Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

Checked againt for www.webwise.bt.com, now on 207.44.186.90 with:

openinternetalliance.net
www.121media.com
www.phorm.com
www.webwise.bt.com
www.webwise.com
www.youcanoptin.com
youcanoptin.org
youcanoptout.net

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

So they are now resolving to the US again:

(Asked whois.arin.net:43 about +207.44.186.90)

OrgName: ThePlanet.com Internet Services Inc.
OrgID: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
ReferralServer: rwhois: //rwhois.theplanet.com: 4321
NetRange: 207.44.128.0 - 207.44.255.255
CIDR: 207.44.128.0/17
OriginAS: AS13749 AS13884 AS21844 AS30315
OriginAS: AS36420
NetName: NETBLK-THEPLANET-BLK-EV1-9
NetHandle: NET-207-44-128-0-1
Parent: NET-207-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.EV1SERVERS.NET
NameServer: NS2.EV1SERVERS.NET

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

Just shows you that you cannot trust this man or company an inch.. if they do place servers insice the ISP the informatin willwing its way to america then to the highest bidder.. adverts bah that is the smoke screen that the daft ISPs hace fallen for hook line and sinker sad to say thye seem to have sat on their brains and killed them..

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

What are you using to get the IP addresses? My DNS lookup says (for example) that www.webwise.com is still on Gyron in London E14 at 89.145.112.31 and 89.145.112.32.

I am using the tools at:
http://cgibin.erols.com/ziring/cgi-bin/nsgate/gate.pl

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

This is what I get:

And if I check all 3 IPs I get the following:

So it seems the www.webwise.bt.com is in fact in the US and all the rest are controlled by Phorm in the UK (registered to Phorm in the UK).

Of course this means the www.webwise.bt.com is subject to US Law and can have all the logs subpoenaed. It would be advisable not enter any information onto that website. It also seems it should be classed as illegal under Data Protection Act which disallows the exporting of personal data outside the EU.

Anyone brought this to the attention of ICO yet? I notice there is at least 1 form on there which requires you to enter sensitive personal data:

http://www.webwise.bt.com/webwise/contact.php

So this would indeed appear to be in direct breach of the DPA. In theory if ThePlanet have any DPI kit in their data centre (which I believe although I could be wrong, is required under US anti terrorist initiatives) they could in essence get all the details you enter on that form. I know there is a degree of logging in the US similar to data retention laws in the EU, but I don't know to what extent so I can't give any informed comments on it. I will however try to find out.

One thing I do know however, is there are no rights afforded under the Fourth Amendment of the Constitution for any personal data given to third parties (I covered this just the other day on a paper I wrote about the Patriot Act Sunset Clauses), so in essence if ThePlanet were to use any of the data going through their networks, I don't think BT would have any recourse (or the public).

Alexander Hanff

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

I am in the process of cotacting ICO with reference particularly to the BT Webwise Contact Us page, and the trace information above will be very helpful. I will copy the ICO complaint to the BT legal department.

Interesting that the page has the BT logo in the same place as it is on bt.com homepage, and the links at the bottom are just the same as on the genuine BT page, and the link to contact.php says "contact BT" but contains NO warnings that you just stepped out of the EU privacy protection zone. It's a complete utter con - and what's more - they know, and they know that we know - because I asked them about it AGES ago, and they even put up mirror BT Webwise pages on bt.com in response to my complaint about not wanting to visit FASTHOSTS or US hosted pages - but they didn't create any warnings.
Add to this the fact that BT Retail's own ISP pages currently offer NO customer route to information about BT Webwise, and it looks pretty pathetic - their BTYahoo! help returns zero hits for "webwise", and the bt.com search pages return one hit for "webwise" with a broken link (because they've just changed all the webwise pages to php but not told the bt.com search engine which still links to index.html rather than index.php so returning an error page). And they talk about informed consent!

I've also made reference to it in my original letter to BT Retail Legal department but not with all that trace info as the letter went in over a week ago.

I've also asked Emma Sanderson if she could just fill in the blanks with regard to which coloured boxes on the BT Webwise network diagram relate to which IP addresses, at which location, in which country, and under whose control, and in partiucular, which of the coloured boxes are FASTHOSTS and which are THEPLANET.COM and which are BT.

I'm expecting at least a reply from ICO.

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

Good job, did you read the paragraph I added to the end of my previous post. I added it after you quoted it so I just want to make sure you have seen it.

Actually, saying that, even if personal data given to third parties was protected under the constitution, I can't see even that would help a non US citizen, since the constitution would not apply afaik.

Alexander Hanff

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

it appears 4 people so far have submitted that the
http://www.webwise.bt.com
is not a Phish , but it seems they may not know about the background as it related to Phorm and BT or the statement nothing personal goes outside the internal BT network etc.

perhaps it needs explaining to them and others so as to make it clear ,as it stands currently it is ....!
http://www.phishtank.com/phish_detai...hish_id=450504

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

And don't forget Gyron, who now appear to be the main hosting provider for Phorm.

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

just posted a link over on the BT forums back to this information and added some of the information about the webwise opt-in pages hosted in US

http://www.beta.bt.com/bta/forums/th...D=23149&#23149

peter

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

Is it beneficial for multiple complaints to be sent to the ICO regarding the direct breach of the DPA with 'webwise.bt.com/webwise/contact.php' or is it better to just have one concise complaint?

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

http://www.phishtank.com/phish_detai...hish_id=450834

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

iv marked that
http://www.phishtank.com/phish_detai...hish_id=450834
as a phish, you can do the same for the original one too,
http://www.phishtank.com/phish_detai...hish_id=450504
the more it gets the more it becomes confirmed ( it appears 4 are enough to get it listed as "is not a phish").

although there does not seem to be a way to add information to the page explaining why we know it to be the case.....!
or that it can be classed as the new form of Phishing, that being the intra-ISP assisted Phishing.

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

Verified.

Alexander Hanff

Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]
 

I joined and verified it as phishing

---------- Post added at 19:05 ---------- Previous post was at 18:47 ----------

I have sent an email to Emma Sanderson which I hope will answer a few questions if I get a reply it will depend on if I have permission to copy and paste the email or just summerize it.