At 12:04 AM 4/30/2001 -0500, Kevin L Prigge wrote:
>On Mon, Apr 30, 2001 at 12:13:01AM -0400, Phillip H. Zakas wrote:
> > i agree...unless you're specifically directed to do so, maintaining log
> > files is completely optional. there are no regs requiring isps or websites
> > or mail providers to do so, other than the standard 'you need to comply
> with
> > a court order or search warrant, etc.'
>
> From recent experience, LE provides us with an order to preserve
>certain logged information. The order is in advance of obtaining
>a search warrant, and specifies what information will be requested
>in the warrant. In an incident earlier this year, we received the
>order six weeks before the warrant was issued. The existance of
>the order was sealed.
What if the sysadmin is intentionally located in an offshore location so
that they cannot be kept from notifying all users of the logging order?
steve
