[gnso-rds-pdp-wg] ICANN Meetings/Conversations with Data Protection and Privacy Commissioners

Michael Peddemors michael at linuxmagic.com
Fri Sep 29 15:31:52 UTC 2017


On 17-09-29 07:53 AM, allison nixon wrote:
>>>And while spammers do have other sources, whois harvesting has become a major driver for spam. The number of 20 spam 
> messages does not seem like much, but it still is significant to show 
> that there is abuse.
> 20 messages over 4 days means 1780 messages over the course of a year, 
> just for me. With millions of new domains registered every year, this is 
> a significant problem.
> 
> This is once again an abuse of statistics. You assume the number of 
> messages per day will remain static, not increase or decrease. And your 
> conclusions about the role WHOIS plays in spam are once again at odds 
> with the conclusions of people who actually fight spam for their job. 
> Fighting spam is not your job and your conclusions with your extremely 
> limited dataset are not valid in comparison.
> 

As much as I am getting to the point of not responding to any of these 
threads, and yes.. it does seem like trolling instead of conversations, 
and it does not seem to help continue the momentum that the WG had 
originally, I guess I was 'baited' into this response..

Just because an actor performs illegal acts, eg harvesting whois 
information for illegal or questionable methods, doesn't mean that 
'whois' is at fault.

Please contribute and go after the bad actors instead. (and get a better 
spam protection software)

domain:      portilo.fr
contact:     Force Marketing
Uses.. IP Address 149.202.20.124 - 149.202.20.127
Registered under org-name:       Caldas Marco

domain:      apalcour.fr, rasilva.fr
contact:     Force Marketing
Uses.. IP Address 79.137.127.144 - 79.137.127.151
Registered under org-name:       Caldas Marco

However, another actor on the same (OVH) Network exhibiting VERY similar 
behavior.

domain:      offres-box.fr
contact:     Acheter-louer.fr <sic>
Uses.. IP Address 188.191.140.160 - 188.191.140.175
Registered under A7 Interactive Technical Contact

domain:      toncadeaudujour.fr
contact:     Clientiperme <sic>
Uses.. IP Address 185.150.79.0 - 185.150.79.255
Registered under netname:        SOLTIA

These actor(s) hit one email account (stripped or stolen from other 
online resources, NOT whois) over 400 times in a couple of days..

This ability for spam researchers to identify players, FAR outweighs the 
little bit of spam you get because your email is in whois records..

And yes, we find those 'fake domain' renewals in our spam folders, but 
with this kind of information, we can help track them down..

Let's stop arguing that 'whois' is bad, the only thing is bad is a few 
actors that use that data, and whois can actually help to stop those people.



-- 
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
------------------------------------------------------------------------
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.


More information about the gnso-rds-pdp-wg mailing list