British ISP Sky Broadband Cuts Off ACS:Law
An anonymous reader writes "British ISP Sky Broadband cut off ACS:Law and refuses to cooperate after at least 4,000 of their customers' information was carelessly leaked. According to Sky Broadband, 'We have suspended all co-operation with ACS:Law with immediate effect. This suspension will remain in place until ACS:Law demonstrates adequate measures to protect the security of personal information.' Sky Broadband had been providing customer information to ACS:Law as part of their anti-piracy operation."
..we need more detail about this. Examples are required.
http://michaelsmith.id.au
So the blackmailer accidentally exposes the blackmail, and Sky is upset not because they've been working with a blackmailer but because the blackmail got out early. Classy.
Do UK ISP's not have a set of balls to stand up for their customers? They were so against the Digital Economy Act, but when it comes to giving up their customer details to a shady law outfit that wants to extort them, thats apparently just fine.
...something about locks, a stable door and a horse comes to mind...
Laters Sol "Have you found the secrets of the universe? Asked Zebade "I'm sure I left them here somewhere"
ACS:Law is a British lawfirm that has done a lot of IP related stuff although apparently was not all prominent until their recent forays into dealing with piracy issues. http://en.wikipedia.org/wiki/ACS:Law . They should not be confused with the American Constitution Society, although that organization has the website acslaw.org. ACS:Law's homepage is http://www.acs-law.co.uk/ although amusingly enough it doesn't turn up on the first page of Google hits at all when you Google for "ACS Law."
They should not be confused with the American Constitution Society
And the Australian Computer Society.
http://michaelsmith.id.au
It is wrong to put temptation in the path of any nation,
For fear they should succumb and go astray;
So when you are requested to pay up or be molested,
You will find it better policy to say: --
"We never pay any-one Dane-geld,
No matter how trifling the cost;
For the end of that game is oppression and shame,
And the nation that plays it is lost!"
- Kipling
ISPs, I know you see dollar signs in your eyes when you think of ways to be the gatekeeper, and find colluding with the usurpers profitable. But when you feed them, they grow. Be it government, lobby, or privileged corporation seeking more privilege, they will never stop. If you think you can make them your ally, you are fools. Their hunger cannot be sated. They will eat everyone you feed them, then finding their bellies fat but their plates empty, they will devour you.
Serve the user. Fight for the right to provide an honest service. There you will find a rare thing these days: A business model which is stable in the long run. The road you are on leads to fleeting riches followed by Herculean efforts just to restore the tenth part of what you are pissing away today.
Stop-Prism.org: Opt Out of Surveillance
This does suggest a way those willing to take direct action could hurt the xxAAs efforts. DDoS attacks are just a nuisance, but theft of sensitive data drives a wedge between the xxAAs and the ISPs they need to co-operate with them.
A small correction. Their homepage is http://www.acs-law.org.uk/ . Anyway they seem to have been slashdotted (and 4channed probably), so it doesnt matter what their website is.
It seems Sky are very quick to trumpet in a press release how wonderful they are now that they've decided not to continue handing over thousands of customer details to a company with woefully inadequate security procedures (for now). However personally I'd be more impressed if they'd verified that the details would be handled securely before handing them over and getting them leaked in the first place.
I guess the main lesson for us Brits here is to make sure all your pornography is hardcore enough that it's illegal in the UK, then you can't be held in breach of copyright for sharing it. You will of course break some other laws, but there isn't much that's legal here these days anyway!
Just wondering if the customers have any grounds for suing the ISP. Did their contract have terms that even allowed them to share the info with this legal firm? Would inspection of the traffic flows to generate the data provided to the law firm constitute invasion of privacy or illegal wiretapping?
You know... the UK has this thing called the Data Protection Act
I'm very concerned about Sky Broadband's actions, and I wonder how they could possibly be legal under the act.
"...the ultimate exposure of thousands of individual's personal information - their IP addresses, their names, addresses, and the pornography they're accused of sharing."
Oh. Um, well, DAMMIT!
A small correction. Their homepage is http://www.acs-law.org.uk/ . Anyway they seem to have been slashdotted (and 4channed probably), so it doesnt matter what their website is.
Slashdotted my arse; did you read the title of the post? British ISP Sky Broadband Cuts Off ACS:Law (emphasis added).
Perhaps Mr. Praline can explain it better:
'E's passed on! This website is no more! It has ceased to be! 'E's expired and gone to meet 'is maker! 'E's a stiff! Bereft of life, 'e rests in peace! If you hadn't nailed 'im to the server rack 'e'd be pushing up the daisies! 'Is metabolic processes are now 'istory! 'E's off the twig! 'E's kicked the bucket, 'e's shuffled off 'is mortal coil, run down the curtain and joined the bleedin' choir invisibile!! THIS IS AN EX-WEBSITE!!
What one fool can do, another can. (Ancient Simian Proverb)
Given how BT and Talk Talk more or less got away scot free when they were selling out to Phorm, chances are you've got more chance of winning the lotto in every country on earth on the same day than getting a monster like Sky into court and winning.
British ISP Sky Broadband Cuts Off ACS:Law
Mmm, I read it as British ISP Sky Broadband Cuts Off [Ties with/Cooperation with] ACS:Law. Now that I have RTFAed, it seems they actually did mean it both literally (cut access to the website) and figuratively (cooperation with ACS:Law).
Had you read the Plusnet link in the summary, you'd see, at least for that ISP, ACS:Law requested and received court orders requiring the delivery of customer information. It's not likely that they took different action with Sky Broadband.
In other (U.S.) words, ACS:Law acquired sensitive information via John Doe discovery, then put that information, unencrypted, on their web site. The people who provided it to ACS:Law under the directive of a court order aren't likely culpable.
It doesn't hurt to be nice.
I thought America didn't condone torture.
No, no, America doesn't condone "torture." You have to put quotes around it because it's what you would call a term of art, rather than what normal people understand by the word torture.
I thought it was some weird perl module.
Jesus was all right but his disciples were thick and ordinary. -John Lennon
Anybody who thought it was a good idea to buy their internet connection from a media company obviously doesn't understand how capitalism works.
Slightly OT, the failure to understand the need to separate content from channel was one of the major failings of the last British Government, along with Mandelson's "Digital Economy Act", which basically gave citizens no redress against these coercive lawyers. I'm waiting to see if Ed Miliband will get this, and consign Mandelson to the dustbin. But I'm not hopeful.
From scarped cliff or quarried stone she cries "A thousand types are gone, I care for nothing, no not one."
The ISP Sky Broadband today stated they cut off further cooperation with ACS:Law...
I thought it was some weird perl module.
No doubt someone will now write a perl module which accuses random ISP customers of copyright infringement.
Under the DPA, the customer must be informed. Just what 'informed' means is open to interpretation. It is usually sufficient to include a single line on page 37 of the 98-page contract. Such contracts also have a standard clause allowing the ISP to change the terms at will.
As I pass through my incarnations in every age and race,
I make my proper prostrations to the Gods of the Market Place.
Peering through reverent fingers I watch them flourish and fall,
And the Gods of the Copybook Headings, I notice, outlast them all.
The "Gods of the Copybook Headings" are exactly what you are describing.
Kipling was widely regarded as an Imperialist, but in fact he believed in the fundamental equality of all human beings - the heroes of Kim are, respectively, Irish, Afghan, East Indian and Tibetan Buddhist - the importance of blue-collar workers, and the importance of a stable economy based on mutual trust. It's a pity he has no modern equivalent.
From scarped cliff or quarried stone she cries "A thousand types are gone, I care for nothing, no not one."
Had you read the Plusnet link in the summary, you'd see, at least for that ISP, ACS:Law requested and received court orders requiring the delivery of customer information. It's not likely that they took different action with Sky Broadband.
If this was the case then Sky's refusal to co-operate press release dosn't make much sense. If you don't want to follow a court order you take the matter up with the courts not whoever got a court to issue it...
Nice work, anonymous. Thanks.
IANAL - but my understanding of British Data Protection Law is that the person who owns the data is ultimately responsible for how that data is used. So by giving their customers' personal information to ACS, which was in turn leaked, might mean Sky customers can take action against Sky. Maybe there's someone here who can advise?
That would be ACS::Law.
ACS:Law sounds like an American TV series.
Watch this Heartland Institute video
Law requested and received court orders requiring the delivery of customer information. It's not likely that they took different action with Sky Broadband.http://www.typier.com
So I would say, no chance. Go after the "law firm".
From scarped cliff or quarried stone she cries "A thousand types are gone, I care for nothing, no not one."
the data protection act requires you to take reasonable steps to protect information . Putting it on a web site does not seem reasonable .
Deleted
ACS:Law were using Norwich Pharmacal civil orders against the ISPs; there basically demand information relevant to a future court case from a third party, in this case the ISP. Sky broadband chose not to contest these court orders, and just supinely handed over the data. Nor did they notify their subscribers that such an order was taking place, so they could fight it if they chose.
In fact, ACS:Law were combining these requests into huge tranches of data - one such recent one was 25,000 BT Broadband IP addresses, expected to ID 15,000 subscribers.
Virgin and Talk Talk refused to go along with these orders without a fight - potentially forcing ACS:Law to do a Norwich Pharmacal order per individual IP, which would be ruinously expensive - so the leaked emails reveal that ACS:Law specifically did not target them.
So yes, it's true that Sky Broadband were under court order - but it was one they supinely accepted, with the IP addresses in bulk. Uncontested, the judge has little choice but to rubber-stamp the request from ACS:Law. Sky may not be at fault for the data breach (they hand the data over securely), but they certainly are for co-operating with ACS:Law, a known dodgy legalised extortion outfit, without even bothering to attempt to protect their customers.
ACS:Law is under investigation by the Solicitors Regulation Authority for the way they go about their 'letters with menaces, demanding £495 or else' campaign; Crossley, their head solicitor, has been investigated twice before.
Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
It's all disinformation. Some ISPs hand data over without a court order, such as Sky and others. Other ISPs, such as Talk Talk and Virgin, took a stand and refused to do so without a court order.
It looks more like their DNS isn't resolving. Sky Broadband provide domestic broadband, so unless they are running their DNS on a box hanging off someone's home ADSL it seems unlikely that they mean "cut off" as in "disconnected".
"If you use +1 Insightful to mean +1 Agree, I'll use -1 Overrated if I disagree." - surely that policy merely doubles the inaccuracy of the score for such posts?
I am not a lawyer, although I do work with data protection as part of my profession.
Sky are clearly caught between a rock and a hard place here. They have two different duties under the law
- Comply with the court order ACS:Law have obtained, and provide the account holder details matching the IP address/Timestamp.
- Under the Data Protection Act 1998, principle 7, to ensure : "Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data."
Clearly ACS:Law have demonstrated themselves incapable of sufficiently protecting the data, and therefore to continue to cooperate with them would place Sky in breach of the DPA. Of course not complying with a court order is Contempt of Court.
What you going to do ?
What the story failed to mention is that ACS:Law lawyers are already due to be brought to a tribuneral by the Law Society to explain their conduct. It could lead to them being disbarred. This only serves to fan the flames of the raging fire against them.
I only please one person per day. Today is not your day. Tomorrow isn't looking good either. - Scott Adams
Yes... I wonder specifically how they are following this part though...
Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
I don't know in what world having a third party posting personal data to a web site yourself counts as appropriate technical and organizational measures.
Also, as ACS:Law is a UK-based organization themselves, they also have to obey the act, even though they don't have any contract or agreement at all with the people whose information they have obtained.
I don't think so. There was a court order involved and it is something to do with the 'Digital Economy Act' here in the UK.
http://www.bbc.co.uk/blogs/thereporters/rorycellanjones/2010/09/acslaw.html
I love how this story is developing. A law firm not following the UK Data Protection Act? Now that's a thing to behold...
How dare this ISP cut me off!
What are they doing? Seceretly support the website by protecting it against another DDOS?
Afraid that they might find more on the relationship with said ISP perchance?
Or are is the ISP just worried for their profits because the line to the website it 'too full'?
No ISP has the right to cut of websites. EVER
OP here. How my post ended up here instead of on http://slashdot.org/story/10/09/29/0434232/Star-Wars-Films-In-3D-Due-In-2012 , I have no idea.
I could have sworn I posted on the right one. Well, too late now. If I post there, it's just going to get overlooked.
Basically, I was referring to the Star Wars films being made in 3D as a form of torture. Maybe I clicked on the wrong window and replied here instead.
Internet just makes it possible for people to find whistleblowers or activities governments do not revealed. You know, some real truth, as compared to main stream media dribble.
The EASIEST way for governments to initiate net neutrality authority, with minimal public resistance, is to FIRST CREATE A PROBLEM, and then enact restrictions under guise of necessary response.
And that would create a crack. Just a few more well-placed cracks, and the internet, as we know it, comes tumbling down.