[128371] in North American Network Operators' Group
Re: Question of privacy with reassigned resources
daemon@ATHENA.MIT.EDU (Paul Ferguson)
Wed Aug 4 15:46:10 2010
In-Reply-To: <DB6C33ED-32DB-46C1-990C-4899DDBD0710@cs.columbia.edu>
Date: Wed, 4 Aug 2010 12:46:01 -0700
From: Paul Ferguson <fergdawgster@gmail.com>
To: Steven Bellovin <smb@cs.columbia.edu>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, Aug 4, 2010 at 12:42 PM, Steven Bellovin <smb@cs.columbia.edu>
wrote:
>
> On Aug 4, 2010, at 1:35 17AM, William Herrin wrote:
>
>> On Tue, Aug 3, 2010 at 7:14 PM, Franck Martin <franck@genius.com> wrote:
>>> If it is a business, then accurate address does not seem to me an
>>> issue, if it is a private address, I think a bit of fuzziness is
>>> helpful
>>
>> An apartment complex/condo/etc is a business which contains private
>> addresses.
>>
>> Do you sell to the residents directly or do you sell to the apartment
>> complex which then resells to individual residents?
>>
>> If the former then you're basically off the hook for anybody who
>> doesn't get a /29 or larger.
>>
>> For the latter, you're providing significant amounts of a public
>> resource (IP addresses) to a business whose contact information you're
>> contractually and ethically obligated to reveal. If a particular
>> complex is worried about publishing their location, they can always
>> rent a P.O. box. If you're the only one doing the worrying, don't.
>
> I strongly disagree -- you're revealing the precise address of any tenant
> in those buildings. Don't do that...
>
>
Chiming in: I would tend to agree with smb on this particular issue --
that's a bit *too* precise.
- - ferg
-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)
wj8DBQFMWcNoq1pz9mNUZTMRArbvAJ9ymAZzgf/hlOVPWQtTj3GcGCFKaACff7Hy
bMw7Gg6uZObU4cPmoDU9TK4=3D
=3DmrQI
-----END PGP SIGNATURE-----
--=20
"Fergie", a.k.a. Paul Ferguson
=A0Engineering Architecture for the Internet
=A0fergdawgster(at)gmail.com
=A0ferg's tech blog: http://fergdawg.blogspot.com/
