[arin-ppml] Reclamation of Number Resources

[Owen DeLong]

> On Jul 14, 2022, at 16:36 , John Curran <jcurran at arin.net> wrote:
> 
>> On 14 Jul 2022, at 6:28 PM, Paul E McNary <pmcnary at cameron.net <mailto:pmcnary at cameron.net>> wrote:
>> You keep using the word fraud.
>> This is not an issue of fraud by my understanding but ARIN POLICY.
>> Please correct your misuse of your language. PLEASE
> 
> 
> Paul - 
> 
> Within the context of the ARIN community and the ARIN-PPML mailing list, the term “fraud”
> refers to ARIN’s defined internet Number Resource Fraud process, as described here – 
> <https://www.arin.net/reference/tools/fraud_report/ <https://www.arin.net/reference/tools/fraud_report/>> – and as such “fraud” is indeed the proper
> term in the context of this discuss.  (Please take note of this usage to avoid confusion in the future.). 

I quote:

> Objective
> This reporting process is to be used to notify the American Registry for Internet Numbers, Ltd. (ARIN) of suspected Internet number resource abuse including the submission of false documentation and information for the purpose of (1) obtaining Internet number resources, (2) gaining approval to transfer Internet number resources, (3) making unauthorized changes to ARIN’s Whois, or (4) hijacking of number resources in ARIN’s database.
> 
> Please note that this reporting process is  NOT for reporting illegal or fraudulent Internet activity like network abuse, phishing, spam, identity theft, hacking, scams, or any other activity unrelated to the scope of ARIN’s mission. Visit our Network Abuse page <https://www.arin.net/reference/materials/abuse/> for more information on these activities.
> 
> To report suspected fraud, please use the provided web form <https://account.arin.net/public/fraud/index.xhtml>.
> 
That’s not what Ronald is describing here… Ronald is describing a situation where an organization likely submitted no documentation about the presence or absence of a sufficient tie to the region and ARIN staff likely erroneously missed this detail on their application. 

Such an instance is NOT fraud by the definition above IMHO (and apparently in Ronald’s as well). As such, I think your continued use of the term fraud here is actually incorrect and that the fraud process is likely not the best mechanism for Ronald’s report (though it may be the closest process ARIN currently has). 

This discussion has, however, strayed from that central point to also cover certain deficiencies in the disclosure level of the fraud reporting process which I believe should also be addressed, but should not be conflated with Ronald’s original information and concern. Perhaps expanding the fraud reporting process into a suspected policy violation reporting process could address this, or perhaps a separate process for reporting concerns over potential ARIN errors/mistakes/etc. would be best. I don’t have a dog in that particular fight at the moment, but the current mechanism certainly isn’t ideal for addressing the particular situation in question.


Owen

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-ppml/attachments/20220715/0ba4faa5/attachment.htm>