Re: [anti-abuse-wg] RIPE NCC Anti-Abuse Training: Next Steps & WG Input!

2022-02-17 Thread Ángel González Berdasco
> And now that you mention it, are you sure that CSAM is illegal in 100% of the 
> countries?

Of course it's not. Or, CSAM itself might be illegal but the definition of 
'CSAM', 'child' or 'abuse' varies, so the end result is still that X is illegal 
in country A but not in country B.

See the variations of the age of consent around the world, which is sometimed 
further conditioned by things such as if the parties are married, their age 
difference (with again different values), if their relationship started when 
both were underage and other Romeo and Juliet exceptions.


Almost every complication surrounding the definition of statutory rape will 
blur as well getting a common definition of CSAM.

Luckily, the standard for taking it down is not whether they would really be 
prosecuted under who-knows-which jurisdiction but a more general interpretation 
included in the Terms of Use of the service.


Best regards


--
INCIBE-CERT - Spanish National CSIRT
https://www.incibe-cert.es/

PGP keys: https://www.incibe-cert.es/en/what-is-incibe-cert/pgp-public-keys



INCIBE-CERT is the Spanish National CSIRT designated for citizens,
private law entities, other entities not included in the subjective
scope of application of the "Ley 40/2015, de 1 de octubre, de Régimen
Jurídico del Sector Público", as well as digital service providers,
operators of essential services and critical operators under the terms
of the "Real Decreto-ley 12/2018, de 7 de septiembre, de seguridad de
las redes y sistemas de información" that transposes the Directive (EU)
2016/1148 of the European Parliament and of the Council of 6 July 2016
concerning measures for a high common level of security of network and
information systems across the Union.



In compliance with the General Data Protection Regulation of the EU
(Regulation EU 2016/679, of 27 April 2016) we inform you that your
personal and corporate data (as well as those included in attached
documents); and e-mail address, may be included in our records
for the purpose derived from legal, contractual or pre-contractual
obligations or in order to respond to your queries. You may exercise
your rights of access, correction, cancellation, portability,
limitationof processing and opposition under the terms established by
current legislation and free of charge by sending an e-mail to
d...@incibe.es. The Data Controller is S.M.E. Instituto Nacional de
Ciberseguridad de España, M.P., S.A. More information is available
on our website: https://www.incibe.es/proteccion-datos-personales
and https://www.incibe.es/registro-actividad.




-- 

To unsubscribe from this mailing list, get a password reminder, or change your 
subscription options, please visit: 
https://lists.ripe.net/mailman/listinfo/anti-abuse-wg


Re: [anti-abuse-wg] RIPE NCC Anti-Abuse Training: Next Steps & WG Input!

2022-02-17 Thread JORDI PALET MARTINEZ via anti-abuse-wg
I just put a couple of examples. If we define abuse in a fix way, future ways 
to abuse will remain excluded. It is a matter of how we word it.

 

We just need to explain this very well in trainings, not define “abuse”.

 

I don’t recall specific countries, but in several African countries, when 
discussing the anti-abuse policies in AFRINIC, we got those comments.

 

And now that you mention it, are you sure that CSAM is illegal in 100% of the 
countries? There may be countries where legislation even don’t mention it. So 
it is a perfect example of what I’m saying.

 

Regards,

Jordi

@jordipalet

 

 

 

El 17/2/22 13:43, "Michele Neylon - Blacknight"  
escribió:

 

I disagree

 

Some types of network activity are not going to be welcome anywhere. Some kinds 
of use of networks and platforms are not welcome by most people.

 

Please show me ANY COUNTRY where CSAM is legal.

 

And “legality” is NOT the bar. Never has been.

 

If we don’t try to deal with this then governments will probably step in and 
try to force their views on us, no matter how unworkable they are.

 

 

--

Mr Michele Neylon

Blacknight Solutions

Hosting, Colocation & Domains

https://www.blacknight.com/

https://blacknight.blog/

Intl. +353 (0) 59  9183072

Direct Dial: +353 (0)59 9183090

Personal blog: https://michele.blog/

Some thoughts: https://ceo.hosting/

---

Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty

Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845

 

 

From: anti-abuse-wg  on behalf of JORDI PALET 
MARTINEZ via anti-abuse-wg 
Date: Tuesday, 15 February 2022 at 11:40
To: anti-abuse-wg@ripe.net 
Subject: Re: [anti-abuse-wg] RIPE NCC Anti-Abuse Training: Next Steps & WG 
Input!

[EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised 
sources.

I don’t think we can, neither should, define what is abuse. Examples are ok, 
but should be clear that are only examples of common considered abuse 
activities and not necessarily inclusive/restrictive of all the possible 
situations.

 

It all depends on the origin of the claim.

 

Simple examples: In country “a”, unsolicited email maybe legally considered 
abuse, but not in the country “b” of the origin of that spam. You can even take 
out of the question the “legal” part, if you want. In country “c” attempt to 
ssh to hosts from other folks is a criminal action, but in country “d” (origin 
of the problem) is not.

 

The problem here is to ensure that if you get a claim for a presumed abuse, 
you’re able to process it, even up to the point to say “sorry” in our 
jurisdiction or best current practices, or internal policy or AUP ... whatever, 
this is not an abuse so we can’t accept your claim, or otherwise, “we are 
handling it … we have resolved that this way”.

 

Regards,

Jordi

@jordipalet

 

 

 

El 10/2/22 10:25, "anti-abuse-wg en nombre de Brian Nisbet" 
 escribió:

 

Colleagues,

 

Since we last spoke about the proposed training the NCC have been working with 
various community members to put a draft syllabus in place for further 
discussion.

 

This is a link to the feedback document for this draft:

 

https://docs.google.com/document/d/1M9Wrqu-VKGGwMfJQGK0NlTs5UzH6xJ2_HR2MkTBVR2w/edit?usp=sharing

 

What the NCC and the Co-Chairs would love is if everybody could just comment 
what they think they understand from the learning goals as they’re written and 
suggest any changes or additions and obviously ask any questions. We’d also 
like the feedback on the webinar flow design.

 

It’s important for everybody to understand that the learning objectives are the 
basis for the training. These are the skills that the learner must acquire. 
With these skills we also expect a change of attitude towards abuse handling 
(which is we think the purpose of this training).

 

While discussion on the list is welcomed and encouraged, we've also planned a 
Zoom session for any interested parties to discuss this further. This will take 
place on Wednesday 23rd February at 14:00 CET:

 

https://ripe.zoom.us/j/8221791822?pwd=ZFY0MnNQeWJsTkhQSFlyeEZlUkNJQT09 

 

Meeting ID: 822 179 1822 

Passcode: 1277

 

Hopefully with discussion on list and at the session on the 23rd we can move 
this into a final draft and progress from there.

 

Thanks,

 

Brian

Co-Chair, RIPE AA-WG

 

Brian Nisbet (he/him)

Service Operations Manager

HEAnet CLG, Ireland's National Education and Research Network

1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland

+35316609040 brian.nis...@heanet.ie www.heanet.ie

Registered in Ireland, No. 275301. CRA No. 20036270 

-- To unsubscribe from this mailing list, get a password reminder, or change 
your subscription options, please visit: 
https://lists.ripe.net/mailman/listinfo/anti-abuse-wg 


**
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company