Lawsuits for falsyfying DNS responses ?
zvernhout at gmail.com
Tue Sep 13 14:44:15 UTC 2016
Canada's Anti-Spam Legislation has specific sections that makes altering
of data illegal under the Act.
In my non-lawyer opinion, sections 10 (5) (b) and (e) would be violated
by hijacking someone preference to go to Website A and replace it with
Website B without their express consent to do so.
*Section 10 - 5 *
Description of functions
(5) A function referred to in subsection (4) is any of the following
functions that the person who seeks express consent knows and intends
will cause the computer system to operate in a manner that is contrary
to the reasonable expectations of the owner or an authorized user of the
(a) collecting personal information stored on the computer system;
*(b) interfering with the owner’s or an authorized user’s control of the
computer system; *
(c) changing or interfering with settings, preferences or commands
already installed or stored on the computer system without the knowledge
of the owner or an authorized user of the computer system;
(d) changing or interfering with data that is stored on the computer
system in a manner that obstructs, interrupts or interferes with lawful
access to or use of that data by the owner or an authorized user of the
*(e) causing the computer system to communicate with another computer
system, or other device, without the authorization of the owner or an
authorized user of the computer system; *
(f) installing a computer program that may be activated by a third party
without the knowledge of the owner or an authorized user of the computer
(g) performing any other function specified in the regulations.
It might be interesting to bring this to their attention, or the
attention of your own lawyers for comment.
On 12/09/2016 1:41 PM, Jean-Francois Mezei wrote:
> As many may know, the province of Québec has passed a law to protect the
> interests of its lottery corporation.
> To do so, it will provide ISPs with list of web sites to block (aka:
> only allow its own gambing web site).
> There is an opportunity to comment this week in which I will submit.
> (I've gathered many arguments over the past little while already). But
> have a specific question today:
> Are there examples of an ISP getting sued because it redirected traffic
> that should have gone to original site ?
> For instance, user asks for www.google.com and ISP's DNS responds with
> an IP that points to a bing server?
> If the risk of a lawsuit is real, then it brings new dimension to
> arguments already made agains that (stupiod) Québec law.
> (And it also creates interesting issues for DNS servers from companies
> such as Google which may have a anycast server located in Québec but are
> not considered an ISP and won't receive those documenst from the gov
> with list of websites to block.
More information about the NANOG