February 2008 - At-Large - lists.icann.org

Re: [At-Large] Pakistan YouTube Block affected wider Internet
by Franck Martin Feb. 28, 2008

Feb. 28, 2008

JFC, Have you heard about the Internet? It is a great tool to do some research with... Google BCP38 or even look at it on wikipedia and you will know. I'm not here to train people, but will gladly answer their questions. Also look at BGP on wikipedia, even most of the IETF protocols and workgroups are explained on wikipedia. You will find quickly why BGP will not scale and why IETF is working on a replacement. As for the IETF, I agree with Brian Carpenter, IETF is not here to do awareness, this is the role of ISOC. IETF is here to work on standards, and should be focused on just doing that. ISOC has been lacking a proper education and policy department but now they have one, and produce now a very good IETF journal. So next time ask ISOC to come, you will see, it will work better. Cheers -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Franck Martin franck.martin(a)gmail.com http://www.peachymango.org/ "Toute connaissance est une réponse à une question" G. Bachelard

1 0

Proposed GNSO "Fast Flux" Resolution
by Danny Younger Feb. 28, 2008

Feb. 28, 2008

from the GNSO Council mailing list: Whereas, "fast flux" DNS changes are increasingly being used to commit crime and frustrate law enforcement efforts to combat crime, with criminals rapidly modifying IP addresses and/or nameservers in effort to evade detection and shutdown of their criminal website; Whereas, the Security and Stability Advisory Committee has reported on this trend in its Advisory SAC 025, dated January 2008: http://www.icann.org/committees/security/sac025.pdf/ Whereas, the SSAC Advisory describes the technical aspects of fast flux hosting, explains how DNS is being exploited to abet criminal activities, discusses current and possible methods of mitigating this activity, and recommends that appropriate bodies consider policies that would make practical mitigation methods universally available to all registrants, ISPs, registrars and registries, Whereas, the GNSO is likely an appropriate party to consider such policies The GNSO Council RESOLVES: ICANN Staff shall prepare an Issues Report with respect to "fast flux" DNS changes, for deliberation by the GNSO Council. Specifically the Staff shall consider the SAC Advisory, and shall outline potential next steps for GNSO policy development designed to mitigate the current ability for criminals to exploit the DNS via "fast flux" IP or nameserver changes. http://gnso.icann.org/mailing-lists/archives/council/msg04737.html ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

2 1

Australian ISP's going more wholesome
by Jeffrey A. Williams Feb. 28, 2008

Feb. 28, 2008

All my friends, Looks like Australian users will be able to have a more wholesome internet experiance more easily. Australian Internet Filter Enters Trial Phase The Australian Government's plan to have http://www.australianit.news.com.au/story/0,24897,23274585-15306,00.html internet service providers filter pornography and other internet content deemed inappropriate for children is going full-steam ahead. [...] The trial will evaluate ISP-level internet content filters in a controlled environment while filtering content inappropriate for children." It all sounds in good taste, and we are told that you will be able to opt out at any time, but will putting this filter in place simply give the powers that be the ability to block access to content for their own agendas. Censorship may be necessary, but should it be overseen by Government. I am sure some US and French adult web sites will be greatly disappointed. And some Australian patrons shall be disappointed as well... Se la vi! However given the opt out approach, in my opinion Australia did this smart at least... Frankly though I believe that any child pornography sites/domain names should be banned all together or taken down when identified immediately. American ISP's in particular could take a lesson none the less, from Australia's example here.... Regards, Spokesman for INEGroup LLA. - (Over 277k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

3 5

ICANN's WDPRS has Crashed
by Danny Younger Feb. 28, 2008

Feb. 28, 2008

I've received a report this morning that ICANN's Whois Data Problem Report system (WDPRS) has crashed. I'm told that last week the system experienced a 20-30 per cent timeout failure rate (which has this morning reached 100 percent). Perhaps an update from ICANN Staff is in order. ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

2 1

Belize Domain WHOIS Service
by Derek Smythe Feb. 28, 2008

Feb. 28, 2008

Hi All WIPO has described Belize Domain WHOIS Service as follows: "Furthermore, the pattern of the Respondent's conduct as a serial cybersquatter in many similar recent cases also leads the Panel to the conclusion that the disputed domain name was registered and is used in bad faith." http://www.wipo.int/amc/en/domains/decisions/html/2007/d2007-1515.html Indeed searching for "Belize Domain WHOIS service" and "wipo.int" shows a disproportionate number of WIPO UDRP's. Surely the alarm bells should have gone off somewhere already. Why should people continuously have to pay to defend something that should be monitored at a different level. This is just another example of accountability issues. Derek

2 1

The Anti-Phishing Consumer Protection Act of 2008
by Danny Younger Feb. 27, 2008

Feb. 27, 2008

http://www.prnewswire.com/cgi-bin/stories.pl?ACCT=104&STORY=/www/story/02-2… If anyone can obtain a copy of this newly introduced bill, I would be appreciative. Thanks, Danny ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping

2 1

JPA Public Meeting Agenda
by Danny Younger Feb. 27, 2008

Feb. 27, 2008

Federal Register: Notice of Public Meeting Regarding Mid-term Review of the Joint Project Agreement between NTIA and ICANN Public Meeting Agenda Date: Thursday, February 28, 2008 Time: 9:00 a.m. to 12:00 p.m. (registration begins at 8:30 a.m.) Location: United States Department of Commerce Herbert C. Hoover Building, Auditorium 1401 Constitution Ave, N.W., Washington, D.C. 20230 8:30 a.m. Registration 9:00 - 9:15 a.m. Introduction and Welcoming Remarks Meredith Attwell Baker, Acting Assistant Secretary of Commerce for Communications and Information 9:15 10:00 a.m. Session I: ICANNS JPA Responsibilities: Assessing Commitments against Results Panelists: Root Server Operator: Suzanne Woolf, ISC User: Beau Brendler, Consumer Reports Webwatch Business: Steve Metalitz, Coalition for OnLine Accountability gTLD Registrar: Jonathon Nevett, Network Solutions Government Representative: Len St. Aubin, Industry Canada 10:00 10:20 a.m. Questions from the Audience 10:20 10:30 a.m. Break 10:30 11:15 a.m. Session II: ICANNS JPA Responsibilities: Ensuring ICANNs Continued Progress and Sustainability Panelists Business: J. Scott Evans, Yahoo Internet Society: Lynn St. Amour, ISOC gTLD Registry: Keith Drazek, NeuStar ccTLD Registry: Martin Boyle Nominet Business: John Carlson, BITS/Financial Services Roundtable 11:15 11:30 a.m. Questions from the Audience 11:30 11:45 a.m. Remarks: Peter Dengate Thrush, Chairman of the Board Internet Corporation for Assigned Names and Numbers 11:45 12:00 p.m. Conclusion: Concluding Remarks by Meredith Attwell Baker, Acting Assistant Secretary of Commerce for Communications and Information ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping

1 0

Re: [At-Large] Pakistan YouTube Block affected wider Internet
by JFC Morfin Feb. 27, 2008

Feb. 27, 2008

On 04:44 27/02/2008, Franck Martin said: >Is this problem not fixed if people would follow BCP38? Dear Frank, you illustrate the need of an audible dialog between users and techies: what is a BCP and what is BCP38 for us @large people. Moreover, if you do not provide a link. >Also, seems to me a storm in a tea cup, wikipedia runs on the same >principles: with enough oversight the problem gets fixed quickly. >Also BGP is on its way out, so may be let's concentrate on the new >routing protocol? Exactly. However, what is this new routing protocol as explained to the @large whose own business and duties to ICANN will depend on? >And IETF is open to all, and ISOC offers fellowship for new comers >to the IETF process, and you don't need to be present at the IETF >meetings to be efficient, just subscribe to the various IETF mailing lists. Both of us, as individuals, are good dedicated demonstrations of the difficulty for @large to understand and be understood by IETF and IETF by @large. Please recall, I proposed ccTLDs and IETF to enter an MoU, and Brian Carpenter to come and introduce the IETF vision to the ICANN ccTLD meeting in Luxembourg. It was OK on the ccTLD side, but IETF and IAB chairs declined. Interfacing is not to say "hello! you are welcome to join and be trained". There are probably 150 mailing lists and 5000+ RFCs to start perusing and then 500 to read to become abreast of what an @large technical rep really has to know and translate in @large readable language, underlining the constencies and lack of consistency - what calls for a technical competence the IAB has not (or it would produce it). It is a more than full time job. + knowing ICANN. + knowing the IGF (IETF refused to participate to.) + knowing the positions of a few IETF people pretenting the IETF is involved in IGF (Vint, Klensin, Falström). Look, only .CN, .FR and recently .GR participate to the IETF parallel IDNA revision. IETF and ICANN have a relational problem with the world. To listen and to speak to the "Global Internet Community" while they were used to relate with the "Internet Community". With some difficulty ICANN starts doing it through the ALAC. IETF is still at the stage they want to curb us, and we sometimes have to oppose. If we want to have a smooth integration of ICANN and IETF (they are bundled together via the IANA) within the IGF + WSIS process + real Internet world of today, we need to help both sides. Otherwise we both perfectly know what is going to happen : the regalianisation of the Internet, which is an "enhanced cooperation" without the civil society, partly the private sector, the regalian domain, under the control of the UN international entities. Back to 1980 instead of applying the Tunis agreement [because the lack of IETF participation to the WSIS process makes it lame - even if the ICANN participation has prevented an Internet split]. One way to proceed could be the creation of an ALAC Internet Architecture and Operations WG which would be briefed by the IETF, IAB Chairs and AD and would inform/advise/concert with the IAB/IESG on the @large positions. Such a WG would propose the BoD, with you and Thomas Narten's help the best ways to interface "the legacy core" and the "emerging world digital ecosystem" and its multitechnology/multilingual/multistakeholders convergence. jfc >On 27/02/2008, JFC Morfin <<mailto:jefsey@jefsey.com>jefsey(a)jefsey.com> wrote: >Dear all, >Thank you, Jean Armour to remind this situation. IMHO this kind of >issue shows the need for the ALAC to liaise with, or to have @large >representatives at the IETF, and to exercise QA advice and control >on Internet protocols, solutions and architecture, the same as it to >be an ICANN advisor. The best way for this would be through a formal >MoU with the IETF. > >We have to understand that one way or another the IGF/WSIS is going >to do this too (possibly through a WSIS Technical Forum). Then the >ALAC will be able to fully play its role of ICANN community >interface with the Members of the IGF/Enhanced Cooperation. At that >time it would very good for the ALAC credibility to show some >results or at least established debate. > >The point you do today, seems to be also a good reasons for ALAC to >get informed/investigate about the ROAP IETF/IAB issue (ROuting and >Adressing Problem) leading to a possible disruption of the routing >due to IPv6 management. On a more general perspective I would >suggest that ALAC could start from the US cyberspace review and >consider the status of the US cyberspace strategy which are probably >the most active, but probably late. The reference is ><http://white-house.giv/pcipb>http://white-house.giv/pcipb. BGP is >one of the priorities assigned by this strategy devised after 9/11. >It was more than 5 years ago. >jfc > > >At 03:39 27/02/2008, Jean Armour Polly wrote: > >>Over the weekend, the Pakistan Telecom Authority ordered Pakistan's >>ISPs to block YouTube. The ISPs shared BGP (Border gateway >>protocol) data, which advertised routes to nowhere for YouTube. >> >>But, the routes were "accidentally" shared with a company in Hong >>Kong. Because the routes were very concise, and because no one >>bothered to see if they were accurate, routers all over accepted >>the routes as the best path to YouTube. >> >>The following article gives more information, including the >>suggestion that secure BGP be adopted. >><http://www.macworld.com/article/132256/2008/02/networking.html>http://www.macworld.com/article/132256/2008/02/networking.html >> >>This article >><http://www.9wsyr.com/news/local/story.aspx?content_id=3786d02a-34e5-4f04-ad…>http://www.9wsyr.com/news/local/story.aspx?content_id=3786d02a-34e5-4f04-ad… >> >>provides more information, including this quote: >>"Misrouting occurs every year or so among the world's Internet >>carriers, usually as a result of typos or other errors, Underwood >>said. In a more severe example, a Turkish telecom provider in 2004 >>started advertising that it was the best route to all of the >>Internet, causing widespread outages for many Web sites over several hours. >> >>"Nobody ran any viruses or worms or malicious code. This is just >>the way the Internet works. And it's not very secure or reliable," >>Underwood said, adding that there is no real solution to the >>problem on the table. >> >>While most route hijacking is unintentional, some Yahoo networks >>were apparently taken over a few years ago to distribute spam. >>"To be honest, there's not a single thing preventing this from >>happening to E-Trade, or Bank of America, or the FBI, or the White >>House, or the Clinton campaign," Underwood said. "I think it's a >>useful moment for people to decide just how important it is that we >>fix problems like this." >> >>How stable is the Internet, anyway? Perhaps ALAC would like to discuss. >> >> >>Jean Armour Polly >>_______________________________________________ >>ALAC mailing list >><mailto:ALAC@atlarge-lists.icann.org>ALAC(a)atlarge-lists.icann.org >>http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann.org >> >>At-Large Official Site: <http://www.alac.icann.org/>http://www.alac.icann.org >>ALAC Independent: <http://www.icannalac.org/>http://www.icannalac.org > >_______________________________________________ >ALAC mailing list ><mailto:ALAC@atlarge-lists.icann.org>ALAC(a)atlarge-lists.icann.org >http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann.org > >At-Large Official Site: <http://www.alac.icann.org>http://www.alac.icann.org >ALAC Independent: <http://www.icannalac.org>http://www.icannalac.org > > > > >-- >-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- >Franck Martin ><mailto:franck.martin@gmail.com>franck.martin(a)gmail.com >http://www.peachymango.org/ >"Toute connaissance est une réponse à une question" >G. Bachelard

1 0

Re: [At-Large] [ga] The Anti-Phishing Consumer Protection Act of 2008
by Jeffrey A. Williams Feb. 27, 2008

Feb. 27, 2008

James and all, Yes this is my understanding as well. And when it is available it can or should be able to be found on Thomas. BTU, this is also a significant issue of great interest to users... It is also one that can be greatly reduced with the implementation of DNSSEC and IPSEC as well as many Domains cleaning up their DNS configurations. And to make a good example/start, ICANN organs such as the IETF, IAB, and IESG cleaning up theirs! "James S. Tyre" wrote: > For easy tracking purposes, the bill number is S. 2661. However, the > text won't be available online until (probably) tomorrow. > > At 12:49 PM 2/26/2008 -0800, Danny Younger wrote: > > >http://www.prnewswire.com/cgi-bin/stories.pl?ACCT=104&STORY=/www/story/02-2… > > > >If anyone can obtain a copy of this newly introduced > >bill, I would be appreciative. > > > >Thanks, > >Danny > > > > > > > >____________________________________________________________________________________ > >Looking for last minute shopping deals? > >Find them fast with Yahoo! > >Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping > > -------------------------------------------------------------------- > James S. Tyre jstyre(a)jstyre.com > Law Offices of James S. Tyre 310-839-4114/310-839-4602(fax) > 10736 Jefferson Blvd., #512 Culver City, CA 90230-4969 > Co-founder, The Censorware Project http://censorware.net > Policy Fellow, Electronic Frontier Foundation http://www.eff.org Regards, Spokesman for INEGroup LLA. - (Over 277k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [At-Large] Pakistan YouTube Block affected wider Internet
by Franck Martin Feb. 27, 2008

Feb. 27, 2008

Is this problem not fixed if people would follow BCP38? Also, seems to me a storm in a tea cup, wikipedia runs on the same principles: with enough oversight the problem gets fixed quickly. Also BGP is on its way out, so may be let's concentrate on the new routing protocol? And IETF is open to all, and ISOC offers fellowship for new comers to the IETF process, and you don't need to be present at the IETF meetings to be efficient, just subscribe to the various IETF mailing lists. Cheers On 27/02/2008, JFC Morfin <jefsey(a)jefsey.com> wrote: > > Dear all, > Thank you, Jean Armour to remind this situation. IMHO this kind of issue > shows the need for the ALAC to liaise with, or to have @large > representatives at the IETF, and to exercise QA advice and control on > Internet protocols, solutions and architecture, the same as it to be an > ICANN advisor. The best way for this would be through a formal MoU with the > IETF. > > We have to understand that one way or another the IGF/WSIS is going to do > this too (possibly through a WSIS Technical Forum). Then the ALAC will be > able to fully play its role of ICANN community interface with the Members of > the IGF/Enhanced Cooperation. At that time it would very good for the ALAC > credibility to show some results or at least established debate. > > The point you do today, seems to be also a good reasons for ALAC to get > informed/investigate about the ROAP IETF/IAB issue (ROuting and Adressing > Problem) leading to a possible disruption of the routing due to IPv6 > management. On a more general perspective I would suggest that ALAC could > start from the US cyberspace review and consider the status of the US > cyberspace strategy which are probably the most active, but probably late. > The reference is http://white-house.giv/pcipb. BGP is one of the > priorities assigned by this strategy devised after 9/11. It was more than 5 > years ago. > jfc > > At 03:39 27/02/2008, Jean Armour Polly wrote: > > Over the weekend, the Pakistan Telecom Authority ordered Pakistan's ISPs > to block YouTube. The ISPs shared BGP (Border gateway protocol) data, which > advertised routes to nowhere for YouTube. > > But, the routes were "accidentally" shared with a company in Hong Kong. > Because the routes were very concise, and because no one bothered to see if > they were accurate, routers all over accepted the routes as the best path to > YouTube. > > The following article gives more information, including the suggestion > that secure BGP be adopted. > http://www.macworld.com/article/132256/2008/02/networking.html > > This article > http://www.9wsyr.com/news/local/story.aspx?content_id=3786d02a-34e5-4f04-ad… > provides more information, including this quote: > "Misrouting occurs every year or so among the world's Internet carriers, > usually as a result of typos or other errors, Underwood said. In a more > severe example, a Turkish telecom provider in 2004 started advertising that > it was the best route to all of the Internet, causing widespread outages for > many Web sites over several hours. > > "Nobody ran any viruses or worms or malicious code. This is just the way > the Internet works. And it's not very secure or reliable," Underwood said, > adding that there is no real solution to the problem on the table. > > While most route hijacking is unintentional, some Yahoo networks were > apparently taken over a few years ago to distribute spam. > "To be honest, there's not a single thing preventing this from happening > to E-Trade, or Bank of America, or the FBI, or the White House, or the > Clinton campaign," Underwood said. "I think it's a useful moment for people > to decide just how important it is that we fix problems like this." > > How stable is the Internet, anyway? Perhaps ALAC would like to discuss. > > > Jean Armour Polly > _______________________________________________ > ALAC mailing list > ALAC(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann.org > > At-Large Official Site: http://www.alac.icann.org > ALAC Independent: http://www.icannalac.org > > > _______________________________________________ > ALAC mailing list > ALAC(a)atlarge-lists.icann.org > > http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann.org > > At-Large Official Site: http://www.alac.icann.org > ALAC Independent: http://www.icannalac.org > -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Franck Martin franck.martin(a)gmail.com http://www.peachymango.org/ "Toute connaissance est une réponse à une question" G. Bachelard

1 0