December 2009 - At-Large - lists.icann.org

an interesting article that shows people know very little about the Internet. especially the history
by Joe Baptista Jan. 3, 2010

Jan. 3, 2010

The article is titled "PC Worlds Top 10 Security Nightmares of the Decade" can be found at the following URL: http://bit.ly/7nxeD4 It's worth a read.There is nothing spectacular about this article. But it is an excellent example of how little experts know on the subjects they are experts on. The author restates common truths. Robert Siciliano tells us the "last decade has seen technological breakthroughs unlike any other". This is true. But Siciliano also reminds us our technological success has result in a tremendous rise in fraud. I completely agree with him. The reason he argues in his article is that the "speed of the conveniences technology" provides has "far outpaced the security" measure in place today. Again very bang on. But this claim could be subject to some interpretation that at one time our security outpaced or was even better then the available technology. The historical truth is that security has alway lagged behind technology. And much of that is due to a lack of education amongst the masses. But the simple truth of it is that much of the insecurity in the Internet is due to a lot of twits who run the Internet and have an interest in maintaining and controlling the status quo. Mr. Siciliano provides an excellent example of this in his article when he discusses the DNS vulnerability alleged to have been discovered by IOActive researcher Dan Kaminisky. Kaminisky is credited with the identification in 2008 of a DNS vulnerability to various forms of attack including cache poisoning. This is a false allegation that the press has repeated without any investigation of the facts. Kaminisky never discovered anything he simply repackaged an existing well known problem as his own. Also the DNS protocol is not vulnerable in itself nor is it a security risk. The security problem is not in the DNS protocol but in the transport protocol used for DNS transactions. In this case it is the UDP protocol that is vulnerable to attack. This problem has existed for at least 15 years. I remember it existed in the 1990's when I was commissioned to investigate vulnerabilities in military DNS servers. So the Kaminisky claim he discovered anything significant is simply untrue. The Kaminisky affair was more a co-ordinated effort to scare business into adopting a protocol that reverse engineers the Internet in a effort to centralize control of the DNS protocol in the root servers operated by the U.S. government through ICANN its contractor. That protocol DNSSEC has been actively marketed as the solution to the Kaminisky cache poisoning problem. DNSSEC addresses the problem by inserting encryption keys into the DNS that establish a chain of trust from domain names to the root servers operated by the U.S. government. This places a significant amount of control in the hands of one government authority. It also will cost business a fortune to adopt. And Internet DNS traffic is also expected to increase exponentially as every DNS answer must contain encryption key information. Furthermore DNSSEC does not actually fix the problem. The issue as mentioned above is a problem with the UDP protocol and verifying that the DNS information your system requested actually coming from the machine you requested it from. The centralization of DNS encryption keys in the root is a very expensive process that is simply not needed. To fix the UDP problem one only has to ensure that the answers come from the server we are communicating with. Since UDP unlike the TCP protocol has no handshaking capabilities one simply fixes the problem by incorporating a handshaking protocol within UDP and DNS that confirms the server we are getting answer from is the server we originally communicated with. A solution to this problem is available and was developed a few years ago by Dr. Bernstein at the University of Illinois at Chicago. It's called DNSCurve and fixes the problem through a simple key exchange between DNS servers without having to hand over control of the DNS to a central authority. regards joe baptista

4 7

Re: [At-Large] [ALAC-ExCom] All the Very Best Wishes to you all...
by Daniel Monastersky Dec. 31, 2009

Dec. 31, 2009

The best wishes to all of you. Sincerely, Daniel Monastersky IIISI Rep LACRALO 2009/12/23, Sébastien Bachollet <sebastien.bachollet(a)isoc.fr>: > Thanks all. > A lot of good wishes for each of you for the Season Greetings and New Year. > > And keeping the luck for all of us for next year specially in travelling. > > All the best > > Sébastien Bachollet > Président d'honneur - Isoc France > sebastien.bachollet(a)isoc.fr > www.egeni.org > www.isoc.fr > > >> -----Message d'origine----- >> De : alac-excom-bounces(a)atlarge-lists.icann.org [mailto:alac-excom- >> bounces(a)atlarge-lists.icann.org] De la part de Carlton Samuels >> Envoyé : mercredi 23 décembre 2009 18:34 >> À : Cheryl Langdon-Orr >> Cc : ISOC-AU Board Members List; alac-excom(a)atlarge-lists.icann.org; >> At-Large Worldwide >> Objet : Re: [ALAC-ExCom] All the Very Best Wishes to you all... >> >> Thanks Cheryl. ANd Every Good Wish to You and Yours for the Season and >> New >> Year. >> >> Um, last night AA331 - a flight I take regularly when I route via MIA >> to KIN >> - approached in a rainstorm and overran the runway at KIN and broke >> into two >> pieces. Apparently the pilot didn't put it on the deck at the right >> place. >> Happily, nobody died but about 90 of the 154 aboard were injured. >> Airport >> since reopened and the NTSB folks are on spot investigating. >> >> My luck's still holding......most recent aboard that flight last >> Thursday >> night.......... >> >> Carlton >> ======================================================================= >> ============ >> >> On Tue, Dec 22, 2009 at 7:35 PM, Cheryl Langdon-Orr >> <langdonorr(a)gmail.com>wrote: >> >> > Wishing each and everyone of you (and yours) all the very best of >> Seasonal >> > Greetings and looking forward to working with you all in 2010... For >> those >> > of you travelling in the next few day (weather permitting ;-)- Travel >> Safe; >> > and the may time you spend with family and friends be everything you >> want >> > it >> > to be... >> > >> > [image: Free Desktop Themes] >> > >> > -- from me (and mine) >> > Cheryl Langdon-Orr >> > (CLO) >> > _______________________________________________ >> > ALAC-ExCom mailing list >> > ALAC-ExCom(a)atlarge-lists.icann.org >> > >> > http://atlarge-lists.icann.org/mailman/listinfo/alac-excom_atlarge- >> lists.icann.org >> > >> _______________________________________________ >> ALAC-ExCom mailing list >> ALAC-ExCom(a)atlarge-lists.icann.org >> http://atlarge-lists.icann.org/mailman/listinfo/alac-excom_atlarge- >> lists.icann.org > > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org > -- Enviado desde mi dispositivo móvil

1 0

Second level idn's and the STI report
by Joly MacFie Dec. 30, 2009

Dec. 30, 2009

As we know the The Special Trademarks Issues Working Team (STI) has published its Report which is now available for comment at http://www.icann.org/en/public-comment/public-comment-201001.htm#sti I am today following a thread on a local NY list where a fellow who has the following: http://www.mobileappstore.com/ http://www.mobileappstore.net/ http://www.mobileappstore.org/ http://www.mobileappstore.mobi/ was contacted by the owner of: http://手机应用商店.cn (parked) http://手机应用商店.com (resolves to http://www.mobilecloudapps.com/ ) 手机应用商店 translates to mobileappstore He's a little miffed, saying things like >> WTF!! how is this going to work??? >> >> I could register the domain for Paypal.com in hewbrew tomorrow and anyone who use the hewbrew version of their keyboard would be going to a totally different website that i control and as long as i'm not phishing there is nothing paypal can do?? >> >> Am I totally misinterpreting the situation here? >> I've responded pointing out that the proposed TC and URS are aimed to deal with this sort of thing, and the GPML was a non-starter. My question is, how likely is it that, and how much, will the new processes apply to second-level IDN's on existing registries, or are they likely to stick with the UDRP exclusively? Joly ISOC-NY -- --------------------------------------------------------------- Joly MacFie 917 442 8665 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com ---------------------------------------------------------------

11 22

Re: [At-Large] Second level idn's and the STI report
by Franck Martin Dec. 30, 2009

Dec. 30, 2009

The whole concept of increasing TLDs is based on the fact that acme.com is different from acme.org which is different from acme.sport which is different from acme.de Otherwise, we need only one TLD. Live with it! Now if someone register a domain, to portrait another domain, this is a deceptive practice and should be stopped.

1 0

Weekly posting summary for alac@atlarge-lists.icann.org
by Thomas Narten Dec. 25, 2009

Dec. 25, 2009

Total of 22 messages in the last 7 days. script run at: Fri Dec 25 00:53:03 EST 2009 Messages | Bytes | Who --------+------+--------+----------+------------------------ 22.73% | 5 | 24.72% | 33369 | jmamodio at gmail.com 18.18% | 4 | 16.60% | 22401 | johnl at iecc.com 9.09% | 2 | 9.51% | 12836 | karl at cavebear.com 4.55% | 1 | 5.60% | 7556 | beaubrendler at earthlink.net 4.55% | 1 | 5.32% | 7183 | derek at aa419.org 4.55% | 1 | 5.27% | 7108 | patrick at vande-walle.eu 4.55% | 1 | 4.66% | 6294 | icann-list at sorehands.com 4.55% | 1 | 4.64% | 6262 | ajp at glocom.ac.jp 4.55% | 1 | 4.57% | 6165 | narten at us.ibm.com 4.55% | 1 | 4.20% | 5674 | jefsey at jefsey.com 4.55% | 1 | 3.84% | 5177 | baptista at publicroot.org 4.55% | 1 | 3.74% | 5044 | langdonorr at gmail.com 4.55% | 1 | 3.71% | 5014 | ralph at bigpulse.com 4.55% | 1 | 3.62% | 4889 | bfausett at internet.law.pro --------+------+--------+----------+------------------------ 100.00% | 22 |100.00% | 134972 | Total

1 0

Re: [At-Large] [ALAC-ExCom] All the Very Best Wishes to you all...
by Sébastien Bachollet Dec. 23, 2009

Dec. 23, 2009

Thanks all. A lot of good wishes for each of you for the Season Greetings and New Year. And keeping the luck for all of us for next year specially in travelling. All the best Sébastien Bachollet Président d'honneur - Isoc France sebastien.bachollet(a)isoc.fr www.egeni.org www.isoc.fr > -----Message d'origine----- > De : alac-excom-bounces(a)atlarge-lists.icann.org [mailto:alac-excom- > bounces(a)atlarge-lists.icann.org] De la part de Carlton Samuels > Envoyé : mercredi 23 décembre 2009 18:34 > À : Cheryl Langdon-Orr > Cc : ISOC-AU Board Members List; alac-excom(a)atlarge-lists.icann.org; > At-Large Worldwide > Objet : Re: [ALAC-ExCom] All the Very Best Wishes to you all... > > Thanks Cheryl. ANd Every Good Wish to You and Yours for the Season and > New > Year. > > Um, last night AA331 - a flight I take regularly when I route via MIA > to KIN > - approached in a rainstorm and overran the runway at KIN and broke > into two > pieces. Apparently the pilot didn't put it on the deck at the right > place. > Happily, nobody died but about 90 of the 154 aboard were injured. > Airport > since reopened and the NTSB folks are on spot investigating. > > My luck's still holding......most recent aboard that flight last > Thursday > night.......... > > Carlton > ======================================================================= > ============ > > On Tue, Dec 22, 2009 at 7:35 PM, Cheryl Langdon-Orr > <langdonorr(a)gmail.com>wrote: > > > Wishing each and everyone of you (and yours) all the very best of > Seasonal > > Greetings and looking forward to working with you all in 2010... For > those > > of you travelling in the next few day (weather permitting ;-)- Travel > Safe; > > and the may time you spend with family and friends be everything you > want > > it > > to be... > > > > [image: Free Desktop Themes] > > > > -- from me (and mine) > > Cheryl Langdon-Orr > > (CLO) > > _______________________________________________ > > ALAC-ExCom mailing list > > ALAC-ExCom(a)atlarge-lists.icann.org > > > > http://atlarge-lists.icann.org/mailman/listinfo/alac-excom_atlarge- > lists.icann.org > > > _______________________________________________ > ALAC-ExCom mailing list > ALAC-ExCom(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/alac-excom_atlarge- > lists.icann.org

1 0

All the Very Best Wishes to you all...
by Cheryl Langdon-Orr Dec. 23, 2009

Dec. 23, 2009

Wishing each and everyone of you (and yours) all the very best of Seasonal Greetings and looking forward to working with you all in 2010... For those of you travelling in the next few day (weather permitting ;-)- Travel Safe; and the may time you spend with family and friends be everything you want it to be... [image: Free Desktop Themes] -- from me (and mine) Cheryl Langdon-Orr (CLO)

1 0

Re: [At-Large] Google takes over ICANN
by Jorge Amodio Dec. 21, 2009

Dec. 21, 2009

> But you are damn'd right @larges need some professionnals. Ditto, and less attorneys ... Regards Jorge

1 0

Re: [At-Large] Google takes over ICANN
by Joe Baptista Dec. 21, 2009

Dec. 21, 2009

On Sun, Dec 20, 2009 at 9:45 PM, JFC Morfin <jefsey(a)jefsey.com> wrote: > But you are damn'd right @larges need some professionnals. Some are > gathered at > > I concur. regards joe baptista

1 0

Re: [At-Large] Google takes over ICANN
by JFC Morfin Dec. 21, 2009

Dec. 21, 2009

At 22:09 07/12/2009, Franck Martin wrote: >Amazing to see people deeply involved in ICANN, still not understand >how the DNS works. At large needs some professionals, not some >conspiracy theorists ;) Now waiting for JFC or Jefssey to post, for >another world of ammazement. I happen to see this by chance (pseudo @larges are not much my cup of tea). I am amazed to see someone deeply involved in IETF to still not understand the basics of the way the namespace and the governance work :-) !!! But you are damn'd right @larges need some professionnals. Some are gathered at the IETF non-WG IUCG. Our problem there is that serious Internet Users have not much spare time to spend on IETF/ICANN time wasting fun. However, due to the IETF/ATLARGE procastination we keep with their cinnetics - with some more dynamics, and we leave hysterics to ICANN press releases. Google DNS is a business and a strategic move to better protect the Internet US industry which is equivalent to other similar moves (Europe, China, @larges [not ALAC], etc.). In this there is not plot, just an increasing lack of professionalism by ICANN. jfc

1 0