[members-discuss] Database Abuse

On 07/09/17 10:26, Tim Armstrong wrote:
> I don't think it's too much to ask them to sign up, but perhaps there is
> some way to allow them to login and view the full DB with credentials from
> their own RIR?

That would mean, that the other RIRs have to disclose credentials, give 
access or develop an API together.

Even now, the DB systems and their output can differ quite a bit.

I don't disagree, that information, like the email-address shouldn't 
just be easily available to scrape for mass mailing.

In the case of a few country domain registries, it's been done by no 
displaying the email information via whois or in the complete DB 
download and the information only being available when querying the data 
via web after bot-check etc., which would be quite discouraging, as 
you'd have to sit and query each and every record manually.

The problem you run into then, is that somebody that really wants to 
spam you just would hire some cheap labour (India etc.) to retrieve the 
data though.

Kind regards,
Martin List-Petersen
Airwire Ltd.



> 
> On Thu, Sep 7, 2017 at 11:22 AM, Martin List-Petersen <martin at airwire.ie>
> wrote:
> 
>> On 07/09/17 09:17, Tim Armstrong wrote:
>>
>>> Or if your details are in the list and / or you are a technical contact
>>> attached to an LIR then you can see everything.
>>> Only non-technical / non-LIR people can't access it.
>>> Perhaps use passing the RIPE DB Training course as a requirement for
>>> access.
>>>
>>
>>
>> Well, that's where you're not thinking globally though.
>>
>> Not every tech, that has need for the information in the RIPEdb, is
>> automatically a RIPE member. They could be operating using other provider
>> IPs or a member of ARIN/APNIC/AfriNIC for example.
>>
>> Kind regards,
>> Martin List-Petersen
>> Airwire Ltd.
>>
>>
>>
>>
>>>
>>> On 7 Sep 2017 10:06 am, "Vegard Svanberg" <vegard at monsternett.no> wrote:
>>>
>>> * Tim Armstrong <t.armstrong at nerdalize.com> [2017-09-05 10:36]:
>>>>
>>>> I hate to bring this subject up again, but is there really nothing
>>>>> structural we can do about this?
>>>>> At a minimum we could occlude e-mail addresses from the public DB,
>>>>> instead having public complaint submitted via a webform on the NCC
>>>>> website, requiring the uninitiated to realise this is an abuse /
>>>>> complaint contact, not a sales opportunity.
>>>>>
>>>>
>>>> I understand the problem (and get those pitches myself nearly daily). I
>>>> have no alternative, simple solutions. I also haven't thought this
>>>> through in detail. :-) However, and despite all that: I'd oppose the
>>>> idea of hiding/obfuscating emails and centralising/limiting feedback
>>>> loops to the NCC website. I'm concerned about the operational
>>>> consequences of limiting the opportunity to collect emails and build and
>>>> maintain lists of contact points (potentially) important for operations.
>>>>
>>>> And if we remove just emails, we'd probably have to do the same with
>>>> phone numbers. They're calling from time to time as well.
>>>>
>>>> Again, I haven't thought this through, but it's the knee-jerk response
>>>> anyway. Perhaps naming, shaming and blacklisting the offenders might be
>>>> a better way to go. Perhaps verified members could get regular database
>>>> dumps (including contact info) from other sources, or authenticate
>>>> against the db to get the whole lot. I don't know. I'm not sure the
>>>> problem is big enough to warrant any major changes.
>>>>
>>>> --
>>>> -o)  Vegard Svanberg, MD - Monsternett (www.monsternett.no)
>>>>    /\\ Violgata 3A, N-1776 HALDEN, NORWAY
>>>> _\_v Phone: (+47) 69701802 | Fax: (+47) 69701801
>>>>
>>>>
>>>> ----
>>>> If you don't want to receive emails from the RIPE NCC members-discuss
>>>> mailing list, please log in to your LIR Portal account and go to the
>>>> general page:
>>>> https://lirportal.ripe.net/general/
>>>>
>>>> Click on "Edit my LIR details", under "Subscribed Mailing Lists". From
>>>> here, you can add or remove addresses.
>>>>
>>>>
>>>
>>>
>>> ----
>>> If you don't want to receive emails from the RIPE NCC members-discuss
>>> mailing list, please log in to your LIR Portal account and go to the
>>> general page:
>>> https://lirportal.ripe.net/general/
>>>
>>> Click on "Edit my LIR details", under "Subscribed Mailing Lists". From
>>> here, you can add or remove addresses.
>>>
>>>
>>
>> --
>> Airwire Ltd. - Ag Nascadh Pobail an Iarthair
>> http://www.airwire.ie
>> Phone: 091-865 968
>> Registered Office: Moy, Kinvara, Co. Galway, 091-865 968 - Registered in
>> Ireland No. 508961
>>
> 
> 
> 


-- 
Airwire Ltd. - Ag Nascadh Pobail an Iarthair
http://www.airwire.ie
Phone: 091-865 968
Registered Office: Moy, Kinvara, Co. Galway, 091-865 968 - Registered in 
Ireland No. 508961