do the job but someone has to pay for it.
An SQL query goes to a bar, walks up to a table and asks, "Mind if I join you?"
Well, there is that pesky ol' Second Amendment. But don't worry, they are working on that as well...
Don't blame me, I voted for Kodos
I say "unconstitutional" because it is illegal for congress to order me, in my private home, to keep logs. Their authority ends at the interstate border.
While my first thought was also to bemoan the death of the interstate commerce clause, the truth is, everything you do is considered interstate commerce under our screwed-up constitutional jurisprudence. If you grown wheat on your own farm, make bread with it in your own home on said farm, and use it slop your own pigs on said farm, you have engaged in interstate commerce. So says the Supreme Court to uphold the New Deal (which is what your grandparents called a stimulus package). It was beyond a stretch. It was downright dishonest. But it's the law of the land. If this law gets passed, don't look for it to get overturned on constitutional grounds, not even by the Roberts court. You'd get Scalia, Thomas, Alito, and maybe Roberts, but Kennedy would vote with the liberal bloc.
Today's Sesame Street was brought to you by the number e.
What, now you have to be lawyer for the government not to spy on you? I thought the Fourth Amendment covered all citizens.
they self destructed. The problem is that the news media takes great joy in showing us the pot smoking side of the party and the anti-war wing looked straight out of the sixties.
That and much of what they propose is totally against the entitlement state we have now the press has to go find the kooks and make America believe that Libertarian stands for "white selfish racist pig"
* Winners compare their achievements to their goals, losers compare theirs to that of others.
Most of the Founders of this country printed their pamphlets anonymously. And not because of the war (it was over), but because it gave them the opportunity to share their actual thoughts without getting lynched by other politicians. For example Thomas Jefferson shared his ideal of "freedom of religion" anonymously, because he feared the backlash from the then-powerful State Church.
Anonymity protects free speech. Anonymity is the enemy of power-hungry men, and the friend of the People's liberty.
"I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
I'll support this as soon as they pass legislation requiring all legislators to record and video all conversations they have - 24 hours a day - in order to make sure they don't do any backroom dealing not in the public's best interest.
The Whitehouse can't even find their own frickin emails. They want every Dick and Jane to keep 2 year logs? Bush didn't go to jail, but Jane probably will.
-Unresolved symbol? Byte me!
Without liberty, you may not have a life or a future, dude.
I don't care why you're posting AC
I agree. The router that we have does not have the capability of keeping logs, as far as I know. Even if it does, it does not make it easy, and I have no intention of figuring out how to make it keep logs. In any event, I am sure that there are some routers that are completely incapable of keeping logs, and those would have to be replaced in order to comply with the law. Who will pay for this? Last time I checked, the government can't suddenly force everybody to pay money for something. IANAL, of course, so what do I know?
Regardless of whether geeks=lawyers or not, the simple fact is that most home wifi boxes aren't equipped to keep logs on this kind of scale.
The Homeland Security agent can demand until he turns black in the face, but demanding isn't getting. Simple answer: No. Tough shit.
Pretty soon we will see fake traffic log generators, awesome.
Trying to install linux on my microwave, but keep getting a kernel panic...
If most normal users can't be even bothered to setup WiFi WPA correctly what's the hope of logging 2 years worth or data? And where exactly are you going to log the 2 years worth of data?? What happens if a power surge blows up your device? If it's logged over the Internet then there's going to be bottleneck somewhere which will flood your supposedly stressed out network. Personally I think this requirement is a joke and I hope the folks who vote on this will realize this won't work. Protect the children? You know if you're going to be this anal how about just banning the Internet for kids until they're old enough? Myself I didn't use the Internet until University simply because it didn't exist yet. Maybe it'll teach kids that there's other more reliable sources than the Internet. (Like books?)
Just like drinking ages are set by the States too. And all of them are 21. It is mere coincidence that the Feds threatened to withhold highway funds unless they got their way.
Yes, don't generate fake logs.
Instead, you dedicate an old junk-box computer whose job is nothing more than to use a random MAC, connect to the AP, grab an IP, and disconnect, over and over, forever. There's nothing illegal about that.
When the feds ask, you will now have a compressed log of several TB to hand them. Good luck!
Frustration isn't a crime.
Only as long as you let them legislate whatever they want. That's the basis of the whole system. Do you hate what the government is doing? Really? Do you hate it enough to do something about it? Or are you just gonna sit at your computer and complain about it on /.?
Let q be a radix > 1. I am in ur base-q, killing 10 d00ds.
Yeah, the buggies the Amish use don't have headlights. The govt makes them put reflectors on their buggies, that the Amish hate.
I can assure you, if this goes into effect (And just to be clear, I hate this idea), you won't get away with "My equipment is not capable of meeting your requirements"
---"What did I say that sounded like 'Tell me about your day?'"---
The Libertarian party supports some principles that, broadly speaking, Americans believe in. More or less, these are classical liberal principles, in the mold of Thomas Jefferson. However, few people support their particular hardline interpretation, which tends to emphasize the anarcho-capitalist aspects, play down Jeffersonian elements that don't fit into that (e.g. Jefferson's view that governments should restrict the power of large corporations), and make few exceptions for any reason. Abolishing free public education, for example, is not a popular position. Neither is privatizing the road system. Some for of social safety nets are also popular---people don't want them abused (e.g. the stereotypical "welfare queens"), but neither do they want them to be totally absent. People also want regulation of private enterprise when its activities can cause negative externalities, such as systemic risks to economies (like banks, where further deregulation, the Libertarian position, is currently extremely unpopular). I could go on for a while.
Now if someone started a political party with positions more similar to those of the editorial line of The Economist newsmagazine, I could see voting for them. That is, support free-market economies with regulation and/or costing of negative externalities (pollution, systemic risks, etc.), a moderate social safety net, and liberal positions on social and civil liberties issues.
10 PRINT CHR$(205.5+RND(1)); : GOTO 10
I disagree. It has been well-known since the start that liberty is not free. Thomas Jefferson said the people must, from time to time, revolt and shed blood. (Or spend time in jail.) People must be willing to stand-up for their freedom, not just buckle under, and if that means spending a little time in jail because you refuse to comply with an unconstitutional law, so be it.
And to answer your other question, I don't keep logs and never will.
Fuck them.
"I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
Good question. I'm fairly certain the original intent of the Constitution was Not to invade private homes. They had interstate commerce in the 1780s (letters, pamphlets) but never intended that Congress should require Thom or George or Ben or James to keep a log of every letter they ever mailed.
"On every question of construction [of the Constitution] let us carry
ourselves back to the time when the Constitution was adopted, recollect
the spirit manifested in the debates, and instead of trying what meaning
may be squeezed out of the text, or intended against it, conform to the
probable one in which it was passed." - Thomas Jefferson, founder of the Democrats
"I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
"Weird... because I'm pretty sure if you're browsing the web, you're communicating across state lines"
Communicating yet, but, does that actually constitute interstate commerce? I thought that was all the feds were supposed to be able to legislate?
I think this applies here.
http://www.veiled-chameleon.com/weblog/archives/000166.html
[Clarence Thomas] said that the women's marijuana was never bought or sold, never crossed state lines and had no "demonstrable" effect on the national market for marijuana: "If Congress can regulate this under the Commerce Clause, then it can regulate virtually anything," including "quilting bees, clothes drives and potluck suppers." Thus "the federal government is no longer one of limited and enumerated powers."
Disclaimer: The opinions and actions of the US Gov't are in no way representative of those held by this author or its ci
Ok, so everyone thinks that this is going to be a big deal. How many of you have actually read Title 18 section 2703 (you should also read chapters 119 and 121 in their entirety as the include definitions)?
from Title 18, Chapter 121, Section 2711:
(2) the term "remote computing service" means the provision to the public of computer storage or processing services by means of an electronic communications system;
now, I don't know about you, but my WiFi router is not for the PUBLIC. Of course IANAL, but it appears that I do not operate a "remote computing service" nor am I a provider of an "electronic communication service". I provide no service to anyone outside of my family.
So, I fail to see the trouble here. They want ISPs, and WiFi hotspots (ie: Restaurants, Coffee Shops, etc.) to retain records. Note how it does not say you must OBTAIN information from your customers, just retain what information you have.
One other thing that I have not seen mentioned yet. MAC addresses are not guaranteed to be unique, only unique on a particular LAN. There is no guarantee that no two wireless devices that ever connect to your WiFi will not have the same MAC address. This coupled with the fact that there is no way to track a MAC address to a particular person....
Really, why do we even bother.
--
What, the Amish use WiFi now ??
* goes check if his hotspot has reflectors
May contain traces of nut.
Made from the freshest electrons.
Only as long as you let them legislate whatever they want. That's the basis of the whole system. Do you hate what the government is doing? Really? Do you hate it enough to do something about it? Or are you just gonna sit at your computer and complain about it on /.?
I'd do something about it sooner, but there's a waiting period on purchasing firearms! A well-armed populace is the best defense against tyranny!
Track your TV Shows with your iPhone - FREE
Senators and Representatives. There you go, it doesn't get much simpler than that.
1. Follow the links
2. Cut and paste the above post
3. Slap your name on it
4. ??
5. Profit! We as a nation will profit from having one less retarded bill rammed through.
You are using English. Please learn the difference between loose and lose; they're, there, and their; your and you're.
/.ers have too narrow a viewpoint. We actually envision doing this. Instead, let's publicize to the entire "normal" non-technical world how the government expects everyone to keep two years' logs of all of their communications, like all of your phone call records, so they can be inspected at any time. After all, cordless phones on standard frequencies are totally unsecured, and someone might have made a call to a terrorist on your phone line, so maybe you should record your phone line too. THAT is something that the average person can understand as (1) a burden to maintain, (2) an invasion of privacy, and (3) a change from presumed innocence to presumed guilt. That last one is the most dangerous. It used to be authorities had to prove I was doing something wrong; this bill seems to say that I have to continually maintain and update my records to prove that I was not doing something wrong, and it is assumed that if I can't produce those records then I'm hiding something and am guilty. Very, very dangerous.
Right. And this group of 'guys' with various and sundry firearms is going to do exactly what? Enfilade the police? Create a defensive perimeter? Do you think that some $random_gun_toting_mob is going to be able to do anything other than general rape and pillage?
.50 caliber guns. It's organization, organization, planning and execution. You're better off hoarding old cell phones or CB radios and learning how to make explosives. The kid in the basement with a mesh network OLPC and some crypto is going to me more useful than a half drunk, firearm toting, out of shape guy.
There is quite a bit more to warfare, even guerrilla warfare, then having
Faster! Faster! Faster would be better!
LOL. It actually DOES take a law degree. Words in a legal sense quite often have a different 'meaning' than their use in the common vernacular.
What if I told you that Congress can regulate the amount of wheat grown by a farmer solely for personal use, on the grounds that his action affected interstate commerce because he would not be buying wheat on the open market? Even if it would take hundreds of farmers doing the same thing to affect the supply and demand equation?
http://en.wikipedia.org/wiki/Wickard_v._Filburn
Disclaimer: I am not a lawyer. This is not legal advice.
>Last time I checked, the government can't suddenly force everybody to pay money for something.
*cough* Taxes *cough*
White House != Congress
This is proposed by Congress (Legislative branch), not the White House (Executive branch). Where are all the emails written/received from Congress critters? The only ones I've heard of in recent years are those associated with Republicans being slimes with interns, or like Sarah Palin's hacked account.
I get your point, but I really think you have things backwards. Sure, you don't want to spend your life tilting at windmills, unless that's what turns your crank of course. But if you are not willing to take a stand against the encroachment on your liberties - even under threat of incarceration - you may find yourself no longer able to enjoy your finite time on this planet regardless.
As for your statement "there's not the remotest indication that anybody spending any time in jail over this would make any difference to lawmakers," it could have the effect of shining a light on the injustice you are suffering, resulting in pressure on the "lawmakers" to change. Nelson Mandela managed to make a huge impact on the state of liberty in his country during the 27 years he spent in jail. That's perhaps not the best analogy, but the point is speaking out while you still can is the only way you can directly influence whether or not you are permitted to speak out in the future.
I don't care why you're posting AC
I remember a time when content ripping and P2P downloading required an "expert". Not anymore.
I don't remember a time when either of those were mandated by law.
Out of modpoints but really liked a post? 1BDkF6TtmmeZ3yqXbz9yhdYVqRYnwFoXDj
This law speaks of retention, not generation.
Ergo, the solution is to simply not generate a log.
Hound your ISP about it, too.
Disclaimer: The opinions and actions of the US Gov't are in no way representative of those held by this author or its ci
George and Teddy and friends. They're they neighborhood bullies. On any given day, they'll give you a choice of which one is going to beat you up. Who do you like best, George or Teddy?
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
White House != Congress
This is proposed by Congress (Legislative branch), not the White House (Executive branch)...
Sorry for getting the Greed and Corruption branches mixed up there. My apologies.
>Last time I checked, the government can't suddenly force everybody to pay money for something.
Like digital TV converter boxes?
http://thomas.loc.gov/cgi-bin/bdquery/z?d111:s.00436:
http://thomas.loc.gov/cgi-bin/bdquery/z?d111:h.r.01076:
It will be interesting to see how this plays out. In the CNet report, they only mention DHCP. Obviously, if they only legislate DHCP everyone will go to static addresses until those logs have to be kept too.
But how can they enforce this? Will they require people to routinely submit logs so they can keep tabs on you? Will they require everyone with WiFi to register their routers like it was a gun so that law enforcement will be able to know who might need to be rounded up? Will it be a crime to change your MAC address or spoof it?
I think this is going to end up just being another waste of time. I even wonder if Congress would know how to write a law that would include the proper text to cover something as technical as logs. Will they have to be supplied pre-filtered or in original format? What if they are so verbose that 2 years worth can't be burned to a CD or DVD? Will they supply the media to copy the logs off? And what if you have a data loss? If your logs get wiped out in a disk failure, what kind of penalty will go with that? Will we be required to RAID our log storage to protect the data? What about offsite backups? Will we have to backup logs to some government server?
How about if you are doing remote logging and accidentally block tcp 514 so you have a hole in your data? What if your logging daemon dies and nothing gets logged until you discover/reboot/restart?
I think this is impractical. I think it will be able to be circumvented. I think it will just be another way to do what the Chinese have been doing to their people - monitor them.
Might be a good time to start up a network installation business to install wired connections in homes and businesses. I think people would much rather hardwire than put up with this bull about WiFi logs. Any builders would probably want to run Ethernet everywhere as a matter of course in new construction.
And if they only specify WiFi, look for optical to start taking off.
This is what happens when people who think the "Internets" is a bunch of tubes start wanting to control technology that they don't understand.
http://news.cnet.com/8301-13578_3-10168642-38.html RIAA, MPAA, Time Warner, et al.
I am sorry but before being allowed to pass or even suggest legislature folks in government should be required to pass a basic technology proficiency test.
Since it's not illegal to go drinking in Canada, what does it matter?
If a job's not worth doing, it's not worth doing right.