how to prosecute a facebook hacker

Uxb

CGNAT allows an ISP to allocate many end users with one external facing IP address.
Plusnet trialled it out last year with no real problems.
I did hear that BT retail are now using it for low using accounts.
Yes, they do maintain an accurate log of exactly which end user was connected to the IP at any one instant.
CGNAT is used extensively by mobile phone companies to connect phones to the internet.

I am personally aware of an instance where threats were sent by email which formed part of the case in court. The end user's home/premises was located by the police from the ISP and they were "invited to cooperate". Not surprisingly this very rapidly produced the name of the person using the connection who sent the email.

BadBehaviour

Lumstorm wrote: »

IP addresses are a flawed way of finding people as they can change. And an ISP is not going to tell the police anything without a court order.

Obviously an ISP knows exactly what customer was assigned a certain IP at a certain time. They keep logs.

And there are static IPs, which won't change, but the majority of IPs are dynamic.

Of course there needs to be a court order for the police to obtain the customer's personal details from the ISP.

DevCoder

securityguy wrote: »

Could you perhaps name a home router, or indeed an enterprise router in a common configuration, which retains outbound NAT logs?

Pretty much any of our cisco gear retains outbound NAT logs in a fairly "common" configuration. One command in fact

ip nat log translations syslog

Used in a private enterprise environment to ensure full traceability and auditing due to regulatory requirements.

securityguy

krisdorey wrote: »

Pretty much any of our cisco gear retains outbound NAT logs in a fairly "common" configuration. One command in fact

ip nat log translations syslog

Used in a private enterprise environment to ensure full traceability and auditing due to regulatory requirements.

It's good that people are turning that on: I've never seen a "standard" recipe for configuring an edge router which does (ie, you can do it, but by default it doesn't, and the typical configuration doesn't). Obviously, no home router is doing that (which was the original claim): aside from anything else, for practical purposes no-one at home has a syslog sink.

It also, of course, requires that the routers are properly sync'd by NTP, that the DHCP logs are maintained, yadda yadda yadda. The last time I spoke to people who'd tried to do this sort of auditing retrospectively, they found that the logs were almost unusable. How much extra work did you have to do to get the logs usable? I guess that if it's regulatory, you've done dry-runs as part of your audit requirements.

InsideInsurance

To prosecute you are basically talking the police and you'd have to get them interested in spending the time and money to investigate and then the CPS to think there is a public interest in a prosecution attempt with a reasonable prospects of success.

Technically you can do a private prosecution but these are exceptionally rare and people tend to sue instead which for one has a benefit as it gets them money rather than the State receiving fines or sending someone to jail and secondly it has the much lower hurdle rate of "on the balance of probability" where as criminal law is "beyond reasonable doubt".

If you wanted to sue then you need to involve your solicitors and they will engage the necessary investigators, get court orders etc but you will need very deep pockets to fund it.