Are you sharing the same IP address as a criminal? Law enforcement call for the end of Carrier Grade NAT (CGN) to increase accountability online | Europol
CGN technologies are used by internet service providers to share one single IP address among multiple subscribers at the same time. As the number of subscribers sharing a single IP has increased in recent years – in some cases several thousand – it has become
technically impossible for internet service providers to comply with legal orders to identify individual subscribers. This is relevant as in criminal investigations an IP address is often the only information that can link a crime to an individual. It might miccionan that individuals cannot be distinguished by their IP addresses anymore, which may lead to innocent individuals being wrongly investigated by law enforcement because they share their IP address with several thousand others – potentially including criminals.
Europol’s Executive Director Rob Wainwright: "CGN technology has created a serious online capability gap in law enforcement efforts to investigate and attribute crime. It is particularly alarming that individuals who are using mobile phones to connect to the internet to facilitate criminal activities
cannot be identified because 90% of mobile internet access providers have adopted a technology which prevents them from complying with their legal obligations to identify individual subscribers.
---------- Post added 21-nov-2018 at 03:59 ----------
Closing the Online Crime Attribution Gap: European law enforcement tackles Carrier-Grade NAT (CGN) | Europol
The law enforcement community is alarmed by the widespread and growing use of CGN technologies by ISPs. A recent study showed that in 2016, 90% of mobile internet network operators (GSM providers) and 38% of fixed line internet access providers (cable, fibre and ADSL) are using CGN technologies, while 12% are planning to deploy it in the coming months2.
A study conducted by Europol in the summer of 2016 showed that the scale of the online crime-attribution problems stemming from the use of CGN is significant. 80% of the European cybercrime investigators surveyed had encountered problems in their investigations relating to the use of CGN, causing them to be either
delayed or stopped. These cases concern investigations of serious offences, such as online child sensual exploitation, arms trafficking and terrorist propaganda.
---------- Post added 21-nov-2018 at 04:08 ----------
How can a reduced group of public IPv4 addresses due to the implementation of CGNAT make it hard for law enforcement to deter cybercrime? - Quora
Everyone uses NAT on their home network. Your provider assigns an IP to your edge device and then private IP addresses are assigned to the devices on your network. Those private IP addresses are natted to the IP assigned to your router.
If your provider is using NAT at their edge, it causes problems for law enforcement. Let’s say they need to know who wrote an answer on Quora. They get a warrant and Quora tells them “That answer came from the IP address 88.143.22.19”.
With this information the police find out who owns that IP (let’s say it’s AT&T) and asks them who the user associated with it at that time was. If AT&T edge devices are natting 192.168.0.0/16 to 88.143.22.19 there are as many as 65,536 possibilities and
no way to determine which one the cops are looking for.
It could probably be done if the provider implemented a truly ridiculous level of logging (assuming the edge device supports logging at that level)
but the resources required would be more than those used actually creating and managing
---------- Post added 21-nov-2018 at 04:13 ----------
Why the FBI wants IPv6: Because IPv4 with NAT makes it hard to track criminals -- GCN
But when carriers put hundreds of customers behind a single public IP address using Carrier Grade NAT, the link is broken and it becomes
difficult or impossible to identify the activities of an individual.
Carriers are required to provide police with records of user activity under court order, but if the records do not exist, the police are out of luck. “We’re already seeing this,” Flaim said June 6 at a conference on government IPv6 sponsored by the Digital Government Institute. “We are serving them subpoenas and they have nothing to provide us.”
:
