Re: [arin-ppml] Of further interest...

2019-05-15 Thread Ronald F. Guilmette
In message , Seth Mattinen wrote: >The best part is that it was likely this guy's own doing that got the >microscope turned on him by immediately suing ARIN in federal court when >confronted with revocation. I love seeing lawsuit happy people get their >BS thrown back in their face. Yes,

Re: [arin-ppml] Of interest?

2019-05-15 Thread Ronald F. Guilmette
In message , John Curran wrote: >> Require FAXed copy of driver's license, national ID card or passport. > >Yes, we've been doing that for years it is of limited help. Whoa whoa whoa. Wait a second here John. Are you saying that ARIN is in possession of FAXed copies of personal

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Seth Mattinen
On 5/15/19 11:44 AM, Mike Burns wrote: Other shoe dropped yesterday. https://ecf.scd.uscourts.gov/cgi-bin/qrySummary.pl?250341 20 counts of wire fraud. Makes sense. Obtain addresses fraudulently and sell them - instant wire fraud. All the falsely notarized documents pile on the hurt.

Re: [arin-ppml] Of further interest...

2019-05-15 Thread William Herrin
On Wed, May 15, 2019 at 4:25 PM David Farmer wrote: > Krebs has a good write up too > > https://krebsonsecurity.com/2019/05/a-tough-week-for-ip-address-scammers/ > I love the price inflation. First it was $15-$18. Then the indictment says $15-$19. Now Krebs is saying $15-$25. -Bill --

Re: [arin-ppml] Of further interest...

2019-05-15 Thread David Farmer
Krebs has a good write up too https://krebsonsecurity.com/2019/05/a-tough-week-for-ip-address-scammers/ On Wed, May 15, 2019 at 2:57 PM Mike Burns wrote: > From the indictment: > > > > Substitution of assets: > > > > If any of the assets described above as being subject to forfeiture, as a >

Re: [arin-ppml] Micfo

2019-05-15 Thread Michael Williams
John — Perhaps we should deputise ARIN employees as federal law enforcement officers, provide them training and firearms, and let them root out the rampent abuse in IP allocation. I think people would think twice if they knew lying to ARIN was lying to a federal agent. They also wouldn’t want the

Re: [arin-ppml] Advisory Council Recommendation Regarding NRPM 4.1.8. Unmet Requests

2019-05-15 Thread Michael Williams
Another reason why we shouldn’t allow IP blocks received via the waitlist to be transferred to any other party aside for back to ARIN. Sent from my iPhone > On 15 May 2019, at 18:18, John Curran wrote: > >> On 15 May 2019, at 2:47 PM, Tom Fantacone wrote: >> If we remove the waiting list

Re: [arin-ppml] Advisory Council Recommendation Regarding NRPM 4.1.8. Unmet Requests

2019-05-15 Thread John Curran
On 15 May 2019, at 2:47 PM, Tom Fantacone wrote: > If we remove the waiting list activity of this one fraudster, how much > "statistically likely" fraud is left? > Was this one bad actor so bad that he accounted for almost all the likely > fraud on the waiting list? > Do we still even have a

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Michel Py
> Mike Burns > Other shoe dropped yesterday. > https://ecf.scd.uscourts.gov/cgi-bin/qrySummary.pl?250341 Here's one easier to access : http://www.circleid.com/pdf/golstan_indict_filed_20190515.pdf Michel. ___ ARIN-PPML You are receiving this message

Re: [arin-ppml] Of interest and business registrations

2019-05-15 Thread John R Levine
In article , William Herrin wrote: So, is it just me, or is this not a red flag to anybody else? It's just you. It's pretty routine to incorporate in a different state than where you get your mail and operate in a still different set of states under a business name different enough to defy

Re: [arin-ppml] Of interest?

2019-05-15 Thread William Herrin
On Wed, May 15, 2019 at 1:18 PM Ronald F. Guilmette wrote: > Funny thing... not a single one of them seems to actually be registered > with > any of the relevant state authorities to do business in their alleged home > states. > > So, is it just me, or is this not a red flag to anybody else?

Re: [arin-ppml] Of interest?

2019-05-15 Thread Ronald F. Guilmette
In message , Michel Py wrote: >- What have we learned from this ? >- Moving forward, in the wake of this, are there any policy changes we > can make to try to prevent this from happening in the future ? Require FAXed copy of driver's license, national ID card or passport. That's just one

[arin-ppml] Micfo fraud

2019-05-15 Thread Ronald F. Guilmette
I just wanted to share these links I found. I'm not sure what the implications are of the fact that many of these sock puppet companies got registered also as official RIPE members, but I can think of a few plausible inferences... https://www.ripe.net/membership/indices/data/us.oppobox.html

Re: [arin-ppml] Of interest?

2019-05-15 Thread Brian Reid
When I applied last Fall for ARIN resources including an AS (issued as AS397138) they required significant documentation of my business and a copy of my business license. The City of Palo Alto had issued a business license marked "ReidBrian", which was good enough to open a bank account,

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Mike Burns
>From the indictment: Substitution of assets: If any of the assets described above as being subject to forfeiture, as a result of any act or omission of the defendants: a)cannot be located upon the exercise of due diligence b)has been transferred or sold to, or deposited with a third

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Mike Burns
There is provision for the forfeited assets to be substituted by other property of equal value if certain conditions are met. One of these conditions is if the assets have been transferred to a third person. I think the pound of flesh will be forthcoming even if the addresses themselves are

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Douglas Haber via ARIN-PPML
In this 3 places, John states addresses will be revoked: * https://lists.arin.net/pipermail/arin-ppml/2019-May/033250.html * https://lists.arin.net/pipermail/arin-ppml/2019-May/033234.html * https://lists.arin.net/pipermail/arin-ppml/2019-May/033232.html I was wondering if this

Re: [arin-ppml] Of interest?

2019-05-15 Thread Ronald F. Guilmette
In message , John Curran wrote: >It's far less likely that anyone would be able to reproduce this >specific fraud, particular given that ARIN is now aware and can detect far >earlier, Well, can we talk about that just a little bit? I will stipulate up front that I already know that you are

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Chris Woodfield
I’d presume that if the blocks are forfeited to the US government, they will then be monetized on the transfer market, like most other forfeited assets; I wouldn’t expect them to be locked away*. Might take a while for the blocks to fall out of the routing table and actually become usable,

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Douglas Haber via ARIN-PPML
I have reviewed the indictment and it has a forfeiture order in it. It lists the blocks and states that they shall be forfeited to the United States. Now, my question is, does that affect ARIN reclaiming the blocks if they are surrendered to the government? Douglas Haber Managing Member Garden

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Michel Py
> Martin Hannigan wrote : > https://www.postandcourier.com/business/charleston-tech-firm-and-its-ceo-are-indicted-for-fraud/article_4ce68788-773c-11e9-845d-d358d719d2df.html This one is for you, rfg. Michel. ___ ARIN-PPML You are receiving this

Re: [arin-ppml] Of further interest...

2019-05-15 Thread Martin Hannigan
And PR https://www.postandcourier.com/business/charleston-tech-firm-and-its-ceo-are-indicted-for-fraud/article_4ce68788-773c-11e9-845d-d358d719d2df.html /lawnchair On Wed, May 15, 2019 at 14:44 Mike Burns wrote: > Other shoe dropped yesterday. > >

[arin-ppml] Of further interest...

2019-05-15 Thread Mike Burns
Other shoe dropped yesterday. https://ecf.scd.uscourts.gov/cgi-bin/qrySummary.pl?250341   20 counts of wire fraud.___ ARIN-PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML@arin.net).

Re: [arin-ppml] Of interest?

2019-05-15 Thread Michel Py
Hi John, >>> John Curran wrote : >>> ARIN will revoke in aggregate 532,480 IPv4 addresses. >> Can we have a breakdown by prefix length ? >> How many /24s, /23s /22s, and so ? >> Not asking for specifics, just a summary. > Total /15: 1 > Total /17: 5 > Total /18: 13 > Total /19: 3 > Total

Re: [arin-ppml] Of interest?

2019-05-15 Thread John Curran
On 14 May 2019, at 11:27 PM, Michel Py wrote: > > Hi John, > >> John Curran wrote : >> ARIN will revoke in aggregate 532,480 IPv4 addresses. > > Can we have a breakdown by prefix length ? > How many /24s, /23s /22s, and so ? > Not asking for specifics, just a summary. Total /15: 1

Re: [arin-ppml] Micfo

2019-05-15 Thread John Curran
On 15 May 2019, at 2:53 AM, Michael Williams wrote: > > Hi John, > > I’m confused... how is ARIN *not* a law enforcement body? I’ve always been > told to believe ARIN enforces the rules of the internet. Michael - ARIN doesn’t enforce “rules of the internet” – we enforce Internet

Re: [arin-ppml] Of interest?

2019-05-15 Thread John Curran
On 14 May 2019, at 10:30 PM, Ronald F. Guilmette mailto:r...@tristatelogic.com>> wrote: ... I can say without hesitation that *I* would like to be in the receiving end of these kinds of consequences also. Ronald - - It’s far less likely that anyone would be able to reproduce this specific