Answer an e-mail, get a subpoenaLet me see if I have this straight: You get a email telling you, "You are hereby informed that (under the privacy act), the International Information System Security Certification Consortium (ISC)2 has sold your information including,
Name ,
E-Mail address,
Residential address,
Credit and savings information,
Social Security information,
and Occupation details.
This information has been sold to a third Party \ Parties and this E-mail serves as notification for such action.
This information was sold under the premise for marketing and research.
Under the privacy act you may request to see in writing any information that we have about you. Please write to the following address with a self addressed envelope.
So, you write back and make some further inquires, etc. You of course make all this public, on your website. The next thing you know, you're getting a subpoena that demands: "...all logs recording the I.P. addresses and/or users who visited "http://cryptome.org/sec-con.htm" between 11/7/02 00:00:00 GMT and 11/14/02 23:59:59 GMT. If no such log exists for the specific page in question, please provide any logs that would cover the domain together with an explanation of what the log covers."
Do I have that right?
Post a Comment