What Information Does Your ISP Hold?

[Deus Ex]

Someone mentioned on another thread:

ISPs are required to keep user’s personal data for 90 days, during which time it can be examined by the authorities without any control by the courts.

I'm curious to know, what information, exactly, does your ISP hold about you & how can it bite you in the arse?

Can anybody get hold of this information?

[Mid]

An unofficial translation of the Computer Crime Act

Section 26. A service provider must store computer traffic data for at least ninety days from the date on which the data is input into a computer system. However, if necessary, a relevant competent official may instruct a service provider to store data for a period of longer than ninety days but not exceeding one year on a special case by case basis or on a temporary basis.

The service provider must keep the necessary information of the service user in order to be able to identify the service user from the beginning of the service provision, and such information must be kept for a further period not exceeding ninety days after the service agreement has been terminated.

The types of service provider to whom the provisions under paragraph one shall apply and the timing of this application shall be established by a Minister and published in the Government Gazette.

A service provider who fails to comply with this Section must be subject to a fine of not more than five hundred thousand baht.

[Deus Ex]

[Mid]

spam ???

it's the answer to ya question

[dirtydog]

I'm curious to know, what information, exactly, does your ISP hold about you & how can it bite you in the arse?

The provider will want to keep as little as possible, but in theory could collect absolutely everything, from every webpage you visit to any unencrypted info you type in, hell and even encrypted info, so yes they could, but for your average person probably just websites you visit is the absolute max they would be willing to record.

[Deus Ex]

spam ???

it's the answer to ya question

I didn't mean it like that.

I meant

no cut & paste specials

Thanks anyway, Mid, but I wanted a bit more than some official line.

The provider will want to keep as little as possible

So nobody except the provider can find out your home address & such?

Would they supply your address - for a cost or whatever - to anyone other than the authorities?

[dirtydog]

In theory they could if the person doing the approaching had a friend in the company, but obviously this wouldn't be official.

[baldrick]

So nobody except the provider can find out your home address & such?

depends how determined and skilled the person is - they don't need information from your ISP if they can have access to your computer remotely - there is probably a lot of info on your computer to tell them all about you

[Norton]

So nobody except the provider can find out your home address & such?

The provider employ people who have access to the information. It has happened many times where one of these employees has "unofficially" given personal information to others. Email addresses are commonly given out.

Then there is the Yahoo incident in China where information was given to the Government which resulted in prison for some.

[Reaper]

Thai ISP's hold onto the IP's and time you logged on and off. Maybe more in Thailand? I would know as ..... just be careful!

[Texpat]

How the heck could they get your address?

What if you're using your laptop, typing on a moving train with a GPRS modem?

[baldrick]

How the heck could they get your address?

What if you're using your laptop, typing on a moving train with a GPRS modem?

ok - maybe you have a pre paid sim card which you purchased with out ID.

but if you have used it at home a few times , records from what towers you connected to are still likely to be available , you can probably be triangulated from those.


if you are that keen to put something online without being traceable - use TOR and an unsecured WiFi access point , and make sure you know what metadata is embeded in whatever you do.