News for hackers. Stuff that matters.
Re:Facebook accused of trying to decloak domain owners' pers... by sfgweilr4f on Wednesday June 24, 2020 @07:43AM (#23626751)
From TFA, Facebook "... continues to claim that being a registered trademark holder is sufficient to be granted full access to the Whois database, and that all other routes are unduly burdensome."

So any fraudster just needs a registered trademark and they would, according to Facebook's request, be granted full access to the database.

And no oversight, as "all other routes are unduly burdensome." That means they DON'T want subpeonas or any kind of restriction in between like a judge who could evaluate the request based on some kind of merit. No limits. Just a giant straw they can use to get all that juicy data.

Facebook's request doesn't sound very good to me. Sounds great for criminals though.

Re:Facebook accused of trying to decloak domain owners' pers... by DisjointedHunt on Wednesday June 24, 2020 @08:31AM (#23627101)
This is a wonderful admission by Facebook. So any one of the millions of companies who have had their copyrights or trademarks infringed by fraudulent Chinese advertisers on Instagram and Facebook should now be given FULL access to all advertisers personal details on Facebook including the complete historic library of ads that have ever run on Facebook since, by their own argument, “You don’t know who to sue until you’ve got the Whois information,”
Re:Facebook accused of trying to decloak domain owners' pers... by hedora on Wednesday June 24, 2020 @12:31PM (#23630080)
No. They’re arguing anyone with a registered trademark should have full access to everything, with no infringement required.

They’re also arguing a restriction to advertisers would be an undue burden.

Re:Facebook accused of trying to decloak domain owners' pers... by inetknght on Wednesday June 24, 2020 @11:06AM (#23628666)
I agree. I also think getting a judge to sign off on that would be unduly burdensome.
Re:Facebook accused of trying to decloak domain owners' pers... by fortran77 on Wednesday June 24, 2020 @09:46AM (#23627805)
Just holding the domain, without conducting business under that name, shouldn't be enough to be considered "infringing" in the mark. So this argument isn't valid under any means.

If someone has a business (offering goods and services in exchange for money) using an infringing trademark, then it should be possible to contact them through the same means that customers do to buy their product or service. No need for the "whois" data.

Re:Facebook accused of trying to decloak domain owners' pers... by throwaway_jobs on Wednesday June 24, 2020 @10:29AM (#23628272)
No if you are filing a lawsuit you can’t just “contact them” the same way a customer can.

You have to serve them pursuant to the law, which generally for businesses means serving their registered agent. In order to find the registered agent you will need the legal name of the business running the infringing website (you will need the state of incorporation as well).

Re:Facebook accused of trying to decloak domain owners' pers... by fortran77 on Wednesday June 24, 2020 @11:07AM (#23628697)
Right. But to be a LLC, C Corporation, or S Corporation I have to have a "registered agent" listed with the State. There's no requirement that the domain owner's contact be a "registered agent." In fact, the person who owns the domain may be different from the business using it.

And while the Registered Agent is the correct legal way to serve a notice, if a business accepts and acknowledges it via another route, that's fine, too.

Re:Facebook accused of trying to decloak domain owners' pers... by inetknght on Wednesday June 24, 2020 @11:42AM (#23629239)
> There's no requirement that the domain owner's contact be a "registered agent." In fact, the person who owns the domain may be different from the business using it.

No, but if the domain itself is serving content then the domain owner is, and should be, party to any complaints related to the domain. Even if the domain owner isn't the "registered agent" of the business, they assuredly must know how to contact the registered agent and should have "skin in the game", so to speak, for being a proxy. Not knowing or being able to contact the business owner is, I would argue, grounds for fraud and misrepresentation.

Re:Facebook accused of trying to decloak domain owners' pers... by fortran77 on Wednesday June 24, 2020 @01:41PM (#23631231)
I don't think CloudFlare knows who my registered agent is. But I am a paid customer of theirs and they cache my website and serve my DNS.
Re:Facebook accused of trying to decloak domain owners' pers... by admax88q on Wednesday June 24, 2020 @01:55PM (#23631437)
Do they own your domain? Or just serve it. Were taking about domain owners not hosts
Re:Facebook accused of trying to decloak domain owners' pers... by inetknght on Wednesday June 24, 2020 @02:11PM (#23631681)
CloudFlare responds to fraud claims and legal action.
Re:Facebook accused of trying to decloak domain owners' pers... by asjw on Wednesday June 24, 2020 @11:53AM (#23629401)
So Facebook should be considered a proxy for frauds delivered through Facebook.

I agree .

Re:Facebook accused of trying to decloak domain owners' pers... by throwaway_jobs on Wednesday June 24, 2020 @12:00PM (#23629524)
They certainly should be...but they lobbied for laws that say they aren’t liable.

That is why there is a major effort to repeal those laws.

Re:Facebook accused of trying to decloak domain owners' pers... by throwaway_jobs on Wednesday June 24, 2020 @11:59AM (#23629501)
> There's no requirement that the domain owner's contact be a "registered agent."

That’s not what I said, or the point.

Example: If I launch fortran77.com and am infringing on your registered trademark, step 1 is for you to find the registered owner of the domain. Once you have that then you can find the business owners RA.

You can’t skip the step of identifying the owner of the infringing website to get to the RA. Assuming you are right and the infringing business would waive service of process (they won’t of course) but if they did you still need to identify the owner of the site to get request waiver of process.

Re:Facebook accused of trying to decloak domain owners' pers... by fortran77 on Wednesday June 24, 2020 @01:42PM (#23631253)
Yes, but I said holding the domain without conducting business under that name.
Re:Facebook accused of trying to decloak domain owners' pers... by throwaway_jobs on Wednesday June 24, 2020 @06:24PM (#23634573)
Not sure if i’m picking up what you’re putting down.

I’m guessing maybe you register mymark.com, I get the Whois record and it’s not your legit business info but some made up business name and fake contact info.

Well if that’s the case, either icann will have some rule prohibiting registrations with fake info and maybe I could get the domain transferred once they confirm your info is fake or I could still file suit against the made up business and get my default/court order and then get icann to turn it over on that basis. But it’s all about that step 1, uncovering the domain owner (real or fake). Possibly I could subpoena the registrar and get your real info and/or payment info. Then I’d have to amend my complaint to add you (the legit business) and still have to serve your RA.

Re:Facebook accused of trying to decloak domain owners' pers... by charwalker on Wednesday June 24, 2020 @12:38PM (#23630247)
If I pay for my identity to be masked, would I not be entitle to a refund if my identity was revealed by the same vendor?
Re:Facebook accused of trying to decloak domain owners' pers... by beagle3 on Wednesday June 24, 2020 @07:00PM (#23634834)
Do you really want your $10 (or however much cloaking cost you), rather than the right to sue for damages (and that right being what keeps the service honest and on your side?)

I have a great business: pay me $100 to guarantee the gender of your not-yet conceived child. If you didn't get what you asked for, I'll refund your $100. How does that sound?

Re:Facebook accused of trying to decloak domain owners' pers... by advisedwang on Wednesday June 24, 2020 @12:54PM (#23630540)
morally maybe, but legally I'd guess they have provisions in whatever ToS you agreed to that mean not.
Re:Facebook accused of trying to decloak domain owners' pers... by waheoo on Wednesday June 24, 2020 @08:23AM (#23627037)
I agree with your position but that last sentence is a bit redundant.
Re:Facebook accused of trying to decloak domain owners' pers... by Nextgrid on Wednesday June 24, 2020 @08:29AM (#23627091)
Not disagreeing with you, but "criminals" is not a Boolean variable when you have power over those who determine who is and isn't a criminal.

Facebook (and other big social media) has a lot of power over those who define and enforce the laws, both within the bounds of the existing laws, and within a grey area where they'd be technically breaking the law, but nobody would want to enforce said law on them due to potential repercussions (Facebook could instantly shut down a lot of politicians' careers by just airing their dirty laundry, on which Facebook has a lot of visibility due to its omnipresence).

Those who make the laws rely on Facebook to succeed in their own personal interests (getting elected, which means money & power).

The problem here isn't just Facebook, it's the people that are supposed to be drafting & enforcing laws in the best interests of society are instead doing so to pursue their own personal interests instead. Facebook is just coming along for a free ride - can't really blame them.

Re:Facebook accused of trying to decloak domain owners' pers... by waheoo on Wednesday June 24, 2020 @09:27AM (#23627601)
I think you might have missed it, I was simply calling facebook a bunch of criminals.
Re:Facebook accused of trying to decloak domain owners' pers... by Nextgrid on Friday June 26, 2020 @04:36PM (#23656730)
Yep, I understood that, just wanted to add my (maybe unnecessary) 2 cents.
Re:Facebook accused of trying to decloak domain owners' pers... by flattone on Wednesday June 24, 2020 @08:58AM (#23627316)
So if cyanide gets into your bloodstream we will blame Your body not the poison ?
Re:Facebook accused of trying to decloak domain owners' pers... by flattone on Wednesday June 24, 2020 @03:35PM (#23632825)
I just wanted to clarify that this comment was meant to illustrate a thing... ONLY

nothing more. It was not worded in good taste.