August 2008 - NA-Discuss - lists.icann.org

Re: [NA-Discuss] [ga] What are ICANN and VeriSign doing regarding CERT Advisory #800113 / DNS Cache Poisoning?
by Jeffrey A. Williams Aug. 6, 2008

Aug. 6, 2008

Joe and all, First, IMO, Joe is correct that DNSSEC will not save or fix any problems that are software related to DNS/BIND or client interfaces that are OS specific but were based upon what was known about Bind at the time of their creation. Second, Burnsteins DNS/BIND is only ONE version of DNS/BIND that is very secure. Our BindPlus is also very secure as well, no reported security problems reported in 49 months, and never a serious security hole found or reported sense it's release. Third, I respectfully disagree that ICANN can't do anything. They could have done allot over 6 years ago, and scoffed at anyone other than Paul Vixies Bind 8 at that time. That was a mistake, and many knew it but were silent publically. Forth, Joe is right, that with a little software Eng. forsight and expermintation most of the DNS/BIND security Holes are fixable and customizably so. What is missing is that there are very few GOOD software Eng., and even fewer that have an in depth understanding of DNS. Fifth, it is huge security problems like this that are bound to occur as long as social Eng. are making software decisions or managment decisions that are grounded in security and/or software. That's a leadership problem, and in this instance it is a ICANN leadership problem. Joe Baptista wrote: > > > On Wed, Aug 6, 2008 at 10:46 PM, George Kirikos <gkirikos(a)yahoo.com> > wrote: > > > Hello, > > Just to followup, ICANN sent out a news release earlier: > > http://www.icann.org/en/announcements/announcement-06aug > 8-en.htm > > It's a step in the right direction, to help educate folks. > However, > there's no true "fix", as the protocol itself is broken. A > move towards > DNSSEC or other secure DNS would be the only appropriate > long-term > solution. > > > There is nothing wrong with the protocol. Its the software thats the > issue. And this is easy to fix. I've run some tests and with a > little DNS magic you can make you DNS very secure. > > Another big help would be to update your software including any NAT > devices. > > The whole DNSSEC thing is another red herring in the making. > > Also there is nothing ICANN nor anyone else can do about this. The > world is running a lot of insecure servers. BIND has always been > buggy and true to form it will continue to be buggy. Have you any > idea how many buggy systems are out there. i.e. almost all of them. > Unless of course your running burnsteins DNS which already fixed this > problem a long time ago. > > It bother me that people who have no idea what the technical issues > are get so easily baited by this issue. George - let go the ICANN red > herring. Its just another smoke screen. > > The real issue here is what sort of out reach programs is ICANN > involved in to get people to upgrade and fix their buggy dns servers. > DNSSEC is not going to save them. > > cheers > joe baptista > > > > > If there's ever a cyber 9/11, as Lessig discussed at: > > http://news.slashdot.org/article.pl?sid=08/08/05/220229 > > widespread DNS cache poisoning might be one of the root > causes. > > I'd like to hear from VeriSign as to whether they're > planning to > implement DNSSEC or a secure DNS alternative for .com/net, > as PIR > intends for .org. > > Sincerely, > > George Kirikos > http://www.kirikos.com/ > > --- George Kirikos <gkirikos(a)yahoo.com> wrote: > > > > > Hello, > > > > ICANN and VeriSign have been oddly quiet over the entire > DNS cache > > poisoning issue: > > > > http://www.kb.cert.org/vuls/id/800113 > > > http://www.circleid.com/posts/87143_dns_not_a_guessing_game/ > > > > http://it.slashdot.org/article.pl?sid=08/07/08/195225&tid=172 > > > > > PIR has a pending proposal to implement DNSSEC for .org: > > > > http://www.icann.org/registries/rsep/ > > > > Is that something that VeriSign has plans to accelerate > for the > > important .com and .net registries, in order to prevent a > long-term > > meltdown in DNS confidence/trust should DNS cache > poisoning become > > widespread in August and beyond? > > > > No need for a "formal" press release, but I think the > community > > deserves to know that people are working on the long-term > solution to > > this problem, and making it a higher priority relative to > other > > lesser > > issues. > > > > Point #14 in the latest policy newsletter appears to be > the only > > "hint" > > that a few people are working on things: > > > > http://www.icann.org/topics/policy/update-jul08.htm#14 > > > > Hopefully something will happen before Cairo, as by then > there might > > be > > widespread disruptions to the internet. Perhaps the Board > might want > > to > > consider an early special meeting this week or next: > > > > http://www.icann.org/minutes/ > > > > instead of waiting until July 31st, in conjunction with > the SSAC. > > > > Sincerely, > > > > George Kirikos > > http://www.kirikos.com/ > > > > > > -- > Joe Baptista > www.publicroot.org > PublicRoot Consortium > ---------------------------------------------------------------- > The future of the Internet is Open, Transparent, Inclusive, > Representative & Accountable to the Internet community @large. > ---------------------------------------------------------------- > Office: +1 (360) 526-6077 (extension 052) > Fax: +1 (509) 479-0084 > > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] What are ICANN and VeriSign doing regarding CERT Advisory #800113 / DNS Cache Poisoning?
by Jeffrey A. Williams Aug. 6, 2008

Aug. 6, 2008

George and all, Well yes this is a move in the right direction. But it is far too little and perhaps far too late as we have seen with Apple. See: See: (August 1, 2008) Apple released a patch for the recently disclosed and exploited DNS vulnerability, but while it fixes Mac OS X systems used as DNS servers, it does not protect Macs being used as client systems. Fully patched versions of both Tiger (version 10.4.11) and Leopard (version 10.5.4) do not adequately randomize DNS source ports. Apple released Security Update 2008-005 on Thursday, July 31 to address 17 flaws in its OS X operating system. - From Internet Storm Center: http://isc.sans.org/diary.html?storyid=4810 A quick packet dump of my fully patched Leopard machine (OS X 10.5.4) shows it is - as a DNS client - still using incrementing ports. http://www.theregister.co.uk/2008/08/01/osx_still_vulnerable/print.html http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleI… http://www.computerworld.com/action/article.do?command=viewArticleBasic&art… Secondly, it wasn't Dan k. that origanally made note of this and many other DNS security holes that can expose users to serious danger. That was done back in 2001 on the old DNSO GA mailing list. George Kirikos wrote: > Hello, > > Just to followup, ICANN sent out a news release earlier: > > http://www.icann.org/en/announcements/announcement-06aug08-en.htm > > It's a step in the right direction, to help educate folks. However, > there's no true "fix", as the protocol itself is broken. A move towards > DNSSEC or other secure DNS would be the only appropriate long-term > solution. > > If there's ever a cyber 9/11, as Lessig discussed at: > > http://news.slashdot.org/article.pl?sid=08/08/05/220229 > > widespread DNS cache poisoning might be one of the root causes. > > I'd like to hear from VeriSign as to whether they're planning to > implement DNSSEC or a secure DNS alternative for .com/net, as PIR > intends for .org. > > Sincerely, > > George Kirikos > http://www.kirikos.com/ > > --- George Kirikos <gkirikos(a)yahoo.com> wrote: > > > > > Hello, > > > > ICANN and VeriSign have been oddly quiet over the entire DNS cache > > poisoning issue: > > > > http://www.kb.cert.org/vuls/id/800113 > > http://www.circleid.com/posts/87143_dns_not_a_guessing_game/ > > http://it.slashdot.org/article.pl?sid=08/07/08/195225&tid=172 > > > > PIR has a pending proposal to implement DNSSEC for .org: > > > > http://www.icann.org/registries/rsep/ > > > > Is that something that VeriSign has plans to accelerate for the > > important .com and .net registries, in order to prevent a long-term > > meltdown in DNS confidence/trust should DNS cache poisoning become > > widespread in August and beyond? > > > > No need for a "formal" press release, but I think the community > > deserves to know that people are working on the long-term solution to > > this problem, and making it a higher priority relative to other > > lesser > > issues. > > > > Point #14 in the latest policy newsletter appears to be the only > > "hint" > > that a few people are working on things: > > > > http://www.icann.org/topics/policy/update-jul08.htm#14 > > > > Hopefully something will happen before Cairo, as by then there might > > be > > widespread disruptions to the internet. Perhaps the Board might want > > to > > consider an early special meeting this week or next: > > > > http://www.icann.org/minutes/ > > > > instead of waiting until July 31st, in conjunction with the SSAC. > > > > Sincerely, > > > > George Kirikos > > http://www.kirikos.com/ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [At-Large] Rogue pharmacy sites -- outrageous
by Jeffrey A. Williams Aug. 6, 2008

Aug. 6, 2008

Beau and all, Currently this is an ICANN responsibility that ICANN cannot clearly manage properly, and is reluctant to take responsibility for. Yet it is ICANN that "Created" these registrars and the RAA contracts for. So we will continue to see these sorts of abuse unless or until ICANN takes action in a reasonable amount of time, or DOC/NTIA intervenes. At this juncture, I prefer the latter. "Brendler, Beau" wrote: > http://www.knujon.com/news.html#08052008 > > This was passed on to me by a friend at Berkman affiliated with the > StopBadware.org project (http://www.stopbadware.org) > > >From the text: "This is an example of a practice we have seen all too > frequently where Internet companies will remove sites temporarily for > reported policy violations only to restore them shortly afterwards. In > some cases the domains move from one Registrar to another (occasionally > two Registrars with the same parent company, however), but this is a > situation where the domains went right back where they were before. > DIRECT INFO/PUBLICDOMAINREGISTRY was rated the 9th Worst Registrar in > terms of sponsoring spam sites previously." > > What provisions in the revised RAA address this sort of issue from a > consumer perspective? Or is this considered "outside ICANN's scope"? > > **************************************************************************** > ******** > SCANNED > > **************************************************************************** > ******** > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org All, Yet another too soon.knee jerk claim by Apple. See: (August 1, 2008) Apple released a patch for the recently disclosed and exploited DNS vulnerability, but while it fixes Mac OS X systems used as DNS servers, it does not protect Macs being used as client systems. Fully patched versions of both Tiger (version 10.4.11) and Leopard (version 10.5.4) do not adequately randomize DNS source ports. Apple released Security Update 2008-005 on Thursday, July 31 to address 17 flaws in its OS X operating system. - From Internet Storm Center: http://isc.sans.org/diary.html?storyid=4810 A quick packet dump of my fully patched Leopard machine (OS X 10.5.4) shows it is - as a DNS client - still using incrementing ports. http://www.theregister.co.uk/2008/08/01/osx_still_vulnerable/print.html http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleI… http://www.computerworld.com/action/article.do?command=viewArticleBasic&art… Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

[Fwd: [Fwd 9th false reason given to: Request to mailing list NA-Discuss rejected]]
by Jeffrey A. Williams Aug. 6, 2008

Aug. 6, 2008

-------- Original Message -------- Subject: [Fwd 9th false reason given to: Request to mailing list NA-Discuss rejected] Date: Tue, 05 Aug 2008 20:14:19 -0700 From: "Jeffrey A. Williams" <jwkckid1(a)ix.netcom.com> Organization: IDNS and Spokesman for INEGroup To: "matthias.langenegger(a)icann.org" <matthias.langenegger(a)icann.org>,Nick Ashton-Hart <nick.ashton-hart(a)icann.org>,GAC Rep <ssene(a)ntia.doc.gov> CC: DOC/NTIA ICANN Rep <aheineman(a)ntia.doc.gov>,na-discuss-owner(a)atlarge-lists.icann.org,Wendy Seltzer <wendy(a)seltzer.com> Mattias and all, Yet again this is a false reason given. There were only 4 recipients which last I checked is less than 5, which is the max number of recipients according to Nicks most recent announcment. -------- Original Message -------- Subject: Request to mailing list NA-Discuss rejected Date: Wed, 06 Aug 2008 08:08:34 -0400 From: na-discuss-bounces(a)atlarge-lists.icann.org To: jwkckid1(a)ix.netcom.com Your request to the NA-Discuss mailing list Posting of your message titled "How to carjack a top Google exec, according to Google" has been rejected by the list moderator. The moderator gave the following reason for rejecting your request: "Too many recipients to the message" Any questions or comments should be directed to the list administrator at: na-discuss-owner(a)atlarge-lists.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Resend of:Apple DNS Patch Doesn't Fix Client Versions of OS X
by Jeffrey A. Williams Aug. 6, 2008

Aug. 6, 2008

All, Sorry that the list moderator/admin. has trouble counting to 5. So I have resent the below Email... Yet another too soon.knee jerk claim by Apple. See: (August 1, 2008) Apple released a patch for the recently disclosed and exploited DNS vulnerability, but while it fixes Mac OS X systems used as DNS servers, it does not protect Macs being used as client systems. Fully patched versions of both Tiger (version 10.4.11) and Leopard (version 10.5.4) do not adequately randomize DNS source ports. Apple released Security Update 2008-005 on Thursday, July 31 to address 17 flaws in its OS X operating system. - From Internet Storm Center: http://isc.sans.org/diary.html?storyid=4810 A quick packet dump of my fully patched Leopard machine (OS X 10.5.4) shows it is - as a DNS client - still using incrementing ports. http://www.theregister.co.uk/2008/08/01/osx_still_vulnerable/print.html http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleI… http://www.computerworld.com/action/article.do?command=viewArticleBasic&art… Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

[Fwd: Re: [ga] More Registrar Malfeasance Reported]
by Jeffrey A. Williams Aug. 6, 2008

Aug. 6, 2008

All, Forwarding this as it seems that Nick is unable or unwilling to manage a list forum by his own rules properly. -------- Original Message -------- Subject: Re: [ga] More Registrar Malfeasance Reported Date: Tue, 05 Aug 2008 17:05:42 -0700 From: "Jeffrey A. Williams" <jwkckid1(a)ix.netcom.com> Organization: IDNS and Spokesman for INEGroup To: ga(a)gnso.icann.org, Governance/IGC <governance(a)lists.cpsr.org> CC: "alac(a)atlarge-lists.icann.org" <alac(a)atlarge-lists.icann.org>,Stacy Burnette <stacy.burnette(a)icann.org> References: <444690.28282.qm(a)web52209.mail.re2.yahoo.com> Danny and all, Thank you again for your diligance here. This again demonstrates why ICANN and especially the GNSO, and ICANN registrars need DOC/NTIA as well as other supervision. Danny Younger wrote: > > KnujOn has found at least 19 rogue pharmacy domains, sponsored through DIRECT INFORMATION PVT LTD D/B/A PUBLICDOMAINREGISTRY.COM (PDR) back in operation with the same content and at the same nameserver after being reported to ICANN by the Registrar as suspended. The nameserver is also sponsored by PDR and is itself an unlicensed pharmacy site. This is an example of a practice we have seen all too frequently where Internet companies will remove sites temporarily for reported policy violations only to restore them shortly afterwards. DIRECT INFO/PDR was rated the 9th Worst Registrar by KnujOn in terms of sponsoring spam sites previously. Clearly the consumer is not being protected by the current system. Full report here: http://www.knujon.com/news.html#08052008 > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Apple DNS Patch Doesn't Fix Client Versions of OS X
by Jeffrey A. Williams Aug. 4, 2008

Aug. 4, 2008

All, Yet another too soon.knee jerk claim by Apple. See: (August 1, 2008) Apple released a patch for the recently disclosed and exploited DNS vulnerability, but while it fixes Mac OS X systems used as DNS servers, it does not protect Macs being used as client systems. Fully patched versions of both Tiger (version 10.4.11) and Leopard (version 10.5.4) do not adequately randomize DNS source ports. Apple released Security Update 2008-005 on Thursday, July 31 to address 17 flaws in its OS X operating system. - From Internet Storm Center: http://isc.sans.org/diary.html?storyid=4810 A quick packet dump of my fully patched Leopard machine (OS X 10.5.4) shows it is - as a DNS client - still using incrementing ports. http://www.theregister.co.uk/2008/08/01/osx_still_vulnerable/print.html http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleI… http://www.computerworld.com/action/article.do?command=viewArticleBasic&art… Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

RIAA's $222k Verdict Is Likely To Be Set Aside
by Jeffrey A. Williams Aug. 4, 2008

Aug. 4, 2008

All, Well seems that the recent RIAA legal "Big Gun" missed it's mark. So isn't it about/past time that ICANN's IPC discorge itself from the RIAA? See: http://recordingindustryvspeople.blogspot.com/ writes "Apparently the RIAA's http://news.slashdot.org/article.pl?sid=08/08/01/2251217&tid=123 'big gun' didn't fare so well this morning in Duluth, when he tried to persuade the judge in http://recordingindustryvspeople.blogspot.com/2007/01/index-of-litigation-d… Capitol v. Thomas that the part of the Copyright Act which says 'by sale or other transfer of ownership, or by rental, lease, or lending', can be disregarded. According to an http://blog.wired.com/27bstroke6/2008/08/judge-hints-at.html in-person account by Wired.com the Judge indicated that he is likely to grant a mistrial, setting aside the $222,000 jury verdict based upon his incorrect jury instruction, and that he will probably hand down his decision in September. Just yesterday some of the same lawyers http://recordingindustryvspeople.blogspot.com/2008/08/mpaa-loses-in-case-ag… got rebuffed by the US Court of Appeals for the Second Circuit in their attempt to argue that Cablevision's online storage for its customers constitutes a copyright infringement, in Cartoon Network v. CSC Holdings. There, too, the content owners had argued that the wording of the Copyright Act did not mean what it said. There, too, the Court politely but firmly disagreed." Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] Comments on ICANN's approval of .info Abusive Use Policy -- contradictions
by Jeffrey A. Williams Aug. 4, 2008

Aug. 4, 2008

George and all, Thank you George, very much! So to sum up, Afilias the .Info registry takes no responsibility for whatever it's registrar may or may not have done in it's determination of what any .Info domain name may or may not be "Involved" in or with. So that means that there essentially is no means by which, other than a UDRP provider, that abusive or accused abusive DN's as to take down, ect. So they, Afilias, ICANN, essentially punted. Just lovely! George Kirikos wrote: > Hi folks, > > I just wanted to share a few tidbits, so it's on the record. Does > anyone here find it interesting that in their proposal, they cite > 3.6.5: > > http://www.icann.org/en/registries/rsep/afilias-request-20jun08.pdf > > But according to their own staff, in the Fast Flux working group: > > http://forum.icann.org/lists/gnso-ff-pdp-may08/msg00333.html > http://forum.icann.org/lists/gnso-ff-pdp-may08/msg00036.html > > about section 3.6.5. :) > > "Language you cite from the .info RRA does not permit "de-registration > in the event of criminal activity, and/or to protect the interests of > the registry/registrar." The "integrity and stability of the > registry" refers > to operational stability and accuracy, which is not threatened by a > phish, > or fast-flux domains, etc. Such threats to the stability of the > registry > itself are quite rare. "Integrity" does not means the interests of the > TLD. > As far as I am aware, there are no blanket laws or government rules > that > allow gTLD registries to suspend domains etc whenever they like. Court > orders etc. are specific to particular cases, of course. " > > Not just any staff, though, but "Greg Aaron is Director, Key Account > Management and Domain Security at Afilias." "Greg manages registry > services for .INFO, and oversees Afilias' security programs, designed > to address domain name abuses such as phishing, spam, and malware in > .INFO." > > Also, - Afilias quotes the example of .biz for precedent in order to > get Fast Track approval from Staff: > > "For example, ICANN's contract with the .BIZ registry operator includes > a prohibition against registrants "Using the domain name for the > submission of unsolicited bulk e-mail, phishing, pharming or other > abusive or fraudulent purposes." > > http://www.icann.org/tlds/agreements/biz/appendix-08-08dec06.htm > > Afilias failed to mention that in that same agreement, 5 or 10 lines > below what they quoted, it says: (Exhibit D, point II) > > "The RDRP sets forth the terms under which any allegation that a domain > name is not used primarily for business or commercial purposes shall be > enforced on a case-by-case, fact specific basis by an independent > ICANN-accredited dispute provider. ******None of the violations of the > Restrictions will be enforced directly by or through Registry > Operator.****** Registry Operator will not review, monitor, or > otherwise verify that any particular domain name is being used > primarily for business or commercial purposes or that a domain name is > being used in compliance with the UDRP processes." > > In other words, the precedent they cited was flawed, and was actually > about the registry operator explicitly NOT reviewing it, but only > acting on a ruling from an ICANN-accredited dispute provider. > > Just thought some folks might want this information. > > Enjoy! > > Sincerely, > > George Kirikos > http://www.kirikos.com/ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

FBI Seizes Library Computers Without Warrant
by Jeffrey A. Williams Aug. 3, 2008

Aug. 3, 2008

All, What's up with this? I can't see how this was necessary and seemingly is abusive. For all you NA folks, this is something you can write you local FBI office about. IMHO, this is deplorable and is a significant user issue as many users use library computers to do thei research and other educational related activities. Antrax case my A$$! Looks like a CYA operation to me... What's next, is the FBI going to search little kids lunch boxes for P2P devices and cell phones and confiscate them too? See: Two FBI agents walked into a public library in Maryland, without a warrant, and http://wtopnews.com/?nid=598&sid=1452848 walked out with two computers. The library director agreed to release the machines to these smooth-talking feds. According to the article, the director of Frederick County Public Libraries indicated that this was the third time in his 10 years there that the FBI had requested records, but the first time they had come without a court order. The director seemed to indicate no regrets, stating 'It was a decision I made on my experience and the information given to me.' He further justified his actions, noting that the agents indicated specific computers they needed (of the several dozen in the library) and further that they 'had an awful lot of information.'" The library director speculated whether the raid may have involved the http://news.slashdot.org/article.pl?sid=08/08/01/1532217&tid=266 Bruce Ivins / anthrax case, musing "Obviously it coincided with the events everyone is talking about," but he said the agents hadn't mentioned it. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Speeking of "Moral Police":Verizon Denies DSL Because of Subscriber's Name
by Jeffrey A. Williams Aug. 3, 2008

Aug. 3, 2008

All, Who's the "Moral Police now"? Seems that Verizon has taken it upon themselves to be so. And it took the "Enquirer"! to get them off the dime?! Well let's hope this fine Dr. doesn't try to register his last name as a DN, like maybe Libshitz.edu? Or maybe Libshitz.info? >:) Note: one has to have a sense of humor to appriciate these things of course... See: When retired Philadelphia-area doctor and Vietnam veteran Dr. Herman I. Libshitz went to upgrade his dial-up connection to Verizon DSL, he was informed they http://www.philly.com/philly/hp/news_update/26089374.html wouldn't complete the order because his last name contained an expletive. Repeated calls to several levels of management at Verizon failed to resolve the problem, with several managers suggesting he change his last name. It all worked out in the end, after the Philadelphia Enquirer intervened. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Navajo Nation Losing Internet Access
by Jeffrey A. Williams Aug. 3, 2008

Aug. 3, 2008

All, I wonder if ICANN, google, or Verisign will step up here and help these poor native americans out? If they did, it would sure be good PR! Maybe even the ALAC and GA members could pass the hat as well? >:) It's nearly a sure thing Uncle Sam isn't going to stand up. See: Due to contracts that are allegedly FUBAR, and associated wrangling, the Navajo Nation is http://www.washingtonpost.com/wp-dyn/content/article/2008/08/01/AR200808010… being cut off by its satellite ISP. This is the final stage of the process, which already deprived chapter houses of access last April. While the business mechanisms play themselves into the expected ludicrous snarl, the real question may be: Is there a place for an inexpensive ham/technogeek/FOSS solution that could bypass the antics of the for-pay providers? Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Issues anyone? to: Band Leaks Own Album, Blames Pirates
by Jeffrey A. Williams Aug. 2, 2008

Aug. 2, 2008

All, Now isn't this just interesting?! I wonder if Buckcherry is an RIAA member? If so, I would than have to wonder how well the RIAA and subsequently the IPC audits it membership policies and practices, if in the case of the RIAA, they do at all beyond, what the last membership check was, and how much that member donated in addition for this year? Maybe Nick can use this a leverage when he is "Visiting" ICANN in MDR for travel expenses? >:) Oh and Nick, you might want to also hit up Google as well for those travel expenses as there is clearly a FCC Title 5 violation in their part in this, and remember anyone can file complaint with the FCC as a John Doe. Yet we have an RIAA that is constantly claiming that there are pirates under every rock and behind every Domain name, with BitTorrent being the "Blackbeard" of the bunch, and every other university student a would be major league "Pirate in Training" demanding P2P be regulated and constantly monitored by LEA's, while Google plays on both sides of the fence. Extrodinary! ACTA anyone? >:) See article: When the hard rock band Buckcherry found out their latest single had leaked on BitTorrent, they didn't try to cover it up or take the file down. No, instead, they issued a press release. After a bit of research, TorrentFreak found out http://torrentfreak.com/band-leaks-track-to-bittorrent-blames-pirates-08073… \the track wasn't leaked by pirates, but by Josh Klemme, the manager of the band. In an attempt to cover their tracks, the press release was pulled, but it's http://www.reuters.com/article/pressRelease/idUS133080+22-Jul-2008+MW200807… still available through Reuters and Google's cache. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [At-Large] ALAC Mailing List Changes - an update
by Jeffrey A. Williams Aug. 2, 2008

Aug. 2, 2008

JFC and all, As history has repeatedly shown, rough consensus isn't realistic. Only a vote of all interested parties as articulated in the MOU will suffice. In your own countries history, the "Let them eat cake" uttering proves should be sufficient evidence to remind you JFC of such an unrealistic notion. So in conclusion, ICANN still does not have an actual "At-large" that fully and unfetteredly represents users/stakeholeders. JFC Morfin wrote: > Vittorio, > this is why I opened a moderated Internet @large list at > http://atlax.org. I do not want to advertise it too much because > france@large plans to carry a technical review on the best way to > support the Internet Governance various Fora and @large groups, and > even possibily enginerr or develop a management tool based upon our > height years of experience of the issue and ICANN. > > That list will be what @larges want it to be as per their rough consensus. > jfc > > At 14:41 02/08/2008, Vittorio Bertola wrote: > > >Ok - the first attempt to send this message (just replying to a message > >from the global public list) got me back a "you're not authorized to > >open your mouth" message. > >Let's see if this other address works. > > > >At-Large Staff ha scritto: > > > Dear ALAC List members: > > > > > > Earlier today, I emailed you about some of the changes to the worldwide > > > At-Large lists, however, I misunderstood a part of what was intended with > > > respect to the new working committee list. > > > > > > It is actually intended that this list will be viewable via the open > > > archives (and, since the mailing lists are all connected to forums on > > > atlarge.icann.org, you can see the list traffic there too), but > > not that you > > > would be able to subscribe to it, as per the ALAC resolution at its July > > > meeting, and in line with other similar lists such as the GNSO Council. > > > >This effectively means that the rest of the community can't participate > >in a discussion with ALAC members. If I had to comment on something that > >an ALAC member said, what I would have to do is: > >- spend my time pressing F5 in my browser on the Web archive of the > >"public" ALAC list so that I can notice that a new message has been sent; > >- read it through the impractical, year-1995-style mail-to-list > >interface that ICANN provides; > >- select and copy the text; > >- open a new message in my email program, directed to the global At > >Large list; > >- paste the text as quote (hoping that my email app lets me do so); > >- add my comment; > >- manually add into the address list the person I am replying to, since > >it won't be there by default and I'm not even sure whether he/she'll be > >reading the global list; > >- presumably add some text to explain what I am replying to, since no > >one on that list will have seen the message before. > > > >Do you really think that this is a reasonable proposal? > > > >Also, is this list (the global one) being left to its destiny as Mr. > >Williams' personal dump? If that's the case, I don't see how we can have > >a discussion here either. It's just like the ALAC, rather than putting > >some effort into moderating the list and ensuring a reasonable > >environment for discussion with its community, prefers going away and > >preventing any outside participation. > > > >Regards, > >-- > >vb. Vittorio Bertola - vb [a] bertola.eu <-------- > >--------> finally with a new website at http://bertola.eu/ <-------- > > > > > >_______________________________________________ > >At-Large mailing list > >At-Large(a)atlarge-lists.icann.org > >http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > > >At-Large Official Site: http://atlarge.icann.org > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Resend of: GOOGLE SUED FOR SELLING INADEQUATE ADS
by Jeffrey A. Williams Aug. 1, 2008

Aug. 1, 2008

All, Seems yet again Google has decided to hoist upon users more nonsense/shanagans. Vint, perhaps in your evanglissm role, you can impress upon Mr. Schmidt that such behavior is not a healthy thing and should be discontinued forthwith. Thank you for your efforts in this regard in advance, and I am hopeful that you will be succesful in addressing this problem with a cease of these activities as the only vaable and proper resolution. See: On July 11th, attorney Hal K. Levitte sued Google for selling low-quality advertisements on parked domains and error pages. Levitte advertised his legal services using Googles programs last year. 15.3% of his ad campaign was taken up by parked domains, which are web pages with automated links related to a predetermined search keyword. Levitte had 202,528 impressions on parked domain pages, with 668 clicks and zero conversions. For the lack of results, Levitte sued Google for fraud, business code violations, and unjust enrichment. The lawsuit was filed as a class action, as Levittes attorneys hope to represent others in the same situation. Just six days later, on July 17th, RK West, a company that does business as Malibu Sales, sued Google for the same reasons as Levitte. The second complaint alleges that Google uses ads on parked domains to launder invalid clicks on websites that have no content. The complaint claims that because Google charges customers for every click, regardless of validity, it benefits from the ads on parked domains while the customer does not. The RK West complaint may be found at http://docs.justia.com/cases/federal/district-courts/california/candce/5:20… The Levitte complaint may be found at http://docs.justia.com/cases/federal/district-courts/california/candce/5:20… Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [At-Large] Report to the ICANN Board of Directors from WG onGNSOCouncil Restructuring
by Jeffrey A. Williams Aug. 1, 2008

Aug. 1, 2008

Dominik and all, Exactly my broader point, Dominik! What's much more important is that non-registrant users and independent registrants still have no voice or vote. The capture to which I alluded to and you plainly stated, remains. As such, the ecommerce aspects of economic prosperity will be so limited. Such a limit will be significant and solely or mostly in the hands of large commercial special interest groups. That's not a healthy economic paradigm. It is also a precursor to further fraud and abuse on a huge international scale. Dominik Filipp wrote: > Jeff, > > You are right, however, if we got rid of the percentage (as mentioned in > the Alan's explanation) and kept just raw vote numbers the situation > might get better. I do not see any reason why the contracted parties > should have similar power as the non-contracted parties, for other > reasons than keeping ICANN captured, of course. > > Dominik > > -----Original Message----- > From: alac-bounces(a)atlarge-lists.icann.org > [mailto:alac-bounces@atlarge-lists.icann.org] On Behalf Of Jeffrey A. > Williams > Sent: Tuesday, July 29, 2008 9:32 AM > To: ALAC; ALAC NA Discuss > Cc: Peter Dengate Thrush; twomey(a)icann.org > Subject: Re: [At-Large] Report to the ICANN Board of Directors from WG > onGNSOCouncil Restructuring > > Dominik and all, > > If the below outlined report is correct, than it is clear that > commercial interests have a significant advantage and the majority of > power in the GNSO as Registries and Registrars are essentially > commercial entities/businesses. Ergo no balance and essentially nothing > has changed in the GNSO other than the "Names" of the specific > representative groups. Further there is NO Independent Registrant > representative in this proposed structure, and NO user-non-registrant > reoresentative/ALAC. > > So I will now predict that there will be no significant change in the > bahavior of Registries or Registrars and the abuses that have been > occuring with increasing frequency will continue with even more > increasing frequency. I will also predict here and now that with this > proposed structure the IPC will get whatever it wants. > > Dominik Filipp wrote: > > > Cheryl, > > > > After having read the last WG output at > > > > > https://st.icann.org/data/workspaces/alac/attachments/at_large_advisory_ > > > > committee:20080729041513-0-3574/files/FinalReport-GNSO-ImprovementsWG.pd > > > f > > > > it seems like the proposed GNSO restructuralization could be as > follows > > (Attachment A) > > > > ------------------------------ > > 2 houses - contracted and non-contracted > > parties/constituencies, 2 parties > > in each house > > > > House 1 - Contracted party house consists > > of 2 (registry and registrar) constituencies House 2 - > > Non-contracted party house consists > > of 2 (commercial and non-commercial) > > parties/constituencies > > > > that is, 4 parties/constituencies in both the houses collectively. > > > > The GNSO Council (given that the lowest proposed number of members are > > > considered) > > > > House 1 > > Registries - 3 members > > Registrars - 3 members > > > > House 2 > > Commercial - 5 members > > Non-commercial - 5 members > > > > and also > > > > Equal number of votes between registries and registrars. > > Equal number of votes between commercial and non-commercial users. > > ------------------------------ > > > > Do I understand the proposal correctly, Cheryl? > > > > If so, there is a question I could not find an answer to. > > > > Q: What is the proposed number of votes for each of the four GNSO > > Council parties? > > > > Thanks > > > > Dominik > > > > -----Original Message----- > > From: alac-bounces(a)atlarge-lists.icann.org > > [mailto:alac-bounces@atlarge-lists.icann.org] On Behalf Of Cheryl > > Langdon-Orr > > Sent: Tuesday, July 29, 2008 7:06 AM > > To: alac(a)atlarge-lists.icann.org > > Cc: 'ALAC internal list' > > Subject: [At-Large] Report to the ICANN Board of Directors from WG on > > GNSOCouncil Restructuring > > > > At-Large. please note that earlier today the ALAC Executive and our > > representative on this WG Alan Greenberg, met and discussed our desire > > > to have a formal ALAC Statement to the Board on this matter. > > > > > > > > Please see our Wiki page > > https://st.icann.org/alac/index.cgi?at_large_advisory_committee to > find > > a link to the report of the WG from this now completed process, and > > also under Announcements to find an short background piece from the > > report and a note as to the mechanism for the ALAC to review our > > sub-committee and Rep statement appended to it, to be endorsed (in an > > expanded form if so desired) as an ALAC Statement to the Board. > > > > > > > > ALAC this serves as the start of the 7 day minimum notice required > for > > a formal vote to be taken (between meetings) on this matter and in the > > > next 24hrs further background documents and proposed expansion of this > > > statement will be posted and a Big Pulse vote be created for the > purpose > > of recording your views to 1. Endorse the proposed document an ALAC > > Statement, 2. Vote against the proposal or 3. Abstain. > > > > > > > > More in the next 24hrs. > > > > > > > > CLO > > > > _______________________________________________ > > ALAC mailing list > > ALAC(a)atlarge-lists.icann.org > > > http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann > > > .org > > > > At-Large Official Site: http://atlarge.icann.org > > > > _______________________________________________ > > ALAC mailing list > > ALAC(a)atlarge-lists.icann.org > > > http://atlarge-lists.icann.org/mailman/listinfo/alac_atlarge-lists.icann > .org > > > > > At-Large Official Site: http://atlarge.icann.org > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Apple Clients Still Vulnerable After DNS Patch
by Jeffrey A. Williams Aug. 1, 2008

Aug. 1, 2008

All, All is still not well with Apple.com even after Apple finnaly patched the original DNS problem. It seems that industry leaders are again showing their lack of knowledge in IT related issues that effect the security of their clients and who knows how many other unsuspecting users. Shame on Apple! Has the ISC or the SSAC gotten in touch with Apple and expressed that they need to do better? Well I don't know, but it sure doesn't seem so. See: Glenn Fleishman sends word that SANS Institute testing indicates that, even after installing http://it.slashdot.org/article.pl?sid=08/08/01/1215209&tid=172 Apple's latest patch for the DNS vulnerability, http://db.tidbits.com/article/9721 Leopard desktops (not servers) are still vulnerable or at least perpetuate risky behavior that makes exploitation easier. This matters because "With servers rapidly being patched worldwide, it's likely that the low-hanging fruit disappears, and vectors [will be] designed to attack massive numbers of clients on ISP networks." Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Apple finally patches dangerous DNS flaw
by Jeffrey A. Williams Aug. 1, 2008

Aug. 1, 2008

All, Well finally Apple got off it's A$$! See: http://www.networkworld.com/news/2008/080108-apple-finally-patches-dangerou… Lets all hope that this is not previews of coming attractions from Apple. But some how I get a erie feeling that this is becoming the norm. Seems to me that ICANN should have temporarily shut down Apple.com until they had the problem fixed and tested so that the exposure to users would have been better limited. The abuse to users was significant and the aftermath of damage is unknown and will be very hard to fully determine. It is completely irresponsible for Apple's managment to allow this to continue so long without requesting themselves to have their Domain Name suspended. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

[Fwd 6th false reason given to: Request to mailing list NA-Discuss rejected]
by Jeffrey A. Williams Aug. 1, 2008

Aug. 1, 2008

Matthias and all, Ok Matthias, et., al., as I have already said, there were only 4 recipients, ergo less than 5. So this rejection notice is false/untrue. Can you count to 4? -------- Original Message -------- Subject: Request to mailing list NA-Discuss rejected Date: Fri, 01 Aug 2008 06:44:39 -0400 From: na-discuss-bounces(a)atlarge-lists.icann.org To: jwkckid1(a)ix.netcom.com Your request to the NA-Discuss mailing list Posting of your message titled "GOOGLE SUED FOR SELLING INADEQUATE ADS" has been rejected by the list moderator. The moderator gave the following reason for rejecting your request: "Too many recipients to the message" Any questions or comments should be directed to the list administrator at: na-discuss-owner(a)atlarge-lists.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] Re: Potential Danger Ahead for Registrants -- dot-info Abusive Domain Use Policy
by Jeffrey A. Williams Aug. 1, 2008

Aug. 1, 2008

George and all, Good point and nicely attributed as well. Now if only ICANN could get the hint, eh?! George Kirikos wrote: > Hello, > > To elaborate on "due process." There's a famous award-winning film, "A > Man for All Seasons" from the 1960s, based on the play, that had a > memorable scene: > > ---- start quote -------- > "William Roper: So, now you give the Devil the benefit of law! > > Sir Thomas More: Yes! What would you do? Cut a great road through the > law to get after the Devil? > > William Roper: Yes, I'd cut down every law in England to do that! > > Sir Thomas More: Oh? And when the last law was down, and the Devil > turned 'round on you, where would you hide, Roper, the laws all being > flat? This country is planted thick with laws, from coast to coast, > Man's laws, not God's! And if you cut them down, and you're just the > man to do it, do you really think you could stand upright in the winds > that would blow then? Yes, I'd give the Devil benefit of law, for my > own safety's sake!" > ------ end of quote -------- > > "For my own safety's sake" what is the protective language in the > Afilias policy? In the rush to label some domains as "abusive" in the > name of "security," due process is eliminated. Even the Devil (real > abusers, spammers, etc.) deserves the benefit of law (and due process), > in order to protect everyone else from the anarachy that would result > without laws and due process. > > "Where would you hide" (what language in the contract do you rely > upon), when "the Devil turned 'round on you?" (when the registry > operator summarily finds your domain to be "abusive" in its own > discretion, its own definition of "abuse" and cancels it) > > Sincerely, > > George Kirikos > http://www.kirikos.com/ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0