<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:creativeCommons="http://backend.userland.com/creativeCommonsRssModule"
	>
<channel>
	<title>Comments on: P2P Anonymity Questions</title>
	<atom:link href="http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/</link>
	<description>by Derek Slater</description>
	<lastBuildDate>Fri, 05 Dec 2008 12:07:35 -0500</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: A Alexander Stella</title>
		<link>http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/comment-page-1/#comment-4455</link>
		<dc:creator>A Alexander Stella</dc:creator>
		<pubDate>Sun, 19 Oct 2003 21:20:24 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/#comment-4455</guid>
		<description>&lt;a&gt;&lt;/a&gt;

Thanks to the Google search engine, I was able to find your e-mail address.  Anyway, you might be interested to know about certain clauses in the United States Constitution.  
 
             Those clauses are cited by one A Alexander &quot;Bogey&quot; Stella in an internet article.  In his article, Mr Stella disputes the constitutionality of recent law suits, filed by the RIAA against people who download music.   If you&#039;re interested in reading the article, all you need do is scroll down a bit, after clicking on the pink hyperlink below:
 
       UP AGAINST THE BULKHEAD! 

--------------------------------------------------------------------------------
 

Well, it happens sometimes that hyperlinks have to transferred directedly, like so:

URL: http://www.bcvoice.com/modules.php?name=News&amp;file=article&amp;sid=154

Or, maybe, you need only click on my hi-lited name.  Oh, one more thing, please ignore the snide remark some scabrous graffito vandal appended to the end of the article.

--------------------------------------------------------------------------------</description>
		<content:encoded><![CDATA[<p><a></a></p>
<p>Thanks to the Google search engine, I was able to find your e-mail address.  Anyway, you might be interested to know about certain clauses in the United States Constitution.  </p>
<p>             Those clauses are cited by one A Alexander &#8220;Bogey&#8221; Stella in an internet article.  In his article, Mr Stella disputes the constitutionality of recent law suits, filed by the RIAA against people who download music.   If you&#8217;re interested in reading the article, all you need do is scroll down a bit, after clicking on the pink hyperlink below:</p>
<p>       UP AGAINST THE BULKHEAD! </p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;</p>
<p>Well, it happens sometimes that hyperlinks have to transferred directedly, like so:</p>
<p>URL: <a href="http://www.bcvoice.com/modules.php?name=News&amp;file=article&amp;sid=154" rel="nofollow">http://www.bcvoice.com/modules.php?name=News&amp;file=article&amp;sid=154</a></p>
<p>Or, maybe, you need only click on my hi-lited name.  Oh, one more thing, please ignore the snide remark some scabrous graffito vandal appended to the end of the article.</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Eric Eisenhart</title>
		<link>http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/comment-page-1/#comment-4387</link>
		<dc:creator>Eric Eisenhart</dc:creator>
		<pubDate>Mon, 21 Jul 2003 19:49:57 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/#comment-4387</guid>
		<description>&lt;a&gt;&lt;/a&gt;

Whoops, missed something I wanted to respond to:

&quot;Do proxy servers even record such information?&quot;

Maybe.

Depends on the operator, software, etc.  In the case of common HTTP proxies, it&#039;s common to record every &quot;hit&quot;, which includes the IP address of the requestor, specific URL retrieved, date+time, amount of data retrieved, status code (200, 404, etc.), and in the case of proxy servers that require authentication, the username of the requestor.

A proxy configured by a paranoid administrator for the purpose of providing anonymity wouldn&#039;t have any logging whatsoever.  In the slightly less paranoid case, they might log just basic transfer amount statistics with no uniquely identifying information.

If you want these proxies to be truly useful for anonymizing, you need to trust the proxy, you need to be communicating with the proxy over a strongly encrypted channel, there needs to be a random delay factor, and there needs to be a large pool of other users transferring data at the same time.

In other words: you really need to trust the proxy, and a proxy that does all the things needed to disguise you thoroughly will take enough resources that you&#039;d have to be paying for it.</description>
		<content:encoded><![CDATA[<p><a></a></p>
<p>Whoops, missed something I wanted to respond to:</p>
<p>&#8220;Do proxy servers even record such information?&#8221;</p>
<p>Maybe.</p>
<p>Depends on the operator, software, etc.  In the case of common HTTP proxies, it&#8217;s common to record every &#8220;hit&#8221;, which includes the IP address of the requestor, specific URL retrieved, date+time, amount of data retrieved, status code (200, 404, etc.), and in the case of proxy servers that require authentication, the username of the requestor.</p>
<p>A proxy configured by a paranoid administrator for the purpose of providing anonymity wouldn&#8217;t have any logging whatsoever.  In the slightly less paranoid case, they might log just basic transfer amount statistics with no uniquely identifying information.</p>
<p>If you want these proxies to be truly useful for anonymizing, you need to trust the proxy, you need to be communicating with the proxy over a strongly encrypted channel, there needs to be a random delay factor, and there needs to be a large pool of other users transferring data at the same time.</p>
<p>In other words: you really need to trust the proxy, and a proxy that does all the things needed to disguise you thoroughly will take enough resources that you&#8217;d have to be paying for it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Eric Eisenhart</title>
		<link>http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/comment-page-1/#comment-4386</link>
		<dc:creator>Eric Eisenhart</dc:creator>
		<pubDate>Mon, 21 Jul 2003 19:06:35 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/#comment-4386</guid>
		<description>&lt;a&gt;&lt;/a&gt;

Also, even if they&#039;re not liable, could their records still be seized?  Could a court order to the proxy&#039;s ISP allow the non-liable proxy&#039;s traffic to be watched to determine who the liable end-points are?</description>
		<content:encoded><![CDATA[<p><a></a></p>
<p>Also, even if they&#8217;re not liable, could their records still be seized?  Could a court order to the proxy&#8217;s ISP allow the non-liable proxy&#8217;s traffic to be watched to determine who the liable end-points are?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Eric Eisenhart</title>
		<link>http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/comment-page-1/#comment-4385</link>
		<dc:creator>Eric Eisenhart</dc:creator>
		<pubDate>Mon, 21 Jul 2003 19:04:33 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/#comment-4385</guid>
		<description>&lt;a&gt;&lt;/a&gt;

Proxy servers:

Yes, proxy servers really can hide the IP of the sender and receiver, at their discretion.

Basically, the sender and receiver both just need to connect to the proxy, so there&#039;s no need for either to know who they are.

You have to trust the proxy, though.  The proxy will know the addresses of senders and receivers, and all data will pass through it.  And you have to trust the network locations that the proxies are housed at, as well.

The big problem with proxies is bandwidth; since everything has to go through them, they need to be capable of sustaining bandwidth equal to both the sum of all senders and the sum of all recipients.  If they&#039;ve figured out how to use existing proxies, such as those housed at the ISP the respective clients are using, this may not be as much of a problem.  (Many ISPs have HTTP proxies set up; because they can cache content that&#039;s fetched repeatedly, this helps the ISP reduce their own bandwidth usage.  AOL is a good example where HTTP traffic mostly goes through a proxy)</description>
		<content:encoded><![CDATA[<p><a></a></p>
<p>Proxy servers:</p>
<p>Yes, proxy servers really can hide the IP of the sender and receiver, at their discretion.</p>
<p>Basically, the sender and receiver both just need to connect to the proxy, so there&#8217;s no need for either to know who they are.</p>
<p>You have to trust the proxy, though.  The proxy will know the addresses of senders and receivers, and all data will pass through it.  And you have to trust the network locations that the proxies are housed at, as well.</p>
<p>The big problem with proxies is bandwidth; since everything has to go through them, they need to be capable of sustaining bandwidth equal to both the sum of all senders and the sum of all recipients.  If they&#8217;ve figured out how to use existing proxies, such as those housed at the ISP the respective clients are using, this may not be as much of a problem.  (Many ISPs have HTTP proxies set up; because they can cache content that&#8217;s fetched repeatedly, this helps the ISP reduce their own bandwidth usage.  AOL is a good example where HTTP traffic mostly goes through a proxy)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe</title>
		<link>http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/comment-page-1/#comment-4384</link>
		<dc:creator>Joe</dc:creator>
		<pubDate>Mon, 21 Jul 2003 19:00:29 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.law.harvard.edu/cmusings/2003/07/21/p2p-anonymity-questions/#comment-4384</guid>
		<description>&lt;a&gt;&lt;/a&gt;

I just re-read 512 and I can&#039;t find a way to hold proxy servers liable... however, with 1000 subpoenas being granted to the RIAA et al. per day... yikes...</description>
		<content:encoded><![CDATA[<p><a></a></p>
<p>I just re-read 512 and I can&#8217;t find a way to hold proxy servers liable&#8230; however, with 1000 subpoenas being granted to the RIAA et al. per day&#8230; yikes&#8230;</p>
]]></content:encoded>
	</item>
</channel>
</rss>
