Does Evilzone.org log IP adresses and store them?

[proxx]

Does Evilzone.org log IP adresses and store them?

How about the IRC?

Are there backups that hold this data?

Whats the policy?

Do you give away data upon gov request?

Please, this just crossed my mind and I feel retarded for not asking before.

[vezzy]

>inb4 Evilzone is a clandestine NSA honeypot led by General Keith Alexander

[Axon]

Would love to know that? I don't want my ass get busted because of this forum.

[ande]

A good question indeed.

As the network and setup is now. We do log everything. And I mean absolutely everything, in and out. But this is to maintain our security, not to give away to third parties. I understand completely that this can be intrusive for someone and we are planning to change this in the very near future.

We have yet to be asked to give out any information to anyone and we will not unless we are ordered to do so by a court that has jurisdiction in the country the given information is located in.

As more and more of you now know, the Alpha project is moving along and we expect it to be complete somewhere between 1 and 3 months from now. When this happens, we will have a completely new set of configurations and policies. The new alpha web page will also include a detailed privacy policy. And I can guarantee the security vs privacy will be much better.

We do not keep backups of the logs, this is not something we consider vital data for the continuation of Evilzone. Only databases + files are backed up now and then. When it comes to backup storage, it is stored on the server itself and my computer which is fully encrypted. So unless someone breaks into the server, the data is secure.

When it comes to the IRC, there is less logging but still logging. Private messages and non-monitored channels are not logged.

[proxx]

Thanks for this clear awnser.

We have yet to be asked to give out any information to anyone and we will not unless we are ordered to do so by a court that has jurisdiction in the country the given information is located in.

But thats interesting , say in case someone indeed gets an order and I know the country in which it is in has very questionable privacy rules compared to for example sweden.
So in theory due to the fact that you maintain such data its unlikely but possible to get traced (not saying otherwise you couldnt).
I very much appreciate that this will change in the near future.

Probably got some more questions but I need to think first.

[Mordred]

We have yet to be asked to give out any information to anyone and we will not unless we are ordered to do so by a court that has jurisdiction in the country the given information is located in.

Just a bit of clarification, if possible: are we talking about the country where basically the server itself (which contains the logs) is located? If yes, would it be possible to know where the hosting is being done?

Thank you.

[proxx]

Just a bit of clarification, if possible: are we talking about the country where basically the server itself (which contains the logs) is located? If yes, would it be possible to know where the hosting is being done?

Thank you.

You dont have to ask that,  such info is publicly availible.
I will not post any for obvious reasons.

[ande]

Just a bit of clarification, if possible: are we talking about the country where basically the server itself (which contains the logs) is located? If yes, would it be possible to know where the hosting is being done?

Thank you.

We have several servers spread over many countries. The main web server however is currently located in Germany.

[Mordred]

You dont have to ask that,  such info is publicly availible.
I will not post any for obvious reasons.

I sent you a PM.

We have several servers spread over many countries. The main web server however is currently located in Germany.

Thank you ande.

[Uriah]

Every website needs to do at least some logging for security reasons, it's pretty much inevitable. Not necessarily bad. If your info is given up, it's the governments fault, and not the website's, in most cases. Although you can always fight the data requests.

[Feyd]

We do log everything. And I mean absolutely everything, in and out. But this is to maintain our security, ..

The logs being stored are also a part of the reason for why good security is important. If the (old) logs can be stored offline on an encrypted, powered off disk that should be done to the greatest extent possible (within reason when it comes to the time it takes to manage such a policy of course).

[Stackprotector]

The logs being stored are also a part of the reason for why good security is important. If the (old) logs can be stored offline on an encrypted, powered off disk that should be done to the greatest extent possible (within reason when it comes to the time it takes to manage such a policy of course).

We do not care about the logs in realtime. We can find the logs being stupid and just remove them. Though when something happens we can purge the logs. And if ofcourse we want to ban someone from accesing our servers we need to log the ip and ban it.

[chapp]

I don't get what the fuzz is about. EZ is an open forum, anyone can register and check out what you wrote.


Nothing illegal is going on in here just information sharing and I believe the invite only forums would be of greater interest for any government authority.

[proxx]

I don't get what the fuzz is about. EZ is an open forum, anyone can register and check out what you wrote.


Nothing illegal is going on in here just information sharing and I believe the invite only forums would be of greater interest for any government authority.

Thats not relevant.
I do care about privacy among many others, the fact that you have nothing to hide doesnt mean that all your info should be out on the streets.
I have nothing to hide either but I wouldnt appreciate a camera in my house.
The thing that matters here is that if for whatever reason the gov wants data , it is availible to them in the form of extensive logs.

[chapp]

Thats not relevant.
I do care about privacy among many others, the fact that you have nothing to hide doesnt mean that all your info should be out on the streets.
I have nothing to hide either but I wouldnt appreciate a camera in my house.
The thing that matters here is that if for whatever reason the gov wants data , it is availible to them in the form of extensive logs.

I agree with you that privacy is important, but as for privacy on an open forum it's not really possible. You can use Tor, but that's about it.


I'm not on IRC due to Tor exit nodes being blocked.