August 2008 - NA-Discuss - lists.icann.org

Addendum: Position on the NomCom representing the NA region
by Alan Greenberg Aug. 14, 2008

Aug. 14, 2008

The qualifications of a NomCom Delegate in the ICANN By-Laws is as follows: ----------------------------- Delegates to the ICANN Nominating Committee shall be: 1. Accomplished persons of integrity, objectivity, and intelligence, with reputations for sound judgment and open minds, and with experience and competence with collegial large group decision-making; 2. Persons with wide contacts, broad experience in the Internet community, and a commitment to the success of ICANN; 3. Persons whom the selecting body is confident will consult widely and accept input in carrying out their responsibilities; 4. Persons who are neutral and objective, without any fixed personal commitments to particular individuals, organizations, or commercial objectives in carrying out their Nominating Committee responsibilities; 5. Persons with an understanding of ICANN's mission and the potential impact of ICANN's activities on the broader Internet community who are willing to serve as volunteers, without compensation other than the reimbursement of certain expenses; and 6. Persons who are able to work and communicate in written and spoken English.

1 0

New Travel Policy - **IMPORTANT**
by Thompson, Darlene Aug. 14, 2008

Aug. 14, 2008

Hi all, During the meetings in Paris is came to light that the Board put through a resolution to reduce ALAC’s travel. This was slipped through and didn’t even follow the wording in the “Draft Travel Support Procedure” document of May 22, 2008. We owe a huge THANK YOU to Alan Greenburg for catching this as neither Evan nor I nor the rest of the ALAC caught this when it happened. The affects of these cuts to the ALAC travel would mean: 1. Only ½ of the ALAC would be funded for travel for meetings – the rest would have to self-fund 2. No Secretariats or Chairs attending meetings 3. No travel support for ALSs to attend regional meetings. Therefore, it was decided during the last NARALO telephone conference that we convene a mini-WG (comprised of Gareth Shearman, Evan and myself) to come up with a formal response. We have drafted the attached document. Please have a look at this ASAP and get back to us (on or before Friday, August 8, 2008) with any changes or additions you might like OR stating that you do not support it at all (as we must have consensus). Thank you, D ᑕᓕᓐ ᑕᒻᓴᓐ ᓄᓇᓕᖕᓂ ᖃᕆᓴᐅᔭᕐᕕᒋᔭᐅᔪᓐᓇᕐᑐᓄᑦ ᑎᑎᕋᖅᑎ ᑮᓇᐅᔭᓕᕆᓂᕐᒧᑦ ᐊᐅᓚᑦᑎᔨᒃᑯᑦ ᐱᔨᑦᑎᕋᖅᕕᖓᑦ ᐃᓕᓐᓂᐊᕐᓂᓕᕆᔨᒃᑯᑦ ᓄᓇᕗᑦ ᒐᕙᒪᖓᑦ ᑎᑎᖅᑲᓂᐊᕐᕕᖓ 1000, ᐊᓪᓚᕝᕕᖓ 910 ᐃᖃᓗᐃᑦ, ᓄᓇᕗᑦ dthompson(a)gov.nu.ca ᐅᖄᓚᐅᑎ: 867 975-5631 ᓱᑲᑦᑐᒃᑰᕈᑎ: 867 975-5610 Taliin Taamsan Nunalingni Qaritauyani Atuqtauningitnun Titiraqtia Nunavut Kavamangat Titiraqarvia 1000, Nayugaa 910 Iqaluit, Nunavut dthompson(a)gov.nu.ca Hivayautik : 867 975-5631 Kayumiktuk : 867 975-5610 Darlene Thompson Community Access Program Administrator Corporate Services Division Department of Education Government of Nunavut PO Box 1000, Station 910 Iqaluit, Nunavut, X0A 0H0 dthompson(a)gov.nu.ca Ph: 867 975-5631 Fax: 867 975-5610 Darlene Thompson Administratrice du programme d’accès communautaire Division des services ministériels Ministère de l’Éducation Gouvernement du Nunavut Case postale 1000, Succursale 910 Iqaluit Nunavut, X0A 0H0 dthompson(a)gov.nu.ca Tél. : 867 975-5631 Téléc. : 867 975-5610

8 20

Re: [NA-Discuss] [A2k] Slashdot | YouTube Yanks Free Tibet Video After IOC Pressure
by Jeffrey A. Williams Aug. 14, 2008

Aug. 14, 2008

Gwen and all, Thank you Gwen for outlining this clearly and IMO, correctly. Of course organizations like ICANN's IPC and ALAC would, and have on other similar occasions of lesser potential impact, done the same. Such actions by the IOC demonstrate clearly a lack of good judgment and recognition of free speech and expression that is dangerous to any society that fully recognizes good democratic principals. Gwen Hinze wrote: > FYI here's out thoughts on using improper copyright claims to silence > online political expression: > <http://www.eff.org/deeplinks/2008/08/olympic-committee-takedown- > shows-risks-ill-timed-t> > Olympic Committee Takedown Shows Risks of Ill-Timed Take-Downs > > Deeplink by Corynne McSherry > It�s never OK to use improper copyright claims to take down > legitimate, non-infringing content, but such takedowns are > particularly galling when they are timed to directly interfere with > the impact of a political message. That�s what happened this week to > the Free Tibet movement, and the situation illustrates the risks of a > �shoot first, ask questions later� approach to copyright policing. > > The 2008 Olympic Games have been marked by controversy relating to > the human rights record of its host, China. Two days ago, the > International Olympic Committee (IOC) added to the debate by > demanding that YouTube block a video of a protest by Students For A > Free Tibet. The demand appeared to be based on a bogus copyright > infringement claim: the protesters had projected various images on > the wall of the Chinese consulate in New York, and the video of the > protest was titled �Beijing Olympics Opening Ceremony.� > > This is not the first time the IOC has used an intellectual property > claim to stomp on speech. Nor is it the first time a content owner > has caught a dolphin in its DMCA takedown driftnet. But the political > and time-sensitive nature of this video made this �mistake� > particularly appalling. > > The blogosphere reacted with outrage, and rightly so. EFF made some > inquiries of our own (we understand YouTube did so as well) and the > IOC ultimately withdrew the complaint. That is a good thing. But this > takedown highlights a larger problem. It takes just seconds to have a > video taken down, but over two weeks to get a video put back up. And > YouTube�s hair-trigger content verification program has made takedown > even easier and faster�content owners can rapidly create lists of > videos for takedown, and then send a takedown demand with a couple of > additional clicks. > > If IOC had not withdrawn its notice, here�s what would have happened > in this case: the protesters� DMCA counter-notice would have started > the clock running and, if the IOC didn�t sue within 10-14 days�which > of course it wouldn�t have, because it didn�t have a claim�the video > would be restored. But that wouldn�t happen until after the 2008 > games were over, and the delay would inevitably lessen the video�s > political impact. As political organizers of all stripes know, timing > is everything. > > The DMCA was not designed to help content owners silence legitimate > speech, even temporarily. But that�s exactly what happens when > content owners don�t bother to form a good faith belief that the > material they target is actually infringing. Shame on the IOC for > failing to meet its minimal obligations. > > -- > > On Aug 12, 2008, at 8:53 AM, James Love wrote: > > > http://news.slashdot.org/article.pl?sid=08/08/12/1127220 > > > > "The International Olympic Committee filed a copyright infringement > > claim yesterday against YouTube for hosting video of a Free Tibet > > protest at the Chinese Consulate in Manhattan Thursday night. The > > video > > depicts demonstrators conducting a candlelight vigil and projecting a > > protest video onto the consulate building; the projection features > > recent footage of Tibetan monks being arrested and riffs on the > > Olympic > > logo of the five interlocking rings, turning them into handcuffs. > > YouTube dutifully yanked the video. . . > > > > _______________________________________________ > > A2k mailing list > > A2k(a)lists.essential.org > > http://lists.essential.org/mailman/listinfo/a2k > > -- > Gwen Hinze > International Policy Director > Electronic Frontier Foundation > email:gwen@eff.org > Tel.: + 1 415 436 9333 x110 > > Please support EFF - Working to protect your digital rights and > freedom of speech since 1990 > > _______________________________________________ > A2k mailing list > A2k(a)lists.essential.org > http://lists.essential.org/mailman/listinfo/a2k Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [At-Large] Pre-Qualification for Registry Services Providers
by Jeffrey A. Williams Aug. 13, 2008

Aug. 13, 2008

JFC and all, Yes, for instance Who exactly? JFC Morfin wrote: > At 06:03 14/08/2008, Bret Fausett wrote: > >The note below is disappointing. > >On Aug 12, 2008, at 11:43 PM, At-Large Staff wrote: > >>During the exploration of the initiative, ICANN consulted with > >>the community including technical experts and gTLD and ccTLD > >>registries and registry service providers. > > Names? > jfc > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

NARALO Summary Minutes 11 August 2008
by At-Large Staff Aug. 12, 2008

Aug. 12, 2008

Dear all, Darlene Thompson kindly prepared the summary minutes for yesterday¹s NARALO teleconference. Please find the minutes and the audio recording on the meeting page: https://st.icann.org/naralo/index.cgi?11_august_2008 Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

1 0

Google Using DoubleClick Tracking Cookies
by Jeffrey A. Williams Aug. 12, 2008

Aug. 12, 2008

All, Although there are a few here that could care less about others privacy, which IMHO is far less than reasonably considerate. There is a growing trend to put a stop to unsolicited intrusions such as, but not limited to Tracking Cookies which Google is famous for. Vint, let be very blunt here. I and our members are getting very irritiated by this nonsense, especially sense Google nearly a year ago stated that they were going to cease doing this sort of foolishness. So now I suppose that because it is doubleclick, owned by Google, that will be the equivication excuse for being less than honest in Googles earlier pledge? Bait and switch eh? Well Google has yet again just been exposed.... See: News coming out of the letters the House Energy and Commerce Committee sent to a number of broadband and Internet companies about their policies and practices on user tracking. The committee has now made public 25 responses to its queries, and many companies, including Google, http://www.washingtonpost.com/wp-dyn/content/article/2008/08/11/AR200808110… acknowledge using targeted-advertising technology without explicitly informing customers. The Committee is considering legislation to require explicitly informing the consumer of the type of information being gathered and any intent to use it for a different purpose, and a right to say "no" to the collection or use. The submitter notes that, while Google denies using deep packet inspection, if the traffic is a Google search or email to or from a Gmail account, Google does not need DPI to see the contents of the message. "The revelations came in response to a bipartisan inquiry of how more Internet companies have gathered data on customers. Edward J. Markey (D-Mass.) said 'Increasingly, there are no limits technologically as to what a company can do in terms of collecting information... and then selling it as a commodity to other providers.' Some companies like NebuAd have tested deep-packet inspection with some broadband providers Knology and Cable One. Google said that it had begun to use the DoubleClick ad-serving cookie that allow the tracking of Web surfing across different sites but said it was not using deep packet inspection. Google promotes the fact that its merger with DoubleClick provides advertisers 'insight into the number of people who have seen an ad campaign,' as well as 'how many users visited their sites after seeing an ad.' Microsoft and Yahoo acknowledge the use of behavioral targeting. Yahoo says it allows users to turn off targeted advertising on its Web sites; Microsoft has not yet responded to the committee." Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

More IPC/RIAA nonsense: Collegiate Resistance To RIAA In Michigan
by Jeffrey A. Williams Aug. 12, 2008

Aug. 12, 2008

All, As an ongoing saga FYI: http://recordingindustryvspeople.blogspot.com/ NewYorkCountryLawyer writes "There are now at least http://www.p2pnet.net/story/16699 three complaints being investigated in Michigan against the RIAA's unlicensed investigator, SafeNet a/k/a MediaSentry, one of which was http://recordingindustryvspeople.blogspot.com/2008/08/central-michigan-univ… filed by Central Michigan University itself. Two other complaints have been filed by students, one from http://news.slashdot.org/article.pl?sid=08/07/09/2228226&tid=123 Northern Michigan University and one from http://recordingindustryvspeople.blogspot.com/2008/08/university-of-michiga… University of Michigan. This appears to be part of http://chronicle.com/free/v54/i49/49a00104.htm the growing sense of exasperation colleges and universities are feeling over the RIAA's harassment." P.S. seems yet again there is a significant disconnect if not down right disgust with the IPC's RIAA, and it is growing... So again I call for ICANN to sanction the IPC or revoke the RIAA's membership... Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

20 August 1400 UTC: Briefing Session on the Amendments on the RAA
by At-Large Staff Aug. 12, 2008

Aug. 12, 2008

Dear all, We would like to invite you to a briefing and discussion session attended by Tim Cole, Chief Registrar Liaison, and the At-Large RAA Working Group and members of the At-Large community on the Draft amendments to the Registrar Accreditation Agreement (RAA). The public consultation period on the RAA has recently ended in English, but the consultation materials were posted in French and Spanish on 6th August and comments in those languages will be taken until the end of August. The At-Large community will be developing its views, incorporating the viewpoints of its Spanish and French-speaking participants, as follow-up actions from the briefing. The teleconference will provide an opportunity for all participants to ask questions and discuss the RAA Amendments consultation and documents and for those in the Spanish and French-speaking communities to receive any background information on the RAA, its history and the reasons that led to the creation of the amendments that they require. Participants are requested to provide their comments or questions in advance, to the extent possible, at the following URL by using the Comment¹ button at the top of the page: https://st.icann.org/alac/index.cgi?draft_amendments_to_raa You will also find participation instructions on this page. Presenters/Moderators: Tim Cole, Chief Registrar Liaison, oversees the registrar new and renewal accreditation process. He has been intensively involved in the RAA consultation process. Beau Brendler is an ALAC member from North America and the ALAC focal point for the At-Large Registrar Registrant Relations Working Group. Background Information: The Registrar Accreditation Agreement (RAA) is the contract that governs the relationship between ICANN and its approximately 900 accredited registrars. The current agreement has been in place since May 2001. As the market has developed and the number of ICANN accredited registrars and domain name registrations have grown significantly, it has become clear that certain amendments should be made to this important agreement. The amendments are intended to provide clarity and certainty regarding the duties of registrars and the rights of registrants. In March 2007, Dr. Paul Twomey, President and CEO of ICANN called for a comprehensive review of the RAA and the Accreditation process. The results of that review included a Board resolution describing an approach for arriving at and implementing amendments. In accordance with that resolution, ICANN has solicited public input for possible changes to the RAA and the accreditation process. The Staff has drafted a set of proposed amendments in accordance with that input, information received at workshops and public fora to date, and consultations with the gTLD Registrar Constituency. The Teleconference is scheduled on Wednesday, 20 August at 1400 UTC. There will be simultaneous interpretation in French and Spanish. All ICANN stakeholder community members are welcome to participate, especially those who are primarily French and/or Spanish-speakers. Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

5 5

FW: Regional Advise for the Foundation for Building Sustainable Communities
by Thompson, Darlene Aug. 11, 2008

Aug. 11, 2008

Hi all, Please let me know if you are opposed to this organization's application. It appears to me that everything in the due diligence report is clear. Darlene Darlene A. Thompson Community Access Program Administrator Nunavut Dept. of Education / N-CAP P.O. Box 1000, Station 910 Iqaluit, NU X0A 0H0 Phone: (867) 975-5631 Fax: (867) 975-5610 E-mail: dthompson(a)gov.nu.ca <mailto:dthompson@gov.nu.ca> ________________________________ From: At-Large Staff [mailto:staff@atlarge.icann.org] Sent: Tuesday, August 05, 2008 8:07 AM To: Evan Leibovitch; Thompson, Darlene Subject: Regional Advise for the Foundation for Building Sustainable Communities Dear Evan, Dear Darlene, Please find attached the application and the Due Diligence form for the Foundation for Building Sustainable Communities. We kindly ask you to provide us with the regional advice for this application in your capacity as regional Secretariat. In order to proceed with the application on time we should receive the regional advice by August 28th. Thank you for your assistance. Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

1 0

Re: [NA-Discuss] [ga] Vixies vixens make big boo boo on successful Russian DNS hack
by Jeffrey A. Williams Aug. 11, 2008

Aug. 11, 2008

Dr. Joe and all, As you know, I know what you mean vis a vi Palmer. I routinely delete his posts. I shall not add spice to his goulash. I know you Joe, so even at times we may not always agree fully, I always consider your thoughts carefully and fully before commenting one way of another. I also know that you are a very knowledgeable person in various areas of expertise in the IT arena. Like myself, raw politics is not your plate of caviare. Joe Baptista wrote: > > > On Sun, Aug 10, 2008 at 9:54 PM, Jeffrey A. > Williams <jwkckid1(a)ix.netcom.com> wrote: > > Well your very welcome indeed! >:) After all what is a > meal, > if not with the proper spice to enhance properly the savory > taste > eh? Unless of course that meal is best served cold... Food > for > thought prhaps? You be the judge. > > > Indeed. Sometimes a chilly affair is delicious. But this one I think > I would prefer spicy hot. > > Have you noticed the recent appeals to my person from one Thomas > Baxter (a.k.a. John Palmer). My fellow monitor and chair in their > silence don't seem to mind if we take the group into a brief encounter > with libel and slander. They are reminded if they have concerns they > should be addressed by the three of us in private first. > > I think I should reply but was hoping for one more appeal. I get a > kick out of Palmers attempts to libel and slander me on the GA. But i > think I'll continue my silence until Palmer really starts squealing. > > What do you think. Have we got game? > > regards > joe baptista > > > > > Joe Baptista wrote: > > > > > > > On Sun, Aug 10, 2008 at 3:12 AM, Jeffrey A. > > Williams <jwkckid1(a)ix.netcom.com> wrote: > > > > > > Dr. Joe and all, > > > > Thanks for also saving/archiving the original story. > > > History if > > saved in this manner can never be truthfully > revised. BTW, > > I > > and 200 odd other or our members also archived this > story > > including all metadata for forensics purposes as well > if > > needed > > in the future for legal purposes. I hope SANS will > also be > > covering it as well as did NetworkWorld. > > > > > > Your a gem Jeff, if not a joy to add flavour to our > gatherings. > > > > cheers > > joe baptista > > > > > > > > > > FWIW, it may be time to keep a closer watch on > Circleid, > > which I have also written for on occasion. Yellow > > journalism > > is not a good thing... > > > > Joe Baptista wrote: > > > > > > > > The news story below was first published on > CircleID. It > > has since > > > been yanked and is no where to be found on > CircleID. > > Maybe we are > > > witnessing a bit of history revision. This makes > me sad > > because > > > CircleID was a publication I once wrote for. In > fact I > > was one of the > > > first paid writer for the organization. Probably > the only > > one at the > > > time. And it is sad to see revision at an > organization I > > was once > > > associated with. > > > > > > However it is understandable considering Vixie, the > sacred > > cow of DNS, > > > made such a stupid and silly statement in the > article. > > > > > > Basically an internet researcher in Russia was able > to > > break the Vixie > > > patch and poison a servers cache after some 10 > hours, > > billions of > > > connections over a gigabit connection. Vixies > response > > was "before > > > somebody gets all excited about it let's be clear > that it > > takes two > > > billion packets on average to defeat UDP port > > randomization, which in > > > this case was a fully utilized gigabit Internet > connection > > for a > > > period of ten hours." and proceeded to draw > parallels > > that the level > > > of risk was reasonably low because of this > > rationalization. > > > > > > I think sometime Vixie lives in the dark ages of > the net, > > when > > > everything was low bandwidth and script kiddies > were a > > novelty. > > > Indeed Polyakov, the Russian researcher, should be > > congratulated for > > > his success in this attack considering the poor > russian > > was using such > > > limited resources. > > > > > > Unlike script kiddies or real internet criminals > Polyakov > > did not have > > > the resources required, being hundreds of thousands > of > > computers > > > connected through a maze of IRC botnets on hundreds > of > > thousands of > > > both DSL and gigabit connections to conduct a > proper > > attack. Poor man > > > had to do it with one computer and one high speed > internet > > link. If > > > he had better resources - like the kiddies - he > could > > probably do it > > > in much less time - 10 - 20 minutes? > > > > > > Under these circumstances I'm not surprised the > story was > > yanked. The > > > quote makes Vixie look like an idiot. > > > > > > In any case - here is the original story no longer > > published at > > > CircleID. > > > > > > > > > Latest news postings on CircleID > > > URL: http://www.circleid.com/news/ > > > Updated: 10 hours 46 min ago > > > > > > Emergency DNS Patch Still Vulnerable, Proves > Russian > > Physicist > > > > > > 10 hours 19 min ago > > > A Russian physicist has been able to successfully > poison > > the latest > > > BIND patch with fully randomized ports. In other > words, > > the emergency > > > fix put in place to patch the Domain Name System > (DNS) > > vulnerability > > > for BIND, Internet's most popular DNS software, has > been > > demonstrated > > > to be vulnerableand still exploitable by > criminals. > > > > > > Evgeniy Polyakov from Moscow, Russia in a blog post > today, > > has shown > > > how using two fairly powerful computers and a fast > > broadband > > > connection, one could successfully attack the > patched DNS > > server in > > > less than 10 hours. With a fast connection, "any > trojaned > > machine can > > > poison your DNS during one night" says Polyakov in > his > > blog post. > > > > > > As demonstrated by security expert, Dan Kaminsky on > > > Wednesday at the > > > Black Hat security conference, the vulnerability, > if > > exploited by > > > criminal, could be detrimental to the Web as well > as > > services such as > > > email. > > > > > > Paul Vixie, president of the Internet Systems > Consortium > > (ISC), the > > > organization in charge of maintaining the BIND > software > > has verified > > > that Polyakov's exploit looks real. However "before > > > somebody gets all > > > excited about it," Vixie says, "let's be clear that > it > > takes two > > > billion packets on average to defeat UDP port > > randomization, which in > > > this case was a fully utilized gigabit Internet > connection > > for a > > > period of ten hours." In other words, the > probability of a > > successful > > > attack is fairly minimal. On the other hand, in the > case > > of an > > > unpatched server, an attack was "narrowed down to > six > > seconds," Vixie > > > noted. > > > > > > In the long term, Vixie says "we'll go on improving > our > > forgery > > > resilience, as will every recursive DNS > implementor, while > > we continue > > > pushing DNSSEC as the ultimate long term solution > to the > > entire > > > forgery problem including this off-path-attacker > problem." > > > > > > > > More under: DNS, DNSSEC, Security > > > Categories: Net coverage > > > > > > -- > > > Joe Baptista > > > www.publicroot.org > > > PublicRoot Consortium > > > > > > ---------------------------------------------------------------- > > > > > > The future of the Internet is Open, Transparent, > > Inclusive, > > > Representative & Accountable to the Internet > community > > @large. > > > > > > ---------------------------------------------------------------- > > > > > > Office: +1 (360) 526-6077 (extension 052) > > > Fax: +1 (509) 479-0084 > > > > > > > > Regards, > > > > Spokesman for INEGroup LLA. - (Over 281k > > members/stakeholders strong!) > > "Obedience of the law is the greatest freedom" - > > Abraham Lincoln > > > > "Credit should go with the performance of duty and > not with > > what is > > very often the accident of glory" - Theodore > Roosevelt > > > > "If the probability be called P; the injury, L; and > the > > burden, B; > > liability depends upon whether B is less than L > multiplied > > by > > P: i.e., whether B is less than PL." > > United States v. Carroll Towing (159 F.2d 169 [2d > Cir. > > 1947] > > ===== > > > ========================================================= > > Updated 1/26/04 > > CSO/DIR. Internet Network Eng. SR. Eng. Network data > > security IDNS. > > div. of Information Network Eng. INEG. INC. > > ABA member in good standing member ID 01257402 E-Mail > > > jwkckid1(a)ix.netcom.com > > My Phone: 214-244-4827 > > > > > > > > > > > > -- > > Joe Baptista > > www.publicroot.org > > PublicRoot Consortium > > > ---------------------------------------------------------------- > > > The future of the Internet is Open, Transparent, > Inclusive, > > Representative & Accountable to the Internet community > @large. > > > ---------------------------------------------------------------- > > > Office: +1 (360) 526-6077 (extension 052) > > Fax: +1 (509) 479-0084 > > > > Regards, > > > > Spokesman for INEGroup LLA. - (Over 281k > members/stakeholders strong!) > > > > "Obedience of the law is the greatest freedom" - > > Abraham Lincoln > > > > "Credit should go with the performance of duty and not > with what is > > very often the accident of glory" - Theodore Roosevelt > > > > "If the probability be called P; the injury, L; and the > burden, B; > > liability depends upon whether B is less than L multiplied > by > > P: i.e., whether B is less than PL." > > United States v. Carroll Towing (159 F.2d 169 [2d Cir. > 1947] > > > =============================================================== > > > Updated 1/26/04 > > CSO/DIR. Internet Network Eng. SR. Eng. Network data > security IDNS. > > div. of Information Network Eng. INEG. INC. > > ABA member in good standing member ID 01257402 E-Mail > > jwkckid1(a)ix.netcom.com > > My Phone: 214-244-4827 > > > > > > > > -- > Joe Baptista > www.publicroot.org > PublicRoot Consortium > ---------------------------------------------------------------- > The future of the Internet is Open, Transparent, Inclusive, > Representative & Accountable to the Internet community @large. > ---------------------------------------------------------------- > Office: +1 (360) 526-6077 (extension 052) > Fax: +1 (509) 479-0084 > > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0