<html><head><style>
body {
font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;
padding:1em;
margin:auto;
background:#fefefe;
}
h1, h2, h3, h4, h5, h6 {
font-weight: bold;
}
h1 {
color: #000000;
font-size: 28pt;
}
h2 {
border-bottom: 1px solid #CCCCCC;
color: #000000;
font-size: 24px;
}
h3 {
font-size: 18px;
}
h4 {
font-size: 16px;
}
h5 {
font-size: 14px;
}
h6 {
color: #777777;
background-color: inherit;
font-size: 14px;
}
hr {
height: 0.2em;
border: 0;
color: #CCCCCC;
background-color: #CCCCCC;
display: inherit;
}
p, blockquote, ul, ol, dl, li, table, pre {
margin: 15px 0;
}
a, a:visited {
color: #4183C4;
background-color: inherit;
text-decoration: none;
}
#message {
border-radius: 6px;
border: 1px solid #ccc;
display:block;
width:100%;
height:60px;
margin:6px 0px;
}
button, #ws {
font-size: 12 pt;
padding: 4px 6px;
border-radius: 5px;
border: 1px solid #bbb;
background-color: #eee;
}
code, pre, #ws, #message {
font-family: Monaco;
font-size: 10pt;
border-radius: 3px;
background-color: #F8F8F8;
color: inherit;
}
code {
border: 1px solid #EAEAEA;
margin: 0 2px;
padding: 0 5px;
}
pre {
border: 1px solid #CCCCCC;
overflow: auto;
padding: 4px 8px;
}
pre > code {
border: 0;
margin: 0;
padding: 0;
}
#ws { background-color: #f8f8f8; }
.bloop_markdown table {
border-collapse: collapse;
font-family: Helvetica, arial, freesans, clean, sans-serif;
color: rgb(51, 51, 51);
font-size: 15px; line-height: 25px;
padding: 0; }
.bloop_markdown table tr {
border-top: 1px solid #cccccc;
background-color: white;
margin: 0;
padding: 0; }
.bloop_markdown table tr:nth-child(2n) {
background-color: #f8f8f8; }
.bloop_markdown table tr th {
font-weight: bold;
border: 1px solid #cccccc;
margin: 0;
padding: 6px 13px; }
.bloop_markdown table tr td {
border: 1px solid #cccccc;
margin: 0;
padding: 6px 13px; }
.bloop_markdown table tr th :first-child, table tr td :first-child {
margin-top: 0; }
.bloop_markdown table tr th :last-child, table tr td :last-child {
margin-bottom: 0; }
.bloop_markdown blockquote{
border-left: 4px solid #dddddd;
padding: 0 15px;
color: #777777; }
blockquote > :first-child {
margin-top: 0; }
blockquote > :last-child {
margin-bottom: 0; }
code, pre, #ws, #message {
word-break: normal;
word-wrap: normal;
}
hr {
display: inherit;
}
.bloop_markdown :first-child {
-webkit-margin-before: 0;
}
code, pre, #ws, #message {
font-family: Menlo, Consolas, Liberation Mono, Courier, monospace;
}
.send { color:#77bb77; }
.server { color:#7799bb; }
.error { color:#AA0000; }</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class="bloop_markdown"><p>It WILL take much more than 60 seconds to:</p>
<ul>
<li>verify the requestor’s identity,</li>
<li>the parameters of the request,</li>
<li>do the lookup,</li>
<li>format it appropriately</li>
<li>send it</li>
<li>generate the bill</li>
<li>manage payment receipt, when it inevitably goes wrong</li>
</ul>
<p>… should I go on? </p>
<p>This doesn’t include the sunk costs of the infrastructure to host it on, and recovering that cost.</p>
<p>Is there mention of penalties for when your $system goes bye bye (fire/flood/hacker/MTBF of hdd’s) and you can’t respond?</p>
<p>James</p>
<p></p></div><div class="bloop_original_html"><style>body{font-family:Source Code Pro,Arial;font-size:12px}</style><div id="bloop_customfont" style="font-family:Source Code Pro,Arial;font-size:12px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div> <br> <div id="bloop_sign_1426652414744854016" class="bloop_sign"><div style="font-family:helvetica,arial;font-size:13px"><br></div></div> <br><p style="color:#000;">On 18 March 2015 at 2:17:21 pm, Paul Brooks (<a href="mailto:pbrooks-ausnog@layer10.com.au">pbrooks-ausnog@layer10.com.au</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div bgcolor="#FFFFFF" text="#000000"><div></div><div>
<title></title>
<div class="moz-cite-prefix">They'll tell you you're
dreaming.<br>
<br>
counter-view...<br>
<br>
Remembering that Telstra recently announced they'll charge $25 to
process a simple request - the same amount they charge a LEO.<br>
<br>
If you've built even a dodgy lookup system, should it really take
more than 60 seconds to type in an IP address, a start date/time,
an end date/time, and have the lookup system (that the Gov will
help contribute to your reasonable costs to build *cough*) decrypt
the RADIUS database for the time window, and extract a dump of
records for that IP address?<br>
<br>
If you think you'll be able to charge $500 - $1000, you'd better be
prepared to explain to the CAC why you have to have a live person
ruffling through a set of filing-cabinet of printed-out A4 sheets
of paper with your records printed on them. They might be the
Gov't, but even they know we have computers do do this sort of
database lookup these days.<br>
<br>
<br>
On 18/03/2015 1:27 PM, Andrew Yager wrote:<br></div>
<blockquote cite="mid:C4FD6AA3-2764-4E49-B46F-6526EEA99707@rwts.com.au" type="cite">
Hi Terry,
<div class=""><br class=""></div>
<div class="">We are taking the view that this is an exercise that
is equivalent of up to 2 hours technical services, and given the
costs of verifying and ensuring compliance, our standard cost for a
request will be $500 per request.</div>
<div class=""><br class=""></div>
<div class="">For greater time periods (e.g. reporting on two
years), our charging rate will extend to $15 000 for this
service.</div>
<div class=""><br class=""></div>
<div class="">More complicated requests (such as access logs from a
web server) will also attract higher rates.</div>
<div class=""><br class=""></div>
<div class="">I’d encourage everyone to ensure that their costs are
reasonable relating to the amount of work - and the opportunity
cost associated with complying with this daft legislation.</div>
<div class=""><br class=""></div>
<div class="">Andrew</div>
<div class=""><br class="">
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;">
--</span></div>
<div class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;">
<b class="">Andrew Yager, Managing
Director</b> <i class="">(MACS Snr CP BCompSc MCP
JNCIA-Junos)</i><br class="">
Real World Technology Solutions Pty Ltd - IT people
you can trust<br class="">
ph: 1300 798 718 or (02) 9037 0500<br class="">
fax: (02) 9037 0591<br class="">
<a moz-do-not-send="true" href="http://www.rwts.com.au/" class="">http://www.rwts.com.au/</a></span></div>
<div class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-stroke-width: 0px;">
<br class=""></span></div>
</div>
</div>
</div>
</div>
<br class="Apple-interchange-newline"></div>
<br class="Apple-interchange-newline"></div>
<br class="Apple-interchange-newline"></div>
<br class="Apple-interchange-newline"></div>
<br class="Apple-interchange-newline"></div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline"></div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On 18 Mar 2015, at 1:11 pm, Terry Sweetser
<<a moz-do-not-send="true" href="mailto:terry+AusNOG@skymesh.net.au" class="">terry+AusNOG@skymesh.net.au</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">Hello Noggers,<br class="">
<br class="">
I'm wondering what policies and pricing any/all of your
organisations have in place to "recover" costs when asked for
(meta-)data about ip addresses, customers and so on?<br class="">
<br class="">
Given the transition for 2-year retention and the expansion of the
(meta-)dataset to be retained, what plans are in place to charge
reasonable fees to state and federal LEOs for the data?<br class="">
<br class="">
Is $200 a fair sum of money for an ip address match up?<br class="">
<br class="">
Is $20,000 a fair sum of money for a dump of the (up to) 2 years of
data for an ip address or customer?<br class="">
<br class="">
--<br class="">
<a moz-do-not-send="true" href="http://about.me/terry.sweetser" class="">http://about.me/terry.sweetser</a><br class="">
<br class="">
_______________________________________________<br class="">
AusNOG mailing list<br class="">
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br class="">
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br class="">
</div>
</blockquote>
</div>
<br class=""></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre></blockquote>
<br>
_______________________________________________
<br>AusNOG mailing list
<br>AusNOG@lists.ausnog.net
<br>http://lists.ausnog.net/mailman/listinfo/ausnog
<br></div></div></span></blockquote></div><div class="bloop_markdown"><p></p></div></body></html>