Re: [WISPA] Calea Compliance
Re: [WISPA] Calea ComplianceRight. There are documents that WISPA has created to help with this. http://www.wispa.org/?page_id=2022 We also have an implementation guide but the board has not determined how that's to be distributed. We can certainly get a copy to you if you are a member. Please note, that we're in the middle of a minor re-write that will focus on IPv6 issues and a couple of clarifications that needed work in the original version. marlon - Original Message - From: Jeff Broadwick - Lists To: ro...@g5i.net ; 'WISPA General List' Sent: Monday, March 07, 2011 5:59 AM Subject: Re: [WISPA] Calea Compliance You would be better off putting a passive tap inline and the router as a probe. If you do that, it will be completely invisible to the end customer. Regards, Jeff ImageStream Sales Manager 800-813-5123 x106 -- From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Roger Howard Sent: Saturday, March 05, 2011 10:50 PM To: WISPA General List Subject: Re: [WISPA] Calea Compliance Ok, but the FBI wouldn't know I stuck the hardware there at the last minute. And the tower glitches off whenever I do a firmware upgrade anyway. The customer wouldn't know the difference. On Sat, Mar 5, 2011 at 9:45 PM, Josh Luthman j...@imaginenetworksllc.com wrote: Depends who you ask. Some might say the customer could notice a change in network and hence non compliant. On Mar 5, 2011 10:43 PM, Roger Howard g5inter...@gmail.com wrote: Would I cover myself for calea by having a mikrotik router on the shelf, set up as a bridge, with the calea module installed. Then if I get subpoenaed for a tap, I just run out to the appropriate tower and put it on the ethernet interface of whichever AP the subscriber is on? Thanks, Roger WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- No virus found in this message. Checked by AVG - www.avg.com Version: 10.0.1204 / Virus Database: 1435/3487 - Release Date: 03/07/11 -- WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Calea Compliance
You would be better off putting a passive tap inline and the router as a probe. If you do that, it will be completely invisible to the end customer. Regards, Jeff ImageStream Sales Manager 800-813-5123 x106 _ From: wireless-boun...@wispa.org [mailto:wireless-boun...@wispa.org] On Behalf Of Roger Howard Sent: Saturday, March 05, 2011 10:50 PM To: WISPA General List Subject: Re: [WISPA] Calea Compliance Ok, but the FBI wouldn't know I stuck the hardware there at the last minute. And the tower glitches off whenever I do a firmware upgrade anyway. The customer wouldn't know the difference. On Sat, Mar 5, 2011 at 9:45 PM, Josh Luthman j...@imaginenetworksllc.com wrote: Depends who you ask. Some might say the customer could notice a change in network and hence non compliant. On Mar 5, 2011 10:43 PM, Roger Howard g5inter...@gmail.com wrote: Would I cover myself for calea by having a mikrotik router on the shelf, set up as a bridge, with the calea module installed. Then if I get subpoenaed for a tap, I just run out to the appropriate tower and put it on the ethernet interface of whichever AP the subscriber is on? Thanks, Roger WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ _ No virus found in this message. Checked by AVG - www.avg.com Version: 10.0.1204 / Virus Database: 1435/3487 - Release Date: 03/07/11 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Calea Compliance
The FBI told me (and I am paraphrasing) that if you work with them that they will work with you. Basically as long as you are not acting like you do not think they have a right to do the tap and are not being a pain in the behind then you will get all the support you need from them in a lawful intercept situation. I would say that having this box on the shelf shows your intentions of being compliant to the act. CALEA is all about 2 things. It is about making sure that tools exist to find and stop crime on the Internet and about making sure that we help be a check against government becoming too intrusive. CALEA has many regs which say when we are doing too much to help tap connections. The WISPA CALEA standard was created to act as a guideline for WISPs. It tells precisely what our obligations are in helping assure we can perform lawful intercepts in our network and in preventing overstepping the bounds of what is lawful. Scriv On Sat, Mar 5, 2011 at 9:49 PM, Roger Howard g5inter...@gmail.com wrote: Ok, but the FBI wouldn't know I stuck the hardware there at the last minute. And the tower glitches off whenever I do a firmware upgrade anyway. The customer wouldn't know the difference. On Sat, Mar 5, 2011 at 9:45 PM, Josh Luthman j...@imaginenetworksllc.com wrote: Depends who you ask. Some might say the customer could notice a change in network and hence non compliant. On Mar 5, 2011 10:43 PM, Roger Howard g5inter...@gmail.com wrote: Would I cover myself for calea by having a mikrotik router on the shelf, set up as a bridge, with the calea module installed. Then if I get subpoenaed for a tap, I just run out to the appropriate tower and put it on the ethernet interface of whichever AP the subscriber is on? Thanks, Roger WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Calea Compliance
On 03/06/2011 09:18 AM, John Scrivner wrote: The FBI told me (and I am paraphrasing) that if you work with them that they will work with you. Basically as long as you are not acting like you do not think they have a right to do the tap and are not being a pain in the behind then you will get all the support you need from them in a lawful intercept situation. I would say that having this box on the shelf shows your intentions of being compliant to the act. CALEA is all about 2 things. It is about making sure that tools exist to find and stop crime on the Internet and about making sure that we help be a check against government becoming too intrusive. Correct. Protect the rights of our customers, protect the rights of the service provider AND allow for what LEA needs to get a conviction for the guilty party. All of these are built into CALEA. CALEA has many regs which say when we are doing too much to help tap connections. The WISPA CALEA standard was created to act as a guideline for WISPs. It tells precisely what our obligations are in helping assure we can perform lawful intercepts in our network and in preventing overstepping the bounds of what is lawful. In addition, the WCS for IPNA provides technical requirements as well. It defines the technical standard that our software/hardware MUST meet. For the original poster: Be sure you are familiar enough with the way the MT handles the CALEA software so that you can properly capture this data for the LEA. Mikrotik's CALEA implementation is 2 parts. It requires a server AND a tap. One box CAN be both pieces. -- * Butch Evans * Professional Network Consultation* * http://www.butchevans.com/* Network Engineering * * http://store.wispgear.net/* Wired or Wireless Networks * * http://blog.butchevans.com/ * ImageStream, Mikrotik and MORE! * *NOTE THE NEW PHONE NUMBER: 702-537-0979 * WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Calea Compliance
The easy answer is if you get a warrant you should ask the agency for help before doing anything. They are more than willing to help in my experience. My advice is: 1.Get your attorney involved to the point they know what you are doing 2.Call the agency who the warrant is for and ask for technical assistance. They have done this many times and can make sure you don't mess things up. Justin -- Justin Wilson j...@mtin.net Aol Yahoo IM: j2sw http://www.mtin.net/blog xISP News http://www.twitter.com/j2sw Follow me on Twitter Wisp Consulting Tower Climbing Network Support On 3/6/11 11:02 AM, Butch Evans but...@butchevans.com wrote: On 03/06/2011 09:18 AM, John Scrivner wrote: The FBI told me (and I am paraphrasing) that if you work with them that they will work with you. Basically as long as you are not acting like you do not think they have a right to do the tap and are not being a pain in the behind then you will get all the support you need from them in a lawful intercept situation. I would say that having this box on the shelf shows your intentions of being compliant to the act. CALEA is all about 2 things. It is about making sure that tools exist to find and stop crime on the Internet and about making sure that we help be a check against government becoming too intrusive. Correct. Protect the rights of our customers, protect the rights of the service provider AND allow for what LEA needs to get a conviction for the guilty party. All of these are built into CALEA. CALEA has many regs which say when we are doing too much to help tap connections. The WISPA CALEA standard was created to act as a guideline for WISPs. It tells precisely what our obligations are in helping assure we can perform lawful intercepts in our network and in preventing overstepping the bounds of what is lawful. In addition, the WCS for IPNA provides technical requirements as well. It defines the technical standard that our software/hardware MUST meet. For the original poster: Be sure you are familiar enough with the way the MT handles the CALEA software so that you can properly capture this data for the LEA. Mikrotik's CALEA implementation is 2 parts. It requires a server AND a tap. One box CAN be both pieces. -- * Butch Evans * Professional Network Consultation* * http://www.butchevans.com/* Network Engineering * * http://store.wispgear.net/* Wired or Wireless Networks * * http://blog.butchevans.com/ * ImageStream, Mikrotik and MORE! * *NOTE THE NEW PHONE NUMBER: 702-537-0979 * -- -- WISPA Wants You! Join today! http://signup.wispa.org/ -- -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Calea Compliance
Depends who you ask. Some might say the customer could notice a change in network and hence non compliant. On Mar 5, 2011 10:43 PM, Roger Howard g5inter...@gmail.com wrote: Would I cover myself for calea by having a mikrotik router on the shelf, set up as a bridge, with the calea module installed. Then if I get subpoenaed for a tap, I just run out to the appropriate tower and put it on the ethernet interface of whichever AP the subscriber is on? Thanks, Roger WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Calea Compliance
Ok, but the FBI wouldn't know I stuck the hardware there at the last minute. And the tower glitches off whenever I do a firmware upgrade anyway. The customer wouldn't know the difference. On Sat, Mar 5, 2011 at 9:45 PM, Josh Luthman j...@imaginenetworksllc.com wrote: Depends who you ask. Some might say the customer could notice a change in network and hence non compliant. On Mar 5, 2011 10:43 PM, Roger Howard g5inter...@gmail.com wrote: Would I cover myself for calea by having a mikrotik router on the shelf, set up as a bridge, with the calea module installed. Then if I get subpoenaed for a tap, I just run out to the appropriate tower and put it on the ethernet interface of whichever AP the subscriber is on? Thanks, Roger WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Calea compliance contractors
Hi Chris, Butch would be a good place to start. I've also cc'd the rest of the WISPA calea team. Maybe there are people on there that do things I don't know about. laters, Marlon (509) 982-2181 (408) 907-6910 (Vonage)Consulting services 42846865 (icq)WISP Operator since 1999! [EMAIL PROTECTED] www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Christopher Orr [EMAIL PROTECTED] To: wireless@wispa.org Sent: Tuesday, November 25, 2008 9:42 AM Subject: [WISPA] Calea compliance contractors Hi all- I'm just curious if anyone has a contact for someone that is a CALEA compliance contractor. Essentially we are looking for a third party that can verify compliance. Hit me offlist, please. Regards, -chris WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA
The info in this post about being paid for this service is important to us smaller WISPs. This means that we CAN invest some small amount in equipment, just as we would deploy an AP to gain customers. Then, over time, we charge for the intercepts we receive and eventually can recover the expense. We can look at this as a marketable service to law enforcement. Thinking on the extreme hillarious side of it, we can even make our LEAs aware that we HAVE this capability. Message to all LEAs: We are here and ready, so think of using this method of law enforcement more often than not. Send us your subpoenas...we are not afraid...along with your billing address, of course. ;) PEOPLE THIS IS MEANT TO BE FUNNY, OK??? Mark Nash UnwiredOnline.Net 350 Holly Street Junction City, OR 97448 http://www.uwol.net 541-998- 541-998-5599 fax - Original Message - From: Butch Evans [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Friday, November 30, 2007 8:32 AM Subject: RE: [WISPA] CALEA On Fri, 30 Nov 2007, Jeff Broadwick wrote: 1. The ISP will know a actual intercept subpoena is coming before they receive it. Actually, in a couple of cases, this was true. In the others, the subpoena came without any notice. 3. The LEA would like the ISP to have all the CALEA I's dotted and T's crossed, but are willing to work with a cooperative provider. This is the main point of the post I made. They are willing to work with us, because we have something they need. Can you verify that they ISPs got their direct expenses back from the LEAs? That would be valuable information to have! I do know in one case, the ISP did get paid. He only billed the LEA for my fees, plus some other small expense, though I don't recall what it was for. If I recall correctly, the total bill was about $800. I was told by a law enforcement agent that Verizon charges something like $1250 + some amount per day for each tap. I don't recall the actual fees, but it was close to that amount. I DO believe that the LEAs will become more technically aware over time. I also believe that they will be less forgiving of providers who do not have a CALEA plan over time. This is still new to both law enforcement and WISPs. I agree that over time, those that are not capable of providing the information will begin to see themselves in trouble. -- Butch Evans Network Engineering and Security Consulting 573-276-2879 http://www.butchevans.com/ My calendar: http://tinyurl.com/y24ad6 Training Partners: http://tinyurl.com/smfkf Mikrotik Certified Consultant http://www.mikrotik.com/consultants.html -- -- WISPA Wants You! Join today! http://signup.wispa.org/ -- -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA
On Fri, 30 Nov 2007, Frank Muto wrote: I have a question though you may or may be able to answer it. In point 1, you said you gave the LEA information on how to word their subpoena? Was this knowledge based on an attorneys consult? I'll assume it may have been unless you are an attorney yourself. Perhaps I worded that incorrectly. What they asked for in the first subpoena was not technically possible to provide because they asked about a NAT address and they cannot allow us to provide them a list of 200 names. I simply explained to him how we could go about limiting the information and he got the appropriate subpoenas worded in a way that allowed us to gather the information he needed. From a procedural standpoint, it would have been much easier if he had let us help him understand that in the first place before he got the first subpoena, which was useless. Secondly, why would an attorney or anyone provide legal consult to the LEA? The DOJ has all the required information any LEA needs to obtain the information they need in an investigation. Most of it is basically fill in the blank and the forms have multiple QA to write up the subpoena. My consultation with them was not legal in natureit was technical. Either way, I specifically recommended that my customers seek legal council regarding the information they are providing the LEA. I don't know if they did that, but I did recommend that. Having gone through enough of this over the past couple years, I have doubts that helping an LEA is in your best interest. How do you warrant or have legal standing on telling an LEA that their subpoena does not have the correct information for the request? They asked for something that was not technically possible to provide. It is that simple. We could have given them the names of 200+ people, but that would not help them, and could have hurt their case. Whether it is CALEA or some other statute that the subpoena is based on, we, as citizens, have a duty to provide the information they are requesting under the law. I don't want to rehash this whole idea of whether it is in our best interest or not. The law is the law. It is up to the LEA to get the proper legal consult they need when writing up a subpoena and or warrant to present to the court. Not just legal consult, but technical. I don't mind if they get the technical part from me...it's what I do for a living. ;-) -- Butch Evans Network Engineering and Security Consulting 573-276-2879 http://www.butchevans.com/ My calendar: http://tinyurl.com/y24ad6 Training Partners: http://tinyurl.com/smfkf Mikrotik Certified Consultant http://www.mikrotik.com/consultants.html WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] CALEA
On Fri, 30 Nov 2007, Jeff Broadwick wrote: 1. The ISP will know a actual intercept subpoena is coming before they receive it. Actually, in a couple of cases, this was true. In the others, the subpoena came without any notice. 3. The LEA would like the ISP to have all the CALEA I's dotted and T's crossed, but are willing to work with a cooperative provider. This is the main point of the post I made. They are willing to work with us, because we have something they need. Can you verify that they ISPs got their direct expenses back from the LEAs? That would be valuable information to have! I do know in one case, the ISP did get paid. He only billed the LEA for my fees, plus some other small expense, though I don't recall what it was for. If I recall correctly, the total bill was about $800. I was told by a law enforcement agent that Verizon charges something like $1250 + some amount per day for each tap. I don't recall the actual fees, but it was close to that amount. I DO believe that the LEAs will become more technically aware over time. I also believe that they will be less forgiving of providers who do not have a CALEA plan over time. This is still new to both law enforcement and WISPs. I agree that over time, those that are not capable of providing the information will begin to see themselves in trouble. -- Butch Evans Network Engineering and Security Consulting 573-276-2879 http://www.butchevans.com/ My calendar: http://tinyurl.com/y24ad6 Training Partners: http://tinyurl.com/smfkf Mikrotik Certified Consultant http://www.mikrotik.com/consultants.html WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] CALEA
Comments Below... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Muto Sent: Friday, November 30, 2007 8:37 AM To: WISPA General List Subject: Re: [WISPA] CALEA I have a question though you may or may be able to answer it. In point 1, you said you gave the LEA information on how to word their subpoena? Was this knowledge based on an attorneys consult? I'll assume it may have been unless you are an attorney yourself. Secondly, why would an attorney or anyone provide legal consult to the LEA? The DOJ has all the required information any LEA needs to obtain the information they need in an investigation. Most of it is basically fill in the blank and the forms have multiple QA to write up the subpoena. Having gone through enough of this over the past couple years, I have doubts that helping an LEA is in your best interest. How do you warrant or have legal standing on telling an LEA that their subpoena does not have the correct information for the request? It is up to the LEA to get the proper legal consult they need when writing up a subpoena and or warrant to present to the court. - Comments -- If I am not mistaken, when you are being asked to provide information in a legal matter in which you are not a named-party in the legal action, you are being placed in the position of a witness. If a witness divulges information which proves to be harmful to one of the parties in the action AND if the information which is divulged is NOT protected as being required under subpoena, then the witness could potential open themselves up for a civil lawsuit with claims of libel, slander, defamation, wrongful interference, etc. So, it is NOT uncommon or unwise for a witness to seek legal counsel before disclosing information under a subpoena. I don't know if a witness' lawyer could coach the requesting party in the wording of the subpoena. On the other hand, I'm quite certain that IF a witness felt that the information that they held was pertinent and the witness wanted clarification on whether they could divulge the information under the subpoena, they could request a hearing before the judge in the pending matter. The judge could do an in-camera review to determine what stays and what goes. Then it's up to the judge to tell the requesting party if and to what extent their subpoena needs to be modified. Larry Yunker Network Consultant Law Student [EMAIL PROTECTED] Disclaimer: The information contained in this message is not to be considered legal advice. I am not a lawyer (yet) and therefore I am not in a position to provide legal advice. WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] CALEA
On Fri, 30 Nov 2007, Larry Yunker wrote: If I am not mistaken, when you are being asked to provide information in a legal matter in which you are not a named-party in the legal action, you are being placed in the position of a witness. Exactly. This is where the duty that I mentioned in my response to Frank comes from. If we have information regarding illegal behaviour, we should provide that information to law enforcement. I'm gonna stop now with this line of thinking...it leads down a long dark road. :-) So, it is NOT uncommon or unwise for a witness to seek legal counsel before disclosing information under a subpoena. I don't know if a witness' lawyer As I said to Frank, my first recommendation to those WISPs who called for assistance was to talk to their attorney to let them handle the legal part of it. I am just being hired to handle the technical parts and am not qualified to provide legal advice. -- Butch Evans Network Engineering and Security Consulting 573-276-2879 http://www.butchevans.com/ My calendar: http://tinyurl.com/y24ad6 Training Partners: http://tinyurl.com/smfkf Mikrotik Certified Consultant http://www.mikrotik.com/consultants.html WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] CALEA
According to the FBI, they have no interest in receiving real-time streamed data, despite the requirement in the standard. They want capture and send/retrieve. Our understanding is that the FBI will challenge that part of the standard once the WISPA Standard is ratified. That will give them the alternative they have been looking for. We are very close to sending the WISPA Standard to the FBI. They have been part of the process all along, so ratification should not be a major task. Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeromie Reeves Sent: Friday, November 30, 2007 8:33 AM To: WISPA General List Subject: Re: [WISPA] CALEA It looks like the FCC making us be CALEA compliant was a total waste of time effort (on both parties sides) and only made a atmosphere of fear. It also sounds like while they filed for information that has classically been available pre-calea, has anyone had to comply with the real time streaming section or the remote data logging and can share the experience? On 11/30/07, Butch Evans [EMAIL PROTECTED] wrote: I just wanted to make a brief post relating a few experiences relating to the CALEA scare that was recently the talk of the town (so to speak). I should preface this post with a bit of information that will give some insight into how common (or not) law enforcement will or will not use CALEA to get information from you/us. I have about 225 customers in my database. I work on a regular basis for about 15-20 of those each week. Since April, I have worked 4 cases with my customers (actually, it was 6, but 3 were related) that were filed as CALEA actions. Of these cases, 3 of my customers were using Mikrotik and 1 was using ImageStream. I can't reveal anything related to the cases, but I wanted to help people understand what kind of information we are being asked for under CALEA, and what that translates to in terms of capability requirements. 1. The first subpeona wanted to know who had a specific IP at a certain time and date. That was all that was requested. This particular WISP has about 450 customers, and about 225 of those are using private IPs that are natted at the border. It so happened that the IP we were requested information about was the NAT IP. I called the officer who had requested the data and explained the situation to him. After an hour or so, he understood that there is nothing we could do without more information. The case was an ongoing thing, and he was tracking contact to a specific website, so we were able to determine a specific customer who was using that website. We did not tell the officer who it was, but we DID explain how he needed to word his subpoena so that we COULD get him what he wanted. After he got the legal jargon to match the technical requirements of our capabilities, we were able to capture and provide him with the communications he was needing. 2. The next 3 were related to one another (sort of). In this case, the subpeona asked for customer billing records and login information for the past year for 3 IP addresses. We had part of this information (this WISP used public IP addresses for all his customers). Since the subpeona requested historical information, we were somewhat limited in what we could provide, but we did get the required information and LEA was happy. 3. The other 2 were not related but were similar. They asked for telephone information that the targets made between a couple of dates in the past. Since the WISPs in both cases were not the provider of the VoIP (they were just the transport) service, we explained to the LEA that the information they are seeking would not be available at the WISP, eventually they went elsewhere for their information (I guess), but the WISPs, in the end, did not provide ANY customer data to the LEA. The point I am making here is that all of the information requested in all 3 cases, was easily obtainable using equipment available within the WISP networks already. We used information that the Mikrotik and/or Imagestream enabled us to gather, log files and RADIUS logs to gather login information and capturing of data along with their business records to answer all 6 subpeonas (7 if you count the one that had to be re-done). In all cases, the law enforcement officer who was our first contact was not technically capable of understanding what they wanted/needed, but without fail, there WERE people at the agencies involved who were. Of these subpeonas, 3 were from the FBI, 2 were local LE and 1 was homeland security. Incidentally, none of these WISPs spent any extra money to be compliant (other than some legal work that had to be done). Billing for my time cost less than $350 (much less in some cases) to help gather necessary information. All of these (I think) ended up billing these costs
Re: [WISPA] CALEA
I have a question though you may or may be able to answer it. In point 1, you said you gave the LEA information on how to word their subpoena? Was this knowledge based on an attorneys consult? I'll assume it may have been unless you are an attorney yourself. Secondly, why would an attorney or anyone provide legal consult to the LEA? The DOJ has all the required information any LEA needs to obtain the information they need in an investigation. Most of it is basically fill in the blank and the forms have multiple QA to write up the subpoena. Having gone through enough of this over the past couple years, I have doubts that helping an LEA is in your best interest. How do you warrant or have legal standing on telling an LEA that their subpoena does not have the correct information for the request? It is up to the LEA to get the proper legal consult they need when writing up a subpoena and or warrant to present to the court. Frank Muto President FSM Marketing Group, Inc - Original Message - From: Butch Evans [EMAIL PROTECTED] To: Wispa List wireless@wispa.org Sent: Friday, November 30, 2007 3:57 AM Subject: [WISPA] CALEA I just wanted to make a brief post relating a few experiences relating to the CALEA scare that was recently the talk of the town (so to speak). I should preface this post with a bit of information that will give some insight into how common (or not) law enforcement will or will not use CALEA to get information from you/us. I have about 225 customers in my database. I work on a regular basis for about 15-20 of those each week. Since April, I have worked 4 cases with my customers (actually, it was 6, but 3 were related) that were filed as CALEA actions. Of these cases, 3 of my customers were using Mikrotik and 1 was using ImageStream. I can't reveal anything related to the cases, but I wanted to help people understand what kind of information we are being asked for under CALEA, and what that translates to in terms of capability requirements. 1. The first subpeona wanted to know who had a specific IP at a certain time and date. That was all that was requested. This particular WISP has about 450 customers, and about 225 of those are using private IPs that are natted at the border. It so happened that the IP we were requested information about was the NAT IP. I called the officer who had requested the data and explained the situation to him. After an hour or so, he understood that there is nothing we could do without more information. The case was an ongoing thing, and he was tracking contact to a specific website, so we were able to determine a specific customer who was using that website. We did not tell the officer who it was, but we DID explain how he needed to word his subpoena so that we COULD get him what he wanted. After he got the legal jargon to match the technical requirements of our capabilities, we were able to capture and provide him with the communications he was needing. 2. The next 3 were related to one another (sort of). In this case, the subpeona asked for customer billing records and login information for the past year for 3 IP addresses. We had part of this information (this WISP used public IP addresses for all his customers). Since the subpeona requested historical information, we were somewhat limited in what we could provide, but we did get the required information and LEA was happy. 3. The other 2 were not related but were similar. They asked for telephone information that the targets made between a couple of dates in the past. Since the WISPs in both cases were not the provider of the VoIP (they were just the transport) service, we explained to the LEA that the information they are seeking would not be available at the WISP, eventually they went elsewhere for their information (I guess), but the WISPs, in the end, did not provide ANY customer data to the LEA. The point I am making here is that all of the information requested in all 3 cases, was easily obtainable using equipment available within the WISP networks already. We used information that the Mikrotik and/or Imagestream enabled us to gather, log files and RADIUS logs to gather login information and capturing of data along with their business records to answer all 6 subpeonas (7 if you count the one that had to be re-done). In all cases, the law enforcement officer who was our first contact was not technically capable of understanding what they wanted/needed, but without fail, there WERE people at the agencies involved who were. Of these subpeonas, 3 were from the FBI, 2 were local LE and 1 was homeland security. Incidentally, none of these WISPs spent any extra money to be compliant (other than some legal work that had to be done). Billing for my time cost less than $350 (much less in some cases) to help gather necessary information. All of these (I think) ended up billing these costs to the LEA and as far as I know,
RE: [WISPA] CALEA
Thanks for posting this Butch! It illustrates a number of things that I've believed from early on: 1. The ISP will know a actual intercept subpoena is coming before they receive it. 2. The LEA staff requesting the subpoena are generally less technically savvy than most service providers. 3. The LEA would like the ISP to have all the CALEA I's dotted and T's crossed, but are willing to work with a cooperative provider. Can you verify that they ISPs got their direct expenses back from the LEAs? That would be valuable information to have! I DO believe that the LEAs will become more technically aware over time. I also believe that they will be less forgiving of providers who do not have a CALEA plan over time. Regards, Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Butch Evans Sent: Friday, November 30, 2007 3:57 AM To: Wispa List Subject: [WISPA] CALEA I just wanted to make a brief post relating a few experiences relating to the CALEA scare that was recently the talk of the town (so to speak). I should preface this post with a bit of information that will give some insight into how common (or not) law enforcement will or will not use CALEA to get information from you/us. I have about 225 customers in my database. I work on a regular basis for about 15-20 of those each week. Since April, I have worked 4 cases with my customers (actually, it was 6, but 3 were related) that were filed as CALEA actions. Of these cases, 3 of my customers were using Mikrotik and 1 was using ImageStream. I can't reveal anything related to the cases, but I wanted to help people understand what kind of information we are being asked for under CALEA, and what that translates to in terms of capability requirements. 1. The first subpeona wanted to know who had a specific IP at a certain time and date. That was all that was requested. This particular WISP has about 450 customers, and about 225 of those are using private IPs that are natted at the border. It so happened that the IP we were requested information about was the NAT IP. I called the officer who had requested the data and explained the situation to him. After an hour or so, he understood that there is nothing we could do without more information. The case was an ongoing thing, and he was tracking contact to a specific website, so we were able to determine a specific customer who was using that website. We did not tell the officer who it was, but we DID explain how he needed to word his subpoena so that we COULD get him what he wanted. After he got the legal jargon to match the technical requirements of our capabilities, we were able to capture and provide him with the communications he was needing. 2. The next 3 were related to one another (sort of). In this case, the subpeona asked for customer billing records and login information for the past year for 3 IP addresses. We had part of this information (this WISP used public IP addresses for all his customers). Since the subpeona requested historical information, we were somewhat limited in what we could provide, but we did get the required information and LEA was happy. 3. The other 2 were not related but were similar. They asked for telephone information that the targets made between a couple of dates in the past. Since the WISPs in both cases were not the provider of the VoIP (they were just the transport) service, we explained to the LEA that the information they are seeking would not be available at the WISP, eventually they went elsewhere for their information (I guess), but the WISPs, in the end, did not provide ANY customer data to the LEA. The point I am making here is that all of the information requested in all 3 cases, was easily obtainable using equipment available within the WISP networks already. We used information that the Mikrotik and/or Imagestream enabled us to gather, log files and RADIUS logs to gather login information and capturing of data along with their business records to answer all 6 subpeonas (7 if you count the one that had to be re-done). In all cases, the law enforcement officer who was our first contact was not technically capable of understanding what they wanted/needed, but without fail, there WERE people at the agencies involved who were. Of these subpeonas, 3 were from the FBI, 2 were local LE and 1 was homeland security. Incidentally, none of these WISPs spent any extra money to be compliant (other than some legal work that had to be done). Billing for my time cost less than $350 (much less in some cases) to help gather necessary information. All of these (I think) ended up billing these costs to the LEA and as far as I know, they got their direct expenses back. I got another call today to assist with a subpoena and it got me thinking about the others. I just thought this information may be useful/educational to some on this list. -- Butch Evans Network Engineering and Security Consulting
Re: [WISPA] CALEA
It looks like the FCC making us be CALEA compliant was a total waste of time effort (on both parties sides) and only made a atmosphere of fear. It also sounds like while they filed for information that has classically been available pre-calea, has anyone had to comply with the real time streaming section or the remote data logging and can share the experience? On 11/30/07, Butch Evans [EMAIL PROTECTED] wrote: I just wanted to make a brief post relating a few experiences relating to the CALEA scare that was recently the talk of the town (so to speak). I should preface this post with a bit of information that will give some insight into how common (or not) law enforcement will or will not use CALEA to get information from you/us. I have about 225 customers in my database. I work on a regular basis for about 15-20 of those each week. Since April, I have worked 4 cases with my customers (actually, it was 6, but 3 were related) that were filed as CALEA actions. Of these cases, 3 of my customers were using Mikrotik and 1 was using ImageStream. I can't reveal anything related to the cases, but I wanted to help people understand what kind of information we are being asked for under CALEA, and what that translates to in terms of capability requirements. 1. The first subpeona wanted to know who had a specific IP at a certain time and date. That was all that was requested. This particular WISP has about 450 customers, and about 225 of those are using private IPs that are natted at the border. It so happened that the IP we were requested information about was the NAT IP. I called the officer who had requested the data and explained the situation to him. After an hour or so, he understood that there is nothing we could do without more information. The case was an ongoing thing, and he was tracking contact to a specific website, so we were able to determine a specific customer who was using that website. We did not tell the officer who it was, but we DID explain how he needed to word his subpoena so that we COULD get him what he wanted. After he got the legal jargon to match the technical requirements of our capabilities, we were able to capture and provide him with the communications he was needing. 2. The next 3 were related to one another (sort of). In this case, the subpeona asked for customer billing records and login information for the past year for 3 IP addresses. We had part of this information (this WISP used public IP addresses for all his customers). Since the subpeona requested historical information, we were somewhat limited in what we could provide, but we did get the required information and LEA was happy. 3. The other 2 were not related but were similar. They asked for telephone information that the targets made between a couple of dates in the past. Since the WISPs in both cases were not the provider of the VoIP (they were just the transport) service, we explained to the LEA that the information they are seeking would not be available at the WISP, eventually they went elsewhere for their information (I guess), but the WISPs, in the end, did not provide ANY customer data to the LEA. The point I am making here is that all of the information requested in all 3 cases, was easily obtainable using equipment available within the WISP networks already. We used information that the Mikrotik and/or Imagestream enabled us to gather, log files and RADIUS logs to gather login information and capturing of data along with their business records to answer all 6 subpeonas (7 if you count the one that had to be re-done). In all cases, the law enforcement officer who was our first contact was not technically capable of understanding what they wanted/needed, but without fail, there WERE people at the agencies involved who were. Of these subpeonas, 3 were from the FBI, 2 were local LE and 1 was homeland security. Incidentally, none of these WISPs spent any extra money to be compliant (other than some legal work that had to be done). Billing for my time cost less than $350 (much less in some cases) to help gather necessary information. All of these (I think) ended up billing these costs to the LEA and as far as I know, they got their direct expenses back. I got another call today to assist with a subpoena and it got me thinking about the others. I just thought this information may be useful/educational to some on this list. -- Butch Evans Network Engineering and Security Consulting 573-276-2879 http://www.butchevans.com/ My calendar: http://tinyurl.com/y24ad6 Training Partners: http://tinyurl.com/smfkf Mikrotik Certified Consultant http://www.mikrotik.com/consultants.html WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List:
RE: [WISPA] CALEA (recovering costs) ???
In theory, you should be able to bill the government for your time/costs incurred for THE INTERCEPT, not any recurring or upfront charges. In theory... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dylan Bouterse Sent: Monday, October 29, 2007 1:33 PM To: WISPA General List Subject: [WISPA] CALEA (recovering costs) ??? I guess from the lack of response nobody is compensating for their CALEA costs?...or maybe my email didn't make it to the list? Dylan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dylan Bouterse Sent: Friday, October 26, 2007 5:25 PM To: WISPA General List Subject: [WISPA] CALEA (recovering costs) It was mentioned back during the CALEA hype that some had considered or did add a CALEA fee on their Internet Service bills. I'm curious if this was done and if it was successful (without upsetting customers or creating too many billing inquiries). Feel free to reply off list if you don't want to advertise your response to the general list. Dylan WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA (recovering costs) ???
Hi Dylan, I am not compensating for this. I am not sure that customers would be appreciative or understand. Also, the costs that you are referring to could possibly happen only when you are given a subpoenaed unless you are paying a monthly fee for a product you bought from a vendor. Martha Dylan Bouterse wrote: I guess from the lack of response nobody is compensating for their CALEA costs?...or maybe my email didn't make it to the list? Dylan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dylan Bouterse Sent: Friday, October 26, 2007 5:25 PM To: WISPA General List Subject: [WISPA] CALEA (recovering costs) It was mentioned back during the CALEA hype that some had considered or did add a CALEA fee on their Internet Service bills. I'm curious if this was done and if it was successful (without upsetting customers or creating too many billing inquiries). Feel free to reply off list if you don't want to advertise your response to the general list. Dylan WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA (recovering costs) ???
I understood from a vendor who was looking to sell me a calea solution that they would bill us for the cost of each intercept, etc, but not expect us to pay them until we get re-reimbursed by the government. Light bulb went off. Jeff Broadwick wrote: In theory, you should be able to bill the government for your time/costs incurred for THE INTERCEPT, not any recurring or upfront charges. In theory... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dylan Bouterse Sent: Monday, October 29, 2007 1:33 PM To: WISPA General List Subject: [WISPA] CALEA (recovering costs) ??? I guess from the lack of response nobody is compensating for their CALEA costs?...or maybe my email didn't make it to the list? Dylan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dylan Bouterse Sent: Friday, October 26, 2007 5:25 PM To: WISPA General List Subject: [WISPA] CALEA (recovering costs) It was mentioned back during the CALEA hype that some had considered or did add a CALEA fee on their Internet Service bills. I'm curious if this was done and if it was successful (without upsetting customers or creating too many billing inquiries). Feel free to reply off list if you don't want to advertise your response to the general list. Dylan WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- George Rogato Welcome to WISPA www.wispa.org http://signup.wispa.org/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] CALEA (recovering costs) ???
One more question- I need 100Meg Ethernet (copper)as well- can you add a card for that or is there a combo that will do 10/100/1000 copper? MArfty -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martha Huizenga Sent: Monday, October 29, 2007 1:32 PM To: WISPA General List Subject: Re: [WISPA] CALEA (recovering costs) ??? Hi Dylan, I am not compensating for this. I am not sure that customers would be appreciative or understand. Also, the costs that you are referring to could possibly happen only when you are given a subpoenaed unless you are paying a monthly fee for a product you bought from a vendor. Martha Dylan Bouterse wrote: I guess from the lack of response nobody is compensating for their CALEA costs?...or maybe my email didn't make it to the list? Dylan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dylan Bouterse Sent: Friday, October 26, 2007 5:25 PM To: WISPA General List Subject: [WISPA] CALEA (recovering costs) It was mentioned back during the CALEA hype that some had considered or did add a CALEA fee on their Internet Service bills. I'm curious if this was done and if it was successful (without upsetting customers or creating too many billing inquiries). Feel free to reply off list if you don't want to advertise your response to the general list. Dylan -- -- WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ Questions
On Thu, 2007-05-10 at 09:37 -0400, Dawn DiPietro wrote: Marlon, I have been reading the WISPA CALEA FAQ and was a little concerned about question #10. If the LEA does not know who the suspect is using an open access point does this mean that everyone that has used that access point will have their data handed over to the LEA? It would seem that if the LEA is only allowed to receive the data requested in the subpoena this would be a violation. I asked a similar question in the Bear Hill webinar. I had asked about private IPs and how the request would be made to us, would it be an IP or name, unfortunately it can be either one. We would most likely need to provide the data from that IP if that is how the request was made. Now with a tap of a external IP of a private IP range, you would have to provide the data from the inside of the network, so that they could analyze it and determine what internal IP is the suspect. I have only been working in this industry for a little under a year and I have been amazed at the use of private IPs for customers. We have them setup here, in my opinion it cause more trouble than its worth I hope to move away from private IPs over the next year. They will still exist in our network for networking devices, but ideally no more customers would get them. As far as I can tell question #15 does not get answered in the paragraph following the question. It talks more about acceptable billing and the fact that WISPA might have a solution in the future. One of the questions in section 23 asks Does the FBI speak for other LEA's?. Unless I am mistaken this question does not get answered. Also the document says over and over again that the LEA's will work with WISP's, which sounds like there is no easy way this can always be done transparently with the current broadband equipment deployed by WISP's. So the workaround is the WISP should give them the all the data from the device in question and the LEA's will sort it out and separate it. If I am out of line please let me know but if I have questions about the FAQ then I am guessing there are others that do too. Regards, Dawn DiPietro -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ Questions
I have been reading the WISPA CALEA FAQ and was a little concerned about question #10. If the LEA does not know who the suspect is using an open access point does this mean that everyone that has used that access point will have their data handed over to the LEA? It would seem that if the LEA is only allowed to receive the data requested in the subpoena this would be a violation. In the past WISP's have asked if there was anyway to keep users from NATing and connecting more then 1 PC. There is no way to block this and no easy way to prevent or detect it. From the ISP perspective there is no way isolate single hotspot user since they all come in on the same IP. If the ISP has control and management of the hotspot they may be able to isolate the traffic of a given mac but this would not be reliable if they connect with a different laptop the next day. Of course it depends what kind of hotspot and how its setup. I would say your going to have to give the LEA all the traffic for the hotspot and let them filter/figure out what they need. Moral of the story: open non-encrypted wireless routers are NOT secure to use. Unless your a bad guy and just drive around tell you find one then do your ill deeds there. Just my opinion. Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ Questions
This is not the sense that I get from the meeting we had with the FBI. They will know who the target is and be issuing an order for that person. However, if they happen to live with several people all on one wireless network, then the traffic is going to be mixed most likely. The best you can do is give them the traffic at that IP. According to the FBI, it's just like when they tap phones. The are to listen to only the target conversations and not the other people in the home. Lonnie Nunweiler wrote: Do they issue search warrants for a whole apartment building because they suspect someone living there is doing something bad? It was my understanding that a bit more info is required and it has to actually have a person or persons in mind. Why would data taps be treated any differently? Lonnie On 5/10/07, Matt [EMAIL PROTECTED] wrote: I have been reading the WISPA CALEA FAQ and was a little concerned about question #10. If the LEA does not know who the suspect is using an open access point does this mean that everyone that has used that access point will have their data handed over to the LEA? It would seem that if the LEA is only allowed to receive the data requested in the subpoena this would be a violation. In the past WISP's have asked if there was anyway to keep users from NATing and connecting more then 1 PC. There is no way to block this and no easy way to prevent or detect it. From the ISP perspective there is no way isolate single hotspot user since they all come in on the same IP. If the ISP has control and management of the hotspot they may be able to isolate the traffic of a given mac but this would not be reliable if they connect with a different laptop the next day. Of course it depends what kind of hotspot and how its setup. I would say your going to have to give the LEA all the traffic for the hotspot and let them filter/figure out what they need. Moral of the story: open non-encrypted wireless routers are NOT secure to use. Unless your a bad guy and just drive around tell you find one then do your ill deeds there. Just my opinion. Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ Questions
Hi Dawn, Please let me preface this by saying that there are not always easy answers. And we can't always come up with a pre-made solution for every situation that may arise. We've talked with the FBI about all of these issues. We all know what the law says, and we all know what's actually possible. They aren't always lined up in nice little rows with all of the i's dotted and t's crossed. More below. Marlon (509) 982-2181 (408) 907-6910 (Vonage)Consulting services 42846865 (icq)WISP Operator since 1999! [EMAIL PROTECTED] www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Dawn DiPietro [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 10, 2007 6:37 AM Subject: [WISPA] CALEA FAQ Questions Marlon, I have been reading the WISPA CALEA FAQ and was a little concerned about question #10. If the LEA does not know who the suspect is using an open access point does this mean that everyone that has used that access point will have their data handed over to the LEA? It would seem that if the LEA is only allowed to receive the data requested in the subpoena this would be a violation. We've talked about this a lot. *I've* personally talked with the head of the FBI CALEA division about this issue both via email and phone. It's one of the very first issues we talked about and why the WISPA standards effort is so important. If we can clear it, things like this will fall under the safe harbor. They (the FBI) know that some things just won't be possible/practical. Lets use my office as an example (I've done this with them so don't go hollering from the mountains about how I'm being a fool, too late). I have a FREE OPEN Linksys wireless router set up as a hotspot. Anyone that comes to town can sit in my office, in their car out front, or soon on a picinic table that I'll provide, and get all the free internet that they need while they are in the area. No charge. No tracking, heck, I won't even know it's happened. What happens when that IP addy shows up on a wire tap order? I can't change the ap so that we can insert an MT unit or some other box that would allow an individual's tap. Doing so would tip off the suspect. There are only two ways to get the data. One, tap the wireless transmissions and sort it all out on that side. Not something I have the ability, expertise, tools etc. to do. OR, we can just grab all of the data going to/from that device on the ethernet side. The LEA will have to sort out the data streams on their own. WE can't do it because we're not going to know exactly what data they are looking for. It's not a perfect solution but it's all there is. They'll have to do the same thing if the local Starbucks has a user that shows up somewhere. As far as I can tell question #15 does not get answered in the paragraph following the question. It talks more about acceptable billing and the fact that WISPA might have a solution in the future. The FAQ is only a starting point. We took the major questions people had, condenced them and got the best answers we could. We're also hanstrung a little bit because there are some things that we're not allowed to tell publicly. Much more of that coming. Might as well get ready to be even more frustrated by those of us on the committee telling you things that you can't verify other ways and we won't be able to tell you exactly what we're basing our statements on due to NDA's signed with the FBI. One of the questions in section 23 asks Does the FBI speak for other LEA's?. Unless I am mistaken this question does not get answered. They do and they don't. They are the ones to approve a standard. If they clear it, all other LEAs are bound by it. But there may be things we are asked to do etc. that are not up to the FBI. Also the document says over and over again that the LEA's will work with WISP's, which sounds like there is no easy way this can always be done transparently with the current broadband equipment deployed by WISP's. So the workaround is the WISP should give them the all the data from the device in question and the LEA's will sort it out and separate it. There are likely going to be times when this is true. The reason for CALEA is to make sure that the LEA can't get to things that they've not been specifically cleared to get. I believe that sometimes they get things that they weren't looking for in physical searches too. If they raid a house looking for stolen property and run into a meth lab, that doesn't mean that they shouldn't have gone into the house in the first place. OR, if on their way to a bust they see a stolen car in your driveway, they just happened to be in the right place at the right time. As I said before, we can all come up with more situations that don't fit the law than the law can possibly deal
Re: [WISPA] CALEA FAQ Questions
This is one of the things that has always bothered me when it comes to wire tapping a data connection. On a phone call it can be pretty easy to tell if your suspect is involved in the conversation, assuming they have not used a voice modulator. But when it comes to a data connection, how do you know? Sam Tetherow Sandhills Wireless Martha Huizenga wrote: This is not the sense that I get from the meeting we had with the FBI. They will know who the target is and be issuing an order for that person. However, if they happen to live with several people all on one wireless network, then the traffic is going to be mixed most likely. The best you can do is give them the traffic at that IP. According to the FBI, it's just like when they tap phones. The are to listen to only the target conversations and not the other people in the home. Lonnie Nunweiler wrote: Do they issue search warrants for a whole apartment building because they suspect someone living there is doing something bad? It was my understanding that a bit more info is required and it has to actually have a person or persons in mind. Why would data taps be treated any differently? Lonnie On 5/10/07, Matt [EMAIL PROTECTED] wrote: I have been reading the WISPA CALEA FAQ and was a little concerned about question #10. If the LEA does not know who the suspect is using an open access point does this mean that everyone that has used that access point will have their data handed over to the LEA? It would seem that if the LEA is only allowed to receive the data requested in the subpoena this would be a violation. In the past WISP's have asked if there was anyway to keep users from NATing and connecting more then 1 PC. There is no way to block this and no easy way to prevent or detect it. From the ISP perspective there is no way isolate single hotspot user since they all come in on the same IP. If the ISP has control and management of the hotspot they may be able to isolate the traffic of a given mac but this would not be reliable if they connect with a different laptop the next day. Of course it depends what kind of hotspot and how its setup. I would say your going to have to give the LEA all the traffic for the hotspot and let them filter/figure out what they need. Moral of the story: open non-encrypted wireless routers are NOT secure to use. Unless your a bad guy and just drive around tell you find one then do your ill deeds there. Just my opinion. Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ Questions
Sam, The evidence that LEAs collect is just part of a case. If a suspect is doing bad things then data will be collected. Next steps would usually involve a warrant to get the computer and have it looked over. I have seen other tools used by LEAs to gather evidence. I am guessing that data-taps will rarely be the basis for an entire case. If it is then defense attorneys better call on us because I can tell them how easy it is to make data traffic appear to come from one person or another without the person's knowledge. That is Hacker 101 type stuff. People sneaking access on open APs is obviously going to lead to some false data tap information in many cases. Maybe people will start locking down their home APs after that happens a few times. Scriv Sam Tetherow wrote: This is one of the things that has always bothered me when it comes to wire tapping a data connection. On a phone call it can be pretty easy to tell if your suspect is involved in the conversation, assuming they have not used a voice modulator. But when it comes to a data connection, how do you know? Sam Tetherow Sandhills Wireless Martha Huizenga wrote: This is not the sense that I get from the meeting we had with the FBI. They will know who the target is and be issuing an order for that person. However, if they happen to live with several people all on one wireless network, then the traffic is going to be mixed most likely. The best you can do is give them the traffic at that IP. According to the FBI, it's just like when they tap phones. The are to listen to only the target conversations and not the other people in the home. Lonnie Nunweiler wrote: Do they issue search warrants for a whole apartment building because they suspect someone living there is doing something bad? It was my understanding that a bit more info is required and it has to actually have a person or persons in mind. Why would data taps be treated any differently? Lonnie On 5/10/07, Matt [EMAIL PROTECTED] wrote: I have been reading the WISPA CALEA FAQ and was a little concerned about question #10. If the LEA does not know who the suspect is using an open access point does this mean that everyone that has used that access point will have their data handed over to the LEA? It would seem that if the LEA is only allowed to receive the data requested in the subpoena this would be a violation. In the past WISP's have asked if there was anyway to keep users from NATing and connecting more then 1 PC. There is no way to block this and no easy way to prevent or detect it. From the ISP perspective there is no way isolate single hotspot user since they all come in on the same IP. If the ISP has control and management of the hotspot they may be able to isolate the traffic of a given mac but this would not be reliable if they connect with a different laptop the next day. Of course it depends what kind of hotspot and how its setup. I would say your going to have to give the LEA all the traffic for the hotspot and let them filter/figure out what they need. Moral of the story: open non-encrypted wireless routers are NOT secure to use. Unless your a bad guy and just drive around tell you find one then do your ill deeds there. Just my opinion. Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
We use a DLINK hotspot router that emails me every connect and disconnect from our hotels. The FBI could take that log and compare it to room number and date of stay and they can find their man that way... FYI - Original Message - From: Marlon K. Schafer (509) 982-2181 [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Friday, May 04, 2007 12:57 PM Subject: Re: [WISPA] CALEA Question There will likely be cases where that's impossible. Lets say that I have a customer that's a hotel. They, at first, only know the ip addy or mac addy. A subpoena comes to me looking for info on the user in question. There's no way to use the hotel's Linksys hardware to do the tap to find the specific think that LEA is looking for. Can't change the network because any action on our side tips off the suspect. In some cases it won't be possible to filter out all info. Especially if we don't know what we're looking for (which we won't and shouldn't) as far as specific data goes. I talked to the head of the FBI's CALEA group for about an hour again yesterday. They know full well that there are just some things that can't be done. At the end of the day, the just need our help when and where we can give it to them. There are far too many possibilities to deal with every single possible situation, we know that, they know that. As long as we make a real effort to help I don't think we have to worry about getting in trouble. It's those that thumb their noses that will run enforcement risks. I was told that there has NEVER been an enforcement issue occur. laters, Marlon (509) 982-2181 (408) 907-6910 (Vonage)Consulting services 42846865 (icq)WISP Operator since 1999! [EMAIL PROTECTED] www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Dawn DiPietro [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Friday, May 04, 2007 3:48 AM Subject: Re: [WISPA] CALEA Question Marlon, I was under the impression the providers are only supposed to send the LEA the data covered in the subpoena and no more. Regards, Dawn DiPietro Marlon K. Schafer wrote: Read the FAQ. In some cases they may have to sort through ALL data to get at what they want. marlon - Original Message - From: Tom DeReggi [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 9:12 AM Subject: Re: [WISPA] CALEA Question In my opinion, I don;t think it will fly because of NAT. The law inforcement agrency needs to be able to differenciate what customer traffic is comming from, and if you use NAT for any of your customers, the facilities based upstream provider would have no way to identify the end user, and the WISP would become the customer and be liable. To many degrees of seperation at the upstream for the captured data to be meaningful. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 11:27 PM Subject: Re: [WISPA] CALEA Question The FCC wrote: we conclude that establishments that acquire broadband Internet access service from a facilities-based provider to enable their patrons or customers to access the Internet from their respective establishments are not considered facilities-based broadband Internet access service providers Hm. It'd be one heckuva stretch, but by reading the letter (as opposed to the spirit) of that paragraph, many smaller WISPs would automatically be exempt. I know my office has acquired broadband Internet access service from a facilities-based provider (our upstream ISP) and we're enabling our customers to access the Internet from their respective establishments (i.e. our customers pay for Internet at their homes or offices). By the letter of that paragraph (and, to be fair, I haven't read all the context surrounding it) most any single-homed WISP would be exempt, as they could just say go talk to our upstream. (I doubt it'd work for multi-homed ISPs, as that would require multiple upstreams to be tapped and somehow synchronized, which is probably technically annoying.) David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http
Re: [WISPA] CALEA Question
I don't think this is covered anyway, unless the guy is a permanent resident at the hotel. The subpoena will cover the suspect and any known IP or MAC info and I believe would cover a particular physical location. I was told that a subpoena cannot simply say anything, anywhere. It has to get fairly specific, and traffic from a Motel is not very specific. Lonnie On 5/4/07, Marlon K. Schafer (509) 982-2181 [EMAIL PROTECTED] wrote: There will likely be cases where that's impossible. Lets say that I have a customer that's a hotel. They, at first, only know the ip addy or mac addy. A subpoena comes to me looking for info on the user in question. There's no way to use the hotel's Linksys hardware to do the tap to find the specific think that LEA is looking for. Can't change the network because any action on our side tips off the suspect. In some cases it won't be possible to filter out all info. Especially if we don't know what we're looking for (which we won't and shouldn't) as far as specific data goes. I talked to the head of the FBI's CALEA group for about an hour again yesterday. They know full well that there are just some things that can't be done. At the end of the day, the just need our help when and where we can give it to them. There are far too many possibilities to deal with every single possible situation, we know that, they know that. As long as we make a real effort to help I don't think we have to worry about getting in trouble. It's those that thumb their noses that will run enforcement risks. I was told that there has NEVER been an enforcement issue occur. laters, Marlon (509) 982-2181 (408) 907-6910 (Vonage)Consulting services 42846865 (icq)WISP Operator since 1999! [EMAIL PROTECTED] www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Dawn DiPietro [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Friday, May 04, 2007 3:48 AM Subject: Re: [WISPA] CALEA Question Marlon, I was under the impression the providers are only supposed to send the LEA the data covered in the subpoena and no more. Regards, Dawn DiPietro Marlon K. Schafer wrote: Read the FAQ. In some cases they may have to sort through ALL data to get at what they want. marlon - Original Message - From: Tom DeReggi [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 9:12 AM Subject: Re: [WISPA] CALEA Question In my opinion, I don;t think it will fly because of NAT. The law inforcement agrency needs to be able to differenciate what customer traffic is comming from, and if you use NAT for any of your customers, the facilities based upstream provider would have no way to identify the end user, and the WISP would become the customer and be liable. To many degrees of seperation at the upstream for the captured data to be meaningful. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 11:27 PM Subject: Re: [WISPA] CALEA Question The FCC wrote: we conclude that establishments that acquire broadband Internet access service from a facilities-based provider to enable their patrons or customers to access the Internet from their respective establishments are not considered facilities-based broadband Internet access service providers Hm. It'd be one heckuva stretch, but by reading the letter (as opposed to the spirit) of that paragraph, many smaller WISPs would automatically be exempt. I know my office has acquired broadband Internet access service from a facilities-based provider (our upstream ISP) and we're enabling our customers to access the Internet from their respective establishments (i.e. our customers pay for Internet at their homes or offices). By the letter of that paragraph (and, to be fair, I haven't read all the context surrounding it) most any single-homed WISP would be exempt, as they could just say go talk to our upstream. (I doubt it'd work for multi-homed ISPs, as that would require multiple upstreams to be tapped and somehow synchronized, which is probably technically annoying.) David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman
Re: [WISPA] CALEA Question
Marlon, I was under the impression the providers are only supposed to send the LEA the data covered in the subpoena and no more. Regards, Dawn DiPietro Marlon K. Schafer wrote: Read the FAQ. In some cases they may have to sort through ALL data to get at what they want. marlon - Original Message - From: Tom DeReggi [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 9:12 AM Subject: Re: [WISPA] CALEA Question In my opinion, I don;t think it will fly because of NAT. The law inforcement agrency needs to be able to differenciate what customer traffic is comming from, and if you use NAT for any of your customers, the facilities based upstream provider would have no way to identify the end user, and the WISP would become the customer and be liable. To many degrees of seperation at the upstream for the captured data to be meaningful. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 11:27 PM Subject: Re: [WISPA] CALEA Question The FCC wrote: we conclude that establishments that acquire broadband Internet access service from a facilities-based provider to enable their patrons or customers to access the Internet from their respective establishments are not considered facilities-based broadband Internet access service providers Hm. It'd be one heckuva stretch, but by reading the letter (as opposed to the spirit) of that paragraph, many smaller WISPs would automatically be exempt. I know my office has acquired broadband Internet access service from a facilities-based provider (our upstream ISP) and we're enabling our customers to access the Internet from their respective establishments (i.e. our customers pay for Internet at their homes or offices). By the letter of that paragraph (and, to be fair, I haven't read all the context surrounding it) most any single-homed WISP would be exempt, as they could just say go talk to our upstream. (I doubt it'd work for multi-homed ISPs, as that would require multiple upstreams to be tapped and somehow synchronized, which is probably technically annoying.) David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
There will likely be cases where that's impossible. Lets say that I have a customer that's a hotel. They, at first, only know the ip addy or mac addy. A subpoena comes to me looking for info on the user in question. There's no way to use the hotel's Linksys hardware to do the tap to find the specific think that LEA is looking for. Can't change the network because any action on our side tips off the suspect. In some cases it won't be possible to filter out all info. Especially if we don't know what we're looking for (which we won't and shouldn't) as far as specific data goes. I talked to the head of the FBI's CALEA group for about an hour again yesterday. They know full well that there are just some things that can't be done. At the end of the day, the just need our help when and where we can give it to them. There are far too many possibilities to deal with every single possible situation, we know that, they know that. As long as we make a real effort to help I don't think we have to worry about getting in trouble. It's those that thumb their noses that will run enforcement risks. I was told that there has NEVER been an enforcement issue occur. laters, Marlon (509) 982-2181 (408) 907-6910 (Vonage)Consulting services 42846865 (icq)WISP Operator since 1999! [EMAIL PROTECTED] www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Dawn DiPietro [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Friday, May 04, 2007 3:48 AM Subject: Re: [WISPA] CALEA Question Marlon, I was under the impression the providers are only supposed to send the LEA the data covered in the subpoena and no more. Regards, Dawn DiPietro Marlon K. Schafer wrote: Read the FAQ. In some cases they may have to sort through ALL data to get at what they want. marlon - Original Message - From: Tom DeReggi [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 9:12 AM Subject: Re: [WISPA] CALEA Question In my opinion, I don;t think it will fly because of NAT. The law inforcement agrency needs to be able to differenciate what customer traffic is comming from, and if you use NAT for any of your customers, the facilities based upstream provider would have no way to identify the end user, and the WISP would become the customer and be liable. To many degrees of seperation at the upstream for the captured data to be meaningful. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 11:27 PM Subject: Re: [WISPA] CALEA Question The FCC wrote: we conclude that establishments that acquire broadband Internet access service from a facilities-based provider to enable their patrons or customers to access the Internet from their respective establishments are not considered facilities-based broadband Internet access service providers Hm. It'd be one heckuva stretch, but by reading the letter (as opposed to the spirit) of that paragraph, many smaller WISPs would automatically be exempt. I know my office has acquired broadband Internet access service from a facilities-based provider (our upstream ISP) and we're enabling our customers to access the Internet from their respective establishments (i.e. our customers pay for Internet at their homes or offices). By the letter of that paragraph (and, to be fair, I haven't read all the context surrounding it) most any single-homed WISP would be exempt, as they could just say go talk to our upstream. (I doubt it'd work for multi-homed ISPs, as that would require multiple upstreams to be tapped and somehow synchronized, which is probably technically annoying.) David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
Tim Kery wrote: Examples of these types of establishments may include some hotels, coffee shops, schools, libraries, or book stores. DOJ has stated that it has no desire to require such retail establishments to implement CALEA solutions, DOJ Comments at 36, and we conclude that the public interest at this time does not weigh in favor of subjecting such establishments to CALEA. So, Starbucks doesn't need to comply with CALEA but the service provider that provides bandwidth to Starbucks does. Hope this helps. Tim Kery BearHill Security, Inc. [EMAIL PROTECTED] Starbucks doesn't, but T-Mobile, the actual ISP does. Joe's Cup-a-Joe does have to , but the ISP providing the service does. SOME schools don't have to be because it is defined as a private network (see the ACE PDF on exemptions here: www.rad-info.net/fcc/ACE_CALEA_sum.pdf) Commercial offering of Internet access means you need to be compliant. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
David E. Smith wrote: The FCC wrote: we conclude that establishments that acquire broadband Internet access service from a facilities-based provider to enable their patrons or customers to access the Internet from their respective establishments are not considered facilities-based broadband Internet access service providers Hm. It'd be one heckuva stretch, but by reading the letter (as opposed to the spirit) of that paragraph, many smaller WISPs would automatically be exempt. I know my office has acquired broadband Internet access service from a facilities-based provider (our upstream ISP) and we're enabling our customers to access the Internet from their respective establishments (i.e. our customers pay for Internet at their homes or offices). By the letter of that paragraph (and, to be fair, I haven't read all the context surrounding it) most any single-homed WISP would be exempt, as they could just say go talk to our upstream. (I doubt it'd work for multi-homed ISPs, as that would require multiple upstreams to be tapped and somehow synchronized, which is probably technically annoying.) David Smith MVN.net Why not check with a knowledgeable legal professional instead of guessing? Susan Crawford, Kris Twomey, Chris Savage, Jim Baller, and the offices of Cole, Raywid Braverman have written opinions that if you operate a router or switch and commercially sell internet, you must be CALEA compliant. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door, but the ISP's who will see the most warrants are Residential ISP's. (Not much child porn or terrorrism happening at the work place). So, roll the dice. Call an attorney for advice Or get on the call with Chris Savage of DWT on May 9. -- Regards, Peter Radizeski RAD-INFO, Inc. - NSP Strategist We Help ISPs Connect Communicate 813.963.5884 http://www.marketingIDEAguy.com -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 10:42 AM Subject: Re: [WISPA] CALEA Question Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
In my opinion, I don;t think it will fly because of NAT. The law inforcement agrency needs to be able to differenciate what customer traffic is comming from, and if you use NAT for any of your customers, the facilities based upstream provider would have no way to identify the end user, and the WISP would become the customer and be liable. To many degrees of seperation at the upstream for the captured data to be meaningful. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 11:27 PM Subject: Re: [WISPA] CALEA Question The FCC wrote: we conclude that establishments that acquire broadband Internet access service from a facilities-based provider to enable their patrons or customers to access the Internet from their respective establishments are not considered facilities-based broadband Internet access service providers Hm. It'd be one heckuva stretch, but by reading the letter (as opposed to the spirit) of that paragraph, many smaller WISPs would automatically be exempt. I know my office has acquired broadband Internet access service from a facilities-based provider (our upstream ISP) and we're enabling our customers to access the Internet from their respective establishments (i.e. our customers pay for Internet at their homes or offices). By the letter of that paragraph (and, to be fair, I haven't read all the context surrounding it) most any single-homed WISP would be exempt, as they could just say go talk to our upstream. (I doubt it'd work for multi-homed ISPs, as that would require multiple upstreams to be tapped and somehow synchronized, which is probably technically annoying.) David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question ... fees
Ross Cornett wrote: I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. Design a web page to explain the fee clearly and concisely. Point all questions about CALEA to the FCC or FBI. Emphasize it is a law; it is for homeland security; it is about child porn and terrorism - and it is to protect you. All providers must follow these rules. - Peter -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
I think you better just take a rate increase and chalk it up to increased expenses all the way around as opposed to creating a CALEA charge line item. Adding a fee as a line item could get you in trouble with the FTC if not approved as a legitimate added government fee (just my opinion, nothing to base this on other than my gut). Your fuel and electricity have jumped considerably I am sure. I am considering a rate increase over these added costs also. I see no way around it. I have never raised my rates in 10 years. Times are changing I am afraid. Scriv Ross Cornett wrote: I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 10:42 AM Subject: Re: [WISPA] CALEA Question Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] CALEA Question
A few years ago, I added a line item to my invoices as follows... Surcharge for Bellsouth, FCC and other regulatory compliance fees and costs. This added fee is based on what I think it cost me to comply with reporting to the FCC, licensed links, and 'hidden' fees that the phone company itemizes inexcess of the actual circuit costs. This is no different than airlines and trucking companies adding 'fuel surcharges' and the quick lube business charging me an 'environmental disposal fee' when I have my oil changed. I added $2.97 per month, at the time it was the same that Bellsouth was charging for the USF on their 'itemized invoices.' I didn't loose one customer, but did have to explain the reason to two and they completely understood. That additional $3 for each DSL and wireless user was worth those two explinations. I don't charge the fee for hosting or dialup plans. There is nothing wrong raising your prices to be competitive with the 'big boys!' :) Cliff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Scrivner Sent: Thursday, May 03, 2007 2:46 PM To: WISPA General List Subject: Re: [WISPA] CALEA Question I think you better just take a rate increase and chalk it up to increased expenses all the way around as opposed to creating a CALEA charge line item. Adding a fee as a line item could get you in trouble with the FTC if not approved as a legitimate added government fee (just my opinion, nothing to base this on other than my gut). Your fuel and electricity have jumped considerably I am sure. I am considering a rate increase over these added costs also. I see no way around it. I have never raised my rates in 10 years. Times are changing I am afraid. Scriv Ross Cornett wrote: I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 10:42 AM Subject: Re: [WISPA] CALEA Question Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ BEGIN:VCARD VERSION:2.1 X-MS-SIGNATURE:YES N;LANGUAGE=en-us:LeBoeuf;Cliff FN:Cliff LeBoeuf ORG:Computer Sales Services, Inc. TEL;WORK;VOICE:(985) 879-3219 ADR;WORK;PREF:;;1162 Barrow Street;Houma;LA;70360;United States of America LABEL;WORK;PREF;ENCODING=QUOTED-PRINTABLE:1162 Barrow Street=0D=0A= Houma, LA 70360 X-MS-OL-DEFAULT-POSTAL-ADDRESS:2 URL;WORK:www.cssla.com www.triparish.net EMAIL;PREF;INTERNET:[EMAIL PROTECTED] X-MS-TEXT;CUSTOM1:Computers - Copiers - Internet PHOTO;TYPE=JPEG;ENCODING=BASE64: /9j/4AAQSkZJRgABAQEAeAB4AAD/2wBDAAYEBQYFBAYGBQYHBwYIChAKCgkJChQODwwQFxQY GBcUFhYaHSUfGhsjHBYWICwgIyYnKSopGR8tMC0oMCUoKSj/2wBDAQcHBwoIChMKChMoGhYa KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCj/wAAR CABQAEsDASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAECAwQFBgcICQoL/8QAtRAA AgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkK FhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWG h4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl 5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQECAwQFBgcICQoL/8QAtREA AgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYk NOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOE hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk 5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD0/U7ybXRqGt6xqFzZ6HaSy29vbW07RLME J+Z8dWOG74xjivKNS+JfhW0vJIU811U9ftRqT4x3MsHwd0xYm2iS8ugw9eDXzb4X0G/8Ta5b aVpMXm3U5wATgKByST2AFU207I56dOM4KUlds97u
Re: [WISPA] CALEA Question
Sounds good thanks Sriv. - Original Message - From: John Scrivner [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 2:46 PM Subject: Re: [WISPA] CALEA Question I think you better just take a rate increase and chalk it up to increased expenses all the way around as opposed to creating a CALEA charge line item. Adding a fee as a line item could get you in trouble with the FTC if not approved as a legitimate added government fee (just my opinion, nothing to base this on other than my gut). Your fuel and electricity have jumped considerably I am sure. I am considering a rate increase over these added costs also. I see no way around it. I have never raised my rates in 10 years. Times are changing I am afraid. Scriv Ross Cornett wrote: I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 10:42 AM Subject: Re: [WISPA] CALEA Question Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
If you decide to take advantage of companies that have solutions in place, you'll have to do what you have to do. Know, however, that you do NOT have to follow anyone's standard! You just have to be able to give the LEA the data they MAY ask for. I've rounded up folks that know how to get the stream off of my routers and folks that know how to program the server to store the data till LEA can download it. I have to pick up a managed switch or two but other than that, I'll cross my fingers and hope that I don't have to spend money complying till the WISPA effort is approved. marlon - Original Message - From: Ross Cornett [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 8:52 AM Subject: Re: [WISPA] CALEA Question I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 10:42 AM Subject: Re: [WISPA] CALEA Question Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
Read the FAQ. In some cases they may have to sort through ALL data to get at what they want. marlon - Original Message - From: Tom DeReggi [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 9:12 AM Subject: Re: [WISPA] CALEA Question In my opinion, I don;t think it will fly because of NAT. The law inforcement agrency needs to be able to differenciate what customer traffic is comming from, and if you use NAT for any of your customers, the facilities based upstream provider would have no way to identify the end user, and the WISP would become the customer and be liable. To many degrees of seperation at the upstream for the captured data to be meaningful. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 11:27 PM Subject: Re: [WISPA] CALEA Question The FCC wrote: we conclude that establishments that acquire broadband Internet access service from a facilities-based provider to enable their patrons or customers to access the Internet from their respective establishments are not considered facilities-based broadband Internet access service providers Hm. It'd be one heckuva stretch, but by reading the letter (as opposed to the spirit) of that paragraph, many smaller WISPs would automatically be exempt. I know my office has acquired broadband Internet access service from a facilities-based provider (our upstream ISP) and we're enabling our customers to access the Internet from their respective establishments (i.e. our customers pay for Internet at their homes or offices). By the letter of that paragraph (and, to be fair, I haven't read all the context surrounding it) most any single-homed WISP would be exempt, as they could just say go talk to our upstream. (I doubt it'd work for multi-homed ISPs, as that would require multiple upstreams to be tapped and somehow synchronized, which is probably technically annoying.) David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
We have a line item of: Surcharge to cover the cost of a sales tax being charged against our fiber connection. Or words to that effect. We don't call it a tax, we specifically call it a surcharge. I think that several out here do something similar. We also charge a $10 trip charge anytime gas is over $2.50 per gallon in this area. If it hits anywhere close to $4 I'll likely raise that to $15. People don't like it but they do understand. Especially when nearly everyone else out here has also put on fuel charges. The only good thing about current gas prices is that crop prices are also way up. I'll take $3 fuel with $6 wheat any day :-) marlon - Original Message - From: John Scrivner [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 12:46 PM Subject: Re: [WISPA] CALEA Question I think you better just take a rate increase and chalk it up to increased expenses all the way around as opposed to creating a CALEA charge line item. Adding a fee as a line item could get you in trouble with the FTC if not approved as a legitimate added government fee (just my opinion, nothing to base this on other than my gut). Your fuel and electricity have jumped considerably I am sure. I am considering a rate increase over these added costs also. I see no way around it. I have never raised my rates in 10 years. Times are changing I am afraid. Scriv Ross Cornett wrote: I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 10:42 AM Subject: Re: [WISPA] CALEA Question Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
gas 3.20 per gallon here. $95.00 to fill my truck yesterday. Sheesh Marlon K. Schafer wrote: We have a line item of: Surcharge to cover the cost of a sales tax being charged against our fiber connection. Or words to that effect. We don't call it a tax, we specifically call it a surcharge. I think that several out here do something similar. We also charge a $10 trip charge anytime gas is over $2.50 per gallon in this area. If it hits anywhere close to $4 I'll likely raise that to $15. People don't like it but they do understand. Especially when nearly everyone else out here has also put on fuel charges. The only good thing about current gas prices is that crop prices are also way up. I'll take $3 fuel with $6 wheat any day :-) marlon - Original Message - From: John Scrivner [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 12:46 PM Subject: Re: [WISPA] CALEA Question I think you better just take a rate increase and chalk it up to increased expenses all the way around as opposed to creating a CALEA charge line item. Adding a fee as a line item could get you in trouble with the FTC if not approved as a legitimate added government fee (just my opinion, nothing to base this on other than my gut). Your fuel and electricity have jumped considerably I am sure. I am considering a rate increase over these added costs also. I see no way around it. I have never raised my rates in 10 years. Times are changing I am afraid. Scriv Ross Cornett wrote: I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 10:42 AM Subject: Re: [WISPA] CALEA Question Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- George Rogato Welcome to WISPA www.wispa.org http://signup.wispa.org/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
Yes and up here is $350.00 oer month for a 1MB Business connect. Alaska Wireless Systems 1(907)240-2183 Cell 1(907)349-2226 Fax 1(907)349-4308 Office www.akwireless.net - Original Message - From: George Rogato [mailto:[EMAIL PROTECTED] To: WISPA General List [mailto:[EMAIL PROTECTED] Sent: Thu, 03 May 2007 20:00:17 -0800 Subject: Re: [WISPA] CALEA Question gas 3.20 per gallon here. $95.00 to fill my truck yesterday. Sheesh Marlon K. Schafer wrote: We have a line item of: Surcharge to cover the cost of a sales tax being charged against our fiber connection. Or words to that effect. We don't call it a tax, we specifically call it a surcharge. I think that several out here do something similar. We also charge a $10 trip charge anytime gas is over $2.50 per gallon in this area. If it hits anywhere close to $4 I'll likely raise that to $15. People don't like it but they do understand. Especially when nearly everyone else out here has also put on fuel charges. The only good thing about current gas prices is that crop prices are also way up. I'll take $3 fuel with $6 wheat any day :-) marlon - Original Message - From: John Scrivner [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 12:46 PM Subject: Re: [WISPA] CALEA Question I think you better just take a rate increase and chalk it up to increased expenses all the way around as opposed to creating a CALEA charge line item. Adding a fee as a line item could get you in trouble with the FTC if not approved as a legitimate added government fee (just my opinion, nothing to base this on other than my gut). Your fuel and electricity have jumped considerably I am sure. I am considering a rate increase over these added costs also. I see no way around it. I have never raised my rates in 10 years. Times are changing I am afraid. Scriv Ross Cornett wrote: I give up I just signed a contract to ensure my protection under CALEA. My hope is tht those that become compliant do not get underminded by those that have hidden in the bushes and took the risk upon themselves by not becoming compliant. It appears that it is time to start charging a homeland security fee. Since we cannot authorize taxes, we can charge fees that will allow us to mange these cost. By my figures, I will have to charge at least $1.53 per month per customer. Since this doens't include dialup customers, my broadband customers will have to incurr this burden alone. What are you thougths on this. - Original Message - From: David E. Smith [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, May 03, 2007 10:42 AM Subject: Re: [WISPA] CALEA Question Peter R. wrote: Why not check with a knowledgeable legal professional instead of guessing? That'd be my boss's department. :D I'm just a pundit - full of opinions and hot air. Now you can choose to ignore it, and say a prayer daily that Barney Fife or any other LEA officer does not knock on your door I'd encourage Barney Fife to knock on my door, I wouldn't mind having his autograph. Remember him from Three's Company? Edit: Apparently Don Knotts died last year. Now I'm sad. :( -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
I appreciated Tim's remarks, but this sounded very much like a response from someone that is getting fed by the process of CALEA. If I am wrong I duly appologize. if I am correct then I have said enough. I agree with you Sam. It boils down to Uncle Sam is pushing an INTERNET SECURITY TAX on the everyone in the industry and only funding the TELCO's Side of it and we have no say so in the matter. They have plenty of resources and just determined that we can take it or shut down. This too is another way that the multi funded telcos will continue to be fed by the feds and we will have to pickup the scraps that the telco's don't have time or the interest to reach. Now doing that will just be a tougher battle. It must be nice getting a subcity... only a telcos know how to spell that the rest of us have never had money give to us we have to earn it. lol Ross - Original Message - From: Sam Tetherow [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 4:20 PM Subject: Re: [WISPA] CALEA Compliance Tim Kery wrote: Hi Ross, SNIP You also have to remember that Law Enforcement's primary focus is Law Enforcement and not developing technology. The FBI/DEA/DOJ said as much when in 2004 they petitioned the FCC to expand CALEA to broadband and VoIP. Essentially, they argued that it isn't possible for them to keep up with the pace of technology. (By the way, this isn't an ability issue, the FBI and Secret Service, ect. have exceptionally talented teams. Instead it really is a resource issue; the number of staff they have to cover these issues can't cover the scale of the problem.) So I, as a small provider, am suppose to have more and better resources than the federal government and their various agencies? Sam Tetherow Sandhills Wireless -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
As I understand it anyone who runs a router has to be CALEA compliant. Call the FCC ... these guys will answer your question and call you back: www.fcc.gov/calea Or ask a Legal Professional like Kris Twomey. Chris Savage or KC Halm from Davis Wright Tremaine LLP will take your questions about CALEA on May 9th (http://radinfo.blogspot.com/2007/05/attorney-call-for-calea.html) - Peter David Peterson wrote: As I am finding myself back into sales, I have a question concerning CALEA. I just read this blurb: The “facilities-based” terminology was meant to include providers offering connectivity infrastructure between end users and the Internet. However, establishments that acquire broadband Internet access service from a facilities-based provider to enable their customers to access the Internet from their respective establishments are excluded. The FCC explicitly exempted retail providers such as those offering hot spot WiFi (News - Alert) service where the actual Internet connectivity is obtained from another provider From this site: http://www.rad-info.net/fcc/calea1.htm This would indicate to me that if you are a retail provider, i.e. you buy your broadband from someone else and resell it to your customers, that you are exempt. This would suggest that the onus is on your provider to monitor your T-1 or other connection to them in the event of a need for a tap. Any clarity on this would be great. WirelessGuys David Peterson Senior Wireless Engineer -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
Well, everybody gets their Internet from someone else. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: David Peterson [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 1:57 PM Subject: [WISPA] CALEA Question As I am finding myself back into sales, I have a question concerning CALEA. I just read this blurb: The “facilities-based” terminology was meant to include providers offering connectivity infrastructure between end users and the Internet. However, establishments that acquire broadband Internet access service from a facilities-based provider to enable their customers to access the Internet from their respective establishments are excluded. The FCC explicitly exempted retail providers such as those offering hot spot WiFi (News - Alert) service where the actual Internet connectivity is obtained from another provider From this site: http://www.rad-info.net/fcc/calea1.htm This would indicate to me that if you are a retail provider, i.e. you buy your broadband from someone else and resell it to your customers, that you are exempt. This would suggest that the onus is on your provider to monitor your T-1 or other connection to them in the event of a need for a tap. Any clarity on this would be great. WirelessGuys David Peterson Senior Wireless Engineer [EMAIL PROTECTED] 207 W. Los Angeles Avenue, Suite 300 Moorpark, CA 93021-1862 tel: 800-945-3294 mobile: 979.224.4192 AIM: ultramesh inc Skype ID:nexuswirelessusa No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.467 / Virus Database: 269.6.2/784 - Release Date: 5/1/2007 2:57 PM CONFIDENTIALITY NOTICE: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients. If you are not the intended recipient, (or authorized to receive for the recipient) you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please destroy all copies of this communication and any attachments and contact the sender by reply email or telephone (800) 945-3294. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
Hmmm, Well during the dial up days, Jokingly, I was thinking about starting a new internet business. Internet on a disk! . Each week we send you a new disk. We start you off with disk labeled, beginning internet a-ab, next week it will be ac-ad. This way the sites will be fast loading and won't tie up your telephone lines, nor will you have to buy a fancy high speed internet line. No more connection issues. Well I did ell a couple of my subs this, and they wanted to know what would be cheaper grin Mike Hammett wrote: Well, everybody gets their Internet from someone else. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: David Peterson [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 1:57 PM Subject: [WISPA] CALEA Question As I am finding myself back into sales, I have a question concerning CALEA. I just read this blurb: The “facilities-based” terminology was meant to include providers offering connectivity infrastructure between end users and the Internet. However, establishments that acquire broadband Internet access service from a facilities-based provider to enable their customers to access the Internet from their respective establishments are excluded. The FCC explicitly exempted retail providers such as those offering hot spot WiFi (News - Alert) service where the actual Internet connectivity is obtained from another provider From this site: http://www.rad-info.net/fcc/calea1.htm This would indicate to me that if you are a retail provider, i.e. you buy your broadband from someone else and resell it to your customers, that you are exempt. This would suggest that the onus is on your provider to monitor your T-1 or other connection to them in the event of a need for a tap. Any clarity on this would be great. WirelessGuys David Peterson Senior Wireless Engineer [EMAIL PROTECTED] 207 W. Los Angeles Avenue, Suite 300 Moorpark, CA 93021-1862 tel: 800-945-3294 mobile: 979.224.4192 AIM: ultramesh inc Skype ID:nexuswirelessusa No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.467 / Virus Database: 269.6.2/784 - Release Date: 5/1/2007 2:57 PM CONFIDENTIALITY NOTICE: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients. If you are not the intended recipient, (or authorized to receive for the recipient) you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. If you have received this communication in error, please destroy all copies of this communication and any attachments and contact the sender by reply email or telephone (800) 945-3294. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Exemption for Small Wireless ISPs
My opinion is that you're not helping the big picture by saying compliance is more than you can handle. The FCC is not going to go out of their way to hand out more spectrum to providers that can't perform basic requirements. Just like they're not going to help providers that refuse to file 475 forms. You can build a unix box for five hundred dollars that will do the job for you. Or you can buy a turnkey box with support for seven thousand. I've seen it suggested people pool their funds and share a $7000 turnkey box. If you can't do any of these things, then you can't provide required services. I don't like or trust government but I don't think they're out of line requiring providers be CALEA compliant. This one ain't special interests motivated. - cw Jack Unger wrote: Dear Representative Stupak, I'm writing to support your request on March 14, 2007 asking that the FCC Commissioners consider a waiver from CALEA regulations for small broadband providers. In a nutshell, the costs of complying with the CALEA provisions are far in excess of what small broadband providers can afford to pay. It is poor government policy to allow the costs of CALEA compliance to literally put small broadband providers out of business thereby denying broadband Internet access to many rural Americans. Do you plan to introduce legislation that directs the FCC to reconsider their regulations and to consider the compliance costs when regulating small Internet access providers? Please advise me how I can further support your effort to retain broadband Internet access service for rural Americans. Thank you for your time, interest, and efforts. Sincerely, Jack Unger P.S. - I am copying this email to the general email list maintained by the Wireless Internet Service Providers Association (WISPA.org) to help as many small ISPs as possible learn about and support your efforts in their behalf. I will forward your response to this list. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Exemption for Small Wireless ISPs
Dear cw, Thank you for your opinion. I respectfully disagree. There's nothing wrong with admitting that small local providers can't afford to comply with the same requirements that big carriers like ATT can comply with. That's the problem here; small local businesses are being asked to shell out more money than they can afford just so the FBI/DOJ/ATF/CIA/NSA/DHS can quickly and conveniently wiretap. As to whether the big carriers have provided input to the FCC (FBI/DOJ/ATF/CIA/NSA/DHS) on this issue; the jury is out on that question for the moment. jack P.S. - The issue of obtaining more spectrum from the FCC will be moot once the ranks of the small, local license-free spectrum users are thinned much further. In short, no one will be around to need any more spectrum. cw wrote: My opinion is that you're not helping the big picture by saying compliance is more than you can handle. The FCC is not going to go out of their way to hand out more spectrum to providers that can't perform basic requirements. Just like they're not going to help providers that refuse to file 475 forms. You can build a unix box for five hundred dollars that will do the job for you. Or you can buy a turnkey box with support for seven thousand. I've seen it suggested people pool their funds and share a $7000 turnkey box. If you can't do any of these things, then you can't provide required services. I don't like or trust government but I don't think they're out of line requiring providers be CALEA compliant. This one ain't special interests motivated. - cw Jack Unger wrote: Dear Representative Stupak, I'm writing to support your request on March 14, 2007 asking that the FCC Commissioners consider a waiver from CALEA regulations for small broadband providers. In a nutshell, the costs of complying with the CALEA provisions are far in excess of what small broadband providers can afford to pay. It is poor government policy to allow the costs of CALEA compliance to literally put small broadband providers out of business thereby denying broadband Internet access to many rural Americans. Do you plan to introduce legislation that directs the FCC to reconsider their regulations and to consider the compliance costs when regulating small Internet access providers? Please advise me how I can further support your effort to retain broadband Internet access service for rural Americans. Thank you for your time, interest, and efforts. Sincerely, Jack Unger P.S. - I am copying this email to the general email list maintained by the Wireless Internet Service Providers Association (WISPA.org) to help as many small ISPs as possible learn about and support your efforts in their behalf. I will forward your response to this list. -- Jack Unger ([EMAIL PROTECTED]) - President, Ask-Wi.Com, Inc. FCC License # PG-12-25133 Serving the Broadband Wireless Industry Since 1993 Author of the WISP Handbook - Deploying License-Free Wireless WANs True Vendor-Neutral Wireless Consulting-Training-Troubleshooting FCC Part 15 Certification Assistance for Wireless Service Providers Phone (VoIP Over Broadband Wireless) 818-227-4220 www.ask-wi.com -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Exemption for Small Wireless ISPs
I believe the feds have secret deals with the telcos so they can do what ever they want besides calea. Just like I pointed out that fiber att wiretapping deal in the very first days of wispa calea discussion. This is where I see the imbalance, The little guys carry the weight and the big guys get gravy secret contracts that help shoulder the burden. I will still do what I have to do to be compliant. But there is a reality to the even handedness of this. George Jack Unger wrote: Dear cw, Thank you for your opinion. I respectfully disagree. There's nothing wrong with admitting that small local providers can't afford to comply with the same requirements that big carriers like ATT can comply with. That's the problem here; small local businesses are being asked to shell out more money than they can afford just so the FBI/DOJ/ATF/CIA/NSA/DHS can quickly and conveniently wiretap. As to whether the big carriers have provided input to the FCC (FBI/DOJ/ATF/CIA/NSA/DHS) on this issue; the jury is out on that question for the moment. jack P.S. - The issue of obtaining more spectrum from the FCC will be moot once the ranks of the small, local license-free spectrum users are thinned much further. In short, no one will be around to need any more spectrum. cw wrote: My opinion is that you're not helping the big picture by saying compliance is more than you can handle. The FCC is not going to go out of their way to hand out more spectrum to providers that can't perform basic requirements. Just like they're not going to help providers that refuse to file 475 forms. You can build a unix box for five hundred dollars that will do the job for you. Or you can buy a turnkey box with support for seven thousand. I've seen it suggested people pool their funds and share a $7000 turnkey box. If you can't do any of these things, then you can't provide required services. I don't like or trust government but I don't think they're out of line requiring providers be CALEA compliant. This one ain't special interests motivated. - cw Jack Unger wrote: Dear Representative Stupak, I'm writing to support your request on March 14, 2007 asking that the FCC Commissioners consider a waiver from CALEA regulations for small broadband providers. In a nutshell, the costs of complying with the CALEA provisions are far in excess of what small broadband providers can afford to pay. It is poor government policy to allow the costs of CALEA compliance to literally put small broadband providers out of business thereby denying broadband Internet access to many rural Americans. Do you plan to introduce legislation that directs the FCC to reconsider their regulations and to consider the compliance costs when regulating small Internet access providers? Please advise me how I can further support your effort to retain broadband Internet access service for rural Americans. Thank you for your time, interest, and efforts. Sincerely, Jack Unger P.S. - I am copying this email to the general email list maintained by the Wireless Internet Service Providers Association (WISPA.org) to help as many small ISPs as possible learn about and support your efforts in their behalf. I will forward your response to this list. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Exemption for Small Wireless ISPs
My opinion then, is that the FCC can get off their duffs and provide internet to the hinterlands themselves. There is more to CALEA than having a $500 unix box, and sharing a $7000 turnkey box is not an option unless you are sharing it within a tight geographical area since response times on execution of certain parts of CALEA is shorter than an overnight shipment. As for getting more spectrum, quite honestly I will believe it when I see it. The FCC is far more interested in the cash that spectrum sales bring in than it is interested in providing the best use of the spectrum for the American public. Sam Tetherow Sandhills Wireless cw wrote: My opinion is that you're not helping the big picture by saying compliance is more than you can handle. The FCC is not going to go out of their way to hand out more spectrum to providers that can't perform basic requirements. Just like they're not going to help providers that refuse to file 475 forms. You can build a unix box for five hundred dollars that will do the job for you. Or you can buy a turnkey box with support for seven thousand. I've seen it suggested people pool their funds and share a $7000 turnkey box. If you can't do any of these things, then you can't provide required services. I don't like or trust government but I don't think they're out of line requiring providers be CALEA compliant. This one ain't special interests motivated. - cw Jack Unger wrote: Dear Representative Stupak, I'm writing to support your request on March 14, 2007 asking that the FCC Commissioners consider a waiver from CALEA regulations for small broadband providers. In a nutshell, the costs of complying with the CALEA provisions are far in excess of what small broadband providers can afford to pay. It is poor government policy to allow the costs of CALEA compliance to literally put small broadband providers out of business thereby denying broadband Internet access to many rural Americans. Do you plan to introduce legislation that directs the FCC to reconsider their regulations and to consider the compliance costs when regulating small Internet access providers? Please advise me how I can further support your effort to retain broadband Internet access service for rural Americans. Thank you for your time, interest, and efforts. Sincerely, Jack Unger P.S. - I am copying this email to the general email list maintained by the Wireless Internet Service Providers Association (WISPA.org) to help as many small ISPs as possible learn about and support your efforts in their behalf. I will forward your response to this list. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance (Netequalizer)
For people that run Netequalizers, they are helping you comply As promised, NetEqualizer is now offering the utilities necessary to meet requirements set forth this month by CALEA, or the Communications Assistance for Law Enforcement Act. This law oversees telecommunication security and has now been expanded to Internet security. There are some fairly harsh federal penalties for noncompliance that became effective May 1. John Marlon K. Schafer wrote: There won't be a WISPA standard done in time. We're still waiting on some documentation from the FBI and we need to get some internal documentation together as well. But you don't have to be compliant with ANY standard to be CALEA compliant! You just have to understand what you have to do if they ask and have mechanisms in place to do it. The basic parts you'll need are: Linux based router or tap capabilities on the on you have. OR a managed switch that will allow you to mirror a port. Linux server with OpenCALEA and an FTP program on it. Knowledge of how to make it record and distribute the needed data for LEA. You don't HAVE to use a TTP. You don't HAVE to follow a standard. You don't HAVE to panic just yet. *I've* talked to the folks at the FBI. They are NOT interested in running anyone out of business. They just want to catch bad guys and they *may* need our help to do it. Everything past that point is FUD. Why have a standard at all then? Because if you don't follow a standard you have to TRY to do anything that LEA asks of you. If you are standards compliant you only have to do what the standard says you have to do. Believe it or not, guys like Tim at Bearhill are working WITH WISPA in our efforts to develop a low cost/no cost solution to CALEA. We all know that many in this industry are still trying to figure out how to pay the bill on that latest order for 3 cpe units. I was sometimes 60 days behind with EC. I always paid but rarely on time. Sucked for me and for them. Fortunately, they hung with me and today we're as likely to be prepaid as we are to owe them. It's a nice change of pace. We also order radios in bulk, every couple to few weeks, rather than 1 or 2 at a time. Wondering how to make payroll, or buy diapers sucks. Most of us have been there. We got through those times partly because others reached a hand down and helped us where they could. We worked hard, honestly and consistently. I suggest that those of you in panic mode over CALEA go to www.askcalea.net and read up on it. Contact the FCC and the FBI yourselves if you don't believe those of us that are doing this work. So far I've found that folks are more than happy to answer my direct questions. At LEAST contact those that WISPA sent to the FBI! They know a lot of answers and they have a direct line to the FBI if they don't know the answer. Yeah, CALEA is a big deal. Yeah it's complicated. Yeah, it'll suck to have to perform. Yeah, you have to do it anyway :-). Might as well stop whining and start figuring out what all of those ttp's have already gotten figured out. Someone's gonna make money off of those out there that can't/won't figure it out for themselves. Might as well be you! marlon - Original Message - From: Todd Barber [EMAIL PROTECTED] To: 'WISPA General List' wireless@wispa.org Sent: Monday, April 30, 2007 8:19 PM Subject: RE: [WISPA] CALEA Compliance John, The part that is causing disbelief for me is the deadline is only days away and I haven't seen this solution or the costing for the solution. Todd Barber Skylink Broadband Internet [EMAIL PROTECTED] 970-454-9499 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Scrivner Sent: Monday, April 30, 2007 9:14 PM To: WISPA General List Subject: Re: [WISPA] CALEA Compliance I personally do not believe that any CALEA can be cost effective. Quite simply, solving CALEA requires spending money without earning any additional revenue. The only way to justify the CALEA expense is to accept it as a cost of doing business. This means simply that your market opportunity is lost if you aren't CALEA compliant. I firmly believe every service provider should have plans for being CALEA compliant or have plans for exiting the business. This one is different than E911; the liability will be staggering. -Matt Matt, We look forward to proving that this thinking is wrong. What part of CALEA compliance is it that makes you think we cannot develop a low cost and reasonable solution which will not break the bank? Scriv -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.467 / Virus Database: 269.6.2/781 - Release Date: 4/30/2007 9:14 AM -- WISPA Wireless List: wireless
Re: [WISPA] CALEA Exemption for Small Wireless ISPs
Uh Sam, you do remember the 5.4 gig band right? 255 mhz of NEW spectrum, made available last year. There's also 24ghz and 60ghz available. We just need people building the new toys at price points that will work for us. Know what I want? A 15 or 20 meg $1500 to $2000 60 gig solution good for a mile or two. marlon - Original Message - From: Sam Tetherow [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 6:52 PM Subject: Re: [WISPA] CALEA Exemption for Small Wireless ISPs My opinion then, is that the FCC can get off their duffs and provide internet to the hinterlands themselves. There is more to CALEA than having a $500 unix box, and sharing a $7000 turnkey box is not an option unless you are sharing it within a tight geographical area since response times on execution of certain parts of CALEA is shorter than an overnight shipment. As for getting more spectrum, quite honestly I will believe it when I see it. The FCC is far more interested in the cash that spectrum sales bring in than it is interested in providing the best use of the spectrum for the American public. Sam Tetherow Sandhills Wireless cw wrote: My opinion is that you're not helping the big picture by saying compliance is more than you can handle. The FCC is not going to go out of their way to hand out more spectrum to providers that can't perform basic requirements. Just like they're not going to help providers that refuse to file 475 forms. You can build a unix box for five hundred dollars that will do the job for you. Or you can buy a turnkey box with support for seven thousand. I've seen it suggested people pool their funds and share a $7000 turnkey box. If you can't do any of these things, then you can't provide required services. I don't like or trust government but I don't think they're out of line requiring providers be CALEA compliant. This one ain't special interests motivated. - cw Jack Unger wrote: Dear Representative Stupak, I'm writing to support your request on March 14, 2007 asking that the FCC Commissioners consider a waiver from CALEA regulations for small broadband providers. In a nutshell, the costs of complying with the CALEA provisions are far in excess of what small broadband providers can afford to pay. It is poor government policy to allow the costs of CALEA compliance to literally put small broadband providers out of business thereby denying broadband Internet access to many rural Americans. Do you plan to introduce legislation that directs the FCC to reconsider their regulations and to consider the compliance costs when regulating small Internet access providers? Please advise me how I can further support your effort to retain broadband Internet access service for rural Americans. Thank you for your time, interest, and efforts. Sincerely, Jack Unger P.S. - I am copying this email to the general email list maintained by the Wireless Internet Service Providers Association (WISPA.org) to help as many small ISPs as possible learn about and support your efforts in their behalf. I will forward your response to this list. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Exemption for Small Wireless ISPs
You do have a point on the 5.4 Marlon, although it was otherwise unsellable spectrum. The power restrictions along with DFS requirements limited it to something I doubt many would be willing to pay for. Not saying we can't use it though. I'm eagerly awaiting affordable gear since it fits my model quite well. Most of my customers are within 3 miles of my towers. Sam Tetherow Sandhills Wireless Marlon K. Schafer wrote: Uh Sam, you do remember the 5.4 gig band right? 255 mhz of NEW spectrum, made available last year. There's also 24ghz and 60ghz available. We just need people building the new toys at price points that will work for us. Know what I want? A 15 or 20 meg $1500 to $2000 60 gig solution good for a mile or two. marlon - Original Message - From: Sam Tetherow [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, May 02, 2007 6:52 PM Subject: Re: [WISPA] CALEA Exemption for Small Wireless ISPs My opinion then, is that the FCC can get off their duffs and provide internet to the hinterlands themselves. There is more to CALEA than having a $500 unix box, and sharing a $7000 turnkey box is not an option unless you are sharing it within a tight geographical area since response times on execution of certain parts of CALEA is shorter than an overnight shipment. As for getting more spectrum, quite honestly I will believe it when I see it. The FCC is far more interested in the cash that spectrum sales bring in than it is interested in providing the best use of the spectrum for the American public. Sam Tetherow Sandhills Wireless cw wrote: My opinion is that you're not helping the big picture by saying compliance is more than you can handle. The FCC is not going to go out of their way to hand out more spectrum to providers that can't perform basic requirements. Just like they're not going to help providers that refuse to file 475 forms. You can build a unix box for five hundred dollars that will do the job for you. Or you can buy a turnkey box with support for seven thousand. I've seen it suggested people pool their funds and share a $7000 turnkey box. If you can't do any of these things, then you can't provide required services. I don't like or trust government but I don't think they're out of line requiring providers be CALEA compliant. This one ain't special interests motivated. - cw Jack Unger wrote: Dear Representative Stupak, I'm writing to support your request on March 14, 2007 asking that the FCC Commissioners consider a waiver from CALEA regulations for small broadband providers. In a nutshell, the costs of complying with the CALEA provisions are far in excess of what small broadband providers can afford to pay. It is poor government policy to allow the costs of CALEA compliance to literally put small broadband providers out of business thereby denying broadband Internet access to many rural Americans. Do you plan to introduce legislation that directs the FCC to reconsider their regulations and to consider the compliance costs when regulating small Internet access providers? Please advise me how I can further support your effort to retain broadband Internet access service for rural Americans. Thank you for your time, interest, and efforts. Sincerely, Jack Unger P.S. - I am copying this email to the general email list maintained by the Wireless Internet Service Providers Association (WISPA.org) to help as many small ISPs as possible learn about and support your efforts in their behalf. I will forward your response to this list. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Question
The FCC wrote: we conclude that establishments that acquire broadband Internet access service from a facilities-based provider to enable their patrons or customers to access the Internet from their respective establishments are not considered facilities-based broadband Internet access service providers Hm. It'd be one heckuva stretch, but by reading the letter (as opposed to the spirit) of that paragraph, many smaller WISPs would automatically be exempt. I know my office has acquired broadband Internet access service from a facilities-based provider (our upstream ISP) and we're enabling our customers to access the Internet from their respective establishments (i.e. our customers pay for Internet at their homes or offices). By the letter of that paragraph (and, to be fair, I haven't read all the context surrounding it) most any single-homed WISP would be exempt, as they could just say go talk to our upstream. (I doubt it'd work for multi-homed ISPs, as that would require multiple upstreams to be tapped and somehow synchronized, which is probably technically annoying.) David Smith MVN.net -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Exemption for Small Wireless ISPs
Thank you Jack. I am glad to see someone doing something for their beliefs instead of kicking WISPA in the chins for not doing it for them. WISPA is here for all of you to interact and decide what and how you want to represent yourselves and your industry. Jack knows that means he can do something and is doing something. Way to go Jack. It is usually only 4 or 5 of us within WISPA who actually do something to light a fire under people's butts. I am glad to see you take the step this time. That's called leadership people. Jack showed you how its done folks. If you want change then make it happen. This was less work than complaining about the problem and is infinitely more productive toward getting something done about the issues that many have been talking about here with regard to fears of inability to meet the demands of CALEA. Scriv Jack Unger wrote: Dear Representative Stupak, I'm writing to support your request on March 14, 2007 asking that the FCC Commissioners consider a waiver from CALEA regulations for small broadband providers. In a nutshell, the costs of complying with the CALEA provisions are far in excess of what small broadband providers can afford to pay. It is poor government policy to allow the costs of CALEA compliance to literally put small broadband providers out of business thereby denying broadband Internet access to many rural Americans. Do you plan to introduce legislation that directs the FCC to reconsider their regulations and to consider the compliance costs when regulating small Internet access providers? Please advise me how I can further support your effort to retain broadband Internet access service for rural Americans. Thank you for your time, interest, and efforts. Sincerely, Jack Unger P.S. - I am copying this email to the general email list maintained by the Wireless Internet Service Providers Association (WISPA.org) to help as many small ISPs as possible learn about and support your efforts in their behalf. I will forward your response to this list. -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
- Original Message - From: Jack Unger [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Monday, April 30, 2007 7:56 PM Subject: Re: [WISPA] CALEA Compliance I went to email him, but his website says he will not respond to emails from outside his district. his website has no mention of his letter to the FCC. Is there anyone in his district on-list who can email or call him? People from outside his district are obviously going to be far back on the list of things to take time to deal with. I won't call unless there's nobody in his district. I did a lot of searching for additional information about his request, but I found nothing. I did find he has a lot of interest in internet / telecommunications, though I see he and I are on the opposite sides of a lot of things. His district is the upper peninsula of Michigan. Anyone? I'd like to hear the FCC response to Rep. Bart Stupak's request to waive the CALEA regulations for small broadband providers, as described in the following link. http://www.wispa.org/?p=21 -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
On Mon, 30 Apr 2007, Todd Barber wrote: I have seen numerous posts on the WISPA list indicating that a cost effective and compliant solution for this issue was being worked on and would become available in the near future. All I can say is please be patient. An answer to your question is coming. We (the wispa calea committee) are working on building the standard now. I have seen numerous posts indicating that small providers should not be concerned and that attaining CALEA compliance would not put them out of business. Those posts would be correct. I contacted them today. If this is the cost effective solution that is available, it isnt cost effective enough for our operation. The monthly is ¼ of our current bandwidth costs and the upfront is twice the cost of our head-end router that is servicing all of our customers. Bearhill (or any other TTP) is a good solution if you want someone else to assist in managing your CALEA compliance. A TTP is NOT a requirement, however. If someone has better information on how a small ISP can become CALEA compliant in a cost effective manner, please contact me as I am all ears. If there is better information or a defined solution being presented on the WISPA member list, I am more than willing to pay membership dues to access it. If there isnt a better solution being discussed there, I would just as well save the due money as it will probably not be long before we are out of business or sell to a larger competitor and the membership will be useless. All I can say is (again), be patient. This information is coming. BTW, becoming a WISPA member is a good idea anyway. CALEA will not be the downfall of anyone (except those that refuse to obey the law). -- Butch Evans Network Engineering and Security Consulting 573-276-2879 http://www.butchevans.com/ My calendar: http://tinyurl.com/y24ad6 Training Partners: http://tinyurl.com/smfkf Mikrotik Certified Consultant http://www.mikrotik.com/consultants.html-- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
John Scrivner wrote: We look forward to proving that this thinking is wrong. What part of CALEA compliance is it that makes you think we cannot develop a low cost and reasonable solution which will not break the bank? Even if you do come up with a way to handle LI in time for the deadline that is only going to solve one part of CALEA. We checked with Cisco in the beginning regarding CALEA. We were assured they were working on it and would have a solution in time (much the same way WISPA has). We now have Cisco's solution and understand it does exactly what they say it would do; namely LI. Unfortunately, LI isn't enough as I have outlined in other posts. We have had to develop the rest of the solution on our own. Reread my post on the practical requirements of dealing with ELSUR and check with your attorneys. I think you'll find no technical solution to those requirements. -Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
I still would like to know the amount of incident that this CALEA will cause for all of its costs to our industry. Did anyone ask the FBI, why they cannot have several machines and deliver them as needed pre-configured then we can install them when they are needed. It is highly unreasonable for the FBI to ask everyone to have a utility and manage this utility when it will never be used by a very large portion of our industry. It is far cheaper for the government to sameday ship their device to us anywhere in the nation then it is to have everyone else trying to scramble to satisfy a need that will largely be an expensive dust collector in most businesses. Anyone know if this has been posed to the FBI. - Original Message - From: Matt Liotta [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Tuesday, May 01, 2007 7:54 AM Subject: Re: [WISPA] CALEA Compliance John Scrivner wrote: We look forward to proving that this thinking is wrong. What part of CALEA compliance is it that makes you think we cannot develop a low cost and reasonable solution which will not break the bank? Even if you do come up with a way to handle LI in time for the deadline that is only going to solve one part of CALEA. We checked with Cisco in the beginning regarding CALEA. We were assured they were working on it and would have a solution in time (much the same way WISPA has). We now have Cisco's solution and understand it does exactly what they say it would do; namely LI. Unfortunately, LI isn't enough as I have outlined in other posts. We have had to develop the rest of the solution on our own. Reread my post on the practical requirements of dealing with ELSUR and check with your attorneys. I think you'll find no technical solution to those requirements. -Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
If we can come up with a device to capture and send to an FTP server and allow for VPN connectivity then why can the most powerful law agency in the world not do the same. This way they controll it all. We just provide the pipe to get the data back to their preferred location. I do not know much about CALEA. I am still reading more and more, but if they are asking us to do something, then they had better already know how to do it. ross - Original Message - From: Matt Liotta [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Tuesday, May 01, 2007 9:54 AM Subject: Re: [WISPA] CALEA Compliance Ross Cornett wrote: I still would like to know the amount of incident that this CALEA will cause for all of its costs to our industry. Did anyone ask the FBI, why they cannot have several machines and deliver them as needed pre-configured then we can install them when they are needed. It is highly unreasonable for the FBI to ask everyone to have a utility and manage this utility when it will never be used by a very large portion of our industry. It is far cheaper for the government to sameday ship their device to us anywhere in the nation then it is to have everyone else trying to scramble to satisfy a need that will largely be an expensive dust collector in most businesses. Let's assume that the FBI would send you a box for LI. What about the remaining requirements for CALEA? -Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
You'd come across a lot of privacy issues giving the FBI that sort of access. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: Ross Cornett [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Tuesday, May 01, 2007 9:59 AM Subject: Re: [WISPA] CALEA Compliance If we can come up with a device to capture and send to an FTP server and allow for VPN connectivity then why can the most powerful law agency in the world not do the same. This way they controll it all. We just provide the pipe to get the data back to their preferred location. I do not know much about CALEA. I am still reading more and more, but if they are asking us to do something, then they had better already know how to do it. ross - Original Message - From: Matt Liotta [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Tuesday, May 01, 2007 9:54 AM Subject: Re: [WISPA] CALEA Compliance Ross Cornett wrote: I still would like to know the amount of incident that this CALEA will cause for all of its costs to our industry. Did anyone ask the FBI, why they cannot have several machines and deliver them as needed pre-configured then we can install them when they are needed. It is highly unreasonable for the FBI to ask everyone to have a utility and manage this utility when it will never be used by a very large portion of our industry. It is far cheaper for the government to sameday ship their device to us anywhere in the nation then it is to have everyone else trying to scramble to satisfy a need that will largely be an expensive dust collector in most businesses. Let's assume that the FBI would send you a box for LI. What about the remaining requirements for CALEA? -Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
Ross Cornett wrote: I still would like to know the amount of incident that this CALEA will cause for all of its costs to our industry. Did anyone ask the FBI, why they cannot have several machines and deliver them as needed pre-configured then we can install them when they are needed. It is highly unreasonable for the FBI to ask everyone to have a utility and manage this utility when it will never be used by a very large portion of our industry. It is far cheaper for the government to sameday ship their device to us anywhere in the nation then it is to have everyone else trying to scramble to satisfy a need that will largely be an expensive dust collector in most businesses. Let's assume that the FBI would send you a box for LI. What about the remaining requirements for CALEA? -Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
You need to filter out data that is not under the subpoena. And (as I understand it) the LEA should work with you to get the data. Ross Cornett wrote: If we can come up with a device to capture and send to an FTP server and allow for VPN connectivity then why can the most powerful law agency in the world not do the same. This way they controll it all. We just provide the pipe to get the data back to their preferred location. I do not know much about CALEA. I am still reading more and more, but if they are asking us to do something, then they had better already know how to do it. ross -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
Prior to CALEA, my plan for helping law enforcement consisted of the following... Introducing them to my upstream (they'd already know them anyway, because my netblocks belong to them) and having them use my provider's nice, secure NOC for tapping into my upstream traffic via a managed switch and mirroring. I have no place to put a mediation box, no place to put any kind of physical tap. I have no physical point this can be done, WITHIN THE BOUNDARIES OF MY NETWORK. Physically, it has to be located at someone else's facility. This is not compliant. And one says why are you stressing? Ok, how many of you have dealt with the IRS? How about electrical codes? Building codes? OSHA? Saying that the feds just want the data is just like saying the IRS just wants some money. Wrong. They want absolute compliance, to the letter. When we had to dispose of solvents and cleaners, we went many rounds with the DEQ for Oregon. There was no accomplish this goal, it was obey the letter, period. Great solutions were not allowed, because they didn't fit the absolute letter. Welcome to the world of regulatory hell. Conversations with people in DC are one thing. They will present as a nice of face as possible to disarm you. The IRS people are pleasant... at first.. too.So was the DEQ. Oh, we don't want to fine you, just get you into compliance, but the moment we talked to them, we had to immediately do what they demanded, or face fines. For instance, we had to clean some parts in something like carb cleaner. It is washed off with high pressure hot water. That means that it, and the water you wash it off with... is hazardous waste. So, limits on the disposal of hazardous waste? Well, we had a gallon limit. So, we said, we buy 20 gallons a year, does this mean we generate 20 gallons of waste? The answer was no. Every gallon of water used to rinse it off became another measured gallon. They told us that the preferred method of disposal was to evaporate the carb cleaner. So, we said great... we'll just rinse it off with water and evaporate the water and cleaner. Nope. if we rinse it with water, then that water counts toward hazardous waste gallons. Stupid, eh? No matter how much water we used, we were still evaporating 20 gallons of this solvent. But the evaporated water was 'hazardous waste and if we mixed too much water in this, we went over the gallon limit. Read the document... They will read your filings, and then they will start on a process of bringing you into compliance. Tapping at your gateway? That's fine. That's good faith to start. Then you will have to demonstrate contined progress toward compliance. Dont' have 24 hour response? That's fine. You will only need to say WHEN you'll have it. You WILL eventually have to capture it at the client end, or at the AP if you're wireless. You WILL provide a date when this will happen. I hate to say it, but it sounds like some very gullible people talked to the feds. They're not the ones who will be reading the forms and assessing fines. They are there to put a nice face on things. But compliance, to the letter? That's what the name of the game is. Always will be. Always has been. What has to be gotten across, is that some technologies do not work this way. They will have to make a definitive statement ( the calea faq is woefully out of date - www.askcalea.net , with contradictory information published later) . I quote: The primary goal of the Order is to ensure that Law Enforcement Agencies have all of the resources that CALEA authorizes with regard to facilities-based broadband Internet access providers (ISP) and interconnected voice over Internet protocol (VOIP) providers. Not to do what you can but to get EVERYTHING they they are authorized to get. That's my opinion of how the future is going to play out, unless something changes between now and then. They make the statement that we don't intend to alter the way networks work. But when you read the way enforcement works.. You will. Just witness how many people are talking about fundamentally altering network operations to be compliant now. But more importantly... from this day forward, you will not be able to start, or deploy a wireless or any other kind of internet providing network that doesn't have ALL aspects of CALEA compatibility built in. That pretty much rules out the vast majority of present equipment and methods of deployment. - Original Message - From: Ross Cornett [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Tuesday, May 01, 2007 7:40 AM Subject: Re: [WISPA] CALEA Compliance I still would like to know the amount of incident that this CALEA will cause for all of its costs to our industry. Did anyone ask the FBI, why they cannot have several machines and deliver them as needed pre-configured then we can install them when they are needed. It is highly unreasonable for the FBI to ask
Re: [WISPA] CALEA Compliance
Hi Ross, To your point below, it was actually the FBI's (and other law enforcement agencies(LEAs)) inability to do just what you describe that precipitated expanding CALEA to facilitates based broadband and interconnected VOIP providers. To date, every time law enforcement has shown up at one of our clients' doors, the intercept had to be handled on an individual case basis (ICB). Now if you think about the variety of broadband offerings (DSL, Cable, Fiber, Wireless, Satellite, Broadband over Power Lines, etc), the endless possible backbone configurations and vendor equipment choices, and then factor in the complexity and mobility of VOIP offerings from Skype to Vonnage, ect, you end-up with a situation where no one LEA can have a 'magic box' that they can drop into every environment that: 1.)collects evidence in a legally admissible manner 2.)protects the privacy of users that aren't targeted Because of this it isn't possible for the LEA to quickly get a intercept up and running in many environments and in time sensitive situations such as an Amber Alert or public safety emergency (i.e. - terrorism), this can be a serious impediment. You also have to remember that Law Enforcement's primary focus is Law Enforcement and not developing technology. The FBI/DEA/DOJ said as much when in 2004 they petitioned the FCC to expand CALEA to broadband and VoIP. Essentially, they argued that it isn't possible for them to keep up with the pace of technology. (By the way, this isn't an ability issue, the FBI and Secret Service, ect. have exceptionally talented teams. Instead it really is a resource issue; the number of staff they have to cover these issues can't cover the scale of the problem.) As a result of the FBI/DEA/DOJ request, the FCC posted a Notice of Proposed Rulemaking (NPRM) in August of 2004 seeking comment from all effected parties (industry, consumers, and law enforcement). In August of 2005 the FCC Released the First Report and Order and Further NPRM that outlined some of the FCC's ruling sought further comment on certain aspects the ruling. In May of 2006 the FCC's Second Order and Report on this issue finalized the expansion of CALEA to facilities based broadband providers and interconnected VoIP providers. Shortly thereafter in June 2006, the DC circuit court of appeals upheld FCC's CALEA Broadband Order in American Council on Education vs. FCC. Hope this helps. Tim Kery BearHill Security, Inc. [EMAIL PROTECTED] Date: Tue, 1 May 2007 09:40:06 -0500 From: Ross Cornett [EMAIL PROTECTED] Subject: Re: [WISPA] CALEA Compliance To: WISPA General List wireless@wispa.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; format=flowed; charset=iso-8859-1; reply-type=response I still would like to know the amount of incident that this CALEA will cause for all of its costs to our industry. Did anyone ask the FBI, why they cannot have several machines and deliver them as needed pre-configured then we can install them when they are needed. It is highly unreasonable for the FBI to ask everyone to have a utility and manage this utility when it will never be used by a very large portion of our industry. It is far cheaper for the government to sameday ship their device to us anywhere in the nation then it is to have everyone else trying to scramble to satisfy a need that will largely be an expensive dust collector in most businesses. Anyone know if this has been posed to the FBI. http://www.bearhill.com/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
I have seen numerous posts on the WISPA list indicating that a cost effective and compliant solution for this issue was being worked on and would become available in the near future. I think that is wishful thinking on some people's part. When you see companies like Cisco struggle to provide a minimum of support on a small subset of their products you can begin to imagine the scope of the problem. Every post I have seen where people have suggest a solution, the suggestion only solved one specific part of CALEA. Solving part of the problem is not enough. I have seen numerous posts indicating that small providers should not be concerned and that attaining CALEA compliance would not put them out of business. I would argue that small providers should be very concerned. Not just about CALEA, but a concerted effort on the part of large telcos to ruin competition through seemingly legimate public safety issues. The facts remain that our business model currently is profitable and we are providing a valuable service in a rural area. The added costs of CALEA compliance jeopardize our ability to continue providing service. Who needs to explain to the hundreds of happy customers I currently service in a rural community that they no longer have high speed internet and dont have an alternative broadband solution? Unfortunately, many consumers will lose as small companies go under. This won't be the first policy that is designed for the good of the many as opposed to the few. It isn't fair, but it is done. If someone has better information on how a small ISP can become CALEA compliant in a cost effective manner, please contact me as I am all ears. If there is better information or a defined solution being presented on the WISPA member list, I am more than willing to pay membership dues to access it. If there isnt a better solution being discussed there, I would just as well save the due money as it will probably not be long before we are out of business or sell to a larger competitor and the membership will be useless. I personally do not believe that any CALEA can be cost effective. Quite simply, solving CALEA requires spending money without earning any additional revenue. The only way to justify the CALEA expense is to accept it as a cost of doing business. This means simply that your market opportunity is lost if you aren't CALEA compliant. I firmly believe every service provider should have plans for being CALEA compliant or have plans for exiting the business. This one is different than E911; the liability will be staggering. -Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
I'd like to add my own brief CALEA comments and concerns. Out of respect for the maximum of 5 posts per day proposal, I'll keep it short. I'm thinking that extending CALEA to small WISPs without compensating them for their costs has more to do with the big fish eating the little fish than it has to do with national security or fighting crime. It also has a lot to do with Big Brother's quest for efficient control of the citizenry. It's much easier for government overseers to deal with a few big businesses than it is for them to deal with thousands of small businesses. I also can't help but wonder who owns the TTPs. Heck, if some of those are government front companies or owned by friends of people already installed in the Justice Department or the CIA, wouldn't that make illegal information gathering (for business or political purposes) even easier? But that's only my 2 cents worth... and I could be wrong. I'd like to hear the FCC response to Rep. Bart Stupak's request to waive the CALEA regulations for small broadband providers, as described in the following link. http://www.wispa.org/?p=21 In addition, this next link provides an interesting summary of what CALEA means to small ISPs and WISPs. http://www.freerepublic.com/focus/f-chat/1825361/posts jack [EMAIL PROTECTED] wrote: I have seen numerous posts on the WISPA list indicating that a cost effective and compliant solution for this issue was being worked on and would become available in the near future. I think that is wishful thinking on some people's part. When you see companies like Cisco struggle to provide a minimum of support on a small subset of their products you can begin to imagine the scope of the problem. Every post I have seen where people have suggest a solution, the suggestion only solved one specific part of CALEA. Solving part of the problem is not enough. I have seen numerous posts indicating that small providers should not be concerned and that attaining CALEA compliance would not put them out of business. I would argue that small providers should be very concerned. Not just about CALEA, but a concerted effort on the part of large telcos to ruin competition through seemingly legimate public safety issues. The facts remain that our business model currently is profitable and we are providing a valuable service in a rural area. The added costs of CALEA compliance jeopardize our ability to continue providing service. Who needs to explain to the hundreds of happy customers I currently service in a rural community that they no longer have high speed internet and don’t have an alternative broadband solution? Unfortunately, many consumers will lose as small companies go under. This won't be the first policy that is designed for the good of the many as opposed to the few. It isn't fair, but it is done. If someone has better information on how a small ISP can become CALEA compliant in a cost effective manner, please contact me as I am all ears. If there is better information or a defined solution being presented on the WISPA member list, I am more than willing to pay membership dues to access it. If there isn’t a better solution being discussed there, I would just as well save the due money as it will probably not be long before we are out of business or sell to a larger competitor and the membership will be useless. I personally do not believe that any CALEA can be cost effective. Quite simply, solving CALEA requires spending money without earning any additional revenue. The only way to justify the CALEA expense is to accept it as a cost of doing business. This means simply that your market opportunity is lost if you aren't CALEA compliant. I firmly believe every service provider should have plans for being CALEA compliant or have plans for exiting the business. This one is different than E911; the liability will be staggering. -Matt -- Jack Unger ([EMAIL PROTECTED]) - President, Ask-Wi.Com, Inc. FCC License # PG-12-25133 Serving the Broadband Wireless Industry Since 1993 Author of the WISP Handbook - Deploying License-Free Wireless WANs True Vendor-Neutral Wireless Consulting-Training-Troubleshooting FCC Part 15 Certification Assistance for Wireless Service Providers Phone (VoIP Over Broadband Wireless) 818-227-4220 www.ask-wi.com -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
I personally do not believe that any CALEA can be cost effective. Quite simply, solving CALEA requires spending money without earning any additional revenue. The only way to justify the CALEA expense is to accept it as a cost of doing business. This means simply that your market opportunity is lost if you aren't CALEA compliant. I firmly believe every service provider should have plans for being CALEA compliant or have plans for exiting the business. This one is different than E911; the liability will be staggering. -Matt Matt, We look forward to proving that this thinking is wrong. What part of CALEA compliance is it that makes you think we cannot develop a low cost and reasonable solution which will not break the bank? Scriv -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] CALEA Compliance
John, The part that is causing disbelief for me is the deadline is only days away and I haven't seen this solution or the costing for the solution. Todd Barber Skylink Broadband Internet [EMAIL PROTECTED] 970-454-9499 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Scrivner Sent: Monday, April 30, 2007 9:14 PM To: WISPA General List Subject: Re: [WISPA] CALEA Compliance I personally do not believe that any CALEA can be cost effective. Quite simply, solving CALEA requires spending money without earning any additional revenue. The only way to justify the CALEA expense is to accept it as a cost of doing business. This means simply that your market opportunity is lost if you aren't CALEA compliant. I firmly believe every service provider should have plans for being CALEA compliant or have plans for exiting the business. This one is different than E911; the liability will be staggering. -Matt Matt, We look forward to proving that this thinking is wrong. What part of CALEA compliance is it that makes you think we cannot develop a low cost and reasonable solution which will not break the bank? Scriv -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.467 / Virus Database: 269.6.2/781 - Release Date: 4/30/2007 9:14 AM -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
There won't be a WISPA standard done in time. We're still waiting on some documentation from the FBI and we need to get some internal documentation together as well. But you don't have to be compliant with ANY standard to be CALEA compliant! You just have to understand what you have to do if they ask and have mechanisms in place to do it. The basic parts you'll need are: Linux based router or tap capabilities on the on you have. OR a managed switch that will allow you to mirror a port. Linux server with OpenCALEA and an FTP program on it. Knowledge of how to make it record and distribute the needed data for LEA. You don't HAVE to use a TTP. You don't HAVE to follow a standard. You don't HAVE to panic just yet. *I've* talked to the folks at the FBI. They are NOT interested in running anyone out of business. They just want to catch bad guys and they *may* need our help to do it. Everything past that point is FUD. Why have a standard at all then? Because if you don't follow a standard you have to TRY to do anything that LEA asks of you. If you are standards compliant you only have to do what the standard says you have to do. Believe it or not, guys like Tim at Bearhill are working WITH WISPA in our efforts to develop a low cost/no cost solution to CALEA. We all know that many in this industry are still trying to figure out how to pay the bill on that latest order for 3 cpe units. I was sometimes 60 days behind with EC. I always paid but rarely on time. Sucked for me and for them. Fortunately, they hung with me and today we're as likely to be prepaid as we are to owe them. It's a nice change of pace. We also order radios in bulk, every couple to few weeks, rather than 1 or 2 at a time. Wondering how to make payroll, or buy diapers sucks. Most of us have been there. We got through those times partly because others reached a hand down and helped us where they could. We worked hard, honestly and consistently. I suggest that those of you in panic mode over CALEA go to www.askcalea.net and read up on it. Contact the FCC and the FBI yourselves if you don't believe those of us that are doing this work. So far I've found that folks are more than happy to answer my direct questions. At LEAST contact those that WISPA sent to the FBI! They know a lot of answers and they have a direct line to the FBI if they don't know the answer. Yeah, CALEA is a big deal. Yeah it's complicated. Yeah, it'll suck to have to perform. Yeah, you have to do it anyway :-). Might as well stop whining and start figuring out what all of those ttp's have already gotten figured out. Someone's gonna make money off of those out there that can't/won't figure it out for themselves. Might as well be you! marlon - Original Message - From: Todd Barber [EMAIL PROTECTED] To: 'WISPA General List' wireless@wispa.org Sent: Monday, April 30, 2007 8:19 PM Subject: RE: [WISPA] CALEA Compliance John, The part that is causing disbelief for me is the deadline is only days away and I haven't seen this solution or the costing for the solution. Todd Barber Skylink Broadband Internet [EMAIL PROTECTED] 970-454-9499 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Scrivner Sent: Monday, April 30, 2007 9:14 PM To: WISPA General List Subject: Re: [WISPA] CALEA Compliance I personally do not believe that any CALEA can be cost effective. Quite simply, solving CALEA requires spending money without earning any additional revenue. The only way to justify the CALEA expense is to accept it as a cost of doing business. This means simply that your market opportunity is lost if you aren't CALEA compliant. I firmly believe every service provider should have plans for being CALEA compliant or have plans for exiting the business. This one is different than E911; the liability will be staggering. -Matt Matt, We look forward to proving that this thinking is wrong. What part of CALEA compliance is it that makes you think we cannot develop a low cost and reasonable solution which will not break the bank? Scriv -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.467 / Virus Database: 269.6.2/781 - Release Date: 4/30/2007 9:14 AM -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Compliance
John, the reason I don't buy it, is as has been said...we're days from the deadline, and we have nothing. And, further, we don't know what's being worked on. There's a whole LOT of issues. There's extraction. There's picking out what's required. There's storage, there's VPN to the LEA, the list just goes on and on and on. Nobody can build a single device or program that can be applied to even the majority of networks. Not even a single point passthrough device that caches everyting (think solera) is going to work, if we have mutliple gateways in physically diverse locations.No solution is going to be universal. We all have such diverse ways of doing things that I'd say that any single solution won't even apply to the majority. There's the data format requirement, and the list goes on and on. What particular aspect is being worked on? The part that converts data to what they want? What about the tools to get the right information? What about a handbook that explains what data is required by the babble that shows up as acronyms or legalese?What about LEA's VPN's? What standard do they follow? Once you start down the road analyzing what you have to do after looking at the requirements, the 'assurances' here, at least, leave more questions than before. Without knowing what WISPA's doing, or anyone else is doing, we don't even know what parts won't work for us and we need to try to synthesize in two weeks. I have many hours of reading everything I can find, starting with the rules published by the FCC. Much of what is being said on this list by WISPA CALEA project people appears to conflict with what I read from the FCC itself.Once you start through the process they outline, you will FULLY comply, or you will exit the business, and that FULLY comply requires a lot of things that have been pooh-pooh'ed publicly here. Now, not to pick a fight, which I don't want to do. Nor to argue the merits of ANY of this, I consider myself reasonably bright and at least somewhat capable of running a WISP... And yet I cannot, seriusly, cannot figure out what I really have to do and not do. Much of what's being discussed here and elsewhere is VERY confusing.For instance, I keep reading that if you follow the industry standard, then you only have to do what's in the standard. But if you don't, then you have to do everything they ask. How the heck can the standard be acceptable if it doesn't do everything they want?If we must capture all the traffic, then it must be done at the client end. If we can't, then we really ARE NOT compliant. What's the point in working on something that's obviously deficient in the first place? Mostly, a lot of us just understand in our guts, that they have all the power, and absolutely NO hesitation in destroying us individually. Washington DC DOES NOT CARE ABOUT INDIVIDUAL PROVIDERS. Learn this, accept it, it is the definitive truth.Reassurances that they're not out to get us is nothing more than the attitude of a few political types in DC that have talked to WISPA people. We won't be dealing with them. Their assurances are... worth less than the ink required to print them out. The only hesitation they have, is if they get painted badly in the evening news.And we'll never make the news. The fact is, the people enforcing the rules are going to go by the letter. The absolute letter, bent as far as possible in the direction they want it bent. And that won't be our favor.Enforcement won't be impressed by but I was assured you won't put me out of business.We're just a number and name, and not even a face. They'll do what government does... hand out fines as agressively as they can justify. And since none of us can individually mount a defense of any kind, we ARE gone and dead. Why WISPA did not say in first response This CANNOT BE DONE, I have no idea. But you spoke for us and said you thought it ws a good idea. You killed us without any more consideration, apparently, than DC has for us. I say this to the people who communicated / filed / responded to the FCC and FBI. Frankly, I suggest we collectively hire some legal counsel to find some way of just stepping around it or a solid strategy for dealing with the fallout. Some real legal eagle shark type stuff. I suspect whether we do our utmost or ignore it, we're mostly going to end up in the same shoes. - Original Message - From: John Scrivner [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Monday, April 30, 2007 8:13 PM Subject: Re: [WISPA] CALEA Compliance I personally do not believe that any CALEA can be cost effective. Quite simply, solving CALEA requires spending money without earning any additional revenue. The only way to justify the CALEA expense is to accept it as a cost of doing business. This means simply that your market opportunity is lost if you aren't CALEA compliant. I firmly believe every
Re: [WISPA] CALEA Costs-Shifting Relief
I'm a bit confused, because I thougth the FCC specifically stated that there is no longer any funds, nor are any applications under those sections accepted anymore. http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-06-56A1.pdf Relevant paragraph: 2. More generally, we herein specify mechanisms to ensure that telecommunications carriers comply with CALEA. Specifically, under the express terms of the statute, all carriers subject to CALEA are obliged to become CALEA-compliant. We find that sections 107(c) and 109(b) of CALEA provide only limited and temporary relief from compliance requirements, and that they are complementary provisions that serve different purposes, which are, respectively: (1) extension of the CALEA section 103 compliance deadline for equipment, facility, or service deployed before October 25, 1998; and (2) recovery of CALEA-imposed costs. - Original Message - From: Dawn DiPietro [EMAIL PROTECTED] To: [EMAIL PROTECTED]; WISPA General List wireless@wispa.org Sent: Thursday, April 26, 2007 9:38 AM Subject: Re: [WISPA] CALEA Costs-Shifting Relief Peter, Thank you for posting this information. Since there is a $5000 application fee and that the provider has to prove that they have tried to comply I doubt the providers that scream the loudest will even take this information seriously and discount it like everything else we have heard about recently. I have heard on other lists that it is very difficult to get anything to come of this but as you know the misinformation flies rampantly these days. :-) Regards, Dawn DiPietro Peter R. wrote: *Section 109(b)(1) Petitions for Cost-Shifting Relief* CALEA section 109(b) permits a “telecommunications carrier,” as that term is defined by CALEA, to file a petition with the FCC and an application with the Department of Justice (DOJ) to request that DOJ pay the costs of the carrier’s CALEA compliance (cost-shifting relief) with respect to any equipment, facility or service installed or deployed after January 1, 1995. First, the carrier must file a section 109(b)(1) petition with the FCC and prove that, based on one or more of the criteria set forth in section 109(b)(1)(A)-(K), implementation of at least one particular solution that would comply with a particular CALEA section 103 capability requirement is not “reasonably achievable.” Second, if the Commission grants a section 109(b)(1) petition, the carrier must then apply to DOJ, pursuant to section 109(b)(2), to pay the reasonable costs of compliance for one of the solutions proposed in the section 109(b)(1) petition. DOJ may then either pay the reasonable costs of compliance or deny the application. If DOJ denies the section 109(b)(2) application, then the carrier is deemed to be CALEA compliant for the facilities, networks, and services (facilities) described in the section 109(b)(1) petition until those facilities are replaced, significantly upgraded or otherwise undergo a major modification. When those facilities are replaced, significantly upgraded or otherwise undergo a major modification, the carrier is obligated under the law to become CALEA compliant. The FCC may also specify in its CALEA section 109(b)(1) order granting a carrier’s petition the specific date when the replacement, upgrade or modification will occur and when CALEA compliance is required. Thus, a carrier’s obligation to comply with all CALEA requirements is only deferred when (1) the FCC grants a section 109(b)(1) petition, and (2) DOJ declines to pay the additional reasonable costs to comply with one or more of the CALEA requirements. No qualifying carrier is exempt from CALEA. Section 109(b)(1) petitions must be adequately supported, and the FCC decides whether to grant the petition strictly in reference to criteria set out in section 109(b)(1). Accordingly, carriers are encouraged to consult with competent legal and technical counsel before filing such a petition. Please note that a filing fee of $5,000.00 is required to accompany all CALEA section 109(b)(1) petitions filed with the FCC. See Appendix E entitled “Section 109(b)(1) Petitions for Cost-Shifting Relief: Filing Instructions,” and paragraphs 38-57 of the CALEA Second Report and Order http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-06-56A1.pdf for detailed filing instructions and further explanation of the scope of relief, and its limitations, available under section 109(b). More at the bottom of this page: http://www.fcc.gov/calea/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Costs-Shifting Relief
On one of the documents that I've rad that maybe is not that public, they have taken into consideration that some isp's can not afford to impliment calea and they have a solution for that. Dawn DiPietro wrote: Peter, Thank you for posting this information. Since there is a $5000 application fee and that the provider has to prove that they have tried to comply I doubt the providers that scream the loudest will even take this information seriously and discount it like everything else we have heard about recently. I have heard on other lists that it is very difficult to get anything to come of this but as you know the misinformation flies rampantly these days. :-) Regards, Dawn DiPietro Peter R. wrote: *Section 109(b)(1) Petitions for Cost-Shifting Relief* CALEA section 109(b) permits a “telecommunications carrier,” as that term is defined by CALEA, to file a petition with the FCC and an application with the Department of Justice (DOJ) to request that DOJ pay the costs of the carrier’s CALEA compliance (cost-shifting relief) with respect to any equipment, facility or service installed or deployed after January 1, 1995. First, the carrier must file a section 109(b)(1) petition with the FCC and prove that, based on one or more of the criteria set forth in section 109(b)(1)(A)-(K), implementation of at least one particular solution that would comply with a particular CALEA section 103 capability requirement is not “reasonably achievable.” Second, if the Commission grants a section 109(b)(1) petition, the carrier must then apply to DOJ, pursuant to section 109(b)(2), to pay the reasonable costs of compliance for one of the solutions proposed in the section 109(b)(1) petition. DOJ may then either pay the reasonable costs of compliance or deny the application. If DOJ denies the section 109(b)(2) application, then the carrier is deemed to be CALEA compliant for the facilities, networks, and services (facilities) described in the section 109(b)(1) petition until those facilities are replaced, significantly upgraded or otherwise undergo a major modification. When those facilities are replaced, significantly upgraded or otherwise undergo a major modification, the carrier is obligated under the law to become CALEA compliant. The FCC may also specify in its CALEA section 109(b)(1) order granting a carrier’s petition the specific date when the replacement, upgrade or modification will occur and when CALEA compliance is required. Thus, a carrier’s obligation to comply with all CALEA requirements is only deferred when (1) the FCC grants a section 109(b)(1) petition, and (2) DOJ declines to pay the additional reasonable costs to comply with one or more of the CALEA requirements. No qualifying carrier is exempt from CALEA. Section 109(b)(1) petitions must be adequately supported, and the FCC decides whether to grant the petition strictly in reference to criteria set out in section 109(b)(1). Accordingly, carriers are encouraged to consult with competent legal and technical counsel before filing such a petition. Please note that a filing fee of $5,000.00 is required to accompany all CALEA section 109(b)(1) petitions filed with the FCC. See Appendix E entitled “Section 109(b)(1) Petitions for Cost-Shifting Relief: Filing Instructions,” and paragraphs 38-57 of the CALEA Second Report and Order http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-06-56A1.pdf for detailed filing instructions and further explanation of the scope of relief, and its limitations, available under section 109(b). More at the bottom of this page: http://www.fcc.gov/calea/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA Costs-Shifting Relief
- Original Message - From: George Rogato [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, April 26, 2007 11:43 AM Subject: Re: [WISPA] CALEA Costs-Shifting Relief On one of the documents that I've rad that maybe is not that public, they have taken into consideration that some isp's can not afford to impliment calea and they have a solution for that. Yes, you get to submit to them ALL of your financial data, including your ability to borrow, and all state and federal money avaialble... Ohhh...and the fee for filing that you can't afford to comply is $5200, and they'll decide whether or not you can afford it... but you still pay the fee either way. Dawn DiPietro wrote: Peter, Thank you for posting this information. Since there is a $5000 application fee and that the provider has to prove that they have tried to comply I doubt the providers that scream the loudest will even take this information seriously and discount it like everything else we have heard about recently. I have heard on other lists that it is very difficult to get anything to come of this but as you know the misinformation flies rampantly these days. :-) Regards, Dawn DiPietro Peter R. wrote: *Section 109(b)(1) Petitions for Cost-Shifting Relief* CALEA section 109(b) permits a “telecommunications carrier,” as that term is defined by CALEA, to file a petition with the FCC and an application with the Department of Justice (DOJ) to request that DOJ pay the costs of the carrier’s CALEA compliance (cost-shifting relief) with respect to any equipment, facility or service installed or deployed after January 1, 1995. First, the carrier must file a section 109(b)(1) petition with the FCC and prove that, based on one or more of the criteria set forth in section 109(b)(1)(A)-(K), implementation of at least one particular solution that would comply with a particular CALEA section 103 capability requirement is not “reasonably achievable.” Second, if the Commission grants a section 109(b)(1) petition, the carrier must then apply to DOJ, pursuant to section 109(b)(2), to pay the reasonable costs of compliance for one of the solutions proposed in the section 109(b)(1) petition. DOJ may then either pay the reasonable costs of compliance or deny the application. If DOJ denies the section 109(b)(2) application, then the carrier is deemed to be CALEA compliant for the facilities, networks, and services (facilities) described in the section 109(b)(1) petition until those facilities are replaced, significantly upgraded or otherwise undergo a major modification. When those facilities are replaced, significantly upgraded or otherwise undergo a major modification, the carrier is obligated under the law to become CALEA compliant. The FCC may also specify in its CALEA section 109(b)(1) order granting a carrier’s petition the specific date when the replacement, upgrade or modification will occur and when CALEA compliance is required. Thus, a carrier’s obligation to comply with all CALEA requirements is only deferred when (1) the FCC grants a section 109(b)(1) petition, and (2) DOJ declines to pay the additional reasonable costs to comply with one or more of the CALEA requirements. No qualifying carrier is exempt from CALEA. Section 109(b)(1) petitions must be adequately supported, and the FCC decides whether to grant the petition strictly in reference to criteria set out in section 109(b)(1). Accordingly, carriers are encouraged to consult with competent legal and technical counsel before filing such a petition. Please note that a filing fee of $5,000.00 is required to accompany all CALEA section 109(b)(1) petitions filed with the FCC. See Appendix E entitled “Section 109(b)(1) Petitions for Cost-Shifting Relief: Filing Instructions,” and paragraphs 38-57 of the CALEA Second Report and Order http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-06-56A1.pdf for detailed filing instructions and further explanation of the scope of relief, and its limitations, available under section 109(b). More at the bottom of this page: http://www.fcc.gov/calea/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA articles
Peter, Thank you very much for taking the time to prepare this very informative CALEA page and especially for the following link: http://www.eff.org/Privacy/Surveillance/CALEA/?f=faq.html jack Peter R. wrote: A collection of CALEA info: http://www.rad-info.net/fcc/calea4.htm BTW, I even included some links to stuff that Mark would like. Regards, Peter Radizeski RAD-INFO, Inc. - NSP Strategist We Help ISPs Connect Communicate 813.963.5884 http://www.marketingIDEAguy.com -- Jack Unger ([EMAIL PROTECTED]) - President, Ask-Wi.Com, Inc. FCC License # PG-12-25133 Serving the Broadband Wireless Industry Since 1993 Author of the WISP Handbook - Deploying License-Free Wireless WANs True Vendor-Neutral Wireless Consulting-Training-Troubleshooting FCC Part 15 Certification Assistance for Wireless Service Providers Phone (VoIP Over Broadband Wireless) 818-227-4220 www.ask-wi.com -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA
We're waiting on the FBI to check a sample data intercept we've sent to them. Image Stream is very close to a fairly inexpensive box that can be used in a pinch. I'll let Jeff B. get into any needed details. We (wispa) are still working on this issue. We're in a holding pattern for the FCC though. Here is a VERY important point that has to be hammered home. You don't HAVE to follow anyone's standard to be compliant. You just have to be able to give the LEA the data. Having a standard limits the things that the LEA can ask you to do. It also give you more specific steps to follow etc. The CALEA team can verify or refute this. I believe it was decided that an MT router could deliver the needed data in the approved format. Mike? marlon - Original Message - From: Matt [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Monday, April 16, 2007 1:08 PM Subject: [WISPA] CALEA Where are things at? We paid Kris $100 to file SSI Plan but I am sure another deadline is coming soon. Hopefully a Mikrotik router will suffice. What is next? We are members of WISPA and Part-15. Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ-rant
Ron, you've lost me. What has Saudi got to do with anything here? Also, there's nothing at all wrong with CALEA. Did you read the FAQ or anything else about it? They have to come to US for the data. They won't be putting anything on our networks etc. They want us to be the ones to pull the specific customer data that they are looking for. Lastly, if you think the laws/rules we play under are wrong. Then work to get them changed. There are a few I'm working against myself. In the mean time, one had best obey the rules or risk loosing one's business/customers etc. WISPA isn't saying that the law is good or bad at this point. We're doing what we can to help you to not break it! marlon - Original Message - From: Ron Wallace [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Sunday, April 08, 2007 7:07 AM Subject: [WISPA] CALEA FAQ-rant To All, Thanks to all that participated. I know you worked hard and used valuable time which could have been spent on your business. However, Am I the only person in WISPA who disapproves of this 'STUFF'. This is the way Saudi Arabia is run, and that's a total police state. I know, I spent three years there. Are we just supposed to just swallow whatever the Bureaucrats 'shovel' our way? Man, this scares the bejesus out of me. ARGGG! Ron Wallace Hahnron, Inc. 220 S. Jackson Dt. Addison, MI 49220 Phone: (517)547-8410 Mobile: (517)605-4542 e-mail: [EMAIL PROTECTED] [EMAIL PROTECTED] -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ-rant
Ron, I understand your concern but if you want to play in this game you have follow the same laws as everyone else. Regards, Dawn DiPietro Ron Wallace wrote: To All, Thanks to all that participated. I know you worked hard and used valuable time which could have been spent on your business. However, Am I the only person in WISPA who disapproves of this 'STUFF'. This is the way Saudi Arabia is run, and that's a total police state. I know, I spent three years there. Are we just supposed to just swallow whatever the Bureaucrats 'shovel' our way? Man, this scares the bejesus out of me. ARGGG! Ron Wallace Hahnron, Inc. 220 S. Jackson Dt. Addison, MI 49220 Phone: (517)547-8410 Mobile: (517)605-4542 e-mail: [EMAIL PROTECTED] [EMAIL PROTECTED] -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ-rant
Yes,Marlon, I read the FAQ. I stand by my Evalution of the information that the Gov wants. Its over the top, none of their business, and I am working to change some of the laws like the ignorance of the Patriot Act. Saudi Arabia, collects the same type of info, we are becoming more like them, thats what they have to do with anything here, Marlon. It is a comparision. You might think about that. Then again you might choose not to. You may disagree with all I have said here. I think Iwill take this off list, from here on. Thank you for your response, You are a good man. Ron -Original Message- From: Marlon K. Schafer [mailto:[EMAIL PROTECTED] Sent: Sunday, April 8, 2007 11:07 AM To: 'WISPA General List' Subject: Re: [WISPA] CALEA FAQ-rant Ron, you've lost me. What has Saudi got to do with anything here? Also, there's nothing at all wrong with CALEA. Did you read the FAQ or anything else about it? They have to come to US for the data. They won't be putting anything on our networks etc. They want us to be the ones to pull the specific customer data that they are looking for. Lastly, if you think the laws/rules we play under are wrong. Then work to get them changed. There are a few I'm working against myself. In the mean time, one had best obey the rules or risk loosing one's business/customers etc. WISPA isn't saying that the law is good or bad at this point. We're doing what we can to help you to not break it! marlon - Original Message - From: Ron Wallace [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Sunday, April 08, 2007 7:07 AM Subject: [WISPA] CALEA FAQ-rant To All, Thanks to all that participated. I know you worked hard and used valuable time which could have been spent on your business. However, Am I the only person in WISPA who disapproves of this 'STUFF'. This is the way Saudi Arabia is run, and that's a total police state. I know, I spent three years there. Are we just supposed to just swallow whatever the Bureaucrats 'shovel' our way? Man, this scares the bejesus out of me. ARGGG! Ron Wallace Hahnron, Inc. 220 S. Jackson Dt. Addison, MI 49220 Phone: (517)547-8410 Mobile: (517)605-4542 e-mail: [EMAIL PROTECTED] [EMAIL PROTECTED] -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ-rant
Thanks Dawn, I don't have to like the infringement on our freedom of speech expression or my interpretation of it. -Original Message- From: Dawn DiPietro [mailto:[EMAIL PROTECTED] Sent: Sunday, April 8, 2007 11:32 AM To: 'WISPA General List' Subject: Re: [WISPA] CALEA FAQ-rant Ron, I understand your concern but if you want to play in this game you have follow the same laws as everyone else. Regards, Dawn DiPietro Ron Wallace wrote: To All, Thanks to all that participated. I know you worked hard and used valuable time which could have been spent on your business. However, Am I the only person in WISPA who disapproves of this 'STUFF'. This is the way Saudi Arabia is run, and that's a total police state. I know, I spent three years there. Are we just supposed to just swallow whatever the Bureaucrats 'shovel' our way? Man, this scares the bejesus out of me. ARGGG! Ron Wallace Hahnron, Inc. 220 S. Jackson Dt. Addison, MI 49220 Phone: (517)547-8410 Mobile: (517)605-4542 e-mail: [EMAIL PROTECTED] [EMAIL PROTECTED] -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
RE: [WISPA] CALEA FAQ-rant
CALEA is actually a MAJOR improvement over Carnivore. With Carnivore, they took the whole stream of traffic from everyone, with CALEA, they only get the info that the judge approved. Do you have an issue with all wiretaps (judge approved), or just this sort? Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ron Wallace Sent: Sunday, April 08, 2007 10:07 AM To: WISPA General List Subject: [WISPA] CALEA FAQ-rant To All, Thanks to all that participated. I know you worked hard and used valuable time which could have been spent on your business. However, Am I the only person in WISPA who disapproves of this 'STUFF'. This is the way Saudi Arabia is run, and that's a total police state. I know, I spent three years there. Are we just supposed to just swallow whatever the Bureaucrats 'shovel' our way? Man, this scares the bejesus out of me. ARGGG! Ron Wallace Hahnron, Inc. 220 S. Jackson Dt. Addison, MI 49220 Phone: (517)547-8410 Mobile: (517)605-4542 e-mail: [EMAIL PROTECTED] [EMAIL PROTECTED] -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ-rant
However, Am I the only person in WISPA who disapproves of this 'STUFF'. This is the way Saudi Arabia is run, and that's a total police state. I know, I spent three years there. Are we just supposed to just swallow whatever the Bureaucrats 'shovel' our way? Man, this scares the bejesus out of me. ARGGG! Ron Wallace In WISPA's efforts to find a way to help wisps become CALEA compliant with the least pain. It may sound like WISPA has endorsed the idea of spying, wiretaps, and or government intrusion into our networks. But thats not the situation. Actually, the WISPA board has NOT discussed this aspect of CALEA, only what are we going to do to get it so that wisps can afford to do this without having to spend $150,000.00 upfront plus, as we've all read in the CALEA documents. Our only goal is to ease the cost of the pain. I won't get into the political aspects of this stuff, but your not alone Ron. -- George Rogato Welcome to WISPA www.wispa.org http://signup.wispa.org/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA FAQ-rant
On Sun, 08 Apr 2007 14:07:01 +, Ron Wallace wrote To All, Thanks to all that participated. I know you worked hard and used valuable time which could have been spent on your business. However, Am I the only person in WISPA who disapproves of this 'STUFF'. This is the way Saudi Arabia is run, and that's a total police state. I know, I spent three years there. Are we just supposed to just swallow whatever the Bureaucrats 'shovel' our way? Man, this scares the bejesus out of me. ARGGG! Ron Wallace Hahnron, Inc. 220 S. Jackson Dt. Addison, MI 49220 Phone: (517)547-8410 Mobile: (517)605- 4542 e-mail: [EMAIL PROTECTED] [EMAIL PROTECTED] Ron, there is a truth that the constitution says that with a court order, almost anything can be searched. I don't know that any of us really seriously disagree with that. If there were an absolute privacy, then we'd be unable to catch or prosecute some really bad people. Now let's look at CALEA. CALEA was written to allow simple phone taps in a non-wired world - electronic switching of POTS. Seems reasonable, seeing as how Congress did ante up the money to pay the subjects to make the changes. When we read the FAQ, we find absolute requirements that EVERY cpe or AP you have be changed to become CALEA compliant. How many of you run stuff that's now out of date or no longer produced? How many of you have equipment that physically lacks the capability of being changed to provide the data mirror capability? Again, the FAQ, ALL equipment providers must make their equipment compliant. And what if they don't? A LOT of our stuff comes from offshore or outside our borders. Arbitrary demands we include certain specified functionality including certain code in all equipment.. What if they won't? It becomes illegal to use, that's what. What if they do? We're handing the mechanism used to intercept law enforcement type demands to people outside our country, with no loyalty, obligations, or even assurance of fidelity. Can you say built in back door? And OUR posteriors are on the line, since WE have to GAURANTEE privacy and confidentiality. Even though we produce none of it, wrote none of it, and have no recourse on the people who did. Even worse, we're totally at someone else's mercy to maintain full and bug-free compliance through upgrades, updates, etc. So, if the code won't fit into your Trango's firmware, guess who will be buying new Trango equipment? What if you own stuff that's no longer in production. Do you suppose compliance backfitting will be at a 'nice' price? Just examples of big brother injecting himself into your network, business, pocketbook. And WISPA won't even COMMENT to the regulators that is is TOTALLY WRONG. Instead, the leadership browbeats the membership when they object. It's the law they say. We only lost because nobody would object. Yes, it's all wrong, but the strategy is to isolate all who would object, and beat them down one at a time. One equipment maker at a time, one ISP at a time, one trade association at a time. All our leadership does is play politics, attack and isolate the individuals who object. When it finally results in a bunch of our industry failing, the comment will be that's the price of doing business, by those who remain and persist in the pursuit of market dominance. Frankly, today, I have pneumonia, the flu, and a cold... and that doesn't make me half as sick as how we've been taken down. Mark Koskenmaki Neofast, Inc Broadband for the Walla Walla Valley and Blue Mountains 541-969-8200 -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA info
Marlon, Below are just a few typos I found on this very informative WISPA CALEA FAQ. Last paragraph section 1; There are 2 periods at the end of the first sentence. Section 9; Should it be hash or Hash? Question 2 Section 18; Asymmetric is spelled wrong. Last paragraph Section 18; Can anyone tell me what is wrong with the following sentence? This may indeed mean that you have to get a USB drive and hang it on the collection server They will work with us. You are right that this document was worked on since it was posted on the WISPA public list and it is a bummer you missed these last few typos. I would like to thank everyone that took time out of their already busy lives to get answers for the complicated questions regarding CALEA compliance. Regards, Dawn DiPietro Marlon K. Schafer (509) 982-2181 wrote: Hi All, Alex has posted a lot of new CALEA info on www.isp-planet.com today. Pay particular attention to the WISPA CALEA FAQ. We sent a team to Quantico to get answers to the common questions we saw people ask. Hope this helps, Marlon (509) 982-2181 (408) 907-6910 (Vonage)Consulting services 42846865 (icq)WISP Operator since 1999! [EMAIL PROTECTED] www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA
The problem with that is that it will usually be possible for data to move sideways in a network before it gets up to an upstream provider. marlon - Original Message - From: John Scrivner [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Thursday, March 29, 2007 9:44 PM Subject: Re: [WISPA] CALEA I doubt that is the case. If the upstream is inline and can provide the data flow from a point of aggregation (upstream network connection) then the TTP hardware connected upstream should be compliant. Scriv Marlon K. Schafer (509) 982-2181 wrote: A ttp is compliant. But it's entirely possible (probably likely) that the ttp's hardware will have to be at the wisp's local. Not at the upstream. Marlon (509) 982-2181 (408) 907-6910 (Vonage)Consulting services 42846865 (icq)WISP Operator since 1999! [EMAIL PROTECTED] www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Matt Liotta [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Cc: [EMAIL PROTECTED] Sent: Monday, March 26, 2007 5:25 AM Subject: Re: [WISPA] CALEA Butch Evans wrote: This is not acceptable. ALL facilities based service providers are required to be compliant. How is using a 3rd party not compliant? I seem to recall the FCC specifically allows for 3rd parties to provide your compliance. -Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA
I doubt that is the case. If the upstream is inline and can provide the data flow from a point of aggregation (upstream network connection) then the TTP hardware connected upstream should be compliant. Scriv Marlon K. Schafer (509) 982-2181 wrote: A ttp is compliant. But it's entirely possible (probably likely) that the ttp's hardware will have to be at the wisp's local. Not at the upstream. Marlon (509) 982-2181 (408) 907-6910 (Vonage)Consulting services 42846865 (icq)WISP Operator since 1999! [EMAIL PROTECTED] www.odessaoffice.com/wireless www.odessaoffice.com/marlon/cam - Original Message - From: Matt Liotta [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Cc: [EMAIL PROTECTED] Sent: Monday, March 26, 2007 5:25 AM Subject: Re: [WISPA] CALEA Butch Evans wrote: This is not acceptable. ALL facilities based service providers are required to be compliant. How is using a 3rd party not compliant? I seem to recall the FCC specifically allows for 3rd parties to provide your compliance. -Matt -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA compliance methods
On another subject Two months ago, we were ready to join WISPA. At the time, I felt that WISPA had proven its longevity and was becoming a mature voice for the WISP's. But, after the form 477 issue, FCC sticker issue, and now the CALEA issue, I'm pretty sure that I disagree with the majority of the members on what stance should be taken on these issues. Can you please share your thoughts on where you think WISPA should stand on these issues? This is public list and your feedback is appreciated. That being the case, why should I still join? Because you can be as much a part of the direction of WISPA as any one else who is a member. Why would you ignore that opportunity to shape your industry? Scriv -- Blair Davis West Michigan Wireless ISP 269-686-8648 -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA compliance methods- For Clint
Clint, Thanks for the great information, in this and your other posts. One of the Linux guys here downloaded the opencalea package and started testing it. It sure is nice seeing the information it generates. And activity is picking up on the mailing list. I feel a glimmer of hope ... Adam - Original Message - From: Clint Ricker [EMAIL PROTECTED] To: WISPA General List wireless@wispa.org Sent: Wednesday, March 28, 2007 12:01 AM Subject: Re: [WISPA] CALEA compliance methods- For Clint Ralph, My apologies for the confusion. I think we are more or less on the same page method-wise for gathering that information; I made some assumptions that may have been applicable to your network. Now, as far as the pretty red package and bow for transferring the information to a law enforcement agency (LEA), I'll take a stab at that, although, as I'm not a lawyer, my usefulness is limited. Still, having paid for and read through the spec, it's not all that complicated of a red package. I don't think that it's worth the $10,000+ commercial solutions are going for. However, I've not been able (yet) to track down the actual transmission to the LEA, other than it is over some sort of VPN, so I am missing that piece of the puzzle. But the format itself is seems fairly simple to implement and, indeed, is already at least somewhat implemented with opencalea. Good resources to look at: - OpenCALEA (http://www.opencalea.org/) OpenCALEA is an initiative to create an open source platform to comply with CALEA. The mailing list is a very good resource. The software is rough, but already covers the basic needs of most ISPS to a point except the actual handoff to the law enforcement agency (LEA) OpenCALEA Overview (PDF) (http://www.nanog.org/mtg-0702/presentations/karir.pdf) PDF overview of OpenCalea along with some conceptual network diagrams. Draft Specification (http://contributions.atis.org/UPLOAD/PTSC/LAES/PTSC-LAES-2006-084R8.doc) Reference specification for data portion of CALEA. Is functionally the same as the current (pay required) Baller Herbst Law Group CALEA Page (http://www.baller.com/calea.html) Great page with most of the important links. Look here for legal explanation, especially in the Plain Language Summary section. Cisco CALEA Webinar (http://www.opastco.org/docs/SP_CALEA_Webinar.ppt) CALEA Standards (http://www.askcalea.net/standards.html) Official list of standards CALEA interface. -- Notes from the above 1. The commercial packages are effectively devices that query a radius/authentication server and sniff on the network and then format the information to send to the law enforcement agency. No real magic. 2. OpenCALEA already has the basics of the system, although it doesn't seem to have any support (yet) for the authentication (AAA) portion. Future features will possibly include handoff to the LEA and more complex infrastructure for handling a wide, disparate network. 3. The only real requirements are 1. That the tap happens 2. The tap gathers both authentication/control information AND a complete capture of the session 3. That the output of 2 gets formatted according the the standard 4. That the information be transmitted to the LEA (seemingly through a VPN). 4. Based on 3, most of the equipment/solutions out there are heavily overengineered (see Cisco Webinar for an example). Most of the solutions are geared to a process that can be managed across carrier networks with subscribers into the millions. This is overkill for most WISPS :) On a given WISP of 1,000 subs, how often is a CALEA order actually going to happen? Infrequently enough that having to do some manual work each time is better than a high upfront cost (by manual work, I mean turning on a monitoring port/tap and manually initiating a VPN to the law enforcement agency as necessary). -- Clint Ricker Kentnis Technologies 800.783.5753 On 3/27/07, Ralph [EMAIL PROTECTED] wrote: Hello Clint. You are confusing me. When I mention MT, I said routers, not CPE. We don't use non type accepted CPE and therefore don't have MT in any form at the customer end. However our site routers and even the edge router ARE MT- even the edge router. Those are what I am talking about. I didn't say anything about putting any certain number of units in. And I really don't see how that would turn into hundreds of monitoring nodes. I'd just as soon only have to mess with it at one or two places. Our network is fed from two different points, but from the same provider. This provider told another WISP in the area (that he also upstreams) that he would not be able to do CALEA capture for us, but has now publicly said that he can. We'll have to see how that goes as it develops. If he will, then that makes him an even more valuable provider. Cisco's CALEA solution is at the router level. This seems to be the most logical place to do the tap- especially if the equipment/license/whatever is costly
Re: [WISPA] CALEA compliance methods
On Mon, 26 Mar 2007 22:09:23 -0700, Marlon K. Schafer wrote Mark, your info is 3 years old We have to be ready to tap our lines. Even IMs. marlon I think you missed my point, Marlon... That being that not even the government is a reliable source of information about what the government wants and demands. www.askcalea.com is direct from their mouths. Yes, it's old, but then the site is still considered live. THE FCC is saying one thing, a different agency is saying another. Concurrently. I have been attempting for how long now, to get across to you people that this whole CALEA flap for ISP's is NOT LAW, but opinion from the FCC, where it's attempting to write law instead of Congress. It's a mess, because it's NOT LAW, only Congress can write law and it has yet to write a law that says we have to do squat. Frankly, I think every broadband ISP should file and say we will never be compliant and just let them TRY to shut down every ISP in the country. It's about time we told THEM where to get off, rather than being lambs to the slaughter. But no. WISPA leads the charge to slaughter it's own industry by begging to be regulated out of existence. Just three years ago, the WISP industry and WISPA was going to show the world just how scrappy, independent and courageous we were. We did alright. We turned into worms and mashed ourselves into the pavement instead. One can only imagine the reaction if some actual competitive threat came along. Mark Koskenmaki Neofast, Inc Broadband for the Walla Walla Valley and Blue Mountains 541-969-8200 -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA compliance methods
Mark, wispa wrote: I have been attempting for how long now, to get across to you people that this whole CALEA flap for ISP's is NOT LAW, but opinion from the FCC, where it's attempting to write law instead of Congress. It's a mess, because it's NOT LAW, only Congress can write law and it has yet to write a law that says we have to do squat. Did you even bother to read the press release mentioned in your recent post? http://www.askcalea.com/docs/20040317.fbi.release.pdf As quoted from the press release mentioned above; Congress enacted CALEA in 1994 to help the nation's law enforcement community maintain its ability to use court-authorized electronic surveillance as an important investigative tool in an era of new telecommunications technologies and services. Today, electronic surveillance plays a vitally important role in law enforcement's ability to ensure national security and public safety. Also quoted from the same press release; Specifically, the petition requests the FCC establish rules that formally identify services and entities covered by CALEA, so both law enforcement and industry are on notice with respect to CALEA obligations and compliance. The petition makes this request because disagreements continue between industry and law enforcement over whether certain services are subject to CALEA. The petition requests the FCC find “broadband access” and “broadband telephony” to be subject to CALEA. Got any links for these other places you speak of? Below is a link to the latest report about CALEA and the reclassification of Wireless Providers as information services in case anyone is interested in reading. Page 18 and 19 make for some interesting reading. ;-) http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-07-30A1.pdf Regards, Dawn DiPietro -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA compliance methods
Mark, CALEA IS LAW. There are interpretations of that law, but they have been upheld by courts. CALEA is not the opinion of the DOJ or FCC. It is not far-reaching (like say the Patriot Act) or secret and possibly illegal like the NSA-ATT wiretapping / surveillance. It is part of the 2 biggest communications laws - TA96 and the Comm. Act of 19 Begun and held at the City of Washington on Tuesday, the twenty-fifth day of January, one thousand nine hundred and ninety-four An Act To amend title 18, United States Code, to make clear a telecommunications carrier's duty to cooperate in the interception of communications for law enforcement purposes, and for other purposes. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, TITLE I--INTERCEPTION OF DIGITAL AND OTHER COMMUNICATIONS SEC. 101. SHORT TITLE. This title may be cited as the `Communications Assistance for Law Enforcement Act'. Communications Act of 1934 (amended by the Telecommunications Act of 1996) Pub. L. No. 104-104, 110 Stat. 5647 (1996); 47 U.S.C. § 151 http://www4.law.cornell.edu/uscode/47/ch5schI.html /et seq/.; 47 U.S.C. §§ 153 http://www4.law.cornell.edu/uscode/47/153.html, 251 http://www4.law.cornell.edu/uscode/47/251.html, 252 http://www4.law.cornell.edu/uscode/47/252.html, 253 http://www4.law.cornell.edu/uscode/47/253.html, and 255 http://www4.law.cornell.edu/uscode/47/255.html and amended by the Communications Assistance for Law Enforcement Act, (CALEA) 47 USC §§ 1001-1010 http://www.law.cornell.edu/uscode/html/uscode47/usc_sup_01_47_10_9_20_I.html The Communications Act of 1934 created the FCC and gave this new agency the power to regulate telephones and radio. The 1996 Act amends the 1934, but is actually much longer. The purpose of the law was to encourage competition, but it also has a vast regulatory scheme. //*ACE v. CALEA*/ http://pacer.cadc.uscourts.gov/docs/common/opinions/200606/05-1404a.pdf/*, No. 05-1404*, U.S. Court of Appeals for the D.C. Circuit, Decided June 9, 2006 This case involves a statutory interpretation of 47 USC § 1002 http://www.law.cornell.edu/uscode/html/uscode47/usc_sec_47_1002000-.html. This law provides that a telecommunications carrier shall ensure that its equipment, facilities, or services that provide a customer or subscriber with the ability to originate, terminate, or direct communications are capable of being expeditiously isolated and accessed by the government pursuant to a court order or other lawful authorization. The communication must be able to be accessed before, during, or immediately after the transmission of a wire or electronic communication. An exception in section 1002 excludes from this requirement information services; or equipment, facilities, or services that support the transport or switching of communications for private networks or for the sole purpose of interconnecting telecommunications carriers. In September of 2005, the FCC issued an Order (FCC 05-153) that stated that broadband and VoIP (Voice over Internet Protocol) providers were covered (at least in part) by CALEA's definition of telecommunications carriers. Implementation of this Order (required by May 14, 2007) would necessitate colleges and universities that are broadband or VoIP providers to redesign their networks at a cost estimated to be over $450* per student in tuition fees. Given these high stakes, the America Council on Education (ACE) challenged the order, and this decision, which upheld the FCC Order is the result of the litigation. In a 2-1 decision, the Court of Appeals for the DC Circuit agreed with the FCC that providers of both broadband and VoIP serve as replacements for a substantial functionality of local telephone exchange service. This is key, as the definition of a telecommunications carrier in 47 USC § 1001(8) includes those providers that substantially replaces traditional transmission or switching. The court also found CALEA differed from the Telecom Act by not using the phrases telecommunications carrier and information services as mutually exclusive terms. The court found the FCC interpretation of the law reasonable. The court did state that if the case had been reviewed /de novo/, the ACE argument might have been found to be the more persuasive one. The U.S. Court of Appeals for the District of Columbia Circuit issued a decision on June 9, 2006 in the lawsuit brought by the American Council on Education (ACE) challenging the FCC's CALEA rules. Nor does our interpretation of section 332 of the Communications Act and its implementing regulations here alter either our decision in the CALEA proceeding to apply CALEA obligations to all wireless broadband Internet access providers, including mobile wireless providers, or our interpretations of the
Re: [WISPA] CALEA compliance methods
On Tue, 27 Mar 2007 07:31:56 -0400, Dawn DiPietro wrote Mark, wispa wrote: I have been attempting for how long now, to get across to you people that this whole CALEA flap for ISP's is NOT LAW, but opinion from the FCC, where it's attempting to write law instead of Congress. It's a mess, because it's NOT LAW, only Congress can write law and it has yet to write a law that says we have to do squat. Did you even bother to read the press release mentioned in your recent post? http://www.askcalea.com/docs/20040317.fbi.release.pdf As quoted from the press release mentioned above; Congress enacted CALEA in 1994 to help the nation's law enforcement community maintain its ability to use court-authorized electronic surveillance as an important investigative tool in an era of new telecommunications technologies and services. Today, electronic surveillance plays a vitally important role in law enforcement's ability to ensure national security and public safety. Also quoted from the same press release; Specifically, the petition requests the FCC establish rules that formally identify services and entities covered by CALEA, so both law enforcement and industry are on notice with respect to CALEA obligations and compliance. The petition makes this request because disagreements continue between industry and law enforcement over whether certain services are subject to CALEA. The petition requests [WINDOWS-1252?] the FCC find broadband access and broadband telephony to be subject to CALEA. Ok... here's an old joke. What's the difference between dogs and cats? The dog looks at you and says you give me everything, provide me with home, care, medicine, food, take care of all my needs... You must be a god!. The cat looks at you and says you give me everything, provide me with home, care, medicine, food, take care of all my needs... I must be a god!. We're saying EXACTLY the same thing, but the perspective is different. Read up on CALEA itself. There's absolutely NOTHING in it that even remotely addresses ISP's. It addresses TAPPING TELEPHONE CONVERSATIONS. Nothing else. It is VERY specific. When it was written, broadband didn't even EXIST, how COULD they have written a law that applies to it? It's as if Congress wrote a law that regulates the maintenance schedules on trains. Along comes OSHA, and demands that the DOT rule that the law must apply to trucking, as well, even though the whole concept is absurd. Congress knew it would NEVER get away with just wholesale handing it's shopping list of demands to industry for changes in the way it's equipment worked, and making industry PAY for it. Duhhh. That would never have made it past... well... even a kangaroo court. And the telcos would have fought it, collectively, with all thier legal muscle. Over the years, the FCC has (correctly) and and consistently insisted we are NOT telecommunications services or providers. Now, it suddenly says we ARE, but only for purposes of CALEA. Ohhh, could you park that decision on anything closer to what resembles vapor? I doubt it. Even worse, since the law didn't apply to us, it doesn't pay for what it OBVIOUSLY has to pay for. The FCC cannot just spend money, Congress has to do that. So, along comes the FCC and says WE have to pay for it. I've said this before, I'll say it again, the FCC threw in the most egregious demands they could think of (like requiring us to pay for it), in order to ensure this would LOSE in a legal challenge, since they weren't inclined to continue arguing with the FBI and DOJ. So, instead of defending what was defensible, they sidestepped and tossed the mess in our laps, and we're just sitting here taking it without so much as a word of protest. Gee, we must look like real shmucks to them by now. EVERYONE fights or at least ARGUES back when they do stuff... well, except for us. We beat on our own people for objecting. MAn, READ THE PUBLIC COMMENTS ON EVERYTHING THE FCC DOES! Fear to tell them they're wrong? Heck no, they say it every possible way they can think of! Had Congress tried CALEA without paying for it initially, the fight would have been HUGE, CALEA would have been tossed out in court on very firm ground I am sure. The FCC doesn't write law. It can't. The DOJ and FBI have NO END TO THE LIST OF DEMANDS, their wishes are infinitely long. But just because they WANT it doesn't mean they get it, at our expense. You and I pay taxes, so that when the government wants something, it has to debate, vote, and pony up and pay in the public budget for it. If we, the people, were not protected by the Constitution, the police would just stop us and demand we fill their car with gas, buy them new tires, tune it up, repaint their cars, use OUR building for their office, provide them internet for free, the list goes on and on and on. After all, we have to have cops
Re: [WISPA] CALEA compliance methods
On Tue, 27 Mar 2007 08:21:53 -0400, Peter R. wrote Mark, CALEA IS LAW. There are interpretations of that law, but they have been upheld by courts. YOu're arguing against things I'm not saying. CALEA is not the opinion of the DOJ or FCC. It is not far-reaching (like say the Patriot Act) or secret and possibly illegal like the NSA-ATT wiretapping / surveillance. The whole idea that WE are covered under CALEA is just FCC opinion, which is as changeable and variable as the wind. The ruling is capricious and founded on VAPOR, not substance. I just cannot believe you approve of unfunded federal mandates for public purposes. CALEA was not. Misapplying CALEA is. This is not OSHA mandates. This is not the same as requiring that a tower service company require their climbers to use a safety system. Not even close. If the federal government is justified with making us provide, AT OUR EXPENSE, law enforcement services, then we're one little itty bitty non- existent step from from being mandated to do ANYTHING they happen to wish for, and the wish lists from the swamp on the Potomac are so large they boggle the mind. And don't give me the we play dead for regulatory favors in the future crap. Nothing we do will buy us one MOMENT's worth of consideration, in EITHER direction. Mark Koskenmaki Neofast, Inc Broadband for the Walla Walla Valley and Blue Mountains 541-969-8200 -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA compliance methods
Hi, While I appreciate Mark's comments and point of view, I for one would like to also start looking for ways to possibly comply with CALEA in a cost-effective way. I'm afraid that if the conversation here is limited to whether we should comply or not, we might lose the opportunity to share with each other about technical implementation. Don't get me wrong, I'm not suggesting that the conversation about whether to comply should be halted, just that some room be given to those of us who also want to speak about implementation. I'm still interested if anyone has any point of view about any of the compliance methods that I discussed in my original post, from a technical standpoint. Thanks, Adam - Original Message - From: wispa [EMAIL PROTECTED] To: [EMAIL PROTECTED]; WISPA General List wireless@wispa.org Sent: Tuesday, March 27, 2007 1:16 PM Subject: Re: [WISPA] CALEA compliance methods On Tue, 27 Mar 2007 08:21:53 -0400, Peter R. wrote Mark, CALEA IS LAW. There are interpretations of that law, but they have been upheld by courts. YOu're arguing against things I'm not saying. CALEA is not the opinion of the DOJ or FCC. It is not far-reaching (like say the Patriot Act) or secret and possibly illegal like the NSA-ATT wiretapping / surveillance. The whole idea that WE are covered under CALEA is just FCC opinion, which is as changeable and variable as the wind. The ruling is capricious and founded on VAPOR, not substance. I just cannot believe you approve of unfunded federal mandates for public purposes. CALEA was not. Misapplying CALEA is. This is not OSHA mandates. This is not the same as requiring that a tower service company require their climbers to use a safety system. Not even close. If the federal government is justified with making us provide, AT OUR EXPENSE, law enforcement services, then we're one little itty bitty non- existent step from from being mandated to do ANYTHING they happen to wish for, and the wish lists from the swamp on the Potomac are so large they boggle the mind. And don't give me the we play dead for regulatory favors in the future crap. Nothing we do will buy us one MOMENT's worth of consideration, in EITHER direction. Mark Koskenmaki Neofast, Inc Broadband for the Walla Walla Valley and Blue Mountains 541-969-8200 -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA compliance methods
I bet the technical aspects of how to comply will be emerging soon. I understand the wispa calea meeting went very well. So there must be some good news. Adam Greene wrote: Hi, While I appreciate Mark's comments and point of view, I for one would like to also start looking for ways to possibly comply with CALEA in a cost-effective way. I'm afraid that if the conversation here is limited to whether we should comply or not, we might lose the opportunity to share with each other about technical implementation. Don't get me wrong, I'm not suggesting that the conversation about whether to comply should be halted, just that some room be given to those of us who also want to speak about implementation. I'm still interested if anyone has any point of view about any of the compliance methods that I discussed in my original post, from a technical standpoint. Thanks, Adam - Original Message - From: wispa [EMAIL PROTECTED] To: [EMAIL PROTECTED]; WISPA General List wireless@wispa.org Sent: Tuesday, March 27, 2007 1:16 PM Subject: Re: [WISPA] CALEA compliance methods On Tue, 27 Mar 2007 08:21:53 -0400, Peter R. wrote Mark, CALEA IS LAW. There are interpretations of that law, but they have been upheld by courts. YOu're arguing against things I'm not saying. CALEA is not the opinion of the DOJ or FCC. It is not far-reaching (like say the Patriot Act) or secret and possibly illegal like the NSA-ATT wiretapping / surveillance. The whole idea that WE are covered under CALEA is just FCC opinion, which is as changeable and variable as the wind. The ruling is capricious and founded on VAPOR, not substance. I just cannot believe you approve of unfunded federal mandates for public purposes. CALEA was not. Misapplying CALEA is. This is not OSHA mandates. This is not the same as requiring that a tower service company require their climbers to use a safety system. Not even close. If the federal government is justified with making us provide, AT OUR EXPENSE, law enforcement services, then we're one little itty bitty non- existent step from from being mandated to do ANYTHING they happen to wish for, and the wish lists from the swamp on the Potomac are so large they boggle the mind. And don't give me the we play dead for regulatory favors in the future crap. Nothing we do will buy us one MOMENT's worth of consideration, in EITHER direction. Mark Koskenmaki Neofast, Inc Broadband for the Walla Walla Valley and Blue Mountains 541-969-8200 -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ -- George Rogato Welcome to WISPA www.wispa.org http://signup.wispa.org/ -- WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] CALEA compliance methods
Mark, Wireless providers DO have to comply with CALEA whether you like it or not. As quoted from the link I sent you earlier; Nor does our interpretation of section 332 of the Communications Act and its implementing regulations here alter either our decision in the CALEA proceeding to apply CALEA obligations to all wireless broadband Internet access providers, including mobile wireless providers, or our interpretations of the provisions of CALEA itself. As the Commission found, and the U.S. Court of Appeals for the D.C. Circuit affirmed, the purposes and intent of CALEA are strikingly different than those of the 1996 Telecommunications Act, which is embedded in the Communications Act. As the Court noted, “CALEA--unlike the 1996 Act--is a law-enforcement statute . . . (requiring telecommunications carriers to enable ‘the government’ to conduct electronic surveillance) . . . . The Communications Act (of which the Telecom Act is part), by contrast, was enacted ‘[f]or the purpose of regulating interstate and foreign commerce in communication by wire and radio’ . . . . The Commission's interpretation of CALEA reasonably differs from its interpretation of the 1996 Act, given the differences between the two statutes.”121 Thus, our interpretation of the separate statutory provisions in section 332 of the Communications Act, whose purposes closely track those of the Telecommunications Act of 1996 and the Communications Act generally, in no way affects our determination that mobile wireless broadband Internet access service providers are subject to the CALEA statute.122 Here is the link again so you can read it if you choose to do so. http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-07-30A1.pdf Regards, Dawn DiPietro wispa wrote: On Tue, 27 Mar 2007 07:31:56 -0400, Dawn DiPietro wrote Mark, wispa wrote: I have been attempting for how long now, to get across to you people that this whole CALEA flap for ISP's is NOT LAW, but opinion from the FCC, where it's attempting to write law instead of Congress. It's a mess, because it's NOT LAW, only Congress can write law and it has yet to write a law that says we have to do squat. Did you even bother to read the press release mentioned in your recent post? http://www.askcalea.com/docs/20040317.fbi.release.pdf As quoted from the press release mentioned above; Congress enacted CALEA in 1994 to help the nation's law enforcement community maintain its ability to use court-authorized electronic surveillance as an important investigative tool in an era of new telecommunications technologies and services. Today, electronic surveillance plays a vitally important role in law enforcement's ability to ensure national security and public safety. Also quoted from the same press release; Specifically, the petition requests the FCC establish rules that formally identify services and entities covered by CALEA, so both law enforcement and industry are on notice with respect to CALEA obligations and compliance. The petition makes this request because disagreements continue between industry and law enforcement over whether certain services are subject to CALEA. The petition requests [WINDOWS-1252?] the FCC find “broadband access” and “broadband telephony” to be subject to CALEA. Ok... here's an old joke. What's the difference between dogs and cats? The dog looks at you and says you give me everything, provide me with home, care, medicine, food, take care of all my needs... You must be a god!. The cat looks at you and says you give me everything, provide me with home, care, medicine, food, take care of all my needs... I must be a god!. We're saying EXACTLY the same thing, but the perspective is different. Read up on CALEA itself. There's absolutely NOTHING in it that even remotely addresses ISP's. It addresses TAPPING TELEPHONE CONVERSATIONS. Nothing else. It is VERY specific. When it was written, broadband didn't even EXIST, how COULD they have written a law that applies to it? It's as if Congress wrote a law that regulates the maintenance schedules on trains. Along comes OSHA, and demands that the DOT rule that the law must apply to trucking, as well, even though the whole concept is absurd. Congress knew it would NEVER get away with just wholesale handing it's shopping list of demands to industry for changes in the way it's equipment worked, and making industry PAY for it. Duhhh. That would never have made it past... well... even a kangaroo court. And the telcos would have fought it, collectively, with all thier legal muscle. Over the years, the FCC has (correctly) and and consistently insisted we are NOT telecommunications services or providers. Now, it suddenly says we ARE, but only for purposes of CALEA. Ohhh, could you park that decision on anything closer to what resembles vapor? I doubt it. Even worse, since the law
Re: [WISPA] CALEA compliance methods
The best stratergy to take towards CALEA is to get familiar and get ready to comply. If for some reason it turns out some don't have to comply, then no loss. If it turns out that we all have to comply, then we're ahead of the game. Think positive! Dawn DiPietro wrote: Mark, Wireless providers DO have to comply with CALEA whether you like it or not. As quoted from the link I sent you earlier; Nor does our interpretation of section 332 of the Communications Act and its implementing regulations here alter either our decision in the CALEA proceeding to apply CALEA obligations to all wireless broadband Internet access providers, including mobile wireless providers, or our interpretations of the provisions of CALEA itself. As the Commission found, and the U.S. Court of Appeals for the D.C. Circuit affirmed, the purposes and intent of CALEA are strikingly different than those of the 1996 Telecommunications Act, which is embedded in the Communications Act. As the Court noted, “CALEA--unlike the 1996 Act--is a law-enforcement statute . . . (requiring telecommunications carriers to enable ‘the government’ to conduct electronic surveillance) . . . . The Communications Act (of which the Telecom Act is part), by contrast, was enacted ‘[f]or the purpose of regulating interstate and foreign commerce in communication by wire and radio’ . . . . The Commission's interpretation of CALEA reasonably differs from its interpretation of the 1996 Act, given the differences between the two statutes.”121 Thus, our interpretation of the separate statutory provisions in section 332 of the Communications Act, whose purposes closely track those of the Telecommunications Act of 1996 and the Communications Act generally, in no way affects our determination that mobile wireless broadband Internet access service providers are subject to the CALEA statute.122 Here is the link again so you can read it if you choose to do so. http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-07-30A1.pdf Regards, Dawn DiPietro wispa wrote: On Tue, 27 Mar 2007 07:31:56 -0400, Dawn DiPietro wrote Mark, wispa wrote: I have been attempting for how long now, to get across to you people that this whole CALEA flap for ISP's is NOT LAW, but opinion from the FCC, where it's attempting to write law instead of Congress. It's a mess, because it's NOT LAW, only Congress can write law and it has yet to write a law that says we have to do squat. Did you even bother to read the press release mentioned in your recent post? http://www.askcalea.com/docs/20040317.fbi.release.pdf As quoted from the press release mentioned above; Congress enacted CALEA in 1994 to help the nation's law enforcement community maintain its ability to use court-authorized electronic surveillance as an important investigative tool in an era of new telecommunications technologies and services. Today, electronic surveillance plays a vitally important role in law enforcement's ability to ensure national security and public safety. Also quoted from the same press release; Specifically, the petition requests the FCC establish rules that formally identify services and entities covered by CALEA, so both law enforcement and industry are on notice with respect to CALEA obligations and compliance. The petition makes this request because disagreements continue between industry and law enforcement over whether certain services are subject to CALEA. The petition requests [WINDOWS-1252?] the FCC find “broadband access” and “broadband telephony” to be subject to CALEA. Ok... here's an old joke. What's the difference between dogs and cats? The dog looks at you and says you give me everything, provide me with home, care, medicine, food, take care of all my needs... You must be a god!. The cat looks at you and says you give me everything, provide me with home, care, medicine, food, take care of all my needs... I must be a god!. We're saying EXACTLY the same thing, but the perspective is different. Read up on CALEA itself. There's absolutely NOTHING in it that even remotely addresses ISP's. It addresses TAPPING TELEPHONE CONVERSATIONS. Nothing else. It is VERY specific. When it was written, broadband didn't even EXIST, how COULD they have written a law that applies to it? It's as if Congress wrote a law that regulates the maintenance schedules on trains. Along comes OSHA, and demands that the DOT rule that the law must apply to trucking, as well, even though the whole concept is absurd. Congress knew it would NEVER get away with just wholesale handing it's shopping list of demands to industry for changes in the way it's equipment worked, and making industry PAY for it. Duhhh. That would never have made it past... well... even a kangaroo court. And the telcos would have fought it, collectively, with all thier legal muscle. Over the years, the FCC has (correctly) and and