Re:Young File-Sharers Respond To Tough Laws By Buying A VPN
by toyg on Tuesday May 01, 2012 @05:07PM
(#3916371)
It's beyond me how providers who operate in the EU space, hence under the 2006 Data-Retention Directive, can claim "no user activity logs" are kept. Either they do retain logon-logoff times, or they're technically breaking the law -- unless the directive has not been adopted yet in the specific country, in which case they're just exploiting a temporary loophole.
I'm pretty sure any VPN operating on UK nodes would need to retain logon/logoff times linked to individual subscriber data; they won't have to log website access, but that's about it.
[ Parent
| on HN ]
Re:Young File-Sharers Respond To Tough Laws By Buying A VPN
by rada on Tuesday May 01, 2012 @05:34PM
(#3916472)
Company's response:
We utilize shared IP addresses rather than dynamic or static IPs, so it is not possible to match a user to an external IP.
Also:
We maintain logs describing the time at which a client connects, length of connection time, source IP, as well as payment information. We use custom hashing to maintain separation between our payments database and user database.
My interpretation is, under a court order, authorities can, with considerable difficulty, force a match between a criminal request and several users, but not one user.
Reasonable enough for me - I believe in good-enough security through obscurity given enough obscurity - YMMV of course.