Re: [93attendees] Network experiment during the meeting

["DRAGE, Keith (Keith)" <[e-mail]>]

I think you will find the fact that anyone can collect the data is irrelevant.

And neither is it directly a security or privacy issue.

It is the responsibility of the organisation or person doing the data collection to ensure they comply with the requirements of data protection. These include the right of individuals affected to ensure the data collected is accurate, and also that it is not transferred outside the EU to a regime that does not have equivalent safeguards.

If this was a UK environment, that could also require registration with the data registrar, unless exemptions apply. No idea what the Czech implementation of the relevant directive is.

But fundamentally, is any of the information you are collecting, before or after subsequent processing, something that could be regarded as personal data? If the answer is no, then data protection will not apply; if the answer is yes, then just telling people you are doing it is certainly not a sufficient assessment of your responsibilities.

I assume by the way that the IETF secretariat has done a similar assessment of its responsibilities for any personal data it collects while it is in the EU?

regards

Keith

________________________________
From: 93attendees [mailto:[e-mail]] On Behalf Of Eric Vyncke (evyncke)
Sent: 15 July 2015 10:14
To: [e-mail]
Cc: Rolf Winter
Subject: Re: [93attendees] Network experiment during the meeting
Importance: Low

Like Toerless, I find interesting this discussion when we all know that WiFi (unless WPA is used) is 'broadcasted' everywhere.

During some previous IETF meetings, I used https://github.com/evyncke/mcast6 for one hour or two to collect aggregated statistics on IPv6 NDP & other multicast packets. Obviously, anybody could do it as the WiFi AP are configured in such a way that mcast packets are forwarded

-éric

From: 93attendees <[e-mail]<mailto:[e-mail]>> on behalf of Chris Elliott <[e-mail]<mailto:[e-mail]>>
Reply-To: "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>
Date: mardi 14 juillet 2015 18:32
To: Ray Pelletier <[e-mail]<mailto:[e-mail]>>
Cc: joel jaeggli <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>, Rolf Winter <[e-mail]<mailto:[e-mail]>>, "[e-mail]<mailto:[e-mail]>" <[e-mail]<mailto:[e-mail]>>
Subject: Re: [93attendees] Network experiment during the meeting



On Tuesday, July 14, 2015, Ray Pelletier <[e-mail]<mailto:[e-mail]>> wrote:
Chris
I asked Jim and Joel this but no response as yet. Maybe you have an opinion

This appears to be a benign experiment, but would it impact operations, or in your opinion, intrude on privacy?

I do not expect it to impact operations, and, as the device collecting data will be in the NOC, we can easily disable it should there be any concerns.

Both Jari and I have discussed privacy concerns with Rolf and, at the level of information I have, I believe Rolf will be protecting our attendees privacy.

That said, I'm not a security guy and a full analysis of the security implications would probably need to be done by a security guru.

However, note, with or without our permission, any attendee can collect the same information Rolf is collecting.

Chris.

Ray

On Jul 14, 2015, at 11:25 AM, Chris Elliott <[e-mail]<javascript:_e(%7B%7D,'cvml','[e-mail]');>> wrote:

On Tue, Jul 14, 2015 at 11:13 AM, joel jaeggli <[e-mail]<javascript:_e(%7B%7D,'cvml','[e-mail]');>> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Typically experiments involving the production network run past the
network staff and the IAD/IAOC or IETF chair.

Joel,

Rolf contacted me a while ago and I had him contact Jari for approval of this "experiment". Jari has approved it.

The device will sit in the NOC where we can easily disable it if there's an issue.

I haven't seen this float by so I don't know if it has or not but if
you haven't, I'd suggest doing that.

 Rolf's done his job. I got distracted by traveling and trying to get the network working to forward this to the NOC list. I'll do that asap.

Chris.

thanks
joel

On 7/13/15 1:13 PM, Rolf Winter wrote:
> Hello everyone,
>
> during the meeting we plan to conduct an experiment on the IETF
> wireless network. We will record the broadcast traffic sent over
> the network with the goal of analyzing current applications' use of
> IP broadcasts. We have conducted this experiment previously on
> another large wireless campus network with interesting results and
> will repeat the experiment on the IETF wireless network as a second
> data point. We collect the data and aggregate it to statistics
> which will not reveal data about individual users of the network
> and once that is done, we will delete all packet traces we
> collected. More information on the experiment can be found here:
>
> http://net.hs-augsburg.de/projects/2015/07/09/ietf-broadcast-analysis.
html
>
>  If you have questions regarding the experiment, please drop me an
> Email.
>
> See you in Prague,
>
> Rolf
>
>
> _______________________________________________ 93attendees mailing
> list [e-mail]<javascript:_e(%7B%7D,'cvml','[e-mail]');>
> https://www.ietf.org/mailman/listinfo/93attendees

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAlWlJxkACgkQ8AA1q7Z/VrI/oQCfaRz2CkLU/XcADm4k+oB8RbPU
CmMAmgMCFKiXqwrTnjARGga1KHv08T9S
=2x3d
-----END PGP SIGNATURE-----

_______________________________________________
93attendees mailing list
[e-mail]<javascript:_e(%7B%7D,'cvml','[e-mail]');>
https://www.ietf.org/mailman/listinfo/93attendees



--
Chris Elliott
[e-mail]<javascript:_e(%7B%7D,'cvml','[e-mail]');>

"What the f*ck is a sesame? It's a street...it's a way to open sh*t!" --Mitch Hedberg
_______________________________________________
93attendees mailing list
[e-mail]<javascript:_e(%7B%7D,'cvml','[e-mail]');>
https://www.ietf.org/mailman/listinfo/93attendees


--
Chris Elliott
CCIE # 2013

"You and I are mirages that perceive themselves"
--Douglas Hofstadter