July 2019 - EURO-Discuss - lists.icann.org

Now Open: Call for Membership in BCEC and BMSPC
by ICANN At-Large Staff July 31, 2019

July 31, 2019

Dear All, To prepare for the selection of the Board Member selected by At-Large to be seated at the October 2020 Annual General Meeting, Maureen Hilyard, the Chair of the ALAC, has asked staff to make an immediate call for members of the two groups who will be responsible for moving the process forward. According to the ALAC Rules of Procedure (2018) (https://tinyurl.com/y6kp9p6u) the two groups are the 2019-2020 Board Member Selection Process Committee (BMSPC) and the 2019-2020 Board Candidate Evaluation Committee (BCEC). Please see ALAC Rules of Procedure Section D.19 - Procedure for Making the Selection to fill Seat 15 on the ICANN Board. The deadline for applying to be members of these groups is 23:59 UTC on Monday, 15 August 2019. If you are interested, please send a note to At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org%3c> specifying which committee(s) the application is for and attach an Expression of Interest (EoI) explaining your interest and citing any applicable experience/knowledge. Please note that your personal data submitted with your EoI may be shared with the RALO leadership, RALO ALS representatives, and/or ALAC Members/Leadership, as appropriate, as part of the evaluation and selection process, and that, if selected, your name and regional affiliation will be published on the BCEC Workspace (https://tinyurl.com/yyxbghsg) or the BMSPC Workspace (https://tinyurl.com/y3z5mfxq) as relevant. The processing of your personal data for these purposes will be carried out in accordance with the ICANN Privacy Policy and the website Terms of Service. The At-Large Board Member 2019-2020 Selection Workspace is available at: https://tinyurl.com/yxqck74k [tinyurl.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__tinyurl.com_yxqck74k&d…>). The RALO leadership is requested to send a list of their RALO's supported candidates and alternates for each group to the Chair of the ALAC and staff by 23:59 UTC Tuesday, 23 August 2019. The ALAC will name the final membership soon after. The details of the two groups are: 1) Board Member Selection Process Committee (BMSPC) According to Article 19.2 of the ALAC Rules of Procedure: "The ALAC shall name a Board Member Selection Process Committee (BMSPC) which shall oversee the entire selection process including the election culminating the process but excluding those responsibilities specifically retained by the ALAC or given to the Board Candidate Evaluation Committee. The composition of the BMSPC will be regionally balanced and the committee will be populated with two representatives of each region selected by both the ALAC and the RALOs plus a chair selected by the ALAC. For each region, one Alternate member will be selected who can replace a member from the same region who for whatever reason is not able to fully participate and such replacement will be at the sole discretion of the BMSPC Chair in accordance with BMSPC guidelines." The group is open to ALAC Members, At-Large community members and to RALO Leaders. However, the membership should include members of the community with significant experience from previous Board Director selected by At-Large process. English will be the working language of this group. The workload of the BMSPC is not expected to be very heavy. The group must be regionally balanced, with two representatives from each of the five RALOs. Each RALO will also select an Alternate member in the event one of the original members must be replaced. The RALO selection may be done by any means thought appropriate by the RALO leadership. Please note that no member of the 2019-2020 BMSPC may submit an EoI for the position of the Board Director selected by At-Large. The ALAC has selected Alan Greenberg as Chair of the BMSPC. The first meeting of the BMSPC will be scheduled for early September. 2) Board Candidate Evaluation Committee (BCEC) The ALAC Rules of Procedures state the following on the composition and task of the BCEC: "19.3 The ALAC shall name a Board Candidate Evaluation Committee (BCEC) to compile an initial slate of candidates for election to Seat 15. A new BCEC consisting of two delegates selected by each of the RALOs plus a chair selected by the ALAC will be convened for each Board seat selection process. Each RALO shall also select an Alternate member who can replace a member from the same region who for whatever reason is not able to fully participate and such replacement will be at the sole discretion of the BCEC Chair in accordance with BCEC guidelines." "19.4 The task of the BCEC is to identify applicants who would each make an excellent Board Director. [19.4.1] Applicant selected by the BCEC must meet the criteria specified in the ICANN Bylaws Article VI, Section 3 (http://www.icann.org/en/about/governance/bylaws#VI-3 [icann.org]<http://www.icann.org/en/about/governance/bylaws#VI-3%20[icann.org]>). These criteria include but are not limited to being: a) accomplished persons of integrity, objectivity, and intelligence, with reputations for sound judgment and open minds, and a demonstrated capacity for thoughtful group decision-making; and b) persons with an understanding of ICANN's mission and the potential impact of ICANN decisions on the global Internet community, and committed to the success of ICANN. Moreover, the Director selected by the At-Large Community must understand the mission of At-Large and the needs of the global community of Internet end users." "19.5 No member of the electorate (Paragraph 19.10) may simultaneously serve as a member of the BCEC." According to 19.5, members of the electorate (i.e., members of the ALAC and RALO Chairs who will be serving in 2020) may not be BCEC members. The group must be regionally balanced, with two representatives from each of the five RALOs. Each RALO will also select an Alternate member in the event one of the original members must be replaced. Additionally, no member of the 2019-2020 BCEC may submit an EoI for the position of the Board Director selected by At-Large. Please note that experience on previous BCECs, on the ICANN Nominating Committee or comparable experience is an asset. The RALO selection methodology must ensure that only suitably qualified candidates are put forward to the ALAC by the RALO Chair. English will be the working language of this group. The ALAC has selected Yrjö Lansipuro as Chair of the BCEC. The first meeting of the BCEC will be scheduled for early September. Regards, ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

2 1

UPDATED Meeting invitation: EURALO Monthly Call on Tuesday, 10 September 2019 at 18:00 UTC
by ICANN At-Large Staff July 29, 2019

July 29, 2019

***Please note the meeting date has changed, please update your calendar’s accordingly*** Dear All, The next EURALO Monthly Call is scheduled for Tuesday, 10 September 2019 at 18:00 UTC. For other times: https://tinyurl.com/y3swo77k The agenda (to be updated) and call details can be found at: https://community.icann.org/x/RKmjBg Zoom Room: https://icann.zoom.us/j/771250164 EURALO Main Wiki Portal: https://community.icann.org/x/K5Qi EURALO Web Page: https://atlarge.icann.org/ralos/euralo ADIGO Conf. ID EN: 1638 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: http://adigo.com/icann/ Thank you. Kind regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

EURALO Monthly Call
by ICANN Policy Calendar July 29, 2019

July 29, 2019

***Please note the meeting date has changed, please update your calendar's accordingly*** Dear All, The next EURALO Monthly Call is scheduled for Tuesday, 10 September 2019 at 18:00 UTC. For other times: https://tinyurl.com/y3swo77k The agenda (to be updated) and call details can be found at: https://community.icann.org/x/RKmjBg Zoom Room: https://icann.zoom.us/j/771250164 EURALO Main Wiki Portal: https://community.icann.org/x/K5Qi EURALO Web Page: https://atlarge.icann.org/ralos/euralo ADIGO Conf. ID EN: 1638 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: http://adigo.com/icann/ Thank you. Kind regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

RACI Call for Applications / deadline August 7th
by Joanna Kulesza July 26, 2019

July 26, 2019

FYI (apologies for unavoidable crossposting): -------- RACI Call for Applications -------- The RIPE Academic Cooperation Initiative (RACI) is again looking for talented academics in the field of Internet technology. Successful applicants receive complimentary tickets, travel and accommodation to the meetings and the opportunity to present their research. If you are working on something interesting, please apply! https://www.ripe.net/raci You can apply for the following two meetings by submitting an abstract and draft slides by *7 August*: - RIPE NCC Regional Meeting (24-25 September, Kyiv) - RIPE 79 (14-19 October, Rotterdam) Examples of relevant research topics include: - Network measurements and analyses - IPv6 deployment - BGP routing - Network security - Internet governance - Peering and interconnectivity - Internet of Things RACI mailing list: https://www.ripe.net/raci/mailing-list Twitter: https://twitter.com/raci_ripe RACI LinkedIn Group: https://www.ripe.net/raci/linkedin -- Kind regards, Joanna Kulesza ------------------- Joanna Kulesza, PhD University of Lodz, Poland ALAC / EURALO / Capacity Building Working Group Co-Chair SOI: https://community.icann.org/display/atlarge/Joanna+Kulesza+SOI TT: @KuleszaJ

1 0

Re: [EURO-Discuss] EURO-Discuss Digest, Vol 153, Issue 14
by Natalia Filina July 26, 2019

July 26, 2019

Dear Olivier, Thank you for the question. In my point of view if this service may be temporary switched off with the ability to return if necessary (for the newcomers who speak russian) in the future, this service may be canceled now. Best, Filina Natalia ср, 24 июл. 2019 г., 15:00 <euro-discuss-request(a)atlarge-lists.icann.org>: > Send EURO-Discuss mailing list submissions to > euro-discuss(a)atlarge-lists.icann.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://atlarge-lists.icann.org/mailman/listinfo/euro-discuss > or, via email, send a message with subject or body 'help' to > euro-discuss-request(a)atlarge-lists.icann.org > > You can reach the person managing the list at > euro-discuss-owner(a)atlarge-lists.icann.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of EURO-Discuss digest..." > Today's Topics: > > 1. Russian interpretation of ALAC calls (Olivier MJ Cr?pin-Leblond) > > > > ---------- Forwarded message ---------- > From: "Olivier MJ Crépin-Leblond" <ocl(a)gih.com> > To: Discussion for At-Large Europe <euro-discuss(a)atlarge-lists.icann.org> > Cc: > Bcc: > Date: Wed, 24 Jul 2019 10:17:20 +0100 > Subject: [EURO-Discuss] Russian interpretation of ALAC calls > Dear Colleagues, > > I am in receipt of an email from ALAC Chair Maureen Hilyard, relating to > Russian language interpretation of ALAC calls. Records shows that these > services have not be used at all, thus there is nobody on the Russian > language Channel. > Is there the need for ICANN to continue with this interpretation service? > Kindest regards, > > Olivier > _______________________________________________ > EURO-Discuss mailing list > EURO-Discuss(a)atlarge-lists.icann.org > https://atlarge-lists.icann.org/mailman/listinfo/euro-discuss > > _______________________________________________ > By submitting your personal data, you consent to the processing of your > personal data for purposes of subscribing to this mailing list accordance > with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and > the website Terms of Service (https://www.icann.org/privacy/tos) You can > visit the Mailman link above to change your membership status or > configuration, including unsubscribing, setting digest-style delivery or > disabling delivery altogether (e.g., for a vacation), and so on.

2 1

Universal Acceptance
by Roberto Gaetano July 25, 2019

July 25, 2019

Hi all. As most of you know, I have been always pushing for Universal Acceptance, including the deployment of IDN TLDs. I strongly believe that this is one of the game changers for reaching out to the next billion Internet users and giving equal opportunities for enjoying the benefits of online communication. There will be a working session at EuroDIG (https://www.eurodig.org<https://www.eurodig.org/>) on this topic on Wednesday 6 June - see the full programme at https://eurodigwiki.org/wiki/Consolidated_programme_2018. I have been appointed focal point for the session, and will therefore coordinate participation. I wonder whether there are any former Directors that are either directly interested or could indicate people within their respective networks who are interested in participating to the discussion on this topic and/or joining the session in Tbilisi. The first step would be to join the EuroDIG-WS6 mailing list, where the session on Universal Acceptance is being prepared. Instructions for joining can be found at the WS6 info page (https://list.eurodig.org/mailman/listinfo/ws6) Please feel free to contact me for further information. Thanks, Roberto

5 5

Russian interpretation of ALAC calls
by Olivier MJ Crépin-Leblond July 25, 2019

July 25, 2019

Dear Colleagues, I am in receipt of an email from ALAC Chair Maureen Hilyard, relating to Russian language interpretation of ALAC calls. Records shows that these services have not be used at all, thus there is nobody on the Russian language Channel. Is there the need for ICANN to continue with this interpretation service? Kindest regards, Olivier

4 4

Re: [EURO-Discuss] Zoom Structural Vulnerability Discovered
by Jean-Jacques Subrenat July 12, 2019

July 12, 2019

First, a remark: for Adobe, Zoom or other tool providers, ICANN may not be the single largest client, but it is certainly a significant one owing to its nature (quasi-regulatory, multi-stakeholder, some parts geared to non-commercial users). Then, a recommendation to Chairs of ACs and SOs: ICANN Board and CEO could be requested to set up a specifications sheet for a desirable conferencing tool, based on needs expressed by the multi-stakeholder community, and publish that as a tender. Offers received could then be reviewed not only by Staff, but in consultation with ACs and SOs. This would get us closer to what we, collectively, consider as the appropriate tool for the numerous conference calls held throughout ICANN. Jean-Jacques Subrenat. Le 10 juillet 2019 à 14:46:20, Paul Rosenzweig (paul.rosenzweig(a)redbranchconsulting.com) a écrit: This is assuredly right. The change from Adobe to Zoom may, or may not, have been right for ICANN and for this group for any number of reasons ranging from cost, to security, to scalability and utility. But let’s not romanticize Adobe. They are not a terribly secure platform generically. As James said, the Zoom response is poor – but we can’t hang that around the neck of ICANN org. P Paul Rosenzweig paul.rosenzweig(a)redbranchconsulting.com O: +1 (202) 547-0660 M: +1 (202) 329-9650 VOIP: +1 (202) 738-1739 www.redbranchconsulting.com My PGP Key: https://keys.mailvelope.com/pks/lookup?op=get&search=0x9A830097CA066684 From: NCSG-Discuss <NCSG-DISCUSS(a)LISTSERV.SYR.EDU> On Behalf Of James Gannon Sent: Wednesday, July 10, 2019 12:52 AM To: NCSG-DISCUSS(a)LISTSERV.SYR.EDU Subject: Re: Zoom Structural Vulnerability Discovered Just want to call out that Adobe has likely the worst reputation in the entire tech industry when it comes to security, I really would not hold them out as either prompt or without serious issues (I believe they still hold the record for number of CVSS 9+ vulns). Zooms response is poor I agree, but on a data driven comparison it is a far more secure platform. From: NCSG-Discuss <NCSG-DISCUSS(a)LISTSERV.SYR.EDU> on behalf of Ayden Férdeline <icann(a)FERDELINE.COM> Reply-To: Ayden Férdeline <icann(a)FERDELINE.COM> Date: Tuesday, 9 July 2019 at 14:13 To: "NCSG-DISCUSS(a)LISTSERV.SYR.EDU" <NCSG-DISCUSS(a)LISTSERV.SYR.EDU> Subject: Re: Zoom Structural Vulnerability Discovered That is true, but note that this security researcher notified Zoom of the exploit and they were in no rush to repair it. Look at the timeline in the Medium post. They only sought to fix it after the vulnerability drew media attention. Adobe Connect was not perfect but it met our needs and the occasional security issues that arose were promptly fixed by Adobe and never as serious as this one! Best wishes, Ayden On Tue, Jul 9, 2019 at 18:07, Adeel Sadiq <11beeasadiq(a)seecs.edu.pk> wrote: Speaking from a technical perspective, no software is perfect or bug-free. Its only a matter of time a loophole is found and exploited and eventually patched up. If you think Adobe Connect or ezTalks were/are free of these architectural issues, think again! That's the way we technical community do things. Regards Adeel Pakistan On Wed, Jul 10, 2019 at 1:37 AM Ayden Férdeline <icann(a)ferdeline.com> wrote: Unfortunately, uninstalling the application does not rectify the situation, due to poor architecture (acknowledged by Zoom on their blog today). They are working on a fix, now that public scrutiny demands one. So disappointing that ICANN has put us in this terrible situation. Ayden On Tue, Jul 9, 2019 at 16:15, Vaibhav Aggarwal, Catalyst & Group CEO <va(a)BLADEBRAINS.COM> wrote: Thanks for this. Till the next Update, I have removed the Zoom For Mac Client with immediate effect. Regards, Vaibhav Aggarwal New Delhi VaibhavAggarwal.com On Jul 10, 2019, at 12:30 AM, Michael Karanicolas <mkaranicolas(a)GMAIL.COM> wrote: Hey - remember when ICANN switched everyone from Adobe over to Zoom as a way of enhancing information security and data privacy? "A vulnerability in the Mac Zoom Client allows any malicious website to enable your camera without your permission... This vulnerability allows any website to forcibly join a user to a Zoom call, with their video camera activated, without the user's permission. On top of this, this vulnerability would have allowed any webpage to DOS (Denial of Service) a Mac by repeatedly joining a user to an invalid call. Additionally, if you’ve ever installed the Zoom client and then uninstalled it, you still have a localhost web server on your machine that will happily re-install the Zoom client for you, without requiring any user interaction on your behalf besides visiting a webpage. This re-install ‘feature’ continues to work to this day." Read more here: https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-mayb…

3 3

Test your browser config if it launches Zoom automatically with camera and mic enabled
by Dev Anand Teelucksingh July 12, 2019

July 12, 2019

This has been posted to the Technology Taskforce wiki page https://community.icann.org/display/atlarge/Zoom+conferencing+solution - Dev Anand The security researcher Jonathan Leitschuh who publicly disclosed the Zoom security vulnerability has noted that depending on your browser setting on whether to always open Zoom links with the associated app is on, a malicious webpage (that could be hidden in a iframe) can automatically launch Zoom with your camera enabled without asking. This is true for Windows as well as for Mac for Firefox and Chrome browsers. As he noted in his tweet at https://twitter.com/JLLeitschuh/status/1149123386855104516 Here is a Proof of Concept Link to see whether Zoom will autolaunch with your camera and mic enabled : https://jlleitschuh.org/zoom_vulnerability_poc/zoompwn_iframe.html If your browser settings are set to always these type of Zoom links with the associated app, you *will* be automatically launched into a Zoom conference with your camera enabled. How to prevent Zoom from auto-opening Zoom links on a webpage : In Mozilla Firefox, - 1) Click the menu button [image: Fx57Menu] and choose Options. - 2) In the General panel, go to the *Applications* section. 3) Search for the Content Type *zoommtg* and select it. 4) Click on the Action column in the *zoommtg* row to change the action to "*always ask*" /twitter.com/JLLeitschuh/status/114912338685510dsds [image: firefox-turning-off-automatic-open-zoom.png] In Google Chrome: This is harder for Google Chrome which saves such settings in a preferences file which isn't accessible from the browser. >From https://support.google.com/chrome/answer/114662 "Chrome allows external applications and web services to open certain links. For example, certain links can open a site like Gmail or a program like iTunes. If you set a default action for a type of link but want to delete it, clear your browsing data <https://support.google.com/chrome/answer/2392709> ( https://support.google.com/chrome/answer/2392709) and select "Cookies and other site data." Here's the more "hacky" way: 1) Navigate to chrome://version/ and find the path listed under "Profile Path". 2) Quit Chrome, open that directory, and then open the "Preferences" file. This will appear be a long line of text in a text editor. 3) Look for the string "zoommtg":false or "zoomrc":false. If it either exist, remove them. If there is a comma immediately after either string, remove it as well. 4) Save the file. Visit Jonathan Leitschuh's Proof of Concept page at * https://jlleitschuh.org/zoom_vulnerability_poc/zoompwn_iframe.html <https://jlleitschuh.org/zoom_vulnerability_poc/zoompwn_iframe.html>* to see if your browser asks to open Zoom. This is what you will see in Mozilla Firefox : [image: firefox-ask-to-launch-zoom.png] and this is what you will see in Google Chrome: [image: chrome-ask-to-launch-zoom.png]

1 0

Meeting invitation: EURALO Monthly Call on Tuesday, 17 September 2019 at 18:00 UTC
by Michelle DeSmyter July 10, 2019

July 10, 2019

Dear All, The next EURALO Monthly Call is scheduled for Tuesday, 17 September 2019 at 18:00 UTC. For other times: https://tinyurl.com/y5pu4v3n The agenda (to be updated) and call details can be found at: https://community.icann.org/x/RKmjBg Zoom Room: https://icann.zoom.us/j/771250164 EURALO Main Wiki Portal: https://community.icann.org/x/K5Qi EURALO Web Page: https://atlarge.icann.org/ralos/euralo ADIGO Conf. ID EN: 1638 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: http://adigo.com/icann/ Thank you. Kind regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

2 1