January 2010 - At-Large - lists.icann.org

Re: [At-Large] [lac-discuss-en] =?iso-8859-1?q?Nuestros_p=E9sames_a_Sergio_Salin = =?iso-8859-1?q?as_Porto =
by carlos aguirre Jan. 8, 2010

Jan. 8, 2010

Dear Silvia.: Thank`s for the information. Privately I sent to Sergio a mail trying to share with him in this moment. Carlos Dionisio Aguirreabogado - Sarmiento 71 - 4to. 18 Cordoba - Argentina - *54-351-424-2123 / 423-5423 www.derechoytecnologia.com.ar http://ar.ageiadensi.org > Date: Fri, 8 Jan 2010 10:34:16 +0000 > From: sylvia(a)internautabrasil.org > To: lac-discuss-en(a)atlarge-lists.icann.org > CC: > Subject: [lac-discuss-en] =?iso-8859-1?q?Nuestros_p=E9sames_a_Sergio_Salin = =?iso-8859-1?q?as_Porto = > > > [[--Translated text (es -> en)--]] > > > Subject: =?iso-8859-1?q?Nuestros_p=E9sames_a_Sergio_Salin = =?iso-8859-1?q?as_Porto = > From: sylvia(a)internautabrasil.org > > Dear Compañeros of LACRALO; > I write to them to communicate to them that today, 8-01-2010 to the morning, has passed away > the father of our companion and queridísimo friend Sergio. > We are without words by this sudden loss! > What Saline Mr. Carlos rests peacefully! > > sylvia > _________________________________________________________ > Sylvia Herlein Leite > LACRALO-ALAC Liaison > Latin America & Regional Caribbean AT-Large Organization > sylvia(a)internautabrasil.org > > > > > > > > > > > > > [[--Original text (es) > http://mm.icann.org/transbot_archive/8f93ca1f21.html > --]] > > > _________________________________________________________________ ¿Querés chatear en todos lados con tu celu? ¡Registrate a SMS Messenger! http://www.somosmessengersiempre.com/?ocid=TWLH

1 0

Weekly posting summary for alac@atlarge-lists.icann.org
by Thomas Narten Jan. 8, 2010

Jan. 8, 2010

Total of 12 messages in the last 7 days. script run at: Fri Jan 8 00:53:03 EST 2010 Messages | Bytes | Who --------+------+--------+----------+------------------------ 25.00% | 3 | 25.01% | 23649 | baptista at publicroot.org 16.67% | 2 | 23.22% | 21955 | langdonorr at gmail.com 16.67% | 2 | 12.14% | 11474 | jmamodio at gmail.com 8.33% | 1 | 11.20% | 10585 | carlosaguirre62 at hotmail.com 8.33% | 1 | 8.48% | 8019 | staff at atlarge.icann.org 8.33% | 1 | 7.42% | 7017 | patrick at isoc.lu 8.33% | 1 | 6.66% | 6299 | narten at us.ibm.com 8.33% | 1 | 5.87% | 5551 | johnl at iecc.com --------+------+--------+----------+------------------------ 100.00% | 12 |100.00% | 94549 | Total

1 0

Letter from the Chair of the Participation and Engagement WG
by ICANN At-Large Staff Jan. 8, 2010

Jan. 8, 2010

Dear All, The following email is transmitted to you on behalf of Carlos Aguirre, Chair of the working group on At-Large Engagement in ICANN. **************** Participation & Engagement in ICANN Working Group. First Letter for the At Large Community Following work started in Mexico Summit by the WG #1, and with the intention to improve this work trying to achieve the objectives fixed in that opportunity, and after to be nominated by ALAC as Chair of this WG, I want to make extensive to every end users around the world the invitation to participate and colaborate in this huge effort. That participation have to do with the engagement in the ICANN task, and with the understanding that the End Users must be involves into the ICANN desitions in order to do a better world for everyone. We need specially ideas of all of you, to give or add our knowledges to who is in charge into the Organization. We are convinced, the participation for End Users is in most of the cases very difficult, and for multiples factors: like different languajes, lack of knowledge, lack of time, priorization of other matters, etc, etc. We are sure, this is not an easy job, but we will try to reduce the gap, with the multiple participation of all of you, and giving a chanel for where this communication could be fluid. That is the intention of this WG. We want, at this moment, add and share with you some new ideas, to the final WG#1 statement (given at the Mexico Summit), to be analized by you, and asking your comments and points of view about this, in principle. After that,Then, the idea is give to you some documents to hear your feedback and opinions and make in this form a shared work in order to improve and make a better and massive participation, generating an brain storming wich could surely help to achive the goals. There are not silly comments nor useless participation, any one of you can do a productive contribution. For that, Could you help us to improve the communication, participation and in definitive our commitment into ICANN ?. We are sure that the response is YES !! We want to receive of any way your participation, trough documents, mails, tweets, messages in any way, in English, Spanish, French or any other languaje. The idea is to have your participation, doesn`t matter how or how much, the important is to do. And we are waiting those comments and points of view. We are waiting your comments, don`t hesitate and GO ahead!! thank`s and best regards, and of course happy new year for all of you. Carlos Dionisio Aguirre ALAC elected member , by LACRALO & chair of Participation and engagement WG. ------------------------------------------------------------------------------------------------------ Some new ideas in a brain storming method to add the final Mexico Summit statement – Add your idea !!!! will be welcomed !!!.!. 1 – Direct communication with each one of ALS leaders, and each end user registered in a data base. 2 – Use of Social Networks, like twitter, facebook, my space and others. 3 – Document Translations in every languaje ( at least in main six : Spanish, French, Chinese, German, Russian & Portuguese) 4 - End User Friendly Document (in different languajes) about tasks and functions and finalities of each one Suporting Organization and Advisory Committees, and any other part of ICANN structure. 5 – Make periodical teleconference with the people who want participate in a WG 6 - YOUR IDEA... -------------------------------------------------------------------------------------------------- You can download the PDF file of the ALAC statement on At-Large Participation in ICANN, which was drafted by the working group on At-Large Engagement in ICANN during the Mexico Summit under: http://tinyurl.com/yfo7phy

4 4

an interesting article that shows people know very little about the Internet. especially the history
by Joe Baptista Jan. 3, 2010

Jan. 3, 2010

The article is titled "PC Worlds Top 10 Security Nightmares of the Decade" can be found at the following URL: http://bit.ly/7nxeD4 It's worth a read.There is nothing spectacular about this article. But it is an excellent example of how little experts know on the subjects they are experts on. The author restates common truths. Robert Siciliano tells us the "last decade has seen technological breakthroughs unlike any other". This is true. But Siciliano also reminds us our technological success has result in a tremendous rise in fraud. I completely agree with him. The reason he argues in his article is that the "speed of the conveniences technology" provides has "far outpaced the security" measure in place today. Again very bang on. But this claim could be subject to some interpretation that at one time our security outpaced or was even better then the available technology. The historical truth is that security has alway lagged behind technology. And much of that is due to a lack of education amongst the masses. But the simple truth of it is that much of the insecurity in the Internet is due to a lot of twits who run the Internet and have an interest in maintaining and controlling the status quo. Mr. Siciliano provides an excellent example of this in his article when he discusses the DNS vulnerability alleged to have been discovered by IOActive researcher Dan Kaminisky. Kaminisky is credited with the identification in 2008 of a DNS vulnerability to various forms of attack including cache poisoning. This is a false allegation that the press has repeated without any investigation of the facts. Kaminisky never discovered anything he simply repackaged an existing well known problem as his own. Also the DNS protocol is not vulnerable in itself nor is it a security risk. The security problem is not in the DNS protocol but in the transport protocol used for DNS transactions. In this case it is the UDP protocol that is vulnerable to attack. This problem has existed for at least 15 years. I remember it existed in the 1990's when I was commissioned to investigate vulnerabilities in military DNS servers. So the Kaminisky claim he discovered anything significant is simply untrue. The Kaminisky affair was more a co-ordinated effort to scare business into adopting a protocol that reverse engineers the Internet in a effort to centralize control of the DNS protocol in the root servers operated by the U.S. government through ICANN its contractor. That protocol DNSSEC has been actively marketed as the solution to the Kaminisky cache poisoning problem. DNSSEC addresses the problem by inserting encryption keys into the DNS that establish a chain of trust from domain names to the root servers operated by the U.S. government. This places a significant amount of control in the hands of one government authority. It also will cost business a fortune to adopt. And Internet DNS traffic is also expected to increase exponentially as every DNS answer must contain encryption key information. Furthermore DNSSEC does not actually fix the problem. The issue as mentioned above is a problem with the UDP protocol and verifying that the DNS information your system requested actually coming from the machine you requested it from. The centralization of DNS encryption keys in the root is a very expensive process that is simply not needed. To fix the UDP problem one only has to ensure that the answers come from the server we are communicating with. Since UDP unlike the TCP protocol has no handshaking capabilities one simply fixes the problem by incorporating a handshaking protocol within UDP and DNS that confirms the server we are getting answer from is the server we originally communicated with. A solution to this problem is available and was developed a few years ago by Dr. Bernstein at the University of Illinois at Chicago. It's called DNSCurve and fixes the problem through a simple key exchange between DNS servers without having to hand over control of the DNS to a central authority. regards joe baptista

4 7

The economics of DNScurve vs DNSSEC and the rational mind
by Joe Baptista Jan. 3, 2010

Jan. 3, 2010

OK let's examine the basic economic of DNSSEC vs DNSCurve. We use a number of assumptions to arrive at the economic costs. 1) Both protocols solve the Bernstein/Kaminsky issue with respect to the UDP vulnerability. At least I have faith DNSSEC will eventually work but I'm sure DNScurve is a gurantee. 2) DNSSEC goes further by putting control of the DNS in the root effectively centralizing control in the hands of the people who run the root. 3) Both protocols require DNS server developers to implement them into their software. Most servers in the wild are now DNSSEC aware. 4) DNSSEC requires that hundreds if not thousands of millions of domain owners sign their domains and hand over control to the master DNS key holder Uncle Sam and associated cronies. 5) DNSSEC has already generated hundreds of millions of dollars in economic benefits. Just you wait till you see the U.S. tax bill for implementing DNSSEC for .gov. I'm sure that will be an eye opener. 6) DNScurve will not have much of an economic impact. Users and domain owners won't even notice its there. So to sum up .... 1) They both solve the problem. 2) DNScurve will cost joe public zero $$$ to implement saving them lots of money. But on the downside there are going to be a lot of unemployed DNSSEC consultants. 3) DNSSEC will cost joe public and the business community billions to implement - ICANN will be given a monopoly over the DNS - and an entire new industry is born. In todays economic times I think DNScurve wins the day. Anyone disagree? regards joe baptista

1 0

Weekly posting summary for alac@atlarge-lists.icann.org
by Thomas Narten Jan. 1, 2010

Jan. 1, 2010

Total of 29 messages in the last 7 days. script run at: Fri Jan 1 00:53:02 EST 2010 Messages | Bytes | Who --------+------+--------+----------+------------------------ 13.79% | 4 | 14.58% | 29321 | james at seng.sg 13.79% | 4 | 14.22% | 28602 | joly at punkcast.com 6.90% | 2 | 8.55% | 17190 | cdel at firsthand.net 6.90% | 2 | 7.99% | 16062 | patrick at vande-walle.eu 6.90% | 2 | 7.07% | 14222 | baptista at publicroot.org 6.90% | 2 | 6.59% | 13257 | evan at telly.org 6.90% | 2 | 5.85% | 11753 | johnl at iecc.com 6.90% | 2 | 5.73% | 11516 | karl at cavebear.com 3.45% | 1 | 4.23% | 8503 | hongxueipr at gmail.com 3.45% | 1 | 3.95% | 7944 | danielmonastersky at gmail.com 3.45% | 1 | 3.61% | 7249 | sebastien.bachollet at isoc.fr 3.45% | 1 | 3.29% | 6621 | derek at aa419.org 3.45% | 1 | 3.25% | 6532 | alan.greenberg at mcgill.ca 3.45% | 1 | 3.06% | 6151 | narten at us.ibm.com 3.45% | 1 | 2.92% | 5881 | vb at bertola.eu 3.45% | 1 | 2.62% | 5278 | franck.martin at gmail.com 3.45% | 1 | 2.48% | 4995 | jmamodio at gmail.com --------+------+--------+----------+------------------------ 100.00% | 29 |100.00% | 201077 | Total

1 0