[00:00.870 --> 00:01.830]  Thank you very much.
[00:03.130 --> 00:14.310]  So before I start and try and explain to you why I built an ISP for running Torstuff, it would be a good idea to understand the background of the Internet in the U.K. over the past few years.
[00:15.030 --> 00:16.590]  I promise you it won't take too long.
[00:19.050 --> 00:26.950]  So, in 2004, British Telecom, which was one of the largest incumbent ISPs, introduced a technology they called Cleanfeed.
[00:26.950 --> 00:31.610]  It was a technology that had a noble aim, they claimed.
[00:32.470 --> 00:41.650]  And the idea was to prevent people from accidentally or mistakenly stumbling on some rather, you know, extremely unsavoury material.
[00:42.150 --> 00:46.150]  And as far as technology goes, it is quite a clever technology.
[00:46.830 --> 00:54.550]  We have a non-profit named the Internet Watch Foundation, and they take reports of URLs of this unsavoury material.
[00:54.550 --> 00:57.450]  They check it to make sure whether it is indeed illegal.
[00:57.830 --> 01:04.530]  And then they resolve the domain to an IP address, curate those IP addresses into a list, and provide them to BT.
[01:05.710 --> 01:11.950]  If you're browsing the Internet normally, you're going around, their routers will check the IP you're trying to reach.
[01:12.210 --> 01:20.750]  If it's not on the list of IPs they don't want you to reach, your IPs carry on going, or sorry, your packets carry on going to the website unimpeded.
[01:22.590 --> 01:29.670]  However, if one of the IPs you're trying to reach happens to be on their list that they don't like, then your packets are transparently routed to a proxy.
[01:30.110 --> 01:35.970]  If it's not SSL, then it will try and evaluate the full URL to see whether that URL is something that has been reported to them.
[01:36.130 --> 01:44.210]  If it has been reported, they will spoof a 404, or just drop the session, or do something else, you know, try and deter you from visiting that URL.
[01:45.390 --> 01:52.330]  And some of us in the Internet freedom society, things like that, we were concerned.
[01:52.950 --> 01:59.530]  It's a noble idea for the technology, but obviously it's the very thin end of a wedge for things that could go horribly, horribly wrong.
[01:59.710 --> 02:06.190]  And we gave these drastic predictions of how terrible this will be with state level censorship and things like that.
[02:06.790 --> 02:09.370]  And then nothing happened for a while.
[02:10.690 --> 02:24.150]  But in 2011, the MPAA, the Motion Picture Association of America, went to our High Court in the U.K., and they said, oh, there's this website, News Bins, it's a Usenet site, they've got material of our customers, and they're infringing copyright.
[02:24.410 --> 02:28.530]  We want you to block it, because you have a technology that can block traffic.
[02:30.050 --> 02:42.490]  And the Honourable Justice Arnold looked at the case, and he agreed that News Bins was indeed infringing a particular part of U.K. law, and said, well, yes, you have this technology.
[02:42.670 --> 02:48.230]  This technology can block IP addresses, and so you will use it to block this website.
[02:49.270 --> 02:52.910]  And we were like, okay, things are starting to speed up now.
[02:53.910 --> 02:55.130]  And speed up they did.
[02:55.130 --> 03:02.170]  In 2012, the MPAA went again to the High Court, and they said, right, you've managed to block News Bins, and we've seen a drop in traffic.
[03:02.630 --> 03:04.310]  Now we want you to block the Pirate Bay.
[03:05.210 --> 03:21.150]  Now, by this point, lots of ISPs in the U.K. were using Clean Feed, or equivalents of, and by just targeting a court order against these ISPs here, 95% of the U.K. was now blocked from being able to reach the Pirate Bay, News Bins, and an awful lot of other sites.
[03:24.310 --> 03:37.450]  So, June 2013 comes along, we have the Snowden revelations, and also I don't need to explain those to everyone here, but we found out that a lot of our ISPs, BT included, were doing things at the behest of GCHQ, and stuff that we weren't particularly happy about.
[03:39.310 --> 03:41.470]  So, July 2013, things got a little bit better.
[03:41.790 --> 03:43.530]  The little point there has gone yellow.
[03:43.890 --> 03:47.350]  A 20-year-old student launches a website called Immunicity.org.
[03:47.930 --> 03:50.030]  And this website was quite clever, in a way.
[03:50.270 --> 03:52.870]  It resurrected something called the proxy auto-configuration file.
[03:53.690 --> 03:58.070]  And this is a little piece of JavaScript that takes a list of URLs.
[03:58.070 --> 04:05.870]  When your browser makes a request for a domain, it checks the PAC file, if it matches, and then says, no, no, no, don't go direct, use this proxy.
[04:06.650 --> 04:13.890]  All of a sudden, by simply pasting this Immunicity URL into your browser, all of a sudden you can get back to Pirate Bay and all things like that.
[04:14.130 --> 04:16.910]  It got picked up by Torrent Freak and lots of other news sites.
[04:17.570 --> 04:22.850]  Everyone reveled in the fact that, obviously, Internet routed around censorship again, and things were happy for a while.
[04:24.650 --> 04:25.530]  January 2014.
[04:26.650 --> 04:29.810]  Those ISPs I mentioned earlier enabled something called parental filtering.
[04:30.670 --> 04:37.230]  The U.K. government deciding that children need to be protected from pornography, gambling, opinions.
[04:40.810 --> 04:43.290]  They shouldn't be able to reach parts of the Internet.
[04:43.430 --> 04:45.010]  The Internet's bad and children shouldn't be able to do it.
[04:45.610 --> 04:52.110]  They didn't think maybe we should educate parents or suggest things like having the family computer in the living room, or something like that.
[04:52.270 --> 04:56.230]  No, it's much easier to have state-level mandated ISP-centralised censorship.
[04:57.470 --> 05:01.230]  Now, I'm going to jump ahead a little bit to July of 2014, and then I'll jump back again.
[05:01.890 --> 05:06.550]  So, after six months, unsurprisingly, nobody wanted their Internet censored.
[05:06.870 --> 05:09.090]  Quite surprisingly, lots of things were blocked and people didn't want it.
[05:09.490 --> 05:11.870]  The only outlier here is a company called TalkTalk.
[05:12.350 --> 05:24.190]  Now, they had enabled parental filtering two years prior, as they thought it was of a good value-add, that customers would move to their broadband in order to have this parental filtering and this antivirus and all the rest of it.
[05:24.690 --> 05:26.410]  And so they had an uptake of about 36%.
[05:28.010 --> 05:32.670]  Now, whether the government was embarrassed by this really low take-up or something like that, we're not quite sure.
[05:33.170 --> 05:40.050]  But they decided the way to fix this was not to accept that filtering doesn't work, but to say, you now have to have an unavoidable choice.
[05:40.350 --> 05:45.190]  When you buy a broadband connection in the U.K., by default, it is enabled with parental filtering.
[05:45.930 --> 05:51.670]  And that will block everything from gambling to social media to alcohol, pornography, et cetera, et cetera, et cetera.
[05:52.470 --> 05:58.870]  So, if you, as an adult, want to be able to reach these websites, you literally have to go and ask your ISP.
[05:58.870 --> 06:01.490]  And there'll be a little fun bit on that later on.
[06:02.730 --> 06:05.470]  So, we drop back again, back to June 2014.
[06:06.110 --> 06:08.690]  EFF, I'm sure you all know, launches the Tor Challenge.
[06:08.970 --> 06:15.150]  And if you've read my bio in the pamphlet, you'll see that I was one of the people that tried to take up the Tor Challenge.
[06:16.110 --> 06:19.810]  And the idea was that they wanted people to try and run relays and strengthen the network.
[06:20.310 --> 06:24.730]  And if you saw any of the State of the Onion reports or things like that, we now have 7,000 relays, and that's pretty good.
[06:24.730 --> 06:29.530]  1,637 of them, give or take, were from the Tor Challenge.
[06:29.910 --> 06:34.910]  I had some problems with the Tor Challenge, and I'll get onto that in a little bit.
[06:37.030 --> 06:47.670]  July 2014, the Open Rights Group, which is sort of a U.K. equivalent of the EFF, relaunched their website, blocked.org.uk.
[06:47.670 --> 07:00.310]  And we were concerned that all this filtering that was going on, not only was it being done in secret, the lists were all secret, it was run by proprietary companies and things like that, that Corey mentioned earlier.
[07:00.630 --> 07:02.930]  But it was also over-blocking as well as under-blocking.
[07:03.690 --> 07:07.950]  And when we launched the website, we also crowdfunded and released a video.
[07:08.210 --> 07:12.750]  If you'll bear with me, and if the AV gods will allow it, I'd like to show that to you.
[07:19.260 --> 07:20.800]  Department of Dirty, how can I help?
[07:20.860 --> 07:23.300]  Thank God, finally, a real human being.
[07:23.440 --> 07:25.280]  What is the dirty nature of your inquiry today?
[07:25.440 --> 07:28.340]  Well, I'm trying to download a recipe for spotted dick.
[07:28.860 --> 07:29.540]  I'm getting the message...
[07:30.200 --> 07:33.620]  This web page has been blocked because it may contain inappropriate material.
[07:33.840 --> 07:36.580]  If you really want to access this page, call blah, blah, blah, blah, blah, blah.
[07:36.760 --> 07:38.400]  I just need to ask you a couple of questions.
[07:38.760 --> 07:39.380]  Oh, yes, of course.
[07:39.620 --> 07:40.600]  My address is...
[07:40.600 --> 07:41.900]  Oh, no, no, no, we've already got your address.
[07:42.160 --> 07:44.680]  How often do you like to access dirty material?
[07:44.820 --> 07:46.980]  Often, very often, or all the time?
[07:46.980 --> 07:47.560]  Excuse me.
[07:47.640 --> 07:51.800]  How dirty would you say your browsing habits are on a scale of one to ten?
[07:52.000 --> 07:54.280]  Ten being pretty... well, you know what to mean.
[07:54.400 --> 07:55.960]  I just want to use the Internet.
[07:56.400 --> 07:58.500]  Yeah, well, this isn't the Internet, is it, sir?
[07:58.660 --> 07:59.940]  This is the dirty Internet.
[08:00.100 --> 08:01.680]  I really need this recipe.
[08:01.960 --> 08:02.240]  Okay, all right.
[08:02.660 --> 08:04.220]  You can have your recipe.
[08:04.440 --> 08:08.400]  All you need to say is, I really want to use the dirty Internet.
[08:08.460 --> 08:09.480]  I will not.
[08:10.000 --> 08:10.360]  Okay.
[08:10.860 --> 08:13.960]  Now, about these spots on your member, sir.
[08:14.060 --> 08:15.060]  Could you describe them to me?
[08:15.140 --> 08:17.000]  I might need to transfer you to the Department of Health.
[08:20.600 --> 08:22.320]  Department of Dirty, how can I help?
[08:26.970 --> 08:30.790]  So, I mean, as amusing as it is, is actually quite literally true.
[08:30.890 --> 08:36.130]  You'll have to go onto a web control panel or phone up customer services and say, I would not like be filtered.
[08:36.230 --> 08:38.530]  I would like to access pornography or gambling and things like that.
[08:38.530 --> 08:44.070]  And, obviously, quite some people were concerned that they were being put on lists and stuff like that.
[08:45.610 --> 08:54.690]  So, block.org.uk itself, just to give a little bit of background, much like the Open Observatory of Network Interference, but at a very much smaller scale, we have a bunch of Raspberry Pis.
[08:54.870 --> 08:58.470]  We bought subscriptions to these ISPs, and the bottom ones are mobile.
[09:00.310 --> 09:01.650]  And we then...
[09:02.450 --> 09:04.990]  Sorry, you can then submit a URL to block.org.uk.
[09:05.250 --> 09:09.230]  We will send it to the Raspberry Pis, they will crawl it, and if they get a block page, they report that back to you.
[09:09.450 --> 09:13.150]  We then get this giant database of who's blocking what, and every so often we will recrawl it.
[09:13.430 --> 09:20.530]  And when we first ran it, for the results for launch day, we found that some of these ISPs were blocking the NSPCC and Childline.
[09:20.730 --> 09:23.550]  These are websites, charities for supporting children.
[09:24.190 --> 09:25.450]  But Pornhub was allowed.
[09:28.170 --> 09:35.010]  And, you know, it showed perfectly that, you know, there's some massive over-blocking and some under-blocking as well.
[09:36.370 --> 09:42.110]  And just as 2014 was looking good, the person who was running Immunicity.org was arrested.
[09:42.390 --> 09:44.850]  And his websites were seized and his servers were seized.
[09:45.650 --> 09:49.310]  And the U.K. police have now decided that proxies are criminal.
[09:49.910 --> 09:51.590]  They are fraud, somehow.
[09:53.130 --> 09:55.430]  And this guy is still in court at the moment.
[09:55.990 --> 09:58.150]  He's looking at quite a lengthy jail sentence at the moment.
[09:58.670 --> 10:02.050]  So things in the Internet aren't, oh, in the U.K., aren't looking particularly great.
[10:02.790 --> 10:08.230]  So in February 2015, Brass Horn Communications launched as a form of ISP.
[10:09.470 --> 10:14.370]  So you might look at all of that and think to yourself, well, getting into the ISP game seems like a bit of a silly idea.
[10:15.750 --> 10:16.990]  Why on earth would you do that?
[10:18.970 --> 10:25.190]  When the news of the Immunicity arrests happened, I was over in Vegas for another conference that I'm sure you all know.
[10:25.670 --> 10:26.750]  And I was pretty annoyed.
[10:27.030 --> 10:31.950]  And so I had a rough idea from what the police had said in their press releases.
[10:31.950 --> 10:35.770]  I had an idea of how they were applying the legislation they used.
[10:35.990 --> 10:44.450]  So I started writing this thing that I called Packet Flagon that was on routing packetsisnotacrime.uk, hopefully protecting myself.
[10:45.810 --> 10:50.830]  And the idea was that you would have to select, you'd have to input the URLs that you wanted to proxy.
[10:51.430 --> 10:53.490]  And then it would create a pack file customised to you.
[10:53.550 --> 10:57.230]  So I wasn't saying, if you want to go to this website, use my service.
[10:57.530 --> 11:00.570]  I was saying, if you want to get to something that you can't get to, use this.
[11:01.010 --> 11:04.110]  And I issued an FOA against the police, and I talked to some solicitor friends.
[11:05.750 --> 11:10.650]  And when it launched, it got picked up by Torrentfreak, the usual, oh, immunity's back and blah, blah, blah.
[11:11.230 --> 11:12.090]  And I made a mistake.
[11:12.170 --> 11:13.550]  I read the Internet comments.
[11:14.450 --> 11:15.530]  And this one stood out to me.
[11:16.290 --> 11:18.890]  This guy is going to get f*cked by the U.K. state.
[11:20.010 --> 11:20.970]  Infuriating, but likely.
[11:21.910 --> 11:24.030]  Now, luckily, that was two years ago, and I'm still here.
[11:24.190 --> 11:26.670]  So it looks like I got guessed right, maybe.
[11:28.450 --> 11:28.770]  Anyway.
[11:29.830 --> 11:30.950]  Secondly, EFF Tor Challenge.
[11:31.030 --> 11:32.510]  I mentioned previously that I had some issues.
[11:33.310 --> 11:36.950]  I looked at the Tor Wiki, and obviously we've got a problem, as it was mentioned in the State of the Onion.
[11:37.030 --> 11:43.130]  We have an awful lot of people that are running relays on ASs that already have hundreds, if not thousands, of relays.
[11:43.770 --> 11:50.950]  So I tried digging out smaller companies that weren't currently running relays, and then I'd get shut down.
[11:51.130 --> 11:52.130]  Even with middle relays.
[11:52.230 --> 11:54.710]  There's an email anti-spam list somewhere.
[11:54.830 --> 11:55.510]  I think it's a German one.
[11:55.590 --> 11:56.270]  I can't remember its name.
[11:56.890 --> 12:02.590]  And they will block the entire slash 24 if they detect a middle relay in that network.
[12:03.190 --> 12:09.130]  So if you're a small ISP and you've only got 1,000 addresses, if someone blacklists 255 of them, you're going to be annoyed.
[12:09.130 --> 12:10.630]  You're going to kick the guy off running a middle relay.
[12:12.070 --> 12:25.030]  Even some of the ISPs and hosters that are considered good and cooperative will still suspend a server if it gets an abuse request until you say why the abuse request happened.
[12:25.390 --> 12:27.810]  And eventually they will suspend it for longer and longer and longer.
[12:27.810 --> 12:34.210]  And, you know, I was losing money because I was buying some of these servers in advance, you know, a year in advance to try and cut the costs.
[12:34.430 --> 12:36.550]  And they'll be like, well, you've breached the AUP, not our problem.
[12:37.250 --> 12:37.990]  So that was a shame.
[12:38.270 --> 12:41.870]  And finally, censorship annoys me a lot.
[12:42.310 --> 12:44.430]  As you probably can tell, been tracking all this stuff.
[12:45.290 --> 12:54.390]  And every so often you see these things about someone's blog and WordPress being shut down because someone used DMCA to shut down criticism, something like that.
[12:54.390 --> 12:58.870]  Someone's Facebook account gets blocked because they put a picture of themselves breastfeeding or something.
[12:59.070 --> 12:59.590]  It's ridiculous.
[12:59.770 --> 13:00.850]  It annoys me greatly.
[13:01.070 --> 13:12.370]  So I've always used co-location in my own servers to host my blog and stuff like that because, you know, at the end of the day, it takes an awful lot more for a hosting provider to decide to shut you down than it would Twitter or Facebook or anything.
[13:12.530 --> 13:13.370]  But they still can.
[13:13.510 --> 13:14.670]  It's totally within their right to do so.
[13:16.370 --> 13:18.730]  Anyone that enjoys Futurama will hopefully get this reference.
[13:18.950 --> 13:21.930]  I thought the best way to fix this is I'll build my own damn ISP.
[13:23.090 --> 13:24.890]  And then I tried to work out how I'd do that.
[13:25.590 --> 13:28.890]  So hopefully, it's going to be a bit dry, I'm afraid, if this hasn't been already.
[13:29.550 --> 13:32.130]  And show you how to... you too can try and build an ISP.
[13:32.210 --> 13:32.930]  And it's not going to be cheap.
[13:34.010 --> 13:35.430]  So just bear that in mind.
[13:37.170 --> 13:41.330]  On the Tor Wiki, there is a small entry that suggests you build your own legal entity.
[13:41.550 --> 13:46.610]  It gives you certain liability or excludes you from certain liabilities such as financial liabilities.
[13:46.670 --> 13:51.490]  You sign contracts and you say, I want a fibre connection for X amount of time.
[13:51.490 --> 13:56.050]  And if for whatever reason you have to shut the company down, then they can't take my house, they can't take my car.
[13:56.330 --> 13:57.250]  They'll have to sue the company.
[13:57.250 --> 13:59.030]  If the company's got no money, so be it.
[13:59.950 --> 14:01.030]  Limited legal liability.
[14:01.370 --> 14:05.950]  If a Tor exit causes an issue, then hopefully I can't get sued.
[14:06.090 --> 14:09.650]  They will have to sue the company and that will end there.
[14:10.290 --> 14:13.270]  To create a company, you go to what we call in the U.K., the company's house.
[14:13.750 --> 14:15.230]  And you have to give them some information.
[14:15.910 --> 14:20.750]  Articles of association, basically some boilerplate and explaining what your company is intending to do.
[14:21.250 --> 14:22.530]  And it is quite an interesting one.
[14:22.850 --> 14:30.170]  Going to a bank and stuff and explaining, trying to explain Tor and anonymity to banks and company's house and things.
[14:30.870 --> 14:40.630]  And you define the structure, you provide an annual return, which tells the company's house and the government what the structure of your company is, who the officers are, who the directors are and things like that.
[14:40.930 --> 14:44.290]  And you have to provide accounts, how much money you're spending and how much tax you owe the government.
[14:45.590 --> 14:46.390]  Costs about £20.
[14:48.130 --> 14:50.150]  Pre-Brexit, I'd have said, it's about $30.
[14:55.830 --> 14:58.750]  This weekend is turning out to be quite expensive for beer for me.
[15:04.750 --> 15:12.170]  So, you've got your company, you've got your separate legal entity and you want to be what we call a local Internet registry.
[15:12.550 --> 15:15.750]  And the way you do this is you go to a regional Internet registry.
[15:15.750 --> 15:22.970]  The regional Internet registries have been assigned a big chunk of IP addresses from the IANA, Internet Assigned Numbers Authority.
[15:23.770 --> 15:25.710]  For Europe, it's RIPE NCC.
[15:26.030 --> 15:29.270]  For the U.S., it's ARIN, Latin America, LACNIC, Asia-Pacific, APNIC.
[15:30.550 --> 15:34.590]  Because I am in the U.K., because my servers are in the U.K., I went to RIPE.
[15:35.550 --> 15:42.690]  To become a local Internet registry with RIPE, you need a copy of your company's incorporation documents, the thing that says you are a company, you'll prove that you are a legal company.
[15:42.690 --> 15:47.250]  A billing address, a real billing address, and names and email addresses of the people in your company.
[15:48.250 --> 15:50.690]  So, I am billing, I am admin, I am everything.
[15:52.510 --> 15:54.590]  And, again, a big chunk of cash.
[15:55.230 --> 15:58.190]  3,600 euros, which is about four grand, I think.
[15:58.810 --> 16:01.430]  1,200 of that is payable each year in maintenance fees.
[16:01.750 --> 16:03.070]  This is before we even get started.
[16:03.210 --> 16:07.190]  Like I said, whilst you could create your own ISP, it is not a cheap endeavour.
[16:07.430 --> 16:09.650]  I'm not getting a new car for quite a long time.
[16:11.230 --> 16:11.770]  So, done.
[16:11.930 --> 16:12.670]  You get your letter back.
[16:12.770 --> 16:13.990]  You say, congratulations, thank you.
[16:14.070 --> 16:15.750]  You are now a local Internet registry.
[16:15.890 --> 16:17.490]  You are an ISP, you are a part of the Internet.
[16:19.590 --> 16:19.910]  Great.
[16:22.870 --> 16:23.770]  Yeah, you need IPs.
[16:25.630 --> 16:26.930]  I came to the game quite late.
[16:27.110 --> 16:28.930]  As you all know, the Internet has run out of IPs.
[16:29.010 --> 16:29.810]  There are no more left.
[16:30.150 --> 16:30.750]  They are all gone.
[16:31.950 --> 16:33.990]  So RIPE has introduced what it calls the last slash 8.
[16:34.230 --> 16:34.990]  Because it is not gone.
[16:35.170 --> 16:36.590]  They still have an entire slash 8 left.
[16:37.870 --> 16:40.550]  But they will only give you 1,024 addresses.
[16:41.010 --> 16:43.910]  That is not really a lot to run an ISP on.
[16:44.230 --> 16:44.870]  But it is a start.
[16:45.210 --> 16:45.810]  There is a catch though.
[16:46.910 --> 16:49.430]  Not only have we run out of IPv4, no one uses it anymore.
[16:49.830 --> 16:50.790]  It is deprecated.
[16:50.890 --> 16:51.210]  It is legacy.
[16:51.970 --> 16:53.530]  So you can't get IPv4 straight away.
[16:53.810 --> 16:55.110]  You have to get some IPv6 first.
[16:56.350 --> 16:59.490]  And then once you have got your IPv6, then you can ask for some IPv4.
[17:00.710 --> 17:07.470]  Now some of you in the room might have remembered that recently Microsoft, or I think it was Microsoft, spent an awful lot of money.
[17:07.550 --> 17:09.730]  They bought a big bunch of IPs.
[17:09.890 --> 17:12.510]  I think it was either $11 an IP or $18 an IP.
[17:12.830 --> 17:16.530]  And if you have been following the numbers, this is roughly about $4 an IP.
[17:17.070 --> 17:18.010]  If you do it this way.
[17:18.410 --> 17:25.770]  And yes, some people realised, if they just incorporated a company, got a slash 22, then they can transfer it back to themselves at only $4 an IP.
[17:26.330 --> 17:27.690]  Funnily enough, right, worked this one out.
[17:28.170 --> 17:31.230]  And not long after, they then said, no, no, you cannot do this anymore.
[17:31.470 --> 17:32.230]  So that is it.
[17:32.430 --> 17:36.990]  You've got 1,024 addresses, or you pay incredible amounts of money.
[17:38.830 --> 17:43.450]  Now at this point, I'm assuming you've already chosen a co-location provider or a VPS provider and things like that.
[17:43.590 --> 17:45.310]  And you can say to them, here are my IP addresses.
[17:45.490 --> 17:46.910]  Please announce them to the Internet for me.
[17:49.370 --> 17:50.170]  There's a problem with that.
[17:50.870 --> 17:52.590]  You're still totally at their behest.
[17:52.930 --> 17:55.150]  They will show as the origin of your IP addresses.
[17:55.150 --> 18:00.190]  Yes, they are your IPs and you are responsible for them, but they will show as being the originator.
[18:00.350 --> 18:03.690]  And so they may still choose to shut you down if they so wish.
[18:04.210 --> 18:08.090]  So what you really want to do is get what we call an ASN.
[18:08.170 --> 18:11.650]  I'm sure you've all heard of AS numbers or at least seen them in some sort of context.
[18:11.810 --> 18:13.410]  It stands for Autonomous System Number.
[18:13.730 --> 18:17.590]  It's just a small number that identifies you and your small corner of the Internet.
[18:17.830 --> 18:21.810]  It allows you to participate in BGP, the Border Gateway Protocol, the glue of the Internet.
[18:22.150 --> 18:27.730]  If any of you were here at the last hope, I think there was this talk about how that can be undermined and all sorts of other craziness.
[18:28.990 --> 18:31.750]  But the thing that's important is it allows for multiple transit providers.
[18:31.790 --> 18:36.570]  So you can have connections with Cogent, with Level 3, with BT, with Verizon, all things like that.
[18:37.470 --> 18:44.070]  And for the most part, they won't interfere with what you transit because they want to keep their mere conduit protections and stuff like that.
[18:44.470 --> 18:53.790]  And I think, as far as I'm aware, there's only been a couple of cases where all of the transit providers for a given AS have collaborated to shut them all peering down at one time.
[18:53.990 --> 18:56.250]  And that was some form of spamming thing in Europe.
[18:57.190 --> 18:58.710]  It's usually quite rare.
[18:58.710 --> 18:58.730]  Yeah.
[19:00.650 --> 19:02.450]  So, we now have our IPs.
[19:04.130 --> 19:04.610]  But...
[19:04.610 --> 19:04.910]  Yay!
[19:05.150 --> 19:05.430]  Exactly.
[19:05.590 --> 19:06.690]  It's exciting, kind of.
[19:07.310 --> 19:09.310]  Unfortunately, we've now got to the really dry bit.
[19:09.610 --> 19:10.090]  Housekeeping.
[19:10.610 --> 19:16.070]  I'm sure some of you guys have done WHOIS and got a bunch of information about those IPs of yours.
[19:16.930 --> 19:18.230]  Or the IP that you're looking at.
[19:18.870 --> 19:21.490]  As an ISP, it's your responsibility to fill that information in.
[19:21.490 --> 19:25.190]  So, let's have a quick look at an inetnum object.
[19:26.330 --> 19:30.350]  RIPE have decreed that if you have IPs on the Internet, you now must publish an abuse address.
[19:30.490 --> 19:34.450]  You must have some way of people getting in touch with you and telling you if there's something wrong on your network.
[19:34.830 --> 19:40.250]  So, the first thing you notice, you'll have to make sure that you publish an abuse address on email and be responsive to any requests you get.
[19:40.350 --> 19:41.150]  And we'll go into that in a little bit.
[19:42.430 --> 19:43.630]  Then there's the inetnum itself.
[19:43.950 --> 19:46.710]  It lists the range of the IP addresses you're using.
[19:47.190 --> 19:52.630]  And for this particular purpose, I've assigned an entire slash 24 to my Tor exits for use with Tor exits.
[19:52.970 --> 19:54.450]  And I had this great idea.
[19:54.590 --> 20:04.570]  I thought, if I put in the description field, which can be as many lines as you want, and I tell people ahead of time, these are Tor relays, Tor exits, and this is the exit policy.
[20:04.830 --> 20:08.390]  So, if you see anything dodgy, you can do the WHOIS and go, oh, right, look, it's a Tor ret.
[20:08.390 --> 20:11.330]  And there's even a URL telling you more information about Tor.
[20:11.590 --> 20:14.830]  And I thought to myself, you know, people will look at this and be like, oh, it's Tor, I understand Tor.
[20:14.830 --> 20:16.790]  And they won't send me an email moaning.
[20:18.590 --> 20:19.030]  No.
[20:19.850 --> 20:21.250]  No, no, no, no, no, no.
[20:22.390 --> 20:23.810]  Finally, assigned status.
[20:23.990 --> 20:29.350]  You can say whether these addresses are publicly aggregatable, whether they're provider independent, whether they're part of your own infrastructure and stuff like that.
[20:29.570 --> 20:31.330]  For the most part, it's not that important.
[20:32.950 --> 20:34.470]  And there's a root object at the bottom.
[20:35.010 --> 20:36.650]  This has two important things.
[20:36.910 --> 20:39.550]  The first one is the description, the name of your ISP.
[20:39.890 --> 20:41.590]  That's not particularly important.
[20:41.590 --> 20:44.090]  But for me, there was something quite cool.
[20:44.870 --> 20:57.690]  The first time that I went to Globe and I had a look at one of my relays, or I had Orbot and I looked at the circuit list, and my ISP, not only was it my node, but it was actually my ISP that was showing up in the circuit.
[20:58.190 --> 21:00.330]  It's quite an interesting, it's quite a fun little thing.
[21:00.510 --> 21:02.330]  It's like, oh, that's quite cool.
[21:04.210 --> 21:06.250]  And then finally, another technical bit, the origin.
[21:06.250 --> 21:08.110]  This is the AS is my AS number.
[21:08.330 --> 21:15.910]  This is telling other people that if you see these IP addresses coming, originating from somebody else's AS, something funky is going on.
[21:16.070 --> 21:18.770]  Those IPs should only be announced by my routers saying these things.
[21:19.010 --> 21:21.490]  And we'll go into a little bit more detail about that later.
[21:23.030 --> 21:25.230]  And we all know the Internet is serious business.
[21:27.250 --> 21:34.350]  And the RIPE database contains things, root objects, and PGP signs information about how you connect to other routers and stuff like that.
[21:34.570 --> 21:37.650]  It also has this, a poem object.
[21:38.390 --> 21:42.470]  But don't worry, this is an upgrade from the limerick object we used to have.
[21:44.090 --> 21:46.170]  I don't think I should, I'm not sure if I should read the poem.
[21:46.590 --> 21:48.110]  But, yes.
[21:48.470 --> 21:49.070]  No, I'm not.
[21:50.670 --> 21:51.890]  In your voice, you should.
[21:51.970 --> 21:53.430]  In my voice, okay, right, okay.
[21:54.530 --> 21:56.330]  So, BGP is a protocol smart.
[21:56.610 --> 21:58.150]  On Cisco's, it's really an art.
[21:58.370 --> 22:01.930]  If you screw up your med, and your router goes dead, then you're better off with a restart.
[22:06.690 --> 22:09.000]  Not my poem, some random thing from 2005.
[22:09.200 --> 22:09.360]  Anyway.
[22:11.030 --> 22:12.900]  So, we've got more housekeeping to do.
[22:13.120 --> 22:14.840]  I'm really sorry, but you came to the talk.
[22:16.720 --> 22:17.300]  Reverse DNS.
[22:17.680 --> 22:21.600]  We've told people what these IPs, the larger information about these IPs.
[22:21.800 --> 22:25.780]  We use some specific information for DNS, reverse DNS, things like that.
[22:25.980 --> 22:32.720]  And again, it's quite easy for IPv4, because I've only got four slash 24s, and they split quite nicely.
[22:32.740 --> 22:35.080]  So, I can create four zones for those things.
[22:35.360 --> 22:42.660]  And I tell the right database that if you want to look up the reverse DNS for these, then you want to use these name servers that are quite blurry, isn't it?
[22:42.660 --> 22:47.860]  But anyway, you tell the right database, and that upgrades, and it sends everything up to the root name servers, and it's all quite cool.
[22:50.390 --> 22:52.600]  Configuring bind, again, is really simple, as you can imagine.
[22:52.880 --> 22:54.620]  When you use bind, it is...
[22:55.140 --> 22:57.480]  Reverse DNS is as simple as doing forward DNS.
[22:58.500 --> 23:01.180]  It's just that it's... you know, you're talking to the root name servers and stuff.
[23:01.600 --> 23:02.740]  Well, you do that for forward...
[23:02.740 --> 23:03.060]  Anyway.
[23:03.890 --> 23:06.020]  OpenBSD cache name server daemon is even more simple than bind.
[23:06.020 --> 23:08.960]  It's just like six lines, transfers it, and it's all cool.
[23:10.820 --> 23:11.260]  IPv6.
[23:12.560 --> 23:13.420]  IPv6 is big.
[23:15.040 --> 23:19.600]  I've got a slash 29, which is like some... like a quadrillion slash 32s or something ridiculous.
[23:20.300 --> 23:20.960]  Oh no, eight.
[23:21.140 --> 23:21.540]  I lied.
[23:22.000 --> 23:25.100]  And again, we can list these in a set of zones.
[23:26.400 --> 23:28.580]  And a reverse IPv6 record looks like that.
[23:28.760 --> 23:29.280]  It's quite big.
[23:30.520 --> 23:31.580]  So I've got a bit of a problem, though.
[23:33.240 --> 23:35.560]  That's how many addresses are in a slash 32.
[23:37.240 --> 23:39.400]  Are there any mathematicians that want to read that out for me?
[23:40.540 --> 23:40.860]  No?
[23:41.300 --> 23:42.120]  I'm not even going to try.
[23:42.600 --> 23:50.300]  So I can imagine that if I tried putting in a default like unused dots, for us, one comms or whatever, in bind for all of those, it'd explode.
[23:50.500 --> 23:52.900]  So I'm only going to put in like six for the relays and things like that.
[23:53.820 --> 23:54.360]  So cool.
[23:54.520 --> 23:55.100]  We've done the housekeeping.
[23:55.100 --> 23:55.540]  We're done.
[23:55.640 --> 23:56.320]  All the boring stuff.
[23:56.440 --> 23:56.780]  It's gone.
[23:58.060 --> 23:58.780]  We've got nowhere to go.
[23:59.320 --> 24:00.040]  No one knows about it.
[24:00.060 --> 24:01.520]  I've set the IP addresses on my servers.
[24:02.740 --> 24:03.620]  I've done WHOIS.
[24:03.740 --> 24:04.360]  I've done reverse DNS.
[24:04.820 --> 24:06.100]  But no one knows how to get to me.
[24:07.550 --> 24:14.420]  So we need to talk to our code providers, to transit providers, to other ISPs and ask them to connect to us, to connect to our routers.
[24:15.210 --> 24:19.160]  Or we run a fibre over to IXP peering, which is where all the other ISPs gather in one...
[24:19.160 --> 24:29.980]  I think in the U.S. it's commonly called a carrier hotel, something like that, where all the ISPs come together, connect their routers directly to a switch and you peer with each other to cut down your actual transit costs.
[24:30.760 --> 24:37.900]  It's very, very popular in Europe and I think there's some issues in the U.S. because I think Netflix and somebody got in a bit of a spat recently, wasn't it?
[24:38.300 --> 24:38.620]  Anyway.
[24:39.220 --> 24:39.980]  Was it Comcast, was it?
[24:46.570 --> 24:47.610]  So, more housekeeping.
[24:47.610 --> 24:48.110]  I lied.
[24:49.430 --> 24:51.350]  You need to create an Autonom object in the database.
[24:51.570 --> 24:59.490]  And this is a way for you to tell other routers and other ASNs how you want to talk to the Internet and how you want to learn about the Internet.
[24:59.790 --> 25:06.110]  So, for example, with Comcast, I might want to talk to Comcast and accept Comcast's IPs and all of Comcast's customers' IPs.
[25:06.110 --> 25:09.270]  But Netflix, I only want Netflix to tell me about Netflix.
[25:09.650 --> 25:15.210]  And likewise, I want to tell the people I'm connected to that I'm only going to be announcing my IPs up to you.
[25:17.710 --> 25:19.010]  Jumping into OpenBSD again.
[25:19.250 --> 25:21.450]  Config for BGP, really nice and simple.
[25:21.610 --> 25:26.270]  My AS number, a router ID, the networks I'm assigning and IP information about my neighbours.
[25:26.830 --> 25:30.770]  Restart that and then, boom, host all of the things.
[25:31.030 --> 25:32.010]  It's the only meme in the thing.
[25:32.130 --> 25:33.310]  I apologise, I had to do it.
[25:33.830 --> 25:34.570]  And it's cool.
[25:34.730 --> 25:38.010]  The first time that I got, there's a service called BGP Mon.
[25:38.410 --> 25:41.190]  And it will monitor the Internet for BGP announcements.
[25:41.610 --> 25:46.530]  And when I got that first email saying, you know, these IPs are now visible in U.K., Germany, France.
[25:46.690 --> 25:47.630]  It just spread.
[25:48.050 --> 25:49.290]  It was a cool feeling.
[25:50.870 --> 25:52.590]  And I was able to run my relays.
[25:52.990 --> 25:54.430]  The top four are exits.
[25:54.830 --> 25:57.850]  They're on my network and there are HSDRs and all the rest of it.
[25:57.970 --> 26:03.130]  And the other ones are relays that survived when I first did the EFF tour.
[26:03.130 --> 26:03.750]  That's your challenge.
[26:05.570 --> 26:09.010]  And so that's the process of becoming an ISP.
[26:09.990 --> 26:13.850]  Then we've got the thing of being an ISP.
[26:14.230 --> 26:15.070]  It's all well and cool.
[26:15.170 --> 26:15.750]  You've announced your IPs.
[26:15.810 --> 26:16.550]  You've got your servers running.
[26:17.190 --> 26:19.630]  Your tour exits are shifting traffic.
[26:20.110 --> 26:21.090]  And it's all a bit cool.
[26:21.430 --> 26:22.770]  You're quite excited and pumped.
[26:22.890 --> 26:24.090]  And no one can tell you what to do anymore.
[26:24.850 --> 26:25.790]  But you're going to need some equipment.
[26:29.420 --> 26:30.340]  This is some equipment.
[26:31.500 --> 26:32.660]  It's an awful lot of money of equipment.
[26:32.800 --> 26:33.840]  It's about £300,000 worth.
[26:35.860 --> 26:42.660]  Funnily enough, when I said that three and a half grand of money to create this ISP was a lot of money for me and I'm never going to buy a new car again.
[26:43.500 --> 26:44.540]  I ain't buying this.
[26:46.040 --> 26:46.760]  I'm buying these.
[26:50.020 --> 26:51.320]  PC Engine's APU.
[26:51.460 --> 26:52.980]  It's a little single board computer.
[26:53.400 --> 26:54.320]  Three NICs.
[26:54.420 --> 26:55.120]  Three Intel NICs.
[26:55.340 --> 26:56.280]  Four gigs of RAM.
[26:57.220 --> 26:57.720]  SSD.
[26:57.980 --> 26:58.640]  MSATA card.
[26:58.940 --> 26:59.880]  Running OpenBSD.
[27:00.180 --> 27:00.900]  My servers.
[27:01.240 --> 27:01.980]  As much as they are.
[27:02.320 --> 27:03.080]  Intel NUCs.
[27:03.420 --> 27:04.420]  Again, quad core CPU.
[27:04.800 --> 27:05.700]  16 gigs of RAM.
[27:06.280 --> 27:06.780]  SSDs.
[27:06.860 --> 27:08.480]  They pull absolutely no power.
[27:08.620 --> 27:10.000]  Can fit a load of them in a quarter cab.
[27:10.720 --> 27:11.180]  And switches.
[27:11.600 --> 27:12.060]  Oh, and again.
[27:12.220 --> 27:13.040]  Running OpenBSD.
[27:13.440 --> 27:13.940]  And switches.
[27:14.000 --> 27:16.740]  I could get some cool Cisco or Bracade thing with it.
[27:16.760 --> 27:17.660]  Layer 3 features.
[27:17.800 --> 27:18.380]  And VLAN-ing.
[27:18.920 --> 27:20.940]  Or I can get those nice cheap blue net gears.
[27:21.060 --> 27:22.640]  And have a stack of them spare for when it goes pop.
[27:26.260 --> 27:27.260]  You don't have to spend money.
[27:27.340 --> 27:27.980]  That much money now.
[27:28.060 --> 27:28.740]  Once you've done this bit.
[27:30.960 --> 27:32.000]  And then handling abuse.
[27:32.460 --> 27:33.460]  So as I mentioned.
[27:33.920 --> 27:36.000]  I had a lot of problems with my servers getting shut down.
[27:36.120 --> 27:36.860]  By other providers.
[27:37.580 --> 27:38.660]  And sometimes it was really annoying.
[27:38.760 --> 27:39.960]  It would be simply just one person.
[27:40.080 --> 27:41.460]  Or one automated response saying.
[27:42.060 --> 27:43.720]  There was some directory recursion.
[27:44.740 --> 27:46.100]  And so they shut down the thing.
[27:46.100 --> 27:46.840]  Simple that.
[27:46.980 --> 27:48.700]  Or I got added to a blacklist.
[27:48.840 --> 27:50.980]  Because it's just simply running a middle relay.
[27:52.220 --> 27:52.900]  And as it happens.
[27:53.040 --> 27:55.520]  There are no strict rules about how you handle abuse.
[27:55.580 --> 27:56.220]  It's your network.
[27:56.420 --> 27:57.840]  And it's up to you how you deal with things.
[27:59.740 --> 28:02.960]  I've been keeping a sort of rough tally of what I get.
[28:03.540 --> 28:05.640]  Ninety percent of what I've received so far.
[28:06.020 --> 28:06.840]  Is just automated.
[28:07.080 --> 28:09.200]  There's web application firewalls that will literally go.
[28:09.200 --> 28:09.740]  Oh my god.
[28:09.920 --> 28:10.580]  We're under attack.
[28:11.100 --> 28:13.660]  Because someone did 15 GET requests in three seconds.
[28:13.960 --> 28:15.380]  And they'll send me an email about that.
[28:16.260 --> 28:17.380]  I'm not interested.
[28:18.740 --> 28:19.540]  Nine percent of manual.
[28:19.740 --> 28:21.000]  And some of these have been quite interesting.
[28:21.660 --> 28:24.360]  I've had a bank contact me.
[28:24.840 --> 28:28.000]  I've had people running businesses that have had issues.
[28:28.780 --> 28:29.660]  Stuff like that.
[28:30.200 --> 28:32.400]  And, you know, usually it's very polite.
[28:32.560 --> 28:33.120]  Explain to them.
[28:33.740 --> 28:34.100]  Tor.
[28:34.240 --> 28:37.220]  And most of the time they will accept the situation.
[28:37.220 --> 28:38.040]  And they'll leave me alone.
[28:38.540 --> 28:41.140]  One time I had some guy threaten to call Interpol.
[28:41.560 --> 28:43.160]  And go full crazy.
[28:43.640 --> 28:45.520]  And I invited them to do so.
[28:45.720 --> 28:47.660]  Because at that point there's not much I can do.
[28:47.700 --> 28:48.960]  I tried explaining the situation to them.
[28:49.380 --> 28:50.560]  Explained that I can't control it.
[28:50.860 --> 28:51.500]  Explained Tor.
[28:51.840 --> 28:53.640]  And they were still like, you have to stop this.
[28:53.720 --> 28:54.620]  You have to tell us who did it.
[28:55.120 --> 28:55.580]  I can't.
[28:56.120 --> 28:57.200]  And one percent is spam.
[28:57.200 --> 28:59.900]  You publish an IP address, an email address publicly.
[28:59.900 --> 29:01.180]  In something like the RipeDB.
[29:01.460 --> 29:02.380]  You're going to get spam.
[29:04.920 --> 29:08.120]  I said earlier, I don't want to allow abusive behaviour.
[29:08.280 --> 29:10.580]  I don't want my network to be considered this evil place.
[29:10.660 --> 29:12.300]  Where anything goes or anything like that.
[29:13.040 --> 29:15.960]  But some of the manual complaints that I've had.
[29:17.060 --> 29:17.760]  Turned out.
[29:18.520 --> 29:18.900]  WordPress.
[29:19.600 --> 29:19.900]  Admin.
[29:20.040 --> 29:20.160]  Admin.
[29:20.960 --> 29:22.180]  Or vulnerable plugins.
[29:22.780 --> 29:23.460]  And stuff like that.
[29:23.800 --> 29:24.740]  It's like, it's the Internet.
[29:25.760 --> 29:26.240]  I'm...
[29:26.240 --> 29:26.500]  No.
[29:27.280 --> 29:28.600]  I don't know what to do with that.
[29:29.040 --> 29:30.920]  I had one person that had a...
[29:30.920 --> 29:32.640]  I think it was a Dropbox or Google Doc.
[29:33.020 --> 29:35.240]  And they'd set it to anyone with this URL.
[29:36.260 --> 29:37.960]  And then complained after they tweeted it.
[29:38.140 --> 29:39.640]  That people had used my exit to crawl it.
[29:41.000 --> 29:42.620]  I can't really help you there mate.
[29:44.020 --> 29:45.360]  I've had no...
[29:45.360 --> 29:48.380]  Nothing that I would consider legitimate abuse issues yet.
[29:49.100 --> 29:50.260]  Nothing seriously bad.
[29:50.260 --> 29:58.820]  And I would consider that would make me rethink hosting exits or spending the money to be able to do this sort of stuff.
[30:00.160 --> 30:03.240]  And then the Investigatory Powers Bill came along.
[30:07.230 --> 30:07.750]  Messaging?
[30:08.830 --> 30:12.930]  I'd say in the year and a half probably less than 60, 70 emails.
[30:12.930 --> 30:13.690]  It's been...
[30:13.690 --> 30:14.470]  It's been quite low.
[30:15.450 --> 30:15.710]  I...
[30:15.710 --> 30:18.810]  My exits only do about 10 to 12 megabit each.
[30:20.010 --> 30:21.910]  I mentioned that, you know, you...
[30:21.910 --> 30:23.090]  The IXP stuff.
[30:23.210 --> 30:25.250]  I don't quite yet have a connection to an IXP.
[30:25.430 --> 30:29.790]  Which means I'm having to pay committed data rates and peak burst for the moment.
[30:30.770 --> 30:32.970]  So, transit is quite expensive for me.
[30:33.490 --> 30:34.750]  So, whilst I can run exits...
[30:34.750 --> 30:37.250]  And obviously, like I said, it's about 40 to 60 megabits so far.
[30:39.050 --> 30:42.710]  I will make that larger as I'm able to get IXP peering.
[30:43.190 --> 30:44.790]  But yeah, it's not an awful lot of traffic.
[30:45.310 --> 30:47.610]  So, it probably reduces the amount of requests I get.
[30:50.800 --> 30:51.540]  Investigatory Powers Bill.
[30:52.180 --> 30:54.640]  This is a new law that the U.K. government is trying to bring in.
[30:54.760 --> 31:00.860]  So, Snowden's releases show that our government was re-interpreting laws written in the 80s.
[31:01.360 --> 31:04.940]  Specifically and amusingly, the Telecommunications Act 1984, I think it was.
[31:06.260 --> 31:08.540]  And they were like, well, these things apply to the Internet.
[31:09.120 --> 31:09.780]  We'll use them.
[31:11.480 --> 31:18.560]  And then they realised that the way that they've interpreted some of these laws may not be totally okay.
[31:19.080 --> 31:20.200]  So, they created this new one.
[31:20.320 --> 31:21.820]  And it covers everything they've been doing.
[31:23.100 --> 31:24.420]  Bulk malware and stuff.
[31:25.080 --> 31:25.800]  Bulk surveillance.
[31:26.220 --> 31:26.880]  All these things.
[31:27.000 --> 31:28.020]  They said, yeah, we're going to do it.
[31:28.080 --> 31:28.700]  It's in the law now.
[31:28.840 --> 31:29.560]  Can't do anything about it.
[31:29.560 --> 31:31.280]  They've added one extra thing.
[31:32.940 --> 31:35.520]  The idea of Internet connection records.
[31:36.040 --> 31:44.500]  All ISPs in the U.K, if issued a notice to do so, will have to record everything that you do online.
[31:45.300 --> 31:46.580]  Every message you send.
[31:46.740 --> 31:47.880]  Every website you connect to.
[31:48.740 --> 31:49.100]  Every...
[31:49.100 --> 31:51.860]  Pretty much every TCP, UDP and anything else that you do.
[31:51.860 --> 31:55.380]  They want to know if you've been using Twitter.
[31:55.640 --> 31:56.780]  If you've been using YouTube.
[31:57.080 --> 31:57.780]  How long for.
[31:57.940 --> 31:58.220]  When.
[31:58.700 --> 31:59.940]  And all this sort of stuff.
[32:00.660 --> 32:02.640]  They haven't quite worked out how we're going to do that yet.
[32:02.860 --> 32:03.820]  But that's what they want to do.
[32:04.360 --> 32:06.240]  And I apologise for this giant wall of text.
[32:07.260 --> 32:10.900]  It can basically be summed up as the who, what, where and when.
[32:11.640 --> 32:16.280]  They want to be able to say if you were using Twitter back in January.
[32:16.500 --> 32:18.160]  Or if you sent a message via Facebook.
[32:18.300 --> 32:19.500]  Or if you were on a Skype call.
[32:19.720 --> 32:22.100]  Or if you uploaded something to Dropbox.
[32:22.560 --> 32:24.480]  They don't necessarily need to know what it was.
[32:24.660 --> 32:25.820]  Because, you know, they're doing us a favour.
[32:26.040 --> 32:27.660]  By not asking us to break SSL somehow.
[32:29.920 --> 32:31.320]  But they do want us to store.
[32:31.820 --> 32:32.840]  Obviously it probably wouldn't apply to me.
[32:32.840 --> 32:33.520]  I have no customers.
[32:33.720 --> 32:37.260]  But they do want ISPs to store everything that you do.
[32:37.360 --> 32:38.360]  If you come to the U.K.
[32:39.040 --> 32:40.500]  And you're roaming on your phone.
[32:40.560 --> 32:41.440]  You go to the hotel.
[32:41.920 --> 32:44.000]  The hotel will record that in your room.
[32:44.140 --> 32:45.560]  You went to your company VPN.
[32:46.000 --> 32:48.280]  Or you did a DNS look up against this name server.
[32:48.360 --> 32:49.240]  Or you did this or you did that.
[32:49.740 --> 32:50.760]  And bearing in mind obviously you'll be.
[32:52.760 --> 32:54.220]  Subjects to the parental filtering.
[32:54.360 --> 32:54.940]  Or whatever else they're doing.
[32:55.000 --> 32:55.840]  On top of all of this.
[32:57.060 --> 32:58.960]  And I got quite annoyed by this idea.
[32:59.960 --> 33:03.400]  And I came up with an idea.
[33:03.880 --> 33:04.860]  Of this Onion DSL.
[33:06.500 --> 33:07.300]  And actually...
[33:07.300 --> 33:08.820]  The idea came to me after I...
[33:08.820 --> 33:10.580]  One of the U.S. judges I believe.
[33:10.700 --> 33:11.460]  Has recently said.
[33:11.940 --> 33:14.120]  That Tor users have no expectation of privacy.
[33:14.660 --> 33:16.920]  Because the first hop is public.
[33:18.220 --> 33:19.620]  Which I thought was a bit of a strange one.
[33:20.240 --> 33:21.540]  I think I've got that right.
[33:21.820 --> 33:22.280]  Haven't I?
[33:23.320 --> 33:23.600]  No?
[33:23.780 --> 33:23.920]  Alright.
[33:24.800 --> 33:25.480]  And so I thought.
[33:25.480 --> 33:26.340]  As an ISP.
[33:26.340 --> 33:29.280]  I could create a DSL connection.
[33:29.500 --> 33:30.820]  That goes to a private WAN.
[33:31.100 --> 33:31.580]  No router.
[33:32.060 --> 33:32.560]  For a next hop.
[33:32.660 --> 33:33.280]  Or no NATing.
[33:33.480 --> 33:34.720]  But just a Tor bridge.
[33:36.360 --> 33:38.980]  So your modem would establish DSL as normal.
[33:39.860 --> 33:42.000]  You'd get a private RFC 1918 address.
[33:42.920 --> 33:44.600]  Or the RFC 6598.
[33:44.800 --> 33:46.420]  Which is 164 slash 8.
[33:47.140 --> 33:48.080]  And there's no router.
[33:48.200 --> 33:50.140]  You can't escape out of this network.
[33:50.520 --> 33:53.060]  You can't accidentally screw up your Nonabox.
[33:53.280 --> 33:55.240]  Or your Tor config.
[33:55.360 --> 33:56.160]  Or your SOCKS config.
[33:56.520 --> 33:58.440]  And accidentally leak ClearNet stuff.
[33:58.540 --> 33:59.340]  Because there's nowhere to go.
[33:59.960 --> 34:01.140]  You'll only have a Tor bridge.
[34:01.560 --> 34:03.340]  And you configure your browser or your router.
[34:03.460 --> 34:04.320]  And do whatever you need to do.
[34:04.640 --> 34:05.700]  And then you can get to the Internet.
[34:05.700 --> 34:07.360]  I can't see what you're doing.
[34:07.800 --> 34:08.700]  And nobody else can know.
[34:09.320 --> 34:09.760]  Hopefully.
[34:10.020 --> 34:11.140]  Traffic correlation aside.
[34:11.600 --> 34:12.580]  Who you are and what you're doing.
[34:14.220 --> 34:15.100]  And when I had this idea.
[34:15.180 --> 34:15.680]  I got excited.
[34:15.780 --> 34:16.780]  And I drew this little picture.
[34:17.780 --> 34:18.900]  And I tweeted it.
[34:19.860 --> 34:20.660]  And you can see here.
[34:20.740 --> 34:21.640]  You've got your XDSL modem.
[34:22.080 --> 34:25.900]  Then you've got the digital subscriber line access multiplexer.
[34:26.020 --> 34:27.040]  Which is a cool piece of kit.
[34:27.260 --> 34:30.520]  That turns your analogue DSL signals into ATM or Ethernet.
[34:30.840 --> 34:34.680]  Ships it across to the broadband routing access service.
[34:34.680 --> 34:35.360]  I think that stands for.
[34:36.660 --> 34:38.700]  And then you're inside the ISP network.
[34:39.260 --> 34:40.320]  And this is all cool.
[34:40.400 --> 34:41.560]  And I was excited about the idea.
[34:41.640 --> 34:45.400]  And then I realised that I don't have copper into people's homes.
[34:45.600 --> 34:52.600]  Or this very expensive equipment that turns your DSL into Ethernet.
[34:53.200 --> 34:56.540]  Does anyone here remember the old RJ21 telco cables?
[34:56.820 --> 34:57.060]  Yeah.
[34:57.560 --> 34:58.120]  Weird things.
[34:58.640 --> 35:00.300]  Only do one 10100 and stuff like that.
[35:00.380 --> 35:00.580]  But anyway.
[35:01.740 --> 35:04.060]  I borrowed this picture from Vodafone.
[35:04.420 --> 35:06.280]  From one of their wholesale things.
[35:06.480 --> 35:08.560]  The QR code down there is the original.
[35:08.800 --> 35:10.120]  I don't want to steal things.
[35:10.220 --> 35:12.700]  But I just didn't have time to draw a picture as pretty as this.
[35:13.520 --> 35:15.320]  And this is wholesale DSL.
[35:15.400 --> 35:16.080]  So this is what I would do.
[35:16.160 --> 35:18.200]  I would have somebody else who already has the copper in the ground.
[35:18.540 --> 35:19.820]  Already has the DSLAMs.
[35:19.840 --> 35:20.720]  And already has the ATM.
[35:20.980 --> 35:22.380]  Or the national ATM network.
[35:22.980 --> 35:23.980]  And what they would do.
[35:23.980 --> 35:26.360]  Is we would create an L2TP.
[35:26.580 --> 35:27.860]  Layer 2 tunneling protocol bridge.
[35:28.120 --> 35:28.780]  Between my router.
[35:29.460 --> 35:30.720]  And their national infrastructure.
[35:31.780 --> 35:34.540]  And then we would create a PPP session.
[35:34.820 --> 35:35.760]  From your modem.
[35:36.180 --> 35:37.240]  All the way through into my network.
[35:37.860 --> 35:39.700]  And one of the things of L2TP.
[35:39.860 --> 35:41.240]  Is we can layer it on top of IPsec.
[35:41.880 --> 35:43.760]  So even the wholesale DSL provider.
[35:44.100 --> 35:45.440]  Couldn't see what was going on.
[35:45.920 --> 35:46.640]  Not that it would matter.
[35:46.980 --> 35:48.000]  It would be a Tor bridge anyway.
[35:48.000 --> 35:49.560]  But double encryption.
[35:49.860 --> 35:50.540]  Twice as safe.
[35:53.450 --> 35:55.310]  That isn't showing up very well is it.
[35:55.710 --> 35:56.250]  In the U.K.
[35:56.350 --> 35:58.210]  We have BT Exchanges.
[35:58.350 --> 36:00.010]  These are our local points of presence.
[36:00.170 --> 36:01.130]  For DSL and stuff like that.
[36:01.210 --> 36:01.890]  And telephone exchanges.
[36:02.650 --> 36:05.350]  So your home would be connected to the BT Exchange.
[36:05.470 --> 36:07.030]  BT Exchange would then back all fibre.
[36:07.270 --> 36:08.790]  To a wholesale point of presence.
[36:09.530 --> 36:11.070]  And then I would be able to get.
[36:11.550 --> 36:13.730]  A fibre connection from my carrier.
[36:13.910 --> 36:15.770]  From my co-location provider.
[36:15.970 --> 36:16.770]  Into the wholesale port.
[36:17.110 --> 36:18.390]  And I could actually do this.
[36:19.270 --> 36:20.750]  And it would be expensive.
[36:20.930 --> 36:22.410]  But it would be quite a good way.
[36:22.430 --> 36:23.150]  To tell the government.
[36:23.470 --> 36:23.750]  They're idiots.
[36:24.970 --> 36:25.430]  And that I.
[36:25.890 --> 36:26.010]  You know.
[36:26.430 --> 36:26.450]  I.
[36:27.110 --> 36:27.930]  When we launch.
[36:28.130 --> 36:29.110]  When the government tries to launch.
[36:29.230 --> 36:29.890]  New laws in the U.K.
[36:30.150 --> 36:31.430]  They have a consultation process.
[36:32.070 --> 36:33.150]  Or a committee process.
[36:33.310 --> 36:34.430]  And they invite people.
[36:34.590 --> 36:35.350]  To submit evidence.
[36:37.090 --> 36:38.330]  Saying whether the law is good.
[36:38.430 --> 36:38.930]  Whether it's bad.
[36:39.030 --> 36:39.830]  Bits that need to be changed.
[36:39.950 --> 36:40.430]  Things like that.
[36:41.090 --> 36:41.450]  Unsurprisingly.
[36:42.250 --> 36:42.550]  Everybody.
[36:43.170 --> 36:43.930]  A lot of.
[36:44.310 --> 36:45.090]  ISPs in the U.K.
[36:45.270 --> 36:46.170]  Wrote in to object.
[36:46.390 --> 36:47.170]  To a lot of these things.
[36:47.730 --> 36:48.570]  And several of us.
[36:48.570 --> 36:49.470]  Several of us told them.
[36:49.550 --> 36:50.230]  That ICRs.
[36:50.510 --> 36:50.690]  You know.
[36:50.710 --> 36:52.130]  Aside from the privacy aspects.
[36:52.350 --> 36:52.910]  And all the rest of it.
[36:52.930 --> 36:53.690]  They're just unworkable.
[36:55.410 --> 36:55.770]  People.
[36:56.070 --> 36:57.190]  That want to protect their privacy.
[36:57.970 --> 36:59.850]  Or people that don't want to be spied on.
[37:00.010 --> 37:01.070]  They know about VPNs.
[37:01.090 --> 37:01.930]  They know about SSH.
[37:02.030 --> 37:03.170]  They know about SOC proxies.
[37:03.230 --> 37:04.130]  They know about Tor.
[37:04.710 --> 37:05.710]  And they'll use them.
[37:06.090 --> 37:07.630]  Or they'll use disposable SIMs.
[37:07.630 --> 37:08.290]  Or things like that.
[37:08.930 --> 37:09.430]  And.
[37:10.370 --> 37:12.190]  ICRs will only capture the naive.
[37:12.370 --> 37:12.750]  And the innocent.
[37:13.550 --> 37:15.970]  And we really don't see what the point of that is.
[37:17.430 --> 37:17.930]  It's.
[37:18.190 --> 37:18.490]  Anyway.
[37:18.690 --> 37:19.030]  I digress.
[37:20.930 --> 37:21.910]  When I had this idea.
[37:21.910 --> 37:23.450]  I created a local proof of concept.
[37:24.330 --> 37:25.230]  Doesn't look very good.
[37:25.530 --> 37:25.990]  Doesn't look very cool.
[37:26.170 --> 37:26.230]  But.
[37:26.570 --> 37:28.150]  There's some Cisco 2600s.
[37:28.270 --> 37:29.210]  Acting as the LAC.
[37:29.570 --> 37:30.070]  The LNS.
[37:30.630 --> 37:31.590]  A little APU1D.
[37:31.630 --> 37:32.410]  Running as a Tor bridge.
[37:33.130 --> 37:34.210]  And then this laptop.
[37:34.370 --> 37:35.270]  Running as a PPOE client.
[37:35.570 --> 37:36.510]  And a domestic grade router.
[37:38.110 --> 37:38.550]  Logically.
[37:38.950 --> 37:39.670]  Looks like this.
[37:41.210 --> 37:41.650]  Again.
[37:41.810 --> 37:42.630]  Not particularly exciting.
[37:44.250 --> 37:44.690]  But.
[37:45.610 --> 37:46.050]  Config.
[37:46.050 --> 37:46.130]  Config.
[37:46.290 --> 37:47.090]  When I published the slides.
[37:47.330 --> 37:48.090]  If you've got any.
[37:49.050 --> 37:50.130]  Network emulators at home.
[37:50.230 --> 37:50.650]  Or anything like that.
[37:50.750 --> 37:51.150]  You'll be able to.
[37:51.710 --> 37:52.570]  Copy this config.
[37:52.790 --> 37:53.570]  And test it for yourselves.
[37:54.590 --> 37:55.210]  It worked.
[37:56.110 --> 37:57.070]  No public routing.
[37:57.550 --> 37:58.310]  No public DNS.
[37:59.010 --> 38:00.990]  No ability to NAT the outside worlds.
[38:01.590 --> 38:01.890]  And yet.
[38:01.930 --> 38:03.850]  You get a full working Tor connection.
[38:06.270 --> 38:06.670]  Yeah.
[38:06.810 --> 38:07.070]  Exactly.
[38:07.430 --> 38:08.290]  I was surprised.
[38:08.570 --> 38:09.350]  I expected it would work.
[38:09.510 --> 38:09.690]  But.
[38:10.010 --> 38:11.250]  When it actually worked for the first time.
[38:11.310 --> 38:11.970]  I was pretty impressed.
[38:13.150 --> 38:13.550]  So.
[38:14.530 --> 38:15.670]  Just before I came here.
[38:15.670 --> 38:16.590]  I finished.
[38:17.110 --> 38:17.630]  Talking.
[38:18.070 --> 38:19.030]  With a wholesale.
[38:19.310 --> 38:20.150]  DSL provider.
[38:20.310 --> 38:20.770]  Back in the U.K.
[38:21.330 --> 38:22.810]  And we have a provisional agreement.
[38:23.190 --> 38:24.750]  To try and start rolling this out.
[38:25.790 --> 38:26.310]  So.
[38:26.610 --> 38:27.290]  As much as.
[38:27.470 --> 38:27.850]  It is.
[38:28.270 --> 38:29.370]  A silly idea.
[38:29.570 --> 38:30.270]  And a silly way.
[38:30.570 --> 38:32.010]  To protest.
[38:32.870 --> 38:33.830]  Internet connection records.
[38:34.070 --> 38:34.810]  And mass surveillance.
[38:34.950 --> 38:35.570]  And things like that.
[38:35.970 --> 38:37.050]  I'm going to try and make it work.
[38:37.570 --> 38:38.090]  Because.
[38:39.330 --> 38:40.310]  No one else is.
[38:40.830 --> 38:41.090]  So.
[38:41.630 --> 38:42.090]  Yeah.
[38:43.490 --> 38:44.250]  Any questions?
[38:56.180 --> 38:57.720]  How many pounds a month.
[38:57.920 --> 38:59.260]  For an onion DSL connection?
[39:00.400 --> 39:00.800]  Um.
[39:02.080 --> 39:02.420]  Am I still there?
[39:02.560 --> 39:02.620]  Yeah.
[39:03.360 --> 39:03.860]  Don't know yet.
[39:04.440 --> 39:04.880]  Um.
[39:06.040 --> 39:06.240]  We.
[39:06.540 --> 39:07.120]  The whole.
[39:07.240 --> 39:08.000]  Looking at wholesale.
[39:08.440 --> 39:09.100]  And stuff like that.
[39:09.100 --> 39:11.900]  I'm expecting around about 60 to 80 pounds a month.
[39:12.280 --> 39:12.640]  Um.
[39:13.000 --> 39:13.580]  Which isn't cheap.
[39:14.100 --> 39:14.220]  Um.
[39:14.300 --> 39:16.200]  That should cover enough for me to cover the wholesale.
[39:16.480 --> 39:16.840]  Up.
[39:16.900 --> 39:17.460]  Up the.
[39:17.680 --> 39:17.980]  Um.
[39:19.180 --> 39:19.840]  My commits.
[39:20.200 --> 39:21.420]  With interconnects and stuff like that.
[39:21.820 --> 39:21.940]  Uh.
[39:22.080 --> 39:22.360]  Yeah.
[39:22.420 --> 39:23.500]  That's what it's roughly looking at.
[39:23.560 --> 39:24.280]  Don't hold me to it.
[39:24.300 --> 39:25.940]  Because I haven't fully run all the numbers yet.
[39:26.260 --> 39:27.880]  It's more of an idea that I'm running with.
[39:27.960 --> 39:28.860]  Than I fully spec'd out.
[39:28.920 --> 39:30.560]  And have a business plan to take for a loan or something.
[39:32.140 --> 39:32.940]  Anything else?
[39:34.600 --> 39:35.020]  Oh.
[39:35.240 --> 39:35.440]  Sorry.
[39:35.760 --> 39:36.200]  Because of the.
[39:36.260 --> 39:38.240]  Because of the infrastructure set up in the U.K.
[39:38.900 --> 39:39.300]  Can you get.
[39:39.620 --> 39:39.860]  Basically.
[39:40.200 --> 39:42.420]  You can provide services inside the entire country.
[39:42.880 --> 39:43.120]  Indeed.
[39:44.660 --> 39:45.100]  So.
[39:45.360 --> 39:45.660]  Um.
[39:45.960 --> 39:47.560]  The interesting way the U.K works.
[39:47.720 --> 39:49.500]  I suppose it's the same with any DSL provider.
[39:50.260 --> 39:50.600]  Um.
[39:51.160 --> 39:51.540]  We have.
[39:51.680 --> 39:52.480]  If I just go back to.
[39:55.040 --> 39:55.480]  So.
[39:55.680 --> 39:55.840]  These.
[39:55.940 --> 39:57.080]  The ADSL access network.
[39:57.280 --> 39:58.640]  And then this cloud on the right hand side.
[39:58.640 --> 40:00.300]  We have this idea of.
[40:00.380 --> 40:00.780]  Um.
[40:01.140 --> 40:02.260]  The wholesale DSL.
[40:02.440 --> 40:03.240]  Super pops.
[40:04.120 --> 40:04.420]  And.
[40:04.560 --> 40:05.580]  The DS Lambs.
[40:05.680 --> 40:06.520]  And all that sort of technology.
[40:06.780 --> 40:07.980]  Exist on street corners.
[40:08.140 --> 40:08.700]  In towns.
[40:09.320 --> 40:10.760]  They then backhaul to cities.
[40:11.180 --> 40:12.300]  Cities then backhaul.
[40:12.460 --> 40:13.180]  Down to London.
[40:13.360 --> 40:13.760]  And Edinburgh.
[40:13.980 --> 40:14.540]  And stuff like that.
[40:15.020 --> 40:15.600]  And it's got this.
[40:15.600 --> 40:16.640]  It's got the ATM networks.
[40:17.400 --> 40:17.920]  Or the Ethernet.
[40:17.940 --> 40:18.540]  Super networks.
[40:18.860 --> 40:20.380]  And they break out into.
[40:20.580 --> 40:21.340]  Points of presence.
[40:21.600 --> 40:22.700]  The big carrier hotels.
[40:22.860 --> 40:23.380]  Are in London.
[40:23.680 --> 40:24.160]  Edinburgh.
[40:24.420 --> 40:24.660]  And Dublin.
[40:24.800 --> 40:25.400]  And stuff like that.
[40:25.400 --> 40:26.140]  So.
[40:26.180 --> 40:26.900]  I can.
[40:27.380 --> 40:28.560]  Have my single small.
[40:28.860 --> 40:29.660]  Co-location facility.
[40:30.140 --> 40:30.680]  Down south.
[40:30.820 --> 40:31.240]  Near London.
[40:31.820 --> 40:32.300]  And I can.
[40:32.480 --> 40:33.160]  Hook up a customer.
[40:33.420 --> 40:33.880]  In Scotland.
[40:34.220 --> 40:35.020]  Or Wales.
[40:35.380 --> 40:36.200]  Or something like that.
[40:36.300 --> 40:36.800]  And effectively.
[40:37.280 --> 40:37.840]  There's no extra.
[40:37.900 --> 40:38.760]  Infrastructure cost to me.
[40:38.780 --> 40:39.720]  It will cost me the same.
[40:40.120 --> 40:41.060]  For the underlying infrastructure.
[40:41.480 --> 40:42.140]  To run a cable.
[40:42.300 --> 40:43.260]  15 foot down the road.
[40:43.440 --> 40:43.900]  As it will.
[40:44.080 --> 40:44.680]  300 miles.
[40:45.160 --> 40:45.380]  Technically.
[40:46.780 --> 40:47.220]  So.
[40:47.420 --> 40:47.780]  In the U.S.
[40:47.960 --> 40:49.320]  We call that wholesale DSL.
[40:49.600 --> 40:50.560]  It's slightly different.
[40:50.980 --> 40:51.320]  Product set.
[40:51.940 --> 40:52.020]  But.
[40:52.300 --> 40:53.280]  It does exist.
[40:53.740 --> 40:53.980]  Have you.
[40:54.040 --> 40:54.260]  Like.
[40:54.340 --> 40:55.100]  Have you also looked at.
[40:55.320 --> 40:56.260]  Doing the same sort of.
[40:57.080 --> 40:57.380]  With.
[40:58.320 --> 40:58.760]  4G.
[40:59.480 --> 41:00.160]  I have.
[41:00.520 --> 41:00.960]  Um.
[41:02.020 --> 41:02.140]  Yeah.
[41:02.340 --> 41:03.120]  As it happens.
[41:03.360 --> 41:03.680]  The wholesale.
[41:04.580 --> 41:04.880]  Indeed.
[41:05.040 --> 41:05.120]  Yeah.
[41:05.120 --> 41:05.580]  The wholesale.
[41:06.200 --> 41:06.960]  DSL provider.
[41:07.120 --> 41:08.340]  That I'm working with.
[41:08.420 --> 41:09.140]  Or hoping to work with.
[41:09.140 --> 41:10.120]  Also offers.
[41:10.120 --> 41:11.240]  A 3G product.
[41:11.740 --> 41:12.340]  Not 4G yet.
[41:12.420 --> 41:13.060]  It's a 3G product.
[41:13.440 --> 41:14.320]  Where they will terminate.
[41:14.700 --> 41:15.940]  The PPP connection.
[41:16.160 --> 41:16.800]  When you dial up.
[41:17.180 --> 41:18.280]  To the same LNS.
[41:18.840 --> 41:19.700]  That you want to use.
[41:19.740 --> 41:20.320]  For the L2TP.
[41:20.400 --> 41:20.940]  For DSL.
[41:21.340 --> 41:21.600]  So they'll.
[41:21.660 --> 41:22.440]  They'll L2TP.
[41:22.680 --> 41:22.860]  Your.
[41:23.900 --> 41:24.340]  PPP.
[41:24.800 --> 41:24.960]  For.
[41:25.100 --> 41:25.820]  3G session.
[41:26.400 --> 41:27.060]  As it turns out.
[41:27.100 --> 41:27.680]  That's even cheaper.
[41:27.980 --> 41:28.780]  Than other things.
[41:29.340 --> 41:29.420]  And.
[41:33.380 --> 41:33.820]  Yeah.
[41:33.940 --> 41:34.340]  In theory.
[41:34.560 --> 41:34.860]  If.
[41:34.960 --> 41:35.420]  I'm still around.
[41:37.780 --> 41:38.440]  Get it done.
[41:38.680 --> 41:38.920]  Okay.
[41:41.320 --> 41:41.880]  Yes sir.
[41:42.140 --> 41:42.880]  Have you run into.
[41:43.160 --> 41:43.560]  Any problems.
[41:44.180 --> 41:44.900]  Getting the bandwidth.
[41:45.580 --> 41:46.760]  From other ISPs.
[41:47.500 --> 41:47.720]  No.
[41:48.180 --> 41:48.280]  Yeah.
[41:49.020 --> 41:49.360]  Like I said.
[41:49.360 --> 41:50.420]  I'm only running a very small amount.
[41:50.660 --> 41:51.140]  So I'm only doing.
[41:51.760 --> 41:52.880]  I've got gig connections.
[41:53.020 --> 41:54.160]  But with only very small commits.
[41:55.680 --> 41:56.060]  And.
[41:56.340 --> 41:57.260]  The U.K. is.
[41:57.580 --> 41:58.560]  Very well connected.
[41:58.720 --> 41:59.660]  Some of our DCs.
[41:59.760 --> 42:00.540]  Will have tens.
[42:00.740 --> 42:01.180]  If not hundreds.
[42:01.340 --> 42:01.780]  Of ISPs.
[42:02.520 --> 42:03.720]  Available for interconnects.
[42:03.820 --> 42:03.980]  And.
[42:04.540 --> 42:04.840]  Again.
[42:04.940 --> 42:05.940]  If I get into the IXP.
[42:06.180 --> 42:06.500]  Eventually.
[42:07.200 --> 42:08.860]  Then there will be an awful lot more options for me.
[42:08.860 --> 42:09.520]  Uh.
[42:09.920 --> 42:10.500]  But bandwidth.
[42:11.400 --> 42:12.600]  Isn't too expensive.
[42:13.040 --> 42:14.000]  But it is expensive enough.
[42:14.100 --> 42:14.680]  That I can't be running.
[42:14.900 --> 42:15.240]  Gig.
[42:15.740 --> 42:16.140]  Connections.
[42:16.280 --> 42:17.020]  With no money coming in.
[42:17.560 --> 42:17.620]  Uh.
[42:17.720 --> 42:18.120]  Kind of.
[42:18.300 --> 42:19.620]  Hence the non-profit side of things.
[42:19.780 --> 42:21.000]  It is actually a non-profit company.
[42:21.580 --> 42:21.680]  Um.
[42:21.680 --> 42:21.740]  Um.
[42:22.060 --> 42:23.160]  It's not just not making any money.
[42:24.000 --> 42:24.140]  Um.
[42:26.320 --> 42:26.920]  So it is.
[42:27.180 --> 42:27.420]  Um.
[42:28.140 --> 42:28.320]  Yeah.
[42:28.420 --> 42:28.740]  I can't.
[42:28.840 --> 42:30.060]  With no money coming in at the moment.
[42:30.260 --> 42:30.640]  I can't.
[42:31.480 --> 42:31.840]  Uh.
[42:32.020 --> 42:32.340]  Run.
[42:32.740 --> 42:33.060]  100 meg.
[42:33.140 --> 42:33.440]  Or gig.
[42:34.060 --> 42:34.420]  Uh.
[42:34.420 --> 42:34.520]  Uh.
[42:35.160 --> 42:35.480]  Service at the moment.
[42:37.300 --> 42:37.720]  Yes sir.
[42:38.100 --> 42:39.060]  I know this is the first part of the talk.
[42:39.100 --> 42:40.140]  So I apologise to mention this.
[42:40.540 --> 42:40.620]  Um.
[42:40.800 --> 42:41.180]  Do you anticipate.
[42:41.280 --> 42:42.120]  If this is well and successful.
[42:42.380 --> 42:42.840]  Do you anticipate.
[42:43.600 --> 42:44.500]  Problems with Tor scaling.
[42:44.960 --> 42:45.300]  And if so.
[42:45.460 --> 42:45.500]  Like.
[42:45.700 --> 42:46.900]  What's your plan for dealing with that?
[42:48.920 --> 42:49.680]  Bit of a weird one.
[42:50.020 --> 42:50.120]  Um.
[42:50.120 --> 42:50.820]  I'm not.
[42:53.140 --> 42:53.460]  Suggesting.
[42:53.800 --> 42:54.660]  It's a bit of a strange thing.
[42:54.760 --> 42:55.520]  To spend all this money.
[42:55.740 --> 42:56.500]  And all this effort.
[42:56.640 --> 42:57.760]  And come and tell people about it.
[42:58.180 --> 42:58.780]  I'm not.
[43:00.200 --> 43:01.580]  Suggesting that this is a good idea.
[43:03.340 --> 43:03.660]  Um.
[43:04.620 --> 43:05.240]  Because if you.
[43:05.500 --> 43:06.160]  Say hello.
[43:06.500 --> 43:07.860]  I would like a special Internet connection.
[43:07.980 --> 43:08.820]  That no one can spy on.
[43:10.300 --> 43:11.800]  Then you're going to get a great big red flag.
[43:12.040 --> 43:12.620]  I expect.
[43:12.800 --> 43:13.240]  You shouldn't do.
[43:13.400 --> 43:14.900]  It should be perfectly acceptable for you to have.
[43:15.360 --> 43:16.840]  An ISP that respects your privacy.
[43:17.040 --> 43:18.060]  And doesn't want to surveil you.
[43:18.100 --> 43:19.580]  And doesn't want to be able to store records on you.
[43:19.580 --> 43:21.480]  And that should be a perfectly fine thing to do.
[43:22.160 --> 43:22.600]  Um.
[43:22.900 --> 43:24.180]  But I'm one person.
[43:24.440 --> 43:26.100]  Who is rapidly running out of savings.
[43:26.980 --> 43:27.240]  Um.
[43:28.040 --> 43:28.980]  So you shouldn't.
[43:29.540 --> 43:31.400]  I would hope that if this is successful.
[43:32.120 --> 43:33.180]  It would be.
[43:33.820 --> 43:33.880]  Um.
[43:34.620 --> 43:35.960]  Places like refuge shelters.
[43:36.300 --> 43:36.740]  Or.
[43:37.180 --> 43:37.340]  Uh.
[43:37.700 --> 43:38.140]  Libraries.
[43:38.460 --> 43:39.500]  And things like that.
[43:39.600 --> 43:40.040]  That will take it on.
[43:40.120 --> 43:40.580]  Things that.
[43:41.320 --> 43:43.560]  Places that people can visit anonymously.
[43:43.740 --> 43:45.300]  Or when they need anonymity.
[43:45.600 --> 43:46.380]  And they can come here.
[43:46.560 --> 43:47.500]  And the.
[43:47.940 --> 43:49.040]  The building itself.
[43:49.040 --> 43:49.820]  Can't spy on them.
[43:49.940 --> 43:50.720]  I can't spy on them.
[43:50.860 --> 43:51.480]  And stuff like that.
[43:52.960 --> 43:55.020]  Did you manage to see the state of the onion talk yesterday?
[43:55.500 --> 43:55.700]  No.
[43:56.520 --> 43:56.840]  So.
[43:57.140 --> 43:57.220]  Uh.
[43:57.420 --> 43:57.820]  Tor.
[43:58.220 --> 43:58.360]  Uh.
[43:58.520 --> 44:00.560]  Mentioned they have 200 gigabits of capacity.
[44:00.920 --> 44:03.000]  And they're currently using about 75 of that.
[44:03.520 --> 44:03.840]  So.
[44:03.980 --> 44:07.320]  I can't imagine that I'm going to even be a blip in the ocean of their spare capacity.
[44:10.530 --> 44:11.170]  Anybody else?
[44:11.750 --> 44:11.970]  Oh.
[44:12.110 --> 44:12.230]  Yes.
[44:12.290 --> 44:12.410]  Sorry.
[44:12.410 --> 44:12.730]  Okay.
[44:13.510 --> 44:13.910]  So.
[44:14.770 --> 44:15.690]  I'm part of the community.
[44:15.850 --> 44:16.530]  I work in Brooklyn.
[44:16.930 --> 44:17.270]  And.
[44:17.790 --> 44:18.830]  We're running a VPN.
[44:19.190 --> 44:21.550]  To kind of protect all people who carry their connection to the mesh.
[44:21.870 --> 44:22.270]  Uh.
[44:22.690 --> 44:24.350]  So we started getting a lot of ECA complaints.
[44:24.630 --> 44:24.890]  Which is.
[44:25.250 --> 44:27.350]  I don't know if we have deals with something similar in the U.K.
[44:27.670 --> 44:27.770]  But.
[44:29.230 --> 44:30.870]  They all seem like they're automated.
[44:30.870 --> 44:31.330]  But.
[44:32.170 --> 44:32.910]  Some of them are in XML.
[44:33.070 --> 44:33.730]  Some of them don't.
[44:34.310 --> 44:34.490]  And.
[44:34.850 --> 44:35.830]  I guess I'm wondering.
[44:36.070 --> 44:37.050]  If you or anyone else.
[44:37.550 --> 44:40.130]  Have a system for automatically responding to these.
[44:40.250 --> 44:41.930]  Because it's becoming a burden for us to do manually.
[44:42.470 --> 44:42.830]  Okay.
[44:42.930 --> 44:43.590]  So the question is.
[44:44.950 --> 44:45.410]  Do I.
[44:45.670 --> 44:46.170]  Have a system.
[44:46.290 --> 44:48.850]  Or does anybody else in the room have a system for dealing with DMCA requests?
[44:49.270 --> 44:49.630]  Um.
[44:49.730 --> 44:50.010]  I do.
[44:50.170 --> 44:51.770]  Have a system for dealing with DMCA requests.
[44:52.570 --> 44:52.930]  I.
[44:53.090 --> 44:53.670]  Reply back.
[44:53.970 --> 44:54.230]  Ha.
[44:54.270 --> 44:54.390]  Ha.
[44:54.670 --> 44:54.910]  Ha.
[44:55.050 --> 44:55.130]  Ha.
[45:02.370 --> 45:02.730]  Um.
[45:03.550 --> 45:03.690]  Yeah.
[45:03.830 --> 45:04.410]  It's the U.K.
[45:06.010 --> 45:06.810]  As I mentioned in one of my other slides.
[45:06.930 --> 45:07.290]  It is annoying.
[45:07.730 --> 45:09.890]  When U.K. companies respond to DMCA requests.
[45:09.990 --> 45:10.850]  And shut people's blogs down.
[45:10.950 --> 45:11.870]  Or VPSs and things.
[45:13.250 --> 45:13.410]  But.
[45:13.630 --> 45:14.770]  Short of a U.K. court order.
[45:14.990 --> 45:15.110]  I.
[45:15.210 --> 45:15.750]  Do not care.
[45:16.730 --> 45:17.350]  So is there anybody else?
[45:17.410 --> 45:18.490]  I think you put your hand up.
[45:18.730 --> 45:19.090]  Yeah.
[45:20.430 --> 45:21.530]  So I work for an ISP.
[45:21.650 --> 45:23.530]  And we get about 6,000 reports in it.
[45:23.670 --> 45:24.030]  Uh.
[45:24.670 --> 45:26.310]  There's an application called the Moose.io.
[45:26.490 --> 45:27.870]  Which basically takes all that XML.
[45:28.190 --> 45:29.670]  And smashes it against your IP space.
[45:29.810 --> 45:30.390]  So you can be like.
[45:30.690 --> 45:32.310]  These guys are all f*ckers.
[45:32.950 --> 45:33.030]  Um.
[45:34.050 --> 45:34.570]  And then.
[45:34.750 --> 45:35.390]  And then.
[45:35.390 --> 45:37.590]  If you are a large ISP.
[45:37.770 --> 45:38.690]  Which you are not.
[45:39.510 --> 45:40.530]  You may have signed before.
[45:42.430 --> 45:44.590]  MPAA went after Comcast.
[45:44.750 --> 45:45.290]  And basically went.
[45:45.630 --> 45:47.730]  You're facilitating piracy.
[45:48.090 --> 45:48.630]  Tsk tsk.
[45:48.850 --> 45:49.390]  It was money.
[45:50.110 --> 45:51.170]  And Comcast said.
[45:51.310 --> 45:52.070]  Here you go.
[45:52.650 --> 45:53.490]  Stop bothering us.
[45:53.490 --> 45:53.870]  Um.
[45:54.650 --> 45:54.950]  So.
[45:55.250 --> 45:55.750]  It's.
[45:55.850 --> 45:56.190]  There's.
[45:56.190 --> 45:56.430]  There's.
[45:56.470 --> 45:56.830]  There's an agreement.
[45:58.050 --> 46:00.030]  Some large ISPs have signed.
[46:00.150 --> 46:00.810]  An agreement.
[46:01.430 --> 46:02.290]  A contract.
[46:02.750 --> 46:03.650]  To deliver messages.
[46:04.270 --> 46:05.110]  Some ISP.
[46:05.230 --> 46:05.330]  Uh.
[46:05.450 --> 46:06.210]  Basically take down.
[46:06.350 --> 46:07.090]  And customers.
[46:07.390 --> 46:08.890]  That means emailing to the customer.
[46:09.430 --> 46:09.670]  You know.
[46:10.050 --> 46:10.290]  Your.
[46:10.510 --> 46:11.730]  Comcast.com address.
[46:11.910 --> 46:12.370]  That you all have.
[46:12.570 --> 46:13.310]  And check rate early.
[46:13.490 --> 46:13.630]  Right?
[46:14.230 --> 46:14.650]  Um.
[46:15.550 --> 46:16.670]  But there's really no teeth to it.
[46:16.670 --> 46:17.470]  Other than notifications.
[46:17.810 --> 46:19.030]  And it's like seven strikes.
[46:19.330 --> 46:21.110]  And then they're supposed to disconnect the Internet.
[46:21.830 --> 46:22.130]  Um.
[46:22.970 --> 46:24.330]  If you're a small ISP.
[46:25.170 --> 46:25.190]  Uh.
[46:25.350 --> 46:25.770]  It's.
[46:25.770 --> 46:27.430]  The consequences are fairly small.
[46:27.870 --> 46:30.270]  Because you don't have the facilities to contact this one.
[46:30.830 --> 46:31.810]  So what are you going to do?
[46:32.210 --> 46:32.410]  Right.
[46:32.950 --> 46:34.930]  And you can talk to your legal counsel.
[46:35.870 --> 46:35.950]  Right.
[46:36.630 --> 46:37.630]  You may have a circular file.
[46:40.090 --> 46:40.910]  But there's a great.
[46:41.030 --> 46:42.250]  Abuse.io is a great thing.
[46:43.850 --> 46:44.170]  Yeah.
[46:44.370 --> 46:46.950]  So if you do have to worry about DMCA requests.
[46:47.270 --> 46:47.330]  Uh.
[46:47.490 --> 46:49.210]  Then abuse.io is the thing.
[46:49.270 --> 46:50.270]  It does all the other stuff too.
[46:50.510 --> 46:50.570]  So.
[46:50.690 --> 46:51.590]  People are telling you that hey.
[46:51.930 --> 46:53.250]  All these sites are running for it.
[46:53.350 --> 46:54.310]  And you're like yes.
[46:54.390 --> 46:54.650]  Excellent.
[46:54.870 --> 46:55.190]  Confirm.
[46:55.490 --> 46:55.810]  Good.
[46:56.010 --> 46:57.190]  I think I have a couple of minutes left.
[46:57.410 --> 46:57.710]  But anything.
[46:57.830 --> 46:58.430]  Any last questions?
[47:00.790 --> 47:01.110]  No?
[47:01.270 --> 47:01.350]  Cool.
[47:01.470 --> 47:01.530]  Right.
[47:01.630 --> 47:02.250]  Well thank you very much everyone.