Slashdot Mirror


US Telco Fined $3 Million in Domain Renewal Blunder (bleepingcomputer.com)

Catalin Cimpanu, writing for BleepingComputer: Sorenson Communications, a Utah-based telecommunications provider, received a whopping $3 million fine from the Federal Communications Commission (FCC) last week for failing to renew a crucial domain name used by a part of the local 911 emergency service. The affected service was the Video Relay System (VRS), a video calling service that telecommunication firms must provide to deaf people and others people with vocal disabilities so they can make video calls to 911 services and use sign language to notify operators of an emergency or crime. According to the FCC, on June 6, Sorenson failed to notice that the domain name on which the VRS 911 service ran had expired, leading to the entire system collapsing shortly after. Utah residents with disabilities were unable to reach 911 operators for almost three days, the FCC discovered. Sorensen noticed its blunder and renewed the domain three days later, on June 8.

42 comments

  1. Re:If the registrars/hosters are liable... by Anonymous Coward · · Score: 2, Insightful

    It wasn't an unintended screw up. They have a responsibility to keep the service running. Not only did they fail to renew the domain registration, they failed to notice that the system was down for three days. Gross negligence is deliberate.

  2. They can't count, either. by msauve · · Score: 2

    "on June 6, Sorenson failed to notice... Sorensen noticed its blunder and renewed the domain three days later, on June 8."

    Uh, want to try that arithmetic again?

    --
    "National Security is the chief cause of national insecurity." - Celine's First Law
    1. Re:They can't count, either. by Glarimore · · Score: 4, Insightful

      I can see why they may have made this mistake.

      Yes, 8 - 6 = 2, but we can assume that if the issue began on the 6th and was resolved on the 8th, then service was affected for three business days. I'm sure that point (business days of outage) has been made multiple times. I can imagine the author overlooking their error due to thinking, "If service was affected for three days, then the issue must not have been fixed until three days later." This is an especially easy error to make if you're leaving date or numeric placeholders in an article as you're writing it.

      Anyway, I think we should be less hard on summary and article authors for simple arithmetic errors like this (that doesn't mean editors shouldn't be doing their due diligence, though).

    2. Re:They can't count, either. by Anonymous Coward · · Score: 0

      I can see why they may have made this mistake.

      Yes, 8 - 6 = 2, but we can assume that if the issue began on the 6th and was resolved on the 8th, then service was affected for three business days. I'm sure that point (business days of outage) has been made multiple times. I can imagine the author overlooking their error due to thinking, "If service was affected for three days, then the issue must not have been fixed until three days later." This is an especially easy error to make if you're leaving date or numeric placeholders in an article as you're writing it.

      Anyway, I think we should be less hard on summary and article authors for simple arithmetic errors like this (that doesn't mean editors shouldn't be doing their due diligence, though).

      I thought it was pretty well established that there were no editors on slashdot. Seriously.

    3. Re:They can't count, either. by Ichijo · · Score: 1

      Maybe it was only 2.5 days later but they rounded up.

      --
      Any sufficiently unpopular but cohesive argument is indistinguishable from trolling.
    4. Re:They can't count, either. by Anonymous Coward · · Score: 0

      Only AI ones.

      Bixby is Editor in Chief, while Alexa, Siri, and Cortana do the day to day editing.

    5. Re:They can't count, either. by msauve · · Score: 1

      2015.

      Person A: Hey, our domain renew is good until 2017.

      Person B: Great, I'll put a reminder on the calendar for 3 years from now.

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
  3. Re:If the registrars/hosters are liable... by Anonymous Coward · · Score: 0

    Apples and tires or fuck even apples and bear shit. What you are comparing isn't even in the same family.

    This was a telco company. Not a web host, registrar, or even just an ISP (that isn't also a telco) that fucked up.

  4. Re:The big accountability by chill · · Score: 2, Insightful

    Word up, go find sources that aren't so biased.

    Back at you.

    "This is what we got last night: four pallets of water, three pallets of meals and 12 pallets of infant food â" which I gave them to the people of Comerio, where people are drinking off a creek," she said

    All of that was what for a city with a population of just under 400,000. She was making a point that what was getting thru was paltry compared to the need, and that further help was needed.

    Her standing in front of the pallets of aid was EXACTLY what she should have done. She was being transparent about the magnitude of the crisis versus the magnitude of what was getting thru.

    https://www.nbcnews.com/storyline/puerto-rico-crisis/san-juan-s-mayor-pleads-trump-you-are-killing-us-n806116

    --
    Learning HOW to think is more important than learning WHAT to think.
  5. Re:Slashdot... by Anonymous Coward · · Score: 0

    Exactly! We, at Special Education for the Santa Clara County Office of Education, couldn't agree more with you!

    For the valuable /. users that might already have read the following, please note that there is an important update.

    IMPORTANT UPDATE:
    Special Education for the Santa Clara County Office of Education has invested money to buy Chris a new chair:
    http://www.keynamics.com/image...

    Information about Christopher Dale Reimer and autistic people:

    Autistic people have obsessions about things normal people don't care. For example, one of our autistic patient went haywire when he realized that there was a penny missing in his pocket change.

    To calm him down, one of our educator pretended to have found it on the floor and gave a penny to him.

    The autistic patient condition went even worse because he realized it wasn't the same penny!

    Chris has an obsession with budgeting every penny. He doesn't understand that most people do not budget to the penny and have a flexible amount they allow for miscellaneous items.

    I am Nancy Guerrero and I am Director of Special Education for the Santa Clara County Office of Education. We use Chris' (a.k.a. creimer,cdreimer) picture in our document because he is the hardest case we have ever had to handle:
    http://www.sccoe.org/depts/stu...

    Our artists were inspired by the low carb diet that Christopher follows scrupulously for the small lunch box and by the picture linked below for the rest. I am sure that you will notice the similarities such as the bump on the side of his chest and more:
    https://ibb.co/gVad65

    Please be easy on Christopher although, I am aware that some of our staff handling Chris post joke comments here and obvoiusly, the Santa Clara County Office of Education disapprove that behavior vehemently:
    https://school.discoveryeducat...

    But it isn't Chris' fault if he is the way he is. We do the best we can do with him and he is partially integrated into society. We try to cure his abnormal need for attention but he is kind of stubborn and won't listen to anybody.

    Thank You dear users,
    -Nancy Guerrero

  6. Re:If the registrars/hosters are liable... by Anonymous Coward · · Score: 0

    Well Since one has nothing to do with the other No Adolf. They are a private company and are not required to deal with Nazis.

  7. Re:The big accountability by Anonymous Coward · · Score: 0

    This is why Orange 45 gets away with shit.. people like you defending him.

  8. Re:If the registrars/hosters are liable... by Chris+Mattern · · Score: 1

    At this level of incompetence, whether or not it was deliberate becomes irrelevant, because the party at fault had a legal duty to be aware of what was going on. The legal boilerplate for this situation is "defendant knew or should have known"

  9. so, these are emergency services? by Anonymous Coward · · Score: 2, Insightful

    Why is there no standardization? why does every telco has its own names registered for services like these? It is like allowing each telco to setup its own emergency number instead of the standardized 911.

    Why not a single name, the same everywhere, that the telco can then maintain in there local DNS, and there DNS only?

    It is a critical emergency service, right? Then it is worth doing it properly.

    1. Re:so, these are emergency services? by Anonymous Coward · · Score: 0

      Because nobody who makes the "design" decisions actually understands DNS, or thinks about what is required to keep such a service running in the long term

      It doesn't have to be a problem if your "fintech maintenance" is on the ball (ie the beancounters read their renewal notices and pay up as required, preferrably without paying the scammers pretending to be owed monies), but while that's true, thinking about how the infrastructure should work is rarely done. Because domain names are nothing more than "web addresses" with "an extension", after all.

  10. Re:The big accountability by Anonymous Coward · · Score: 0

    Exactly right.

  11. Re:If the registrars/hosters are liable... by Anubis+IV · · Score: 2

    A) You've confused registrants with registrars. It's the registrant, Sorenson Communications, that's being held liable here, not a registrar like Google, so your comparisons to Google's situation fall apart right from the get-go.

    B) Companies that provide 911 service agree to certain legal obligations. Failure to uphold those obligations results in hefty fines because lives are literally at risk. Registrars like Google are under no such obligations to IANA.

    C) Speaking of IANA, it, rather than the US government, is the organization with the authority you're talking about. The USG gave it away in 1998 to ICANN, which is a nonprofit organization in the private sector. As such, none of their authority has stemmed from the USG in nearly 20 years.

    D) Barring its obligations to IANA—which again, do NOT derive from government authority—Google can set whatever terms they want. If an applicant doesn't like them, they can simply take their business elsewhere.

    E) Google's terms—which The Daily Stormer agreed to—make it clear that they can cancel registrations at their discretion, such as if a site is being used for unlawful activities. The courts have repeatedly ruled that inciting violence—which is what The Daily Stormer is accused of—is an unlawful form of speech, akin to shouting "FIRE!" in a crowded theater. It is neither protected speech nor a civil right. Guess what Google cited as the reason for cancelling the registration?

    All of which is to say, I'm fine with people pointing out that Nazis have rights too, and I'll stand by you in defending them (regardless of my utter and complete distaste for what they say), but don't you dare suggest that private entities are obligated to assist them in spreading their message, particularly for speech that not even the US government itself is obligated to protect.

  12. Re:The big accountability by msauve · · Score: 2
    Maybe she should walk down to the docks instead of spending time on a photo op and misleading the news about the availability of aid.

    Crowley says it has more than 3,400 commercial containers at its terminal now. That's just one shipping company, at one port. Several other ports are accepting shipments, and stranded crates total an estimated 10,000..."These containers are full of food, these containers are full of water, full of medicine ... full of construction materials,"...

    -NPR

    --
    "National Security is the chief cause of national insecurity." - Celine's First Law
  13. Re:The big accountability by Anonymous Coward · · Score: 0

    Yeah every administrator should be doing the low-level administrative tasks, you Trumpies are always following your own advice and all that. Good point.

  14. Revenue gatherers by Anonymous Coward · · Score: 0

    Now we can see the real reason the government gave the FCC powers over the internet. To fine and gather more money for the government. It is just like truck drivers rightly call highway cops - revenue gatherers. It is not actually about safety, but about the money.

  15. Re:The big accountability by Anonymous Coward · · Score: 0

    Actually (I think it was a Breitbart story, linked from Drudge) they spoke with a mayor of another PR city and he had an entirely different story: things were going quite well, he was attending FEMA/HHS/whatever meetings with his group and things were running well - roads were getting cleared, materials were moving where they were needed to be, requests for particular situations were being answered in reasonable time, of course everybody couldn't have everything immediately,and the system was pretty much doing what it should be doing.

    HIS big observation was that what's-her-name wasn't in ANY of the planning/status meetings with the rest of the mayors/governor/FEMA/.et.al. because she was too busy 'playing in the water'. The point: you have STAFF to spread out and do what they're told - you SHOULD tour around to get the best idea of what it's like on-the-ground, but your job is really to direct through your staff what-needs-to-be-done-where; NOT hand out sandwiches to everyone while the TV cameras roll.

    (unless, of course, she's in an election year?)

  16. VRS is required for all Telco providers? by Anonymous Coward · · Score: 0

    Since when is VRS required of all telco providers? I know it's required to be provided 24x7x365 IF you're a TRS and already provide VRS, but not ALL telecommunications providers are required to provide VRS...

  17. Wow - a reasonable fine for a serious offence by Bruce66423 · · Score: 2

    Compare and contrast the slaps on the wrist that BIG companies get. The EU's approach of basing fines on a percentage of international turnover gets the attention of the monopolies of Silicon Valley...

  18. People and email.. by Anonymous Coward · · Score: 0

    Considering how many reminders my register send me a reminder every 10 days stating at 2 months before my domains expire this is just stupid.

  19. Re:If the registrars/hosters are liable... by Anubis+IV · · Score: 1

    The subject of the thread still lists hosters (of services) in addition to registrars.

    "Hosters" (which I think is your incorrect way of referring to hosts) aren't being held liable either, so whether we're talking about registrars or hosts makes no difference. You're still conflating businesses with their clients and your comparison still falls apart right from the get-go. Same as before.

    Whatever it is ostensibly, the governance of the Internet is still very much controlled by the US government [...] Many of the root DNS-servers are US-owned...

    None of which matters to what you were claiming.

    You were trying to argue that Google is obligated to uphold a higher standard because it derives its authority from the USG. That argument only holds water if the USG has "authority over the Internet" like you said it did. When I pointed out that you were incorrect about it having that legal authority (i.e. de jure control), you switched to arguing that the USG has de facto control of the Internet, but having de facto control is not the same as having authority you can delegate. As such, no, Google is not under any obligation of the sort you're suggesting.

    Put differently, your current argument boils down to "Because the USG owns some infrastructure, Google is obligated to allow anything the USG allows". It's a non-sequitur. It's like arguing that because the USG owns a lot of land, I'm obligated to allow protesters on my private property. That's not how it works. It's a nonsensical argument, but you're so lost in the weeds that you don't even realize how irrational it is.

    Likewise, your argument that they are government-like holds no water, since government-like != government. Everything from Facebook to Sam's Club to my local library requires that I register before I use their service. That doesn't make them government-like, and even if it did, that still wouldn't matter.

    You aren't offering any citations

    I didn't realize I needed to cite the link that you provided. I figured you read your own link and would recognize that's where I pulled most of my information.

    how is mere accusation of inciting violence sufficient [...]?

    Irrelevant question. We're talking about a private company cancelling the service of a customer who broke rules that the customer agreed to. Simple as that. And to answer your later question, of course I have no problem with a private service provider terminating the service of a customer who broke the terms of service that the customer freely agreed to. Why do you? Do you think civil liberties are being trampled upon every time a message board bans a user who violates their rules?

    Notary Publics are private too

    No, notary publics aren't private, actually. They're public officers appointed by the government. You're correct that they (in most cases) can choose whom they serve, but they are legally bound to act in their capacity as a public officer whenever they do serve.

  20. Re: If the registrars/hosters are liable... by Anonymous Coward · · Score: 0

    well, they did save thousands of dollars by not hiring a competent sysadmin.

  21. I use to work for them by G00F · · Score: 1

    and for 3 days of non service for this one thing the fine is pretty high for a company their size. Of course they could have grown more but not with the way the FCC was scaling back..

    Also, with most of their devel app guys I'm surprised it only took them 3 days to realize and fix it. "What do you mean you're having performance issues on the server, it worked fine on my laptop"

    --
    The spirit of resistance to government is so valuable on certain occasions that I wish it to be always kept alive
  22. Re:If the registrars/hosters are liable... by mi · · Score: 0

    When I pointed out that you were incorrect about it having that legal authority (i.e. de jure control), you switched to arguing that the USG has de facto control of the Internet

    You are hairsplitting. Had this been about the speech of anybody else — including Communists — you would've been as outraged as I am...

    Nominally, there is no government on the Internet — indeed, ICANN is a private entity. Are you really comfortable with domain-registrars being in a position to decide, who gets to speak?

    We're talking about a private company cancelling the service of a customer who broke rules that the customer agreed to.

    There is no possible doubt, that Google's action was based purely and solely on the content of the customer's speech. Not on anything the customer did — only on something they said.

    Irrelevant question.

    It is highly relevant! You attempted to justify Google action by DailyStormer's (being accused of) inciting violence. By that logic, anybody and everybody else (accused of) inciting violence may lose their domain — including the dear "Antifa" — and I'd like you to confirm or deny this stance... Quite dodging, reply either "yes, any domain registrar opposing incitement of violence ought to cancel domain-registration of any organization affiliated with Antifa" or "no, some incitements of violence are more equal than others".

    private service provider terminating the service of a customer who broke the terms of service

    No, they did not. Google suddenly and with no change in the customer's behavior decided, that the customer is in violation — had you really been as adamant about free speech as you claim to be, you would've been outraged about Google playing the lawmaker, the prosecution, and the judge all at once and applying their own "laws" so capriciously.

    No, notary publics [wikipedia.org] aren't private, actually.

    Yes, they are — they are private in the sense they are offering their services on the free market, free to refuse any customer and/or charge whatever they please. But, once they certify a signature, they can not revoke the certification simply because they don't like the customer.

    They're public officers appointed by the government.

    Then so — de facto — are the registrars. Their function is purely to register a domain-name.

    --
    In Soviet Washington the swamp drains you.
  23. Re:If the registrars/hosters are liable... by Anubis+IV · · Score: 1

    You are hairsplitting.

    If you’re making an argument that Google derives its authority from the USG, it’s not hairsplitting to point out that the USG doesn’t have that authority to delegate in the first place.

    Are you really comfortable with domain-registrars being in a position to decide, who gets to speak?

    Nope, but I recognize that what I’m comfortable with is thankfully not the basis for law in this country. You’d do well to realize the same.

    I'd like you to confirm or deny this stance...

    You set up a false dichotomy, so I won’t be taking either of your canned responses, but I will answer the underlying questions.
    1) If a domain registrar has a policy against inciting violence, I believe it should be applied consistently, though I recognize that they may not have a legal obligation to do so. If a registrar has no such policy, they should not be forced to adopt one.

    2) I didn’t even know what Antifa was until you linked me (I had heard of them, but I find I’m happier when I stay out of the day-to-day political news, so I honestly thought it was some sort of Islamic group in the US), but from the sound of things, they’re way off-base too.

    had you really been as adamant about free speech as you claim to be, you would've been outraged about Google playing the lawmaker, the prosecution, and the judge all at once and applying their own "laws" so capriciously.

    No, because I believe that our rights become less meaningful to us when we confuse them with privileges. Using private services is a privilege, not a right. You’re not entitled to use their service according to your own terms, so if you don’t like their terms, don’t agree to them. Instead, vote with your wallet and go elsewhere, same as any other business. Likewise, recognize that if you sign up for an account with them, you’re bound by their policies. And if you think I like Google, think again. I migrated away from Google products years ago after finding their policies abhorrent.

    That said, I only start to become concerned about this sort of stuff when regional or national monopolies mean that there are no alternatives, since that’s when the government may need to get involved in a regulatory fashion.

    Yes, they are — they are private in the sense they are offering their services on the free market, free to refuse any customer and/or charge whatever they please. But, once they certify a signature, they can not revoke the certification simply because they don't like the customer.

    No, they aren’t. Participating in the free market doesn’t mean you’re private. Unlike Google, they’re appointed by the government, receive their authority from the government, and have to play within special rules set by the government. That makes them public. They aren’t allowed to revoke their seals because doing so is beyond their authority as a public officer.

    Then so — de facto — are the registrars. Their function is purely to register a domain-name.

    Again, no. That they serve a (questionably) similar purpose has no bearing on if they’re public or private. That they aren’t government owned means they’re private, and as a private entity operating under the authority granted to them by another private entity, they get to set whatever rules they want, including cancelling an account at their sole discretion. You may not like it, but that doesn’t change that they are allowed to do so.

  24. Re: If the registrars/hosters are liable... by Anonymous Coward · · Score: 0

    I guess they also saved money by not using any calendar or reminder app, or bothering to read any emails sent from their registrar. Mine reminds me when a domain is about to expire.

  25. This should be criminal by mysidia · · Score: 2

    The designer and their managers who allowed a critical emergency service to be dependent on an internet domain registration should be jailed for gross negligence.

    When failure of a service would mean lives are at risk DO NOT make that service dependent upon resources from 3rd parties that can be terminated at will or that are subject to natural disruptions with no consequences for the 3rd parties (Or agreement with them that the services are used for functions critical to life).

    A DNS domain registration can be terminated or suspended at will at the decision of a domain registrar or registry for any number of potential reasons
      (although it is rare; a domain can even be terminated by mistake or hijacked by a malicious adversary in some cases), or DNS servers connected to the internet can be nuked by evil folks in a DDoS attack, or temporarily suspended by various service providers for network maintenance; Or various situations on the internet under 3rd party control and no SLA can cause temporary outages of access to the DNS.

  26. Re:If the registrars/hosters are liable... by david_thornley · · Score: 1

    In other words, you want government control over private enterprise, and you don't believe in contracts. Either that, or you're just a Nazi or Nazi sympathizer.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  27. Re:The big accountability by Anonymous Coward · · Score: 0

    Typical liberal. Let's blame the republican for a natural disaster! IT"S BUSH"S FAULT! all over again.