News for hackers. Stuff that matters.
Re:WHOIS blackout period likely starting in May by kbar13 on Tuesday May 15, 2018 @02:05PM (#17076162)
domain registration data is in a weird place for the modern internet. I can see the value of having a real registry when it was first developed, but now it seems like a pretty easy way for people to shoot themselves in the foot with regards to privacy. Also, some registrars charge a premium for WHOIS privacy. It should not cost extra to have your legal name and address to be hidden from the entirety of the internet.
Re:WHOIS blackout period likely starting in May by jedberg on Tuesday May 15, 2018 @04:24PM (#17077563)
When you buy a house, your name and the purchase price are public information. Any one at any time can look up who owns a house, how much they paid for it, and how much they pay in property tax every year.

I get a ton of spam because of this. However, I'd rather have this system than one in which all the owners are secret. I've had to look up owner information before to contact owners of various properties, and having that hidden would have made that task impossible.

You can hide the ownership information of a house, if you pay extra money, by hiring a lawyer to create an entity and put the entity on the property, but then the lawyer has to put their address, and forward any requests on to you, just like the whois privacy folks.

I think it is a good thing that every domain has valid contact info.

Re:WHOIS blackout period likely starting in May by zaarn on Wednesday May 16, 2018 @03:19AM (#17080584)
Not in my country unless you have a damn good reason to get that info.

The only way to get access to someone's address or phone number is to show up at the local community office and provide sufficient information (which means name + any previous address or known phone number registered with the office)

I think the same should go for domains. Unless you have a good reason (which IMO means spam complain, journalism or legal contact) you shouldn't be able to get any way to contact me. And for the above I have an imprint too which is protected against scrapers and spammers as best as I can unlike the WHOIS.

Re:WHOIS blackout period likely starting in May by dictum on Tuesday May 15, 2018 @04:43PM (#17077705)
> However, I'd rather have this system than one in which all the owners are secret.

I don't mean to be cynical, but isn't this system also the one in which some people simply register their houses under a shell company?

Re:WHOIS blackout period likely starting in May by mynameisvlad on Tuesday May 15, 2018 @05:37PM (#17078079)
Isn't that exactly the same as PrivacyGuard or other WHOIS anonymizing services? If anything, it reinforces the analogy even more.
Re:WHOIS blackout period likely starting in May by jedberg on Tuesday May 15, 2018 @04:49PM (#17077755)
Yes, but at least the shell company forwards on the messages. And most people don't do it because it's a hassle.
Re:WHOIS blackout period likely starting in May by woolvalley on Tuesday May 15, 2018 @06:44PM (#17078570)
And you lose a 250-500k capital gains exemption if you sell the house and it's not owned & lived in by you directly AFAIK

The issue with this system is it also lets people look up where you live by name alone, which can be bad if you want to own your house and have a stalker problem. The map works 2 ways.

Re:WHOIS blackout period likely starting in May by toomuchtodo on Tuesday May 15, 2018 @11:38PM (#17079853)
Not true with a revocable trust, which costs under $1000 to establish and provides all the same benefits of owning the real estate directly without disclosing ownership.

Disclaimer: Applies primarily to IL and FL, not an attorney, nor your attorney.

Re:WHOIS blackout period likely starting in May by koolba on Wednesday May 16, 2018 @12:04AM (#17079931)
If you do that in CA can you “sell” control of the trust to circumvent reassessment of the real estate taxes after a sale?
Re:WHOIS blackout period likely starting in May by toomuchtodo on Wednesday May 16, 2018 @12:19AM (#17079984)
My apologies, I’m only familiar with Illinois and Florida real estate law. A CA attorney should be able to answer that with a short, no cost phone consultation (if a trust can’t support such an arrangement, an LLC might).
Re:WHOIS blackout period likely starting in May by njarboe on Wednesday May 16, 2018 @02:32AM (#17080407)
If a company or other entity is owned by a single person and just owns a single piece of property, this does not work and California will not let the prop 13 tax rate stay with the company. You are obviously trying to cheat to get around the law. As there are more owners of the company and the company has more diverse holdings, California is less likely to insist on resetting the assessed value of the real estate owned by the company upon sale. One REIT buying another REIT is fine. Like many laws, one does not really know what they mean on the edges until you do something and are taken to court.
Re:WHOIS blackout period likely starting in May by ktosobcy on Tuesday May 15, 2018 @05:51PM (#17078198)
Is that a US thing? I understand that having some registry with this information is needed (but maybe not with details down to taxation) but... having it behind some officials "firewall" would solve that?
Re:WHOIS blackout period likely starting in May by greglindahl on Tuesday May 15, 2018 @06:03PM (#17078305)
What problem are you trying to solve? The problems that having an open land and property tax register solves are problems like finding fraud, money laundering, tax cheating, better valuation of properties for bank loan purposes, and so forth.
Re:WHOIS blackout period likely starting in May by ktosobcy on Tuesday May 15, 2018 @06:06PM (#17078333)
Why would YOU have to do it? For me it's enough that officials have access to this information (and common folks when requested, but with valid motivation). And as a result I don't have problems with my identity being out in the open (and I don't get a single spamy mail)
Re:WHOIS blackout period likely starting in May by greglindahl on Tuesday May 15, 2018 @07:21PM (#17078744)
The reason this is done in public is because plenty of fraud happens when only officials can get access to property ownership and tax info -- even in countries that are relatively less corrupt.

Also, the bit about mortgages means that mortgages rates are lower when appraisals are more accurate; the largest inputs to home value appraisals in the US are sales data and tax data.

Re:WHOIS blackout period likely starting in May by ktosobcy on Wednesday May 16, 2018 @12:32AM (#17080018)
But the thing is - not only officials can get that data. Its simply not that easily available (so you can't harvest it like mails on the Web)

As for house market - in other counties (where dará is more hidden) it still works. and as far as I know housing market in the US is quite... weird, so it seems this data doesn't help that much?

Re:WHOIS blackout period likely starting in May by greglindahl on Wednesday May 16, 2018 @01:03AM (#17080134)
A housing market that's full of fraud and that has extra-high interest rates still "works". I don't think you're understanding my point at all, or maybe you don't mind fraud.

But in any case, those are the problems that transparency are trying to help solve.

Re:WHOIS blackout period likely starting in May by icebraining on Wednesday May 16, 2018 @05:09AM (#17080972)
You seem to be repeating the talking point without addressing the counter-argument. Why is a system where people can access that data, just with a couple of roadblocks to avoid mass harvesting, not enough to avoid fraud?
Re:WHOIS blackout period likely starting in May by greglindahl on Wednesday May 16, 2018 @11:58AM (#17083415)
I'm just describing the problems that the current system appears to be designed to solve. If you want to design a new system, great, have at it. I don't have an opinion about that, other than that you probably should try to solve the same problems.
Re:WHOIS blackout period likely starting in May by tyrust on Tuesday May 15, 2018 @06:31PM (#17078491)
>I think it is a good thing that every domain has valid contact info.

Does your "valid" include domain registrars that provide WHOIS protection that includes forwarding messages to the protected owner?

And, honest question, why do you think that domains should have contact info?

Re:WHOIS blackout period likely starting in May by jedberg on Tuesday May 15, 2018 @10:30PM (#17079572)
When I used to work in security, I used Whois every day. In many cases it was to notify a domain owner that their domain had been compromised and was being used for spam. I also used it a lot to track down bad actors because most of them are dumb and don’t hide their Whois.
Re:WHOIS blackout period likely starting in May by tscs37 on Wednesday May 16, 2018 @12:37AM (#17080038)
In germany there is an imprint requirement so you'll always have a contact point for these things.

Unlike WHOIS it's on a website so you can protect this information much more easily from scraping and spamming.

Re:WHOIS blackout period likely starting in May by dx034 on Wednesday May 16, 2018 @06:58AM (#17081398)
That's where WHOIS protection comes in handy. If you don't want to get even more spam (the imprint has to be clear text, no obfuscation so gets spammed a lot) but a website that could target Germans (or you're in Germany), you'll quickly get costly letters from specialised lawyers. Having Whois protection usually helps, they tend to give up if they can't get your address easily.
Re:WHOIS blackout period likely starting in May by tscs37 on Wednesday May 16, 2018 @11:45AM (#17083314)
Some minor Obfuscation should be okay "mail at example dot com" => "[email protected]" and similar.

Plus I'm fairly certain providing temporary mail addresses (with decent lifetime) would also be okay.

Specialised Lawyer isn't quite right, a business that competes with you needs to file a complaint (IIRC from law course).

Re:WHOIS blackout period likely starting in May by dx034 on Friday May 18, 2018 @08:51AM (#17101016)
No, minor obfuscation is not ok. The same as a picture can be a problem for blind people, your example can be an issue for people not speaking english (it's a German law). I wouldn't take any risks with these laws.
Re:WHOIS blackout period likely starting in May by tscs37 on Friday May 18, 2018 @09:00AM (#17101069)
My sites are all dual-language so I don't see that as a problem.
Re:WHOIS blackout period likely starting in May by icebraining on Wednesday May 16, 2018 @05:10AM (#17080978)
Not all domains have public websites.
Re:WHOIS blackout period likely starting in May by tscs37 on Wednesday May 16, 2018 @05:50AM (#17081135)
If those create any abuse then you can still contact the registrar.

From what I understand the eventual plan for WHOIS to only allow access if there is truly legitimate interest. Everything else can be filtered over the registrar.

Re:WHOIS blackout period likely starting in May by leetcrew on Tuesday May 15, 2018 @08:41PM (#17079123)
off the top of my head, valid DMCA takedowns?
Re:WHOIS blackout period likely starting in May by rubicon33 on Tuesday May 15, 2018 @06:41PM (#17078548)
> When you buy a house, your name and the purchase price are public information. Any one at any time can look up who owns a house, how much they paid for it, and how much they pay in property tax every year.

Uh, really? Where?

Re:WHOIS blackout period likely starting in May by woolvalley on Tuesday May 15, 2018 @06:43PM (#17078554)
It's a US or at least California thing. In many countries this is not reality.
Re:WHOIS blackout period likely starting in May by ratsmack on Tuesday May 15, 2018 @07:05PM (#17078679)
It is the same in Washington state, and I suspect most other states also make this information available. I believe it is required because the taxing authority data is considered public information.
Re:WHOIS blackout period likely starting in May by vollmond on Tuesday May 15, 2018 @08:07PM (#17078957)
PA, checking in. My county has a website where you search the address, and get back the owners, acreage, square footage, assessed value (land and building(s)), and last sale price and date.
Re:WHOIS blackout period likely starting in May by SmellyGeekBoy on Wednesday May 16, 2018 @06:34AM (#17081304)
I know that this is all managed by a government department called the "Land Registry" in the UK.
Re:WHOIS blackout period likely starting in May by math0ne on Tuesday May 15, 2018 @07:18PM (#17078735)
Def true in Canada.
Re:WHOIS blackout period likely starting in May by oliwarner on Tuesday May 15, 2018 @06:47PM (#17078579)
UK too.
Re:WHOIS blackout period likely starting in May by connorgreenwell on Tuesday May 15, 2018 @07:43PM (#17078842)
If this is true in Europe, I'm curious what the implications are w.r.t. GDPR.
Re:WHOIS blackout period likely starting in May by stordoff on Wednesday May 16, 2018 @03:40AM (#17080660)
Probably very little. The data will be being made public under a law mandating that, and the GDPR allows for that:

> Processing shall be lawful [...if...] processing is necessary for compliance with a legal obligation to which the controller is subject

https://gdpr-info.eu/art-6-gdpr/

Re:WHOIS blackout period likely starting in May by icebraining on Wednesday May 16, 2018 @05:11AM (#17080986)
EDIT: nevermind, misread the context.
Re:WHOIS blackout period likely starting in May by detaro on Wednesday May 16, 2018 @05:18AM (#17081016)
I believe the parent is talking about the example of a land ownership database.
Re:WHOIS blackout period likely starting in May by icebraining on Wednesday May 16, 2018 @05:40AM (#17081091)
Oh, oops, you're right.
Re:WHOIS blackout period likely starting in May by krageon on Wednesday May 16, 2018 @09:07AM (#17082041)
It's not true where I am in Europe, this sort of info is accessible to government employees only.
Re:WHOIS blackout period likely starting in May by xfitm3 on Wednesday May 16, 2018 @08:09AM (#17081720)
There is no reason for anyone to contact me outside of methods I publish.
Re:WHOIS blackout period likely starting in May by cm2187 on Tuesday May 15, 2018 @02:55PM (#17076646)
And some jokers like OVH do not charge anything for privacy but fuck it up. I got recently hundreds of emails and a dozen phone calls from various spammers as a result of registering some domain names with them despite chosing the privacy options.

The publication of personal information on whois cannot stop soon enough.

Re:WHOIS blackout period likely starting in May by dx034 on Wednesday May 16, 2018 @06:59AM (#17081404)
Yep, they only replace owner but not contact details for admin or tech. That way your details are as public as without their "service".
Re:WHOIS blackout period likely starting in May by mort96 on Tuesday May 15, 2018 @02:16PM (#17076272)
Do any registrars not charge a premium for Whois privacy? I know Hover doesn't have a separate Whois privacy entry price, but the base price at Hover seems to be about the price of a domain + Whois privacy at other registrars.
Re:WHOIS blackout period likely starting in May by hamandcheese on Tuesday May 15, 2018 @02:29PM (#17076370)
Gandi.net doesn't charge extra and also has reasonable prices.
Re:WHOIS blackout period likely starting in May by BlueGh0st on Tuesday May 15, 2018 @02:26PM (#17076347)
Google domains offers it for free and as standard.
Re:WHOIS blackout period likely starting in May by asaph on Tuesday May 15, 2018 @08:02PM (#17078929)
I wouldn't say free. I would say it's included in the $12/year price of .com registration. I suspect that price is competitive with registrars that have a base price that doesn't include WHOIS privacy and sell privacy as an add-on, though I haven't shopped around in a while. All my domains are registered with Google Domains.
Re:WHOIS blackout period likely starting in May by grouseway on Tuesday May 15, 2018 @04:13PM (#17077476)
I just enter phone/address information for one of those whois privacy proxies without bothering to pay for them. What's the point of paying? The only thing real on my domain registrations is a gmail contact - the rest doesn't matter.
Re:WHOIS blackout period likely starting in May by BuildTheRobots on Tuesday May 15, 2018 @04:53PM (#17077779)
Back a few years ago, NomiNet used to post you a certificate proving ownership every time you registered a .co.uk domain. I recently found a couple when moving house.
Re:WHOIS blackout period likely starting in May by jacekm on Tuesday May 15, 2018 @03:56PM (#17077284)
I have some domains in OVH, they do not charge for privacy. Generally you can check out https://tld-list.com/tld/com for the list of providers which offer free whois privacy for a given domain.
Re:WHOIS blackout period likely starting in May by dx034 on Wednesday May 16, 2018 @07:00AM (#17081409)
Be careful with OVH, they put your details in Admin-C/Tech-C, same effect as not using their service at all. At least that was my experience a few months back, I then switched to namecheap to avoid that.
Re:WHOIS blackout period likely starting in May by freeone3000 on Tuesday May 15, 2018 @04:28PM (#17077586)
You could just lie. Only the contact email really matters, and those are anonymously-routable already.
Re:WHOIS blackout period likely starting in May by jkaplowitz on Tuesday May 15, 2018 @06:08PM (#17078340)
In practice, this will usually work, but it does violate ICANN rules. If this ever gets enforced, likely due to a disgruntled party making a complaint, it could backfire.
Re:WHOIS blackout period likely starting in May by jzl on Tuesday May 15, 2018 @07:35PM (#17078808)
Yep, you could lose the domain. It would be a big risk to take if there's any chance someone wanted to go after the domain.
Re:WHOIS blackout period likely starting in May by bks on Tuesday May 15, 2018 @03:16PM (#17076865)
I shifted my entire domain portfolio from Bulkregister.com to Uniregistry for this issue. Bulk charges $3 per domain per year and I saved thousands a year moving to Uniregisry.
Re:WHOIS blackout period likely starting in May by lazycouchpotato on Tuesday May 15, 2018 @03:45PM (#17077174)
NameSilo doesn't - but they were also recently acquired so there's no guarantee if the new owners will let things be the same or change it.
Re:WHOIS blackout period likely starting in May by Cyphase on Tuesday May 15, 2018 @10:05PM (#17079458)
DreamHost doesn't charge for WHOIS privacy, and they have competitive domain prices.
Re:WHOIS blackout period likely starting in May by Audible_logic on Wednesday May 16, 2018 @01:14AM (#17080168)
I would 2nd Gandi.net. No additional fee for their who is privacy option.
Re:WHOIS blackout period likely starting in May by PatientJ on Tuesday May 15, 2018 @02:52PM (#17076609)
iwantmyname.com doesn't charge for whois privacy
Re:WHOIS blackout period likely starting in May by us0r on Tuesday May 15, 2018 @02:44PM (#17076528)
i get it free from moniker
Re:WHOIS blackout period likely starting in May by brewtide on Tuesday May 15, 2018 @05:00PM (#17077820)
namesilo
Re:WHOIS blackout period likely starting in May by wilg on Tuesday May 15, 2018 @02:56PM (#17076651)
It's included on Hover as well.
Re:WHOIS blackout period likely starting in May by mort96 on Tuesday May 15, 2018 @05:47PM (#17078160)
That's what I meant with "I know Hover doesn't have a separate Whois privacy entry price, but the base price at Hover seems to be about the price of a domain + Whois privacy at other registrars".
Re:WHOIS blackout period likely starting in May by jdietrich on Tuesday May 15, 2018 @04:12PM (#17077456)
WHOIS privacy isn't even an option for some tlds. Nominet require the registrant's legal name and postal address and only offer a discretionary opt-out for non-commercial websites.

https://registrars.nominet.uk/namespace/uk/management/data-q...