[159587] in North American Network Operators' Group
Re: Notice: Fradulent RIPE ASNs
daemon@ATHENA.MIT.EDU (Sander Steffann)
Tue Jan 15 19:29:02 2013
From: Sander Steffann <sander@steffann.nl>
In-Reply-To: <CAArzuotwVQisM40XjFwx6x08FpdbBNfNJkiLc-5obme8vdJQnw@mail.gmail.com>
Date: Wed, 16 Jan 2013 01:28:38 +0100
To: Suresh Ramasubramanian <ops.lists@gmail.com>
Cc: nanog <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi,
> I'm having more than a little deja vu here - Romanian LIRs have come =
up on this list (leave alone nanog, or various other RIPE lists) more =
than once in this context. In fact=20
Yes, but like I said: talk on lists is not enough
> There is an apparent pattern of large scale misuse of resources here, =
with a complex reporting procedure that puts the onus on the complainant =
to perform validation
Filling in one web form is a complex reporting procedure?
The form only contains:
- the reason (probably "Violation of RIPE Policies and RIPE NCC =
Procedures" or "Provision of untruthful information to the RIPE NCC")
- one of the relevant resources (can be an address, ASN or organisation =
object from the RIPE database) "In order to identify the natural or =
legal person responsible".
- a text field where you can copy&paste your report
- your contact details
- one checkbox "I confirm that the information I provide is correct and =
to the best of my knowledge"
- one checkbox "I allow the RIPE NCC to forward my report and =
attachments to the party the report is about."
- a captcha
They add a note that your contact details will never be shared with a =
third party, only the content of your report. They also provide a nice =
flowchart that shows how they will handle the report, which basically =
comes down to: Report-submitted -> report-accepted -> =
start-investigation.
I really can't see how this is a "complex reporting procedure that puts =
the onus on the complainant to perform validation". They don't ask for =
validation, only that you provide correct information on which they can =
base their investigation.
> that, given complaints of a widespread problem, RIPE staff is much =
better qualified (not to mention, paid for their time) to do themselves, =
on a proactive basis.
They do proactive audits and they do verification/validation of the =
information people write in the reports. They will take action on =
complaints of a widespread problem. They just need the proper =
information through the official channels, which in this case is a =
not-so-complicated web form...
Cheers,
Sander
