10 November 2003
Verio has now arranged for jya.com log file deletion:
From: Carlos C. <support@verio-hosting.com> Subject: Re: [IDS-6067588] jya.com - FTP Access To: jya@pipeline.com Date:Sun, 9 Nov 2003 15:35:02 -0500 (EST) Privacy is of great concern on the shared web site hosting platform. However, although administrator priviledge is not granted to end users, there is a way for you to remove the log files from the account. [Omitted] The issue is under review and this will be corrected. If we can be of further assistance, please do not hesitate to contact us again. Carlos C. Team Leader Technical Support
9 November 2003
Cryptome's companion site, jya.com, is hosted by NTT/Verio, Cryptome's ISP. Today we asked Verio Support for assistance in deleting log files of jya.com and received a response that Verio will not allow that, although we can delete log files on Cryptome.org. Bear in mind that when Japanese giant NTT was negotiating to buy Verio, it was required to sign an agreement to allow the US Government, in particular the FBI, unrestricted access to the Verio system. In the past Verio has been a staunch supporter of Cryptome in the face of obnoxious requests to remove Cryptome files.
Today's correspondence:
From: Carlos C. <support@verio-hosting.com>
Subject: Re: [IDS-6067588] jya.com - FTP Access
To: jya@pipeline.com
Date:Sun, 9 Nov 2003 12:12:45 -0500 (EST)
Hello John,
Thank you for contacting the technical support department.
Your message said:
-------------------------------While I have had all along easy FTP access to jya.com, I am unable to delete log files.
Upon attempting to delete, I receive the message
550 [file name]: Permission denied. ! Delete of [file name] failed-------------------------------
Although this is a good practice, it is not necessary with the files to which you are referring.
The log files are owned by the server.
As a result, the disk space that is consumed by the logs do not reflect web site space. The size of these files do not impact your shared web site hosting account directly.
Additionally, since they are owned by the server, you would not have the proper permissions to delete them.
If we can be of further assistance, please do not hesitate to contact us again.
Carlos C.
Team Leader
Technical Support
http://support.hosting.verio.com/userWelcome.asp
To: Carlos C. <support@verio-hosting.com>
Subject: Re: [IDS-6067588] jya.com - FTP Access
From: jya@pipeline.com
Date:Sun, 9 Nov 2003 12:41:45 -0500 (EST)
Carlos,
As a part of our privacy policy we promise visitors that log files will be deleted. If this is not possible on jya.com I will need to change to another service to fulfill this promise.
As you know log files are being subpoened by officials and some service providers give access without a subpoena and without notifying the customer running the site that visitor and customer privacy is being violated.
I am a strong advocate of deleting log files daily, or more than once a day.
I am surprised at your claim that Verio must retain the log files. In the past Verio has been explemary in supporting privacy, and I have remained a customer for that very reason.
There is no such restriction on our other Verio-hosted web site Cryptome.org, from which we delete log files several times a day.
If Verio now insists on retaining the log files then I must publish that change of policy which allows potential unpublicized violation of customer and visitor privacy.
Regards,
John