Land bepaald met een verouderde database
Een doorgifteclaim rust op een adres-naar-landtabel die niet meer klopt met de toewijzing.
- Familie
- Methode
- Status
- actief
- Geldt voor
- web, mobile-app, iot, firmware
Wat er gebeurt
A finding states that data left for a particular country. The country came from a lookup table mapping addresses to locations. Such tables are snapshots: address blocks are reassigned, providers move ranges between regions, and hosting shifts between sites. A table built before the measurement can place a current address in a country it left, in either direction.
Waarom het ertoe doet
The transfer question is the one most likely to be contested, and it is the one where a wrong answer is easiest to demonstrate. A single misplaced address lets the other party dismiss the whole measurement without addressing the rest of it.
Veelvoorkomende oorzaken
- a lookup database shipped with a tool and never updated
- the country of the operating company used instead of the destination of the traffic
- a content delivery front end resolved to one country while the origin sits elsewhere
- the country recorded at analysis time rather than at capture time, with the reassignment in between
Dit is het níet
Genuinely sending data to a third country is a fault of the system, and the transfer provisions address it. This entry is about the claim: the destination attributed may not be where the data went.
Hoe je het vaststelt
Indicator
Resolving the same addresses again with a lookup source built after the measurement date yields a different country for at least one host in the finding. Alternatively, the build date of the source used precedes the measurement date.
Methode
differential
Kwaliteit van de detectie
90 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- The lookup source was built after the measurement and re-resolution yields the same country.machinaal te toetsende bevinding vervalt
- The destination is established by routing or by a statement from the party rather than by a lookup table.met de hand te toetsende bevinding vervalt
- The finding does not depend on the country at all.met de hand te toetsende bevinding vervaltMany findings stand regardless of destination. Where the country is decoration, remove it rather than defend it.
- Only hosts irrelevant to the claim changed country on re-resolution.machinaal te toetsende bevinding wordt zwakker
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- manual
METHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above
Juridisch kader
Veelgehoorde tegenwerpingen
The tool said so.
The tool consulted a table with a build date. Publish that date, and re-resolve if it precedes the measurement.
The company is American, so the data goes to America.
Where a company is based says nothing about where the traffic lands, and the reverse holds too. The destination is measurable; the origin of the company is not the measurement.
It resolves to that country from here.
Then say from where and when you resolved it. That is a fact about your measurement, and stating it is what makes it checkable.
Geldt wanneer
to-a-finding