July 2008 - At-Large - lists.icann.org

Is ICANN's own DNS getting hijacked?
by Evan Leibovitch July 27, 2008

July 27, 2008

"One thing's for sure. If ICANN and IANA can lose control of their own domains, anyone can" http://blogs.zdnet.com/security/?p=1356 Is there a reason that we're finding out about this from external news media and not from within ICANN? - Evan

4 6

Re: [At-Large] [ga] Root-Servers missing: g.root-servers.net and k.root-servers.net
by Jeffrey A. Williams July 27, 2008

July 27, 2008

Peter and all, It may be that ICANN is doing so maintanance on G & K root servers. But they are clearly offline or not reachable. This isn't a big problem however. Certainly they should be in process of implimenting DNSSEC, and perhaps that is why G & K are in this status presently. In any event, that would be the SSAC's call I believe. So perhaps if your curious enough, you might want to contact ICANN's SSAC and try to find out what the reason is. Peter Dambier wrote: > Hello, > > I guess it might be a local glitch, anycast? > > Root-Servers SOA records > > soa(".","2008072800","a.root-servers.net","198.41.0.4"). > soa(".","2008072701","b.root-servers.net","192.228.79.201"). > soa(".","2008072800","c.root-servers.net","192.33.4.12"). > soa(".","2008072800","d.root-servers.net","128.8.10.90"). > soa(".","2008072800","e.root-servers.net","192.203.230.10"). > soa(".","2008072800","f.root-servers.net","192.5.5.241"). > error(".","g.root-servers.net","192.112.36.4","no response"). > soa(".","2008072800","h.root-servers.net","128.63.2.53"). > soa(".","2008072800","i.root-servers.net","192.36.148.17"). > soa(".","2008072800","j.root-servers.net","192.58.128.30"). > error(".","k.root-servers.net","193.0.14.129","no response"). > soa(".","2008072800","l.root-servers.net","199.7.83.42"). > soa(".","2008072800","m.root-servers.net","202.12.27.33"). > > Trying traceroute says > > traceroute to g.root-servers.net (192.112.36.4), 64 hops max, 40 byte packets > 1 yttrium.anul.nsa (7.19.30.39) 1 ms 0 ms 0 ms > 2 * * * > 3 217.0.78.58 (217.0.78.58) 46 ms 45 ms 44 ms > 4 62.154.15.161 (62.154.15.161) 177 ms 177 ms 178 ms > 5 62.156.128.158 (62.156.128.158) 176 ms 178 ms 177 ms > 6 cer-core-02.inet.qwest.net (205.171.139.149) 178 ms 177 ms 178 ms > 7 chi-core-01.inet.qwest.net (67.14.9.10) 178 ms 178 ms 178 ms > 8 * chi-edge-08.inet.qwest.net (205.171.20.118) 177 ms * > 9 216.207.8.198 (216.207.8.198) 189 ms 190 ms 188 ms > 10 198.26.75.33 (198.26.75.33) 188 ms 190 ms 189 ms > 11 198.26.75.42 (198.26.75.42) 188 ms 190 ms 188 ms > 12 * * * > 13 * * * > > So routing does not know where to find "g". > > traceroute to k.root-servers.net (193.0.14.129), 64 hops max, 40 byte packets > 1 yttrium.anul.nsa (7.19.30.39) 1 ms 0 ms 0 ms > 2 * * * > 3 217.0.78.54 (217.0.78.54) 46 ms 45 ms 45 ms > 4 194.25.6.201 (194.25.6.201) 63 ms 63 ms 64 ms > 5 f10.router.linx.k.ripe.net (217.79.160.94) 61 ms 62 ms 61 ms > 6 k.root-servers.net (193.0.14.129) 64 ms 63 ms 63 ms > > "k" has come back or has been redirected. > > Kind regards > Peter > > -- > Peter and Karin Dambier > Planet Communication and Computing Facility > Rimbacher Strasse 16 > D-69509 Moerlenbach-Bonsweiher > +49(6209)795-816 (Telekom) > +49(6252)750-308 (VoIP: sipgate.de) > mail: peter(a)pccf.net > http://www.pccf.net/ > http://www.peter-dambier.de/ > http://iason.site.voila.fr/ > https://sourceforge.net/projects/iason/ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Patch DNS Servers Faster
by Jeffrey A. Williams July 25, 2008

July 25, 2008

All, As an FYI: Austrian CERT used data from one of their authoritative DNS server to measure the rate at which the http://it.slashdot.org/article.pl?sid=08/07/08/195225&tid=172 latest DNS patch (source port randomization) is being rolled out to larger recursive name servers. While about http://cert.at/static/cert.at-0802-DNS-patchanalysis.pdf half the traffic (PDF) they receive is now using source port randomization, their data suggest that this is due to ISPs who roll out such fixes immediately. The rate of patching has fallen to disappointingly low levels since. If your ISP isn't patched, perhaps it is time to switch." After details of the DNS vulnerability http://it.slashdot.org/article.pl?sid=08/07/21/2212227&tid=172 leaked, researchers |)ruid and HD Moore [4]released attack code; ZDNet's security blog has http://blogs.zdnet.com/security/?p=1546 an analysis. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Weekly posting summary for alac@atlarge-lists.icann.org
by Thomas Narten July 25, 2008

July 25, 2008

Total of 14 messages in the last 7 days. script run at: Fri Jul 25 00:53:02 EDT 2008 Messages | Bytes | Who --------+------+--------+----------+------------------------ 42.86% | 6 | 41.12% | 41407 | jwkckid1 at ix.netcom.com 14.29% | 2 | 11.74% | 11823 | calendar-notification at google.com 7.14% | 1 | 9.94% | 10005 | vanda at uol.com.br 7.14% | 1 | 9.70% | 9771 | jam at jacquelinemorris.com 7.14% | 1 | 7.88% | 7939 | fsylla at gmail.com 7.14% | 1 | 6.97% | 7017 | narten at us.ibm.com 7.14% | 1 | 6.96% | 7011 | wendy at seltzer.com 7.14% | 1 | 5.68% | 5715 | nick.ashton-hart at icann.org --------+------+--------+----------+------------------------ 100.00% | 14 |100.00% | 100688 | Total

1 0

Re: [At-Large] [ga] Report: Registrars & Steroids
by Jeffrey A. Williams July 25, 2008

July 25, 2008

Peter and all My remarks and concerns interspersed below Peters. Peter Dambier wrote: > Yes, I think it is a good idea. Let us take Microsoft offline, > because they are selling the software that was used to create > all that spam in the first place. Not all spam originates for Microsoft products, but what does, should be either fixed immediately, or yes, banned entirely. > > > And dont forget to take Boing offline too because they are selling > weapons that most likely you and me are not allowed to carry - > e.g. bomber airplanes. Only the B-52 is or was built by Boing that remains in service but no longer produced. Lockheed Martin builds the still in production "Bomber planes" that remain in production. The rest are of Russian design an manufacture. However Bomber planes are not related to Registrars or Steroids nor are they a hazard unless mis-used. > > > Cars are not safe for children. That is why we have to get rid of > them. In germany we have successfully banned autobusses from cities > because they are sending more carbon dust through their exhaust pipes > than SUVs do. Cars are only unsafe to children if being operated by children that are not capable of operating a car safely or by adults that also cannot operate a car safely. They are otherwise an enanament object and are as such in and of themselves, not unsafe or dangerous. > > > How about free speach - it is mostly four letter words anyhow. > Why bother? Well I rarely use "Four Letter" words as this Email in response can attest to. So this argument has no real relevance also accordingly. Free speech has little if anything to do with the sale online, of Steroids. Steroids if sold to anyone without a Dr.'s order, is an illegal activity. Advertising them online in an of itself is not, but selling Steroids in an unsafe and illegal manner online IS a intentionally harmful and illegal activity, and such web sites should be shut down either permanently or temporarily. In conclusion, and to a degree what I think Danny's point is, is that ICANN and DOC/NTIA are seemingly remiss in their oversight responsibilities regarding those Domains and their Registrars whom are the Registrar of record, are actively engaging in harmful and illegal activities, either directly or indirectly. Ignorance my be bliss, but it cannot be tolerated indefinitely in cases/instances such as the sale of Steroids via a Domain name' web site in an illegal manner. So either ICANN or the Registrar needs to step up if either is to meet it's legal responsibilities and/or mandate. Failing such, than when noticed by any user, he/she has a legal responsibility to report such illegal activities accordingly. Notifying ICANN, DOC/NTIA and the Registrar of record would/should also be very helpful/useful as well so as to hopefully alert law enforcement of their complicity accordingly. > > > Cheers > Peter > > Danny Younger wrote: > > [Forwarded message] > > > > Networks of steroid dealing domains are sponsored through U.S.-based > > companies who refuse to shut them down even after being notified. > > > ... > > -- > Peter and Karin Dambier > Planet Communication and Computing Facility > Rimbacher Strasse 16 > D-69509 Moerlenbach-Bonsweiher > +49(6209)795-816 (Telekom) > +49(6252)750-308 (VoIP: sipgate.de) > mail: peter(a)pccf.net > http://www.pccf.net/ > http://www.peter-dambier.de/ > http://iason.site.voila.fr/ > https://sourceforge.net/projects/iason/ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

ICANN Opens Public Comment Period on Czech Arbitration Court Proposed Pilot Projects
by Jeffrey A. Williams July 24, 2008

July 24, 2008

All, As an FYI: http://www.icann.org/en/announcements/announcement-22jul08-en.htm ICANN Opens Public Comment Period on Czech Arbitration Court Proposed Pilot Projects 22 July 2008 ICANN has received a request from the Czech Arbitration Court (CAC) to run two pilot projects related to its implementation of UDRP. Background to Posting CAC was approved as a UDRP provider at the Board meeting on 23 January 2008. CAC wishes to run tests of the following two UDRP-related services as part of its implementation of UDRP: A. Simplified way of sending signed hardcopies of Complaints and/or Responses to the Provider (Par. 3(b), Par. 5(b)) of the UDRP Rules. This pilot project aims at exploring and testing the legal and practical implications of a service that would enable parties to submit hardcopies of the complaints/responses in a simplified way. B. Service of delivery of signed hard copies. This pilot project seeks to explore and test the legal and practical implications of a new service related to e-UDRP consisting of the printing and delivering of signed electronic documents. ICANN has at the request of CAC agreed to post for public comment the description of the pilot projects for a period of thirty days (30), along with a report on the pilot project by professor Chris Reed, a recognized international authority on technology law and electronic commerce law . Those wishing to comment are encouraged to do so and to make their comments not later than 21 August 2008. Comments may be submitted by email to cac-pilot(a)icann.org and may be viewed at http://forum.icann.org/lists/cac-pilot. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Draft Summary Minutes of ALAC Teleconference of 22nd July 2008
by Nick Ashton-Hart July 22, 2008

July 22, 2008

Dear All: The Draft Summary Minutes for the ALAC Meeting today are now online at https://st.icann.org:443/alac/index.cgi?22_july_2008_summary_minutes. Please do remember that these minutes are draft minutes, subject to revision by the members of the ALAC until adopted. Recordings and a verbatim transcript will be posted once available. -- Regards, Nick Ashton-Hart Director for At-Large Internet Corporation for Assigned Names and Numbers (ICANN) Main Tel: +33 (450) 40 46 88 USA DD: +1 (310) 578-8637 Fax: +41 (22) 594-85-44 Mobile: +41 (79) 595 54-68 email: nick.ashton-hart(a)icann.org Win IM: ashtonhart(a)hotmail.com / AIM/iSight: nashtonhart(a)mac.com / Skype: nashtonhart Online Bio: https://www.linkedin.com/in/ashtonhart

1 0

[Reminder] ALAC Monthly Teleconference @ Tue 22 Jul 13:30 – 15:00 ()
by Google Calendar July 22, 2008

July 22, 2008

alac(a)atlarge-lists.icann.org, this is a reminder for Title: ALAC Monthly Teleconference Time: Tue 22 Jul 13:30 – 15:00 (Time zone: GMT (no daylight saving)) Calendar: Description: Please see https://st.icann.org/alac/index.cgi?2008 for all meeting agendas, minutes, recordings and other details. Start time 1330 UTC. You can view this event at http://www.google.com/calendar/event?action=VIEW&eid=YWFycTliNDA5cjZ0bm5oY3… You are receiving this courtesy email at the account alac(a)atlarge-lists.icann.org because you are an attendee of this event. To stop receiving future notifications for this event, decline this event. Alternatively, you can sign up for a Google account at http://www.google.com/calendar/ and control your notification settings for your entire calendar.

5 4

Net Censorship Law Struck Down Again
by Jeffrey A. Williams July 22, 2008

July 22, 2008

All, See: http://blog.wired.com/27bstroke6/2008/07/net-censorship.html I must say I am very disappointed in this decision as well, by the third circuit. However it seems that two fundamental problems one with COPA and this case are at the root of the government failing. 1.) COPA is defines too broadly it's provisions, and 2.) The DOJ didn't present it's case very well again. FWIW, if I were calling the shot on this case and COPA at DOJ I would have a woman lawyer whom has small children be the lead atty. on this case in the appeal. Additionally Justice should be taking a direction in seeking to amend COPA or revise it, as it seems the Third Circuit is suggesting See:http://blog.wired.com/27bstroke6/files/copa_third.PDF . Working with Congress in either revising or amending COPA to focus explicitly on what is specifically desired in this statute that is actually "Doable" and Constitutionally expectable IMHO would be advisable. After all children's safety are at stake here. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [At-Large] [governance] Much-maligned feature being added to IPv6
by Jeffrey A. Williams July 22, 2008

July 22, 2008

Phil and all, Already read it, but thanks anyway. And yes it was quite interesting. Phil Regnauld wrote: > Jeffrey A. Williams (jwkckid1) writes: > > > > Frankly I personally view this as a very positive step for IPv6. > > Breaches a ideological > > technical divide that has existed for nearly a decade, which is a good > > first step > > in gaining more acceptance for IPv6. The downside is that LEA's won't > > like it very much for obvious reasons. > > Read Alain Durand's proposal for a very interesting solution on the > transition for large broadband providers: > > http://tools.ietf.org/html/draft-durand-dual-stack-lite-00 > > (it is cited in the article and is by far more interesting than > the whole NAT or no NAT discussion). > > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0