MIME-Version: 1.0 References: In-Reply-To: Message-ID: Date: Fri, 15 Jul 2016 15:37:33 +0000 Subject: Re: serverHold status of cocaine.ninja From: Les To: Registry Abuse Content-Type: multipart/alternative; boundary=94eb2c0978b8b2c9b50537ae65e8 --94eb2c0978b8b2c9b50537ae65e8 Content-Type: text/plain; charset=UTF-8; format=flowed; delsp=yes Hi This passphrase doesn't seem to work for these archives. Are you sure this is the passphrase for 'https://a.cocaine.ninja/REDACTED' and 'https://a.cocaine.ninja/REDACTED'? Here is a log showing how I tried to extract it: https://pst.moe/paste/REDACTED?format=raw. Kind regards Les On Fri, 15 Jul 2016 at 09:52 Registry Abuse wrote: Dear Les, The passphrase you require is : REDACTED Kind regards, Alan On 15 July 2016 at 00:28, Les wrote: Hi Thank you for the reply. I'm glad you understand and will handle it in a better way in the future. I have investigated the following files and removed them: http://a.cocaine.ninja/uiabmx.006 http://a.cocaine.ninja/pyukki.005 http://a.cocaine.ninja/szciav.004 http://a.cocaine.ninja/swytuv.003 http://a.cocaine.ninja/pqwmfr.002 http://a.cocaine.ninja/kjkxdy.001 This leaves these two files: https://a.cocaine.ninja/REDACTED https://a.cocaine.ninja/REDACTED These two files are encrypted, making it impossible for me to check the nature of their contents without the passphrase. Since asking me to remove encrypted files without providing me with the passphrase would be an effective way to censor the file host, I'm afraid I can't remove them. If you, or the IWF, has the passphrase, please send it to me so I can investigate it further. If that's not possible, I hope you understand I can't remove them. Again, thank you for restoring the domain's status. Kind regards Les De Ridder On Fri, 15 Jul 2016 at 00:40 Registry Abuse wrote: Dear Les, Many thanks for your communication, and we do certainly empathize with the situation. Please understand that reported instances of Child sexual abuse material are considered to of the utmost urgency and must be mitigated to ensure access to such material is immediately restricted to prevent the further harm and re-victimisation. To ensure that this matter can be resolved as a matter of priority the following files are those which have been reported as compromised. http://a.cocaine.ninja/uiabmx.006 http://a.cocaine.ninja/pyukki.005 http://a.cocaine.ninja/szciav.004 http://a.cocaine.ninja/swytuv.003 http://a.cocaine.ninja/pqwmfr.002 http://a.cocaine.ninja/kjkxdy.001 https://a.cocaine.ninja/REDACTED https://a.cocaine.ninja/REDACTED https://a.cocaine.ninja/REDACTED https://a.cocaine.ninja/REDACTED Given the nature of the service on Cocaine.ninja, I am removing the serverhold for domain, effective immediately, on the understanding that the referenced files are investigated and the matter remediated without delay. I would further ask that you confirm within 24 hours that this matter has been remediated. If no such confirmation has been received, we do reserve the right to suspend the domain again. Again we understand the difficulties that may be experienced in maintain such a file hosting service; however, it is not for the registry to advise on how to deal with abuse within your service. We can but remind that the Registry does maintain an acceptable use policy (AUP) relating to the use of our TLDs and it is up to the registrant to ensure compliance with the terms of this AUP. That being noted, Rightside does not wish to unnecessarily interfere with the enjoyment of the domain and we are happy to work with our registrants to ensure such difficulties are not experienced again. As such, for future reference, the registry has noted the nature of the service being provided in connection with the domain cocaine.ninja, and shall approach any reported issues of abuse for this domain in a manner appropriate to the in service you provide (ie prior to any such future registry actions occurring, we shall endeavour to ensure that both your registrar and your abuse notification address are provided with notice and a reasonable opportunity to address the issue.) We thank you for you understanding in this matter, Kind regards, Alan Woods Registry Compliance Manager On 14 July 2016 at 18:59, Les wrote: Hello I'm the registrant of cocaine.ninja. Today I noticed my domain name status was changed to 'serverHold'. I contacted my registrar, namecheap, and they told me that cocaine.ninja is confirmed by the Internet Watch Foundation (IWF) as being associated with child abuse imagery. On cocaine.ninja, I host a public file host. I most certainly don't condone illegal content, such as child abuse content or copyrighted content, being uploaded. The FAQ, which is required reading material for all uploaders, says the following: "No Child porn, anything else goes until I get a lawsuit I guess.". This may not be sufficient, so I will replace it with "No child abuse content, malware, or other content that is illegal in France and/or the United Kingdom". Furthermore, there is an abuse contact (abuse@cocaine.ninja) on the front page. E-mails sent to this address are checked and dealt with promptly, usually within 8 hours, since I'm the only person who has access to the server and the abuse mailbox. In case illegal content is confirmed, the files are deleted from the server and all backups, and a transparency report is created. You can find earlier transparency reports at https://fuwafuwa.moe/transparency/cocaine.ninja/. Since my service is privacy oriented, which is one of the reasons I don't log connections or uploads, it's more likely to be a target of illegal uploads than other file hosts. There is sadly nothing I can do about that other than closely monitoring the abuse mailbox. As a service provider with a large amount of uploaded content and users, it's not possible to check each and every file for illegal content. Any suggestions on how to handle this problem would be very much appreciated. The goal of cocaine.ninja is to be a platform that allows anyone to upload their files while staying anonymous and being protected from government surveillance. It is not a platform for illegal content. I hope this matter can be resolved ASAP. Kind regards Les De Ridder --94eb2c0978b8b2c9b50537ae65e8