Re: netflow in the core used for surveillance

2021-08-30 Thread Avi Freedman
Hi, all. Re: last week's thread on the Vice article - I can only speak for Kentik, and *we* don't resell or give 3rd party access to NetFlow data from our hundreds of customers. And never have. But there is definitely interest out there. We do get approached about it periodically and always

Re: netflow in the core used for surveillance

2021-08-25 Thread Mark Tinka
On 8/25/21 23:13, Randy Bush wrote: https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru used to get dissidents, activists, and journos killed at, comcast, ... zayo, please tell us you do not do this. I guess Cambridge Analytica ain't just for the FaceMash...

Re: netflow in the core used for surveillance

2021-08-25 Thread Hank Nussbacher
On 26/08/2021 00:13, Randy Bush wrote: https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru used to get dissidents, activists, and journos killed at, comcast, ... zayo, please tell us you do not do this. randy I'm confused. Quoting from the article: "In a recent

Re: netflow in the core used for surveillance

2021-08-25 Thread J. Hellenthal via NANOG
Im finding this really hard to believe for the "Team Cymru" part at least. Being originally a provider of security centric configuration of network components... IOS ... Juniper etc... and maintaining such a high standard for years that they turn foot and resell/sell data on customer traffic

Re: netflow in the core used for surveillance

2021-08-25 Thread scott
On Wed, Aug 25, 2021 at 6:15 PM Randy Bush > wrote: https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru used to get dissidents, activists, and journos killed at, comcast, ... zayo, please tell us you do not do this.

Re: netflow in the core used for surveillance

2021-08-25 Thread Tom Beecher
The NY Times did a story within the last couple years showing how easy it was to identify an individual solely from purchasing anonymized data commonly sold by advertisers and the like. Now take that and be able to pin a person to an IP, and aggregate flow data to find out everything someone

Re: netflow in the core used for surveillance

2021-08-25 Thread jim deleskie
Randy, We all know many folks send their *flow to someone or somewhere. In exchange for pretty graphs for intelligence. I suspect in many cases this data is then reused in many cases for many purposes. But let's not overplay the risk here. There would be much easier ways for rogue nations,

Re: netflow in the core used for surveillance

2021-08-25 Thread Stephen Fulton
Randy, It is quite possible that some are simply the victim of their own ignorance. I know of an ISP where one of their last-mile hardware vendors was pushing hard to get junior technical staff and senior non-technical staff to agree to share netflow data. When senior technical staff found

Re: netflow in the core used for surveillance

2021-08-25 Thread Christopher Morrow
On Wed, Aug 25, 2021 at 5:39 PM Aaron Wendel wrote: > You don't know that I don't know that. > > some probably do? you don't know which though? I think, though, that part of the problem the article does not point out is: 1) I run a network 2) I need (for reasons) netflow data and analysis

Re: netflow in the core used for surveillance

2021-08-25 Thread Matt Harris
On Wed, Aug 25, 2021 at 4:33 PM Paul Ebersman wrote: > randy> > https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru > > randy> at, comcast, ... zayo, please tell us you do not do this. > > > aaron> You know they do. > > No, you don't know that. > > The above all certainly

Re: netflow in the core used for surveillance

2021-08-25 Thread Aaron Wendel
You don't know that I don't know that. On 8/25/2021 4:32 PM, Paul Ebersman wrote: randy> https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru randy> at, comcast, ... zayo, please tell us you do not do this. aaron> You know they do. No, you don't know that. The

Re: netflow in the core used for surveillance

2021-08-25 Thread Paul Ebersman
randy> https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru randy> at, comcast, ... zayo, please tell us you do not do this. aaron> You know they do. No, you don't know that. The above all certainly collect this info. Not all sell it to anyone who asks.

Re: netflow in the core used for surveillance

2021-08-25 Thread Aaron Wendel
You know they do. On 8/25/2021 4:13 PM, Randy Bush wrote: https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru used to get dissidents, activists, and journos killed at, comcast, ... zayo, please tell us you do not do this. randy

Re: netflow in the core used for surveillance

2021-08-25 Thread Brandon Svec via NANOG
I would go on the assumption they do (or allow others to), always have and always will. And if not this way, they will find other ways such as one infamous example- https://en.wikipedia.org/wiki/Room_641A *-Brandon* On Wed, Aug 25, 2021 at 2:16 PM Randy Bush wrote: >

netflow in the core used for surveillance

2021-08-25 Thread Randy Bush
https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru used to get dissidents, activists, and journos killed at, comcast, ... zayo, please tell us you do not do this. randy