Thanks, Jaqueline, that's interesting. I'd also be really interested to hear Afilias' response to this characterization of .info. -----Original Message----- From: Jacqueline A. Morris [mailto:jam@jacquelinemorris.com] Sent: Friday, June 06, 2008 1:33 PM To: Brendler, Beau Cc: At-Large Worldwide Subject: Re: [At-Large] Bad domains McAfee study Hi Beau There's been some discussion on the cc lists about this as you can imagine. Here's the .hk response to the media: We are very surprised to learn about the research findings from McAfee. In fact, in a meeting organized by Anti-Phishing Working Group last week in Tokyo Japan, Hong Kong Domain Name Registration (HKDNR) was invited to present its best practice in combating suspicious websites. We are trying to get in touch with the research author to gain more insights into this research and the findings. The research report shows the figures and analysis of the whole of last year. In particular, the report claimed that 9.9 million websites have been tested. It is suspected that most of the malicious sites were tested several months ago and no long exist. HKDNR is committed to providing a safe Internet environment for the community and has put in place various measures against suspicious websites. We have been working closely with Office of the Telecommunications Authority (OFTA), Hong Kong Police and Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) to monitor and control the situation. In August last year, in conjunction with the list of suspicious domains provided by OFTA, we suspended over 10,000 domains in regard. Following that initiatives, the situation with '.hk' related suspicious websites has been greatly improved. We actively review our systems and domain name registration procedures and policies. Particularly, we have more stringent documentary requirements to combat suspicious websites registered overseas in order to catch up with the fast-changing Internet world. We also want to call for the general community to be aware of the issue and report to related authorities whenever they have queries accessing a web site. Brendler, Beau wrote:

http://www.msnbc.msn.com/id/24966835?GT1=43001

"McAfee found the most dangerous domains to navigate to are ".hk" (Hong Kong), ".cn" (China) and ".info" (information)."

Apologies if you've seen this already.

BB

_______________________________________________ ALAC mailing list ALAC@atlarge-lists.icann.org http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.ica nn.org

At-Large Official Site: http://atlarge.icann.org

*** Scanned

Well, it sounds like .hk took it pretty seriously... Did Afilias even have a media response? -----Original Message----- From: Wendy Seltzer [mailto:wendy@seltzer.com] Sent: Mon 6/9/2008 3:23 PM To: Brendler, Beau Cc: At-Large Worldwide Subject: Re: [At-Large] Bad domains McAfee study -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm not Afilias, but I'd tend to say that domain name doesn't equal content, and a registry is not and should not be responsible for domains' uses. I'm not sure this study is any more representative or useful than "older sites tend to be less infested than newer ones" or "URLs that start with WWW differ from those that don't." - --Wendy Brendler, Beau wrote:

Thanks, Jaqueline, that's interesting. I'd also be really interested to hear Afilias' response to this characterization of .info.

-----Original Message----- From: Jacqueline A. Morris [mailto:jam@jacquelinemorris.com] Sent: Friday, June 06, 2008 1:33 PM To: Brendler, Beau Cc: At-Large Worldwide Subject: Re: [At-Large] Bad domains McAfee study

Hi Beau There's been some discussion on the cc lists about this as you can imagine. Here's the .hk response to the media:

We are very surprised to learn about the research findings from McAfee. In fact, in a meeting organized by Anti-Phishing Working Group last week in Tokyo Japan, Hong Kong Domain Name Registration (HKDNR) was invited to present its best practice in combating suspicious websites. We are trying to get in touch with the research author to gain more insights into this research and the findings. The research report shows the figures and analysis of the whole of last year. In particular, the report claimed that 9.9 million websites have been tested. It is suspected that most of the malicious sites were tested several months ago and no long exist.

HKDNR is committed to providing a safe Internet environment for the community and has put in place various measures against suspicious websites. We have been working closely with Office of the Telecommunications Authority (OFTA), Hong Kong Police and Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) to monitor and control the situation. In August last year, in conjunction with the list of suspicious domains provided by OFTA, we suspended over 10,000 domains in regard. Following that initiatives, the situation with '.hk' related suspicious websites has been greatly improved.

We actively review our systems and domain name registration procedures and policies. Particularly, we have more stringent documentary requirements to combat suspicious websites registered overseas in order to catch up with the fast-changing Internet world. We also want to call for the general community to be aware of the issue and report to related authorities whenever they have queries accessing a web site.

Brendler, Beau wrote:

...

http://www.msnbc.msn.com/id/24966835?GT1=43001

"McAfee found the most dangerous domains to navigate to are ".hk" (Hong Kong), ".cn" (China) and ".info" (information)."

Apologies if you've seen this already.

BB

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFITYNEuuui10VsrVERAqc+AJ96GWQ9v+NDJWId5c8LWCLnZopX2gCfbMuT bnubsA10ZEEcJI2Fcvya3D8= =q+cj -----END PGP SIGNATURE----- *** Scanned

Hi all, What is interesting, too, if you read the latest report on Phishing is that, apparently, in times past when a phishing site was registered in HK and the registrar found out about it, they would have to go through the police. This would take at least two weeks which, of course, is WAAAAAAY too long. That report mentioned that now they have things worked out with the police department so that they can take these web sites down much more quickly. That *should* improve things with .hk. Lets hope! D Darlene A. Thompson Community Access Program Administrator Nunavut Dept. of Education / N-CAP P.O. Box 1000, Station 910 Iqaluit, NU X0A 0H0 Phone: (867) 975-5631 Fax: (867) 975-5610 E-mail: dthompson@gov.nu.ca -----Original Message----- From: alac-bounces@atlarge-lists.icann.org [mailto:alac-bounces@atlarge-lists.icann.org] On Behalf Of Jacqueline A. Morris Sent: Friday, June 06, 2008 1:33 PM To: Brendler, Beau Cc: At-Large Worldwide Subject: Re: [At-Large] Bad domains McAfee study Hi Beau There's been some discussion on the cc lists about this as you can imagine. Here's the .hk response to the media: We are very surprised to learn about the research findings from McAfee. In fact, in a meeting organized by Anti-Phishing Working Group last week in Tokyo Japan, Hong Kong Domain Name Registration (HKDNR) was invited to present its best practice in combating suspicious websites. We are trying to get in touch with the research author to gain more insights into this research and the findings. The research report shows the figures and analysis of the whole of last year. In particular, the report claimed that 9.9 million websites have been tested. It is suspected that most of the malicious sites were tested several months ago and no long exist. HKDNR is committed to providing a safe Internet environment for the community and has put in place various measures against suspicious websites. We have been working closely with Office of the Telecommunications Authority (OFTA), Hong Kong Police and Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) to monitor and control the situation. In August last year, in conjunction with the list of suspicious domains provided by OFTA, we suspended over 10,000 domains in regard. Following that initiatives, the situation with '.hk' related suspicious websites has been greatly improved. We actively review our systems and domain name registration procedures and policies. Particularly, we have more stringent documentary requirements to combat suspicious websites registered overseas in order to catch up with the fast-changing Internet world. We also want to call for the general community to be aware of the issue and report to related authorities whenever they have queries accessing a web site. Brendler, Beau wrote:

http://www.msnbc.msn.com/id/24966835?GT1=43001

"McAfee found the most dangerous domains to navigate to are ".hk" (Hong Kong), ".cn" (China) and ".info" (information)."

Apologies if you've seen this already.

BB

_______________________________________________ ALAC mailing list ALAC@atlarge-lists.icann.org

http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann .org

At-Large Official Site: http://atlarge.icann.org

_______________________________________________ ALAC mailing list ALAC@atlarge-lists.icann.org http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann .org At-Large Official Site: http://atlarge.icann.org