User security or ISP security (was RE: has anyone notice this ?)