August 2008 - NA-Discuss - lists.icann.org

More Phishing problems not in ICANN's report: New Zealand University eMail Server Used to Send Spam
by Jeffrey A. Williams Aug. 18, 2008

Aug. 18, 2008

All, Seems ICANN's own COB's home countries main universities is also engaged in Phishing... I for one am not surprised... See: Four staff members at the University of Otago (New Zealand) fell prey to a spear phishing attack that tricked them into providing their login credentials. The attackers used the information to gain access to the University's computer email server and used it to send about 1.55 million spam emails. The phishing emails appeared to come from the University's IT department; the recipients were asked to provide user names and passwords or else their access to email would be revoked. University of Otago staff members have been warned that requests for login information are "most likely fraudulent." http://www.odt.co.nz/print/17905 Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Update/follow-on: oman Wrongly Sued by RIAA Awarded More Than US $100, 000 in Legal Fees
by Jeffrey A. Williams Aug. 18, 2008

Aug. 18, 2008

All, Again, shouldn't we be asking/demanding that ICANN's IPC revoke the RIAA's membership? See: (August 15 & 18, 2008) A US Federal Court has awarded Tanya Andersen more than US $100,000 in legal fees and interest following her successful fight against a lawsuit brought by the Recording Industry Association of America (RIAA). The RIAA accused Andersen and her eight-year-old daughter of illegally downloading music onto their PC. Andersen denied the allegations and offered her computer for the RIAA to inspect. The RIAA declined the offer and served papers on Andersen. During the court case, her PC was inspected by the RIAA, which found no evidence of wrongdoing. The case was eventually dropped. Andersen has filed a separate lawsuit against the RIAA for malicious prosecution. http://www.vnunet.com/vnunet/news/2224122/single-mum-wins-107-951-riaa http://yro.slashdot.org/article.pl?sid=08/08/15/1145236 http://www.theinquirer.net/gb/inquirer/news/2008/08/15/music-weasels-pay-ta… Also see related note this link for new research on possible abuse of DMCA takedown notices: http://dmca.cs.washington.edu/ ] Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] FW: ccNSO Phishing survey results
by Jeffrey A. Williams Aug. 18, 2008

Aug. 18, 2008

Glen and all, Thank you for forwarding this along, much appreciated. Unfortunately it seems that this report has done little to reduce the phishing activity. Reporting is fine, but actually doing something about Phishers is what ICANN should focus it's attention on. That unfortunately, ICANN's SSAC has done little, if anything. We find this to be less than exceptable and a ongoing demonstration of poor leadership. As such, our members will continue to take more aggressive steps to thwart phishing anywhere, anytime, and every time we recognize it occurring. We will of course work with relevant LEA's as is appropriate and have shown to be effective and consistent. Let me again express our members noticed and reported Registries and Registrars whom have Domain Names that frequently engage in phishing. The most significant offenders are as follows: Enom Godaddy Network Solutions Afilias We believe that if effective corrective action regarding these contracted agents of ICANN whos abusive registrants and lack of proper enforcement on same is not taken forthwith, that ICANN has abrogated it's public responsibility and obligation under the MOU, accordingly. Glen de Saint Géry wrote: > [To: council[at]gnso.icann.org; liaison6c[at]gnso.icann.org] > [To: ga[at]gnso.icann.org; announce[at]gnso.icann.org] > [To: regional-liaisons[at]icann.org] > > Dear All, > > Please note that the ccNSO phishing survey report is posted at: > http://www.ccnso.icann.org/surveys/phishing-issues-survey-results-jun08.pdf > > The survey was conducted in spring -08, the results presented at the Paris meeting and the report published early August. > > Thank you. > Kind regards, > > Glen de Saint Géry > GNSO Secretariat > gnso.secretariat(a)gnso.icann.org > http://gnso.icann.org Glen de Saint Géry wrote: > [To: council[at]gnso.icann.org; liaison6c[at]gnso.icann.org] > [To: ga[at]gnso.icann.org; announce[at]gnso.icann.org] > [To: regional-liaisons[at]icann.org] > > Dear All, > > Please note that the ccNSO phishing survey report is posted at: > http://www.ccnso.icann.org/surveys/phishing-issues-survey-results-jun08.pdf > > The survey was conducted in spring -08, the results presented at the Paris meeting and the report published early August. > > Thank you. > Kind regards, > > Glen de Saint Géry > GNSO Secretariat > gnso.secretariat(a)gnso.icann.org > http://gnso.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Canadians Battling Proposed Canadian DMCA
by Jeffrey A. Williams Aug. 18, 2008

Aug. 18, 2008

All, Seems Micheal has finnaly gotten on the right band wagon. Lets hope ICANN's IPC and Bod will as well. I am also glad and proud that many of our Canadian members have lead this charge, and that their exemplary leadership is so demonstrated accrodingly... Yet the shame that ICANN and some other government leadership and representatives have decided to remain in lock step with Intelectual property special interest groups at the detrament and exploitation of those they purport to serve... Shame on them! See: CTV reports on how Canadians are http://www.ctv.ca/servlet/ArticleNews/story/CTVNews/20080817/copyright_crus… fighting back against the Canadian DMCA. Led by Michael Geist, the http://www.facebook.com/group.php?gid=6315846683 Fair Copyright for Canada Facebook group is nearing 90,000 members. There are local chapters, a http://c61in61seconds.ca/ YouTube contest, wikis, and people writing letters and organizing rallies against the copyright bill. Geist said, 'When you get tens of thousands of Canadians speaking out like this, there's big political risk for any political party who chooses to ignore it. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

[Fwd: Re: [ga] The Future of ICANN: A Series of Regional Consultative Meetings]
by Jeffrey A. Williams Aug. 17, 2008

Aug. 17, 2008

All, As an FYI -------- Original Message -------- Subject: Re: [ga] The Future of ICANN: A Series of Regional Consultative Meetings Date: Sat, 16 Aug 2008 17:52:04 -0700 From: "Jeffrey A. Williams" <jwkckid1(a)ix.netcom.com> Organization: IDNS and Spokesman for INEGroup To: Glen de Saint GÃ©ry <Glen(a)icann.org>,icann board <icann-board(a)icann.org>, GAC Rep <ssene(a)ntia.doc.gov>,Governance/IGC <governance(a)lists.cpsr.org> CC: "mail=ga(a)gnso.icann.org" <ga(a)gnso.icann.org>,DOC/NTIA ICANN Rep <aheineman(a)ntia.doc.gov> References: <05B243F724B2284986522B6ACD0504D788D60D34B1(a)EXVPMBX100-1.exc.icann.org> Glen and all, Well this is good news. But it's a bit to late IMO. ICANN should have done this 8 years ago when it was first suggested as round table discussions. Of course those efforts were resoundingly ignored and refused. From where our members point of view, stakeholders all, Institutional Confidence has greatly declined, and continues to decline at an ever excellerating rate. Ergo where ever you and/or ICANN is getting it's information must be living in a bottle of very small proportions. I guess the old adage, hear no evil, see no evil has also become an ICANN mantra as well... We do believe and have seen for some time now that a tiny few special interest groups such as Registries, registrars, Domain Name Tasters, Domain Name Speculators, and Intellectual Property lobbyists have been very supportive on many of ICANN's policies. Glen de Saint GÃ©ry wrote: > [To: council[at]gnso.icann.org; liaison6c[at]gnso.icann.org] > [To: ga[at]gnso.icann.org; announce[at]gnso.icann.org] > [To: regional-liaisons[at]icann.org] > > The Future of ICANN: A Series of Regional Consultative Meetings > http://www.icann.org/en/announcements/announcement-15aug08-en.htm > > 15 August 2008 > > A series of regional consultative meetings about crucial changes to ICANN will take place over the next three months in an effort to reach out to and involve the organization's global stakeholders. > > Four dates had been set so far*, with at least one other due to be announced shortly. They are: > > Tuesday, 19 August: Montevideo, Uruguay > Tuesday, 26 August: Christchurch, New Zealand. > Monday, 15 September: Geneva, Switzerland > Tuesday, 30 September: Washington DC, United States of America > A further date in Africa will be added shortly. > The meetings will be a part of ICANN's Improving Institutional Confidence (IIC) consultation that was opened in June following the community's response to the Midterm Review of the Joint Project Agreement (JPA) that ICANN has with the US Department of Commerce. > > To date, three documents have been produced to guide the IIC consultation: a Transition Action Plan; an Improving Institutional Confidence in ICANN document; and an FAQ. All three documents have been produced by the President's Strategy Committee (PSC) of ICANN and they are currently under review by the PSC following a first public comment period that closed on 31 July. > > The regional consultative meetings will explain the IIC consultation and its aims, and encourage discussion and debate surrounding a number of measures for improving confidence in ICANN both as an organization and as a model for coordinating the Internet's unique identifiers. At least one member of the PSC and one ICANN staff person will be present at each meeting and will help manage it. > > More details on the meetings and the consultation can be found online at http://www.icann.org/en/jpa/iic/regional-meetings.htm. Any questions about the meetings or process should be sent to iic(a)icann.org. > > ICANN encourages all those in the community to try to take part in one of the sessions and looks forward to engaging with its stakeholders over the next few months. > > -------------------------------------------------------------------------------- > > * With the exception of Washington, the dates coincide with existing meetings where Internet community members and those interested in ICANN issues are already expected to attend. > > Glen de Saint Géry > GNSO Secretariat > gnso.secretariat(a)gnso.icann.org > http://gnso.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Security issues: OWASP NYC AppSEC 008 Conference
by Jeffrey A. Williams Aug. 16, 2008

Aug. 16, 2008

All, As an FYI: Our friends at OWASP have put together a focused event September 24-25 in New York City. OWASP (www.owasp.org) is a not-for-profit community organization that does a lot of good in getting attention and developing solutions for the growing web application security issue. Proceeds from the event help fund many related projects and grants. You will see lots of familiar faces like Jeremiah Grossman, Howard Schmidt, Robert 'RSnake' Hansen and Jeff Williams. To learn more http://www.owasp.org/index.php/OWASP_NYC_AppSec_2008_Conference. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

[Fwd: More stratigic ICANN GNSO members Domain names, IPC.ORG and MPAA.ORG DNS abusively miss configured]
by Jeffrey A. Williams Aug. 15, 2008

Aug. 15, 2008

All, As an FYI -------- Original Message -------- Subject: More stratigic ICANN GNSO members Domain names, IPC.ORG and MPAA.ORG DNS abusively miss configured Date: Fri, 15 Aug 2008 01:48:31 -0700 From: "Jeffrey A. Williams" <jwkckid1(a)ix.netcom.com> Organization: IDNS and Spokesman for INEGroup To: ICANN registry comments <registryservice(a)icann.org>,ICANN Policy Staff <policy(a)icann.org>,icann legal <jeffrey(a)icann.org>, DHS cert <cert(a)cert.org>,GAC Rep <ssene(a)ntia.doc.gov> CC: Ga <ga(a)gnso.icann.org>, ICANN SSAC <ssac(a)icann.org>,ICANN SSAC Dave Piscitello <dave.piscitello(a)icann.org>,Steve Crocker <steve(a)shinkuro.com>, DHS info <info(a)us-cert.gov>,DHS Julie Myers <Julie.myers(a)dhs.gov>, pegge@MPAA.ORG,mis@IPC.ORG, domainreg(a)xo.com,DOC/NTIA ICANN Rep <aheineman(a)ntia.doc.gov> All, and FYI, Seems yet again we have even ICANN GNSO's IPC and the MPAA, a IPC member also have abusively miss configured Domain names exposing users/stakeholders to significant danger unnecessarily and frankly, with willful intent to do harm accordingly. See: http://private.dnsstuff.com/tools/dnsreport.ch?domain=mpaa.org&token=06a079… and http://private.dnsstuff.com/tools/dnsreport.ch?domain=ipc.org&token=0690307… Quite frankly, yet again the hypocrisy of the IPC, MPAA, ICANN, and the GNSO in this instance, to be more than a little outrageous and deplorable. And yet again clearly demonstrating a complete lack of responsible leadership. Therefore I would respectfully, but strongly request that the GAC and especially DOC/NTIA take immediate corrective action vis a vi ICANN and the IPC. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

[Fwd: Re: [ga] Bulk Transfer of gTLD Names Formerly Managed by De-AccreditedRegistrar DotForce Corp.]
by Jeffrey A. Williams Aug. 14, 2008

Aug. 14, 2008

All, As an FYI -------- Original Message -------- Subject: Re: [ga] Bulk Transfer of gTLD Names Formerly Managed by De-AccreditedRegistrar DotForce Corp. Date: Thu, 14 Aug 2008 15:57:54 -0700 From: "Jeffrey A. Williams" <jwkckid1(a)ix.netcom.com> Organization: IDNS and Spokesman for INEGroup To: Glen de Saint Géry <Glen(a)icann.org>,ICANN Admin supp. Manager Karen Lettner <karen.lettner(a)icann.org>,ICANN Policy Staff <policy(a)icann.org>,ICANN registry comments <registryservice(a)icann.org>,GAC Rep <ssene(a)ntia.doc.gov> CC: "mail=ga(a)gnso.icann.org" <ga(a)gnso.icann.org>,icann board <icann-board(a)icann.org>,ICANN Dan Halloran <halloran(a)icann.org>,ICANN Kim Davies <kim.davies(a)icann.org>,icann legal <jeffrey(a)icann.org>,ICANN Marc Salvatierra <marc.salvatierra(a)icann.org>,DOC/NTIA ICANN Rep <aheineman(a)ntia.doc.gov> References: <05B243F724B2284986522B6ACD0504D788D60D3277(a)EXVPMBX100-1.exc.icann.org> Glen and all, This is good to read, but is far too little and far too late in coming. The biggest abusive registrar at this time in our members opinion is GoDaddy, and a close second is Enom. Yet these registrars continue to abuse registrants unabated. We fully realize that in the case of GoDaddy, that it is a significantly large financial contributor to ICANN via registration fees, we believe such should not be a factor in their de-accreditation, which should be effected immediately. As spokesman, it is my duty and responsibility to yet again remind ICANN that the oversight and enforcement of their legal duty in respect to their registries and registrars is far from adequate, and borders on being totally reprehensible. Please correct this lack of proper and responsible oversight forthwith. Glen de Saint Géry wrote: > [To: council[at]gnso.icann.org; liaison6c[at]gnso.icann.org] > [To: ga[at]gnso.icann.org; announce[at]gnso.icann.org] > [To: regional-liaisons[at]icann.org] > > http://www.icann.org/en/announcements/announcement-14aug08-en.htm > > Bulk Transfer of gTLD Names Formerly Managed by De-Accredited Registrar DotForce Corp. > 14 August 2008 > > As a result of the de-accreditation of registrar DotForce Corp., ICANN initiated a process to identify a gaining registrar to receive the gTLD names that had been formerly managed by DotForce Corp. In accordance with ICANN's Interim Terminated Registrar Transition Procedure (see http://www.icann.org/en/announcements/announcement-2-06jun08-en.htm) on 6 June 2008, ICANN initiated a Request for Statements of Interest (RFI) from registrars interested in receiving the names. > > ICANN received eight statements of interest from registrars in response to the RFI. As a result of the procedure, ICANN selected Yesnic Co., Ltd. to receive the bulk transfer from DotForce Corp. > > The gTLD registries that have registered DotForce names have taken steps to effect the bulk transfers. Former registrant-customers of DotForce Corp. should soon receive notices of the transfer from Yesnic Co., Ltd. Customer questions about the transfer should be directed to Yesnic Co., Ltd. Contact information is available at: http://www.internic.net/registrars/registrar-100.html. > > FAQs > > Q. Why was this transfer authorized by ICANN? > > A. DotForce Corp's Registrar Accreditation Agreement (RAA) expired and DotForce was not eligible for renewal due to RAA compliance issues. As a result, DotForce was no longer permitted to register or manage gTLD registrations. In order to protect the customers of DotForce Corp., ICANN initiated this process to identify a new ICANN-accredited registrar to manage the registrations. > > Q. Will Yesnic Co., Ltd. attempt to contact the affected registrants? What should current/former DotForce Corp. customers do? > > A. Former customers of DotForce Corp. should receive a notice of the transfer and instructions for continued management of their names from Yesnic Co., Ltd. Affected customers who do not receive notices from Yesnic should contact Yesnic directly, using the information provided at http://www.internic.net/registrars/registrar-100.html. > > Q. Do registrants have to pay a fee for the bulk transfer? > > A. No, there is no cost to registrants for the bulk transfer. Unlike a normal inter-registrar transfer, the registration terms will not be extended by a year. Accordingly, it is important to contact Yesnic Co., Ltd. if your registration will expire soon in order to maintain your registration. > > Q. Why do former DotForce customers need to contact Yesnic Co., Ltd.? > > A. DotForce Corp. did not participate in the bulk transfer and did not share data with Yesnic Co., Ltd. Accordingly, all registrants must provide updated billing information or transfer their names to other registrars.. > > Q. What if former DotForce customers want to use a different registrar? > > A. Registrants will continue to be able to transfer their registrations to other registrars under the Inter-Registrar Transfer Policy (see http://www.icann.org/en/transfers/) Note that Yesnic Co., Ltd. may deny transfers for the first 60 days following the bulk transfer, at Yesnic's discretion. This 60-day period is permissible under the Inter-Registrar Transfer Policy, and is intended to help protect registrants. Names that will expire during the first 60 days following the transfer to Yesnic Co., Ltd. should be renewed by the registrant by contacting Yesnic using the information provided at http://www.internic.net/registrars/registrar-100.html. > > Q. How will DotForce Corp. customers know if a message purportedly from Yesnic Co., Ltd. is legitimate? > > A. The message from Yesnic should direct you to their website hosted at http://www.yesnic.com or refer you to other contact information listed at http://www.internic.net/registrars/registrar-100.html. For general advice about avoiding phishing email messages, you may also wish to refer to the materials prepared by the Anti-Phishing Working Group (see http://www.antiphishing.org/consumer_recs.html) > > Glen de Saint Géry > GNSO Secretariat > gnso.secretariat(a)gnso.icann.org > http://gnso.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Corrected Addendum 2: Position on the NomCom representing the NA region
by Alan Greenberg Aug. 14, 2008

Aug. 14, 2008

As was quickly pointed out to me, I forgot to say what day the 5 pm is on. The deadline is Wednesday, August 20, at 5 pm PDT. At least I caught and corrected my own spelling mistake in the first version! ;-) Alan >We will accept suggestion for good candidates until 5:00 pm, PDT. > >Please indicate if the person named has agreed to serve under the >terms in the last memos. > >Alan

1 0

Addendum 2: Position on the NomCom representing the NA region
by Alan Greenberg Aug. 14, 2008

Aug. 14, 2008

We will accept suggestion for good candidates until 5:00 pm, PDT. Please indicate if the person named has agreed to serve under the terms in the last memoes. Alan

1 0