March 2010 - At-Large - lists.icann.org

Weekly posting summary for alac@atlarge-lists.icann.org
by Thomas Narten March 26, 2010

March 26, 2010

Total of 33 messages in the last 7 days. script run at: Fri Mar 26 00:53:05 EDT 2010 Messages | Bytes | Who --------+------+--------+----------+------------------------ 9.09% | 3 | 16.24% | 42338 | vanda at uol.com.br 6.06% | 2 | 11.72% | 30556 | alan.greenberg at mcgill.ca 9.09% | 3 | 8.52% | 22201 | evan at telly.org 6.06% | 2 | 7.85% | 20459 | carlton.samuels at gmail.com 6.06% | 2 | 5.32% | 13868 | baptista at publicroot.org 6.06% | 2 | 4.80% | 12510 | ajp at glocom.ac.jp 6.06% | 2 | 4.75% | 12370 | karl at cavebear.com 6.06% | 2 | 4.59% | 11970 | langdonorr at gmail.com 6.06% | 2 | 4.13% | 10762 | andrespiazzagpj at hotmail.com 3.03% | 1 | 4.10% | 10680 | carlosaguirre62 at hotmail.com 3.03% | 1 | 3.24% | 8453 | namecritic at blogs.pn 3.03% | 1 | 2.74% | 7151 | patrick at vande-walle.eu 3.03% | 1 | 2.73% | 7106 | iza at anr.org 3.03% | 1 | 2.71% | 7054 | dthompson at gov.nu.ca 3.03% | 1 | 2.36% | 6140 | narten at us.ibm.com 3.03% | 1 | 2.29% | 5967 | jmamodio at gmail.com 3.03% | 1 | 2.22% | 5785 | carlton.samuels at uwimona.edu.jm 3.03% | 1 | 2.20% | 5736 | franck.martin at gmail.com 3.03% | 1 | 2.19% | 5705 | admin at ttcsweb.org 3.03% | 1 | 1.96% | 5109 | bfausett at internet.law.pro 3.03% | 1 | 1.77% | 4613 | roberto at icann.org 3.03% | 1 | 1.59% | 4132 | rudi.vansnick at isoc.be --------+------+--------+----------+------------------------ 100.00% | 33 |100.00% | 260665 | Total

1 0

Re: [At-Large] Extension of comment period for DNS-CERT and Strategic Initiatives papers
by Cheryl Langdon-Orr March 25, 2010

March 25, 2010

Thank you Patrick.. Heidi will follow up but ALAC - At/Large would like to have a briefing call on these issues during the extended period ( ASAP of course ;-) so do expect her to contact you re this shortly... Cheryl Langdon-Orr (CLO) On 25 March 2010 18:42, Patrick Jones <patrick.jones(a)icann.org> wrote: > Cheryl, Chris, and Chuck, > > Based on the high-level feedback received in Nairobi and the interest from > the community in additional time to consider the DNS-CERT concept, ICANN has > extended the public comment periods by 15 days for both the Global DNS-CERT > Business Case and the Proposed Strategic Initiatives for Improved DNS > Security, Stability and Resiliency to 14 April 2010 23:59 UTC. An update to > the comment periods has been posted to the announcement and the public > comment forum pages for both of these papers. See > http://www.icann.org/en/announcements/announcement-2-12feb10-en.htm. > > The Public Comment forum page for the Strategic Initiatives paper ( > http://www.icann.org/en/public-comment/#strat-ini-ssr) also includes the > translations posted during the Nairobi meeting. > > Please let me know if there is anything else we can do to facilitate > discussion. > > Best regards, > > Patrick > > > -- > Patrick L. Jones > Senior Manager, Continuity & Risk Management > Internet Corporation for Assigned Names & Numbers > 4676 Admiralty Way, Suite 330 > Marina del Rey, CA 90292 > Tel: +1 310 301 3861 > patrick.jones(a)icann.org > patrickjones.tel >

1 0

Re: [At-Large] Kuo-Wei Wu Elected to ICANN Board, replaces Raimundo Beca
by Carlton Samuels March 24, 2010

March 24, 2010

Very pleased to see someone with At-Large antecedents elected. Maybe we could look at his particular skill set and background to see if there are any lessons for our BCEC process. Carlton On Tue, Mar 23, 2010 at 8:25 AM, Adam Peake <ajp(a)glocom.ac.jp> wrote: > Selected by the ASO < > http://aso.icann.org/news/kuo-wei-wu-elected-to-seat-10-on-the-icann-board/ > > > > Kuo-Wei Wu's from Taiwan, member of APNIC's Executive Council, and long > time supporter of At Large. > > Adam > > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org > -- +========+++++++++++++++====== Carlton A Samuels Strategies for Education Technologies and Curriculum Development, Process Engineering & Improvement, ICT Policy, Internet Governance

3 2

Kuo-Wei Wu Elected to ICANN Board, replaces Raimundo Beca
by Adam Peake March 23, 2010

March 23, 2010

Selected by the ASO <http://aso.icann.org/news/kuo-wei-wu-elected-to-seat-10-on-the-icann-board/> Kuo-Wei Wu's from Taiwan, member of APNIC's Executive Council, and long time supporter of At Large. Adam

2 1

alac conf call
by Rudi Vansnick March 23, 2010

March 23, 2010

I'm urged to go to Brussels in about 10 minutes, will not be avaible for the conference call except if traffic is acceptable (no jam) ... I'll post my reports later this evening, after returning from Brussels ... Rudi

1 0

Re: [At-Large] ICANN wraps up in Nairobi with no security hitches
by Carlton Samuels March 22, 2010

March 22, 2010

I was never bothered about the "security worries" and in all of the hoopla surrounding, struggled to keep my peace. To the lot who were carrying on, I could have mentioned Oklahoma City and the almost 300 souls lost to a 'misguided' red-blooded American male. I could be from Austin, Texas where a fella upset with his Uncle Sam flew his plane into an IRS building and killed. Of course the American chattering classes still have a difficulty classifying these as terrorist incidents - likely because of the antecedents of the perpetrators - and the balanced and nuanced views these would have invoked in reasonable people. I personally was very gratified to see Adam Peake's post on the incident. Goes to show what transpires when people of goodwill are engaged..... Carlton On Mon, Mar 22, 2010 at 9:58 AM, Adam Peake <ajp(a)glocom.ac.jp> wrote: > Shame about the security worries. > > A few days after ICANN left, U2 and Bono dropped by the KICC (to speak not > play), along with the Aga Khan and more presidents and prime ministers. Oh > well... > > ICANN's flickr stream has some good pictures < > http://www.flickr.com/photos/icann/> and check photo 8 < > http://www.michellechaplow.com/icann-nairobi.htm> > > Adam > > > > Security: KICC was OK for Kenya's President and other regional heads of > state. Last > > > ICANN wraps up in Nairobi with no security hitches >> By Rebecca Wanjiku <http://www.computerworld.co.ke/users/rebecca-wanjiku> >> 12 Mar, 2010 >> >> For the ICANN local organizing committee, today is a great day, it is the >> last day of the meeting, which by any standards can be considered a success >> considering the security video produced by ICANN just before the meeting. >> >> From December last year, the LOC was involved more in answering security >>> questions, whether the ruling coalition will break and whether the Al Shabab >>> terrorist group will get away from the lucrative piracy along the gulf of >>> Aden to attack KICC. No one denied that there were security concerns but >>> thats a common denominator for many countries, rich or poor. >>> >> >> In retrospect, I think the whole security debate benefitted Kenya and to >> some extent the continent. ICANN meetings have geographical rotation and am >> sure issues of security will come up the next time Africa is meant to host >> the meeting. >> >> For Kenya, the successful meeting is vital, given that the Internet >> Governance Forum will be held in the country next year. If the IGF raises >> the security issues, Kenya can point to ICANN and the security video, and >> the success that was achieved. >> >> To ICANN, the remote participation was good, the online participation >> matrix was shared before the meeting started and the parallel meetings in >> the US now look a bit ill advised. >> >> The 100mb bandwidth at the conference venue was very stable, I did not >> experience any hitches, even during the opening ceremony, where there were >> at least 100 laptops on; everyone at ICANN at least carries a laptop but not >> all were on at the time. >> >> For the ICANN participants who danced at the Carnivore till 4am, it just >> shows that they were enjoying the hospitality and the good things that the >> country has to offer. For those who took the Safaris, that is better than >> the caged animals out there. >> >> The meeting was optional for many people but for those in the new gTLD >> debate, it was important to have the two minutes on the mic in the public >> forum. Even members of the Government Advisory Committee took the mic, led >> by Bertrard De La Chapelle from France, who took the 2 minute Mic like 20 >> times, just to emphasize the importance of public sessions. >> >> For the ICM guys, the Independent Review Committee and those interested in >> matters of transparency in ICANN, the .xxx debate was important and their >> presence is vital, even in the face of security concerns. >> >> So, the meeting had lessons and successes for everyone; with more than >> 1000 people picking their conference bags, I think the meeting was a success >> and offers vital lessons to others holding meetings in Nairobi. >> >> Ends >> >> >> -- >> ____________________________________ >> Neil Burgess >> owls-head.ca <http://owls-head.ca/> consulting >> nburgess01(a)gmail.com (until June, 2010) >> ____________________________________ >> >> _______________________________________________ >> At-Large mailing list >> At-Large(a)atlarge-lists.icann.org >> >> http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… >> >> At-Large Official Site: http://atlarge.icann.org >> > > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org > -- +========+++++++++++++++====== Carlton A Samuels Strategies for Education Technologies and Curriculum Development, Process Engineering & Improvement, ICT Policy, Internet Governance

1 0

ICANN wraps up in Nairobi with no security hitches
by Thompson, Darlene March 22, 2010

March 22, 2010

ICANN wraps up in Nairobi with no security hitches By Rebecca Wanjiku <http://www.computerworld.co.ke/users/rebecca-wanjiku> 12 Mar, 2010 For the ICANN local organizing committee, today is a great day, it is the last day of the meeting, which by any standards can be considered a success considering the security video produced by ICANN just before the meeting. >From December last year, the LOC was involved more in answering security questions, whether the ruling coalition will break and whether the Al Shabab terrorist group will get away from the lucrative piracy along the gulf of Aden to attack KICC. No one denied that there were security concerns but thats a common denominator for many countries, rich or poor. In retrospect, I think the whole security debate benefitted Kenya and to some extent the continent. ICANN meetings have geographical rotation and am sure issues of security will come up the next time Africa is meant to host the meeting. For Kenya, the successful meeting is vital, given that the Internet Governance Forum will be held in the country next year. If the IGF raises the security issues, Kenya can point to ICANN and the security video, and the success that was achieved. To ICANN, the remote participation was good, the online participation matrix was shared before the meeting started and the parallel meetings in the US now look a bit ill advised. The 100mb bandwidth at the conference venue was very stable, I did not experience any hitches, even during the opening ceremony, where there were at least 100 laptops on; everyone at ICANN at least carries a laptop but not all were on at the time. For the ICANN participants who danced at the Carnivore till 4am, it just shows that they were enjoying the hospitality and the good things that the country has to offer. For those who took the Safaris, that is better than the caged animals out there. The meeting was optional for many people but for those in the new gTLD debate, it was important to have the two minutes on the mic in the public forum. Even members of the Government Advisory Committee took the mic, led by Bertrard De La Chapelle from France, who took the 2 minute Mic like 20 times, just to emphasize the importance of public sessions. For the ICM guys, the Independent Review Committee and those interested in matters of transparency in ICANN, the .xxx debate was important and their presence is vital, even in the face of security concerns. So, the meeting had lessons and successes for everyone; with more than 1000 people picking their conference bags, I think the meeting was a success and offers vital lessons to others holding meetings in Nairobi. Ends -- ____________________________________ Neil Burgess owls-head.ca <http://owls-head.ca/> consulting nburgess01(a)gmail.com (until June, 2010) ____________________________________

3 2

ICANN regional meetings to remain closed
by Evan Leibovitch March 22, 2010

March 22, 2010

Hello everyone, As part of yesterday's session in Nairobi, ALAC heard a presentation from staffer Tim Cole regarding ICANN-run regional meetings held for registrars and registries. Contrary to previous suggestions, what I'd heard indicated that meeting organizers really have learned nothing from the backlash to the Toronto and Rome events. While there may be advance notice of the meetings that did not occur before, Cole was adamant that these ICANN-funded meetings will refuse admission to anyone except contracted parties. While we will have access to the slides given at the meetings, proceedings of the meetings have not and will not be recorded. In a subsequent conversation, Cole said I was "wasting my time" trying to get ICANN to change this policy; while on one hand insisting that the meetings contained absolutly no confidential discussion, he insisted that the presence of public observers would have a "chilling effect" on discussions. I personally do not believe that ICANN should fund meetings that are completely closed, especially meetings that could open its process to those who may be more easily able to attend the regional meetings (that are local to them) than full ICANN meetings. I suggested there were ways to ensure that attendees were aware that meeting content was technical and not policy. Not enough. >From an At-Large perspective I personally consider this a transparency issue, feeding public belief that ICANN is merely a trade association for contracted parties. If registrars and/or registries want to organize, fully fund their own meetings and invite ICANN staff to speak, that's their choice. But meetings planned and mostly funded by ICANN should not be restricted this way. Taking Cole at his word that we are wasting time trying to influence staff, different tactics may be in order. Perhaps this is something best dealt with through the still-forming AoC committee on transparency and accountability. Or maybe this can be taken up directly to the Board since we do have that channel available. On the other hand, one ALAC member told me after Cole's presentation that pressing the issue would be burning bridges just as ALAC is trying to enhance its relationship with other ICANN communities, and we have more pressing matters. What do others think? Is this an issue worth persuing, or a risk worth avoiding? - Evan

25 36

"Measuring the Perpetrators and Funders of Typosquatting" by Tyler Moore and Benjamin Edelman
by Dev Anand Teelucksingh March 21, 2010

March 21, 2010

"Measuring the Perpetrators and Funders of Typosquatting," by Tyler Moore and Benjamin Edelman was presented at the "Financial Cryptography and Data Security" conference in January this year (http://fc10.ifca.ai/) : Abstract: We describe a method for identifying `typosquatting', the intentional registration of misspellings of popular website addresses. We estimate that at least 938,000 typosquatting domains that target the top 3,264 .com sites, and we crawl more than 285,000 of these domains to analyze their revenue sources. We find that 80% are supported by pay-per-click ads, often advertising the correctly spelled domain and its competitors. Another 20% include static redirection to other sites. We present an automated technique that uncovered 75 otherwise legitimate websites which benefited from direct links from thousands of misspellings of competing websites. Using regression analysis, we find that websites in categories with higher pay-per-click ad prices face more typosquatting registrations, indicating that ad platforms such as Google AdWords exacerbate typosquatting. However, our investigations also confirm the feasibility of significantly reducing typosquatting. We find that typosquatting is highly concentrated: Of typo domains showing Google ads, 63% use one of five advertising IDs, and some large name servers host typosquatting domains as much as four times as often as the web as a whole. Read the paper at http://www.benedelman.org/typosquatting/typosquatting.pdf Appendix : http://www.benedelman.org/typosquatting/ Also see : http://www.lightbluetouchpaper.org/2010/02/17/measuring-typosquattings-perp… ---- Dev Anand Teelucksingh (HT : Schneier on Security blog)

1 0

Proposed High-Security TLD designation
by Evan Leibovitch March 19, 2010

March 19, 2010

Hello all, I hope that all my friends and associates who joined me at the Nairobi meeting arrived home well. While I might have liked a little ICANN-related down time upon returning, I was back in a conference call Wednesday regarding the proposed High Security TLD (HSTLD) verification proposal. For those who are not aware, the HSTLD proposal comes from ICANN staff as a way for TLDs (present or future, generic or cc) to be verified/certified as having security practices well beyond the core standard demanded of registries in their current relationships with ICANN. While the initial staff effort was to make this effort part of the new gTLD process, members of the committee are very committed to de-linking this from the DAG for many reasons. I by no means consider myself skilled in Internet security; I am on the HSZ advisory group because I have some solid experience in designing and implementing professional certification programs. Right now the committee comprises many people from contracted parties, security-related consultancies, ICANN staff and others; the only two people serving the public interest on this committee -- from either ALAC or NCSG -- are myself and John Levine. I am hoping that some people from within At-Large may have a look at the technical list of objectives and controls<https://st.icann.org/hstld-advisory/index.cgi?control_workspace_draft>being produced for consideration. This is a long and detailed list of the specific security issues intended to be applied to registrars, registries and registrants within a HSTLD. As I have write-access to that wiki page, I am able to insert comments throughout the document and not just at the end as a comment. If you have some concerns, or would like to modify or enhance the list, please let me know. Please note: this chart encompasses only the technical component of the HSTLD verification program. The non-technical components -- notably, the business and marketing models as well as the methods of testing the controls and administering the program -- are yet to be worked out and could be very controversial. But right now the technical work has made good progress and I would like to get feedback from our many people in At-Large who are concerned with the public-interest component of TLD security. The home website of the HSZ effort is at https://st.icann.org/hstld-advisory/index.cgi?hstld_advisory_group - Evan

7 12