4 ms·
Yeah I was curious about what level of detail will be recorded. According to the article: "The law forces internet service providers to keep a record of all the
by treerock 10y ago
Yeah I was curious about what level of detail will be recorded. According to the article: "The law forces internet service providers to keep a record of all the websites – not the actual pages – you visit for up to a year."
If they aren't recording the pages, I'd doubt they've be recording the ads embedded on the page.
But who knows, I imagine it's down to how the ISPs implement the legislation.
- doc_holliday 10y agoFrom my interpretation they are logging the IP address and ports data transfered from. So theoretically if you transfer data from insert bad orgs IP address here from within another innocent website you'd be logged for that.
- redcalx 10y agoThey can't record the pages if the request is over https, as per most web sites these days. The IP address is known because it's necessary for routing traffic, but the content of each HTTP request and response is encrypted, and that's where the rest of the URL lives.
- Warp__ 10y agoGov't can easily MITM HTTPS connections.
- martin-adams 10y agoI did not know this. How do they do that?
- Warp__ 10y agohttp://security.stackexchange.com/questions/143387/is-there-such-a-thing-as-a-black-box-that-decrypts-internet-traffic http://security.stackexchange.com/questions/143387/is-there-... That's pretty clear. It does depend of what level/technology is used in the Encryption, but broadly, against nation state actors with full virtual and physical hardware access, you are to put it bluntly, stuffed.
- redcalx 10y agoTrue. Anyone know if this new IP law allows the gov to do this? I.e. if they tried to prosecute and it came to light that the logs were obtained using a MITM attack, would the evidence be nullified?
- Warp__ 10y agoI don't know. I imagine that MITM on a large scale is par for the course for GCHQ.
- redcalx 10y agoSure, but can data obtained by that be used in a court of law. I /think/ those are two different things (but not sure).
- tehmaco 10y agoIt would probably come under the "Equipment Interference" section, which legalises hacking of devices.
- nicktelford 10y agoThey can (usually) extract the hostname of the site though, TLS includes it in plaintext.
- nicktelford 10y agoThey're logging the hostname of every "site visited". However, an ISP won't be able to distinguish between a URL you entered in the address bar, and a URL requested by an iframe, img or script tag embedded on a page. They'll just know that you visited the host.