I know this is obvious to everyone on bugtraq, but nobody seems to that t=
old =

P.S.Ziegler yet. (He might or might not be aware of these facts).

If the report is right and logs recoriding you connecting and obtaining a=
n IP =

address are a concern then you should be terrified already. I suspect tha=
t I =

could reconstruct much of what you did online given access to all the =

asssociated logs. Getting an IP address from a DHCP server and using almo=
st =

any other service whatsoever usually generates at least an IP address and=
=

timestamp. Bind 9 has logs, and they are on by default, so big brother mi=
ght =

be able to deduce a lot just using your ISP's DNS logs.

When I say that I got this spam from IP address X at time Y, and give ful=
l =

headers to back this up, most ISPs work out who was responsible and nuke =
their =

account. I do not think the "a virus sent that spam not me" or "nobody to=
ld me =

not to send spam" line is very effective. If you allowed a virus to send =
spam =

then the internet does not need your box. Period.

The signal-to-noise logic probably does work, but I am not sure the legal=
=

angle does. If you were *deliberately* ran the software that acidently =

downloaded that kiddie porn the suggested angle might not work.

A law requiring log data to be retained for 6 momths should be a major pr=
oblem =

to enforce. Last time I think the UK mooted this it did not happen =

(disclaimer: this might have been a trial balloon designed to generate fl=
ak). =

My reaction at the ISP end was "OK, will you buy us the extra hardware =

required?" with the intention the answer would be "no" and the plan quiet=
ly =

killed. (Thinking that plain daft things will not be enacted is not alway=
s =

reliable, unfortunately).

Of course the "hand over your keys" law is a lot less effective tbat the =

government thinks. If an hour has passed they can have my host private ke=
y =

then I no longer have one of the keys required.

-- =

Duncan (-:
"software industry, the: unique industry where selling substandard goods =
is
legal and you can charge extra for fixing the problems."