- NA-Discuss - lists.icann.org

Canadian ISP Hijacking DNS Lookup Errors
by Jeffrey A. Williams July 19, 2008

July 19, 2008

All, Now isn't this a fine how do you do, eh? Seems our good friends in Canada are not being friendly. >:( Seems also to me anyway that the SSAC should be scolding these folks for their errant ways... See: http://www.user.dccnet.com/jonleblanc Freshly Exhumed tips us to news that Canadian ISP Rogers Cable appears to be http://www.digitalhome.ca/content/view/2689/206/ redirecting invalid DNS requests to their own search and advertising page. Roadrunner got caught doing the same thing http://slashdot.org/article.pl?sid=08/02/26/1741253&tid=95 earlier this year. According to the article, "The hijacking appears to be an attempt by Rogers to use its Deep Packet Inspection (DPI) technology to cash in on the mistakes of its users." Freshly Exhumed also reminds us, "As IOActive security researcher Dan Kaminsky has http://blog.wired.com/27bstroke6/2008/04/isps-error-page.html warned in the past, this presents a very serious security problem." Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] Re: Potential Danger Ahead for Registrants -- dot-info Abusive Domain Use Policy
by Jeffrey A. Williams July 18, 2008

July 18, 2008

George and all, Thanks for the update. I am sure no one is all that surprised. As usual openess and transparency as well as of course accountability has never been, nor is ever likely to be a strong suit of ICANN. Whatever appeal process is avaliable should be started soon. I doubt that Mr. Dierker, our often absent leader, will be interested in pursuing such even if the GA members are so interested. Ergo, it seems likely that other constituencies will need to get busy. Without a Registrants constituency, which has been long called for and is under some consideration by the GNSO review presently, is of course too late now to make such an appeal. Of course that was all part of the plan sense 1999. George Kirikos wrote: > Hello, > > Just to followup, it appears ICANN has approved the Afilias policy, > without even a formal public comment period: > > http://www.icann.org/registries/rsep/jones-to-afilias-18jul08.pdf > > I think this might require a reconsideration request or some other > action to appeal. > > Sincerely, > > George Kirikos > http://www.kirikos.com/ Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [At-Large] Post-Paris Review
by Evan Leibovitch July 17, 2008

July 17, 2008

JFC Morfin wrote: > At 17:37 16/07/2008, Ross Rader wrote: >> Evan Leibovitch wrote: >> > The apparent staff obsession to fund constituencies that don't >> need the >> > subsidy, at the expense of those who do, is what I consider >> worrisome. >> >> I don't see this as a staff push. My slightly uninvolved view is that >> this emanates mostly from the GNSO Council where constituency interests >> contend that their work is so important that they absolutely must have >> travel funding. Perhaps Alan could shed some better light on the issue, >> as I've not been directly involved in the Council for the better part of >> a year. > > May be a stupid question, but what has GNSO to do with ALAC? > 90% of the ALAC concerns are out of the GNSO scope. I think his point is that the constituencies that make up GNSO -- most of which already have financial motivations to be involved -- are whining that they want a piece of the travel pie. After all, if RALO chairs and secretariats qualify for funding, certainly the International Chamber of Commerce deserves funding too; it's only fair. Or so the story goes. - Evan

1 0

Re: [NA-Discuss] [At-Large] Post-Paris Review
by Roberto Gaetano July 16, 2008

July 16, 2008

Izumi AIZU wrote: > Well, so what,,, yes. I would rather like to have a clear > policy on "conflict of interest" for all officers of ICANN, > including Board members and GNSO council, than just targeting > the ALAC travel funding. Of course, ALAC also should have the > conflict of interest policy and its enforcement. I am not under the impression that it is the ALAC travel funding that is targeted. For sure, the ALAC Summit (that I personally endorse, support, and look forward to) is making some eyebrows rise, considering the impact on the budget. However, I believe that the key issue is to have a fair policy by which ICANN does not finance folks who would have participated anyway, paid by their employers (or supporters, or lobbying groups, or whatever). We will never be able to have a perfect mechanism by which we can flag each individual asking for funding as "deserving" or "not-deserving" the funding: it might in the end cost more to do proper and thorough due diligence than to apply looser criteria. However, one principle has to be kept as a key issue: transparency. I think (and I am talking in my personal capacity, not as a Board member) that the names of the people whose travel (or other expenditure) is funded by ICANN should be public, possibly with a short sentence explaining in what capacity the individual is funded. The amount of the funding should not be disclosed, though, simply because while there is a "need to know" who is being funded, and why, there is no "need to know" how much the real cost is. Public scrutiny should be directed to the principles governing the policy, not the accounting details. I fully understand Izumi's concerns about cultural differences, but we have to establish some basic principles for transparency and accountability, failing which we might expose the organization (and ourselves) not only to heavy criticism, but to suspicion of dealing with funding in a way that is not compliant with the expoused principles. Cheers, Roberto

1 0

Post-Paris Review
by Wendy Seltzer July 16, 2008

July 16, 2008

Hi Folks, Evan asked us to send Paris meeting retrospectives, so here's mine (to NA and ALAC): The Paris meeting was officially scheduled Mon-Thurs, with GNSO Council meetings beginning Saturday and Board workshop Sunday. This was a day shorter than previous meetings, and I found the truncation materially cut into the time to meet for hallway conversation and move among constituencies, which is, to my mind, the most valuable part of the face-to-face In addition, I was in board meetings for much of the time and so unable to attend much of the ALAC meeting. Topic areas: new gTLDs, including IDN Fast Track GNSO reform ALAC review Summit/travel policy The meeting saw important, but over-hyped progress on new gTLDs. The Board approved the GNSO's complex procedure, complete with the grounds for objection on "morality" and "lack of community support" grounds to which ALAC has voiced its objection. I thank NA members, among others, for their work in drafting a statement I could reference in my comments about the flaws in this policy. Whatever happens, this will hardly be "the greatest expansion of the Internet in 40 years," as an early version of the ICANN PR crowed. There is also movement on the IDN-CC fast-track. The Board held off voting on the GNSO restructuring, giving constituencies and liaised groups a 30-day deadline to reach consensus on alternatives. I hope we'll get reports from Alan on the status of these discussions The consultants gave their report on the ALAC Review. Many of us disagreed with their fact-gathering, analysis, and conclusions! I hope we'll put those into constructive suggestions to the Board ALAC Review Working Group. The Board resolved to support the ALAC summit, remarking at the same time that ALAC's overall funding levels were being reviewed in the new travel policy. If we have comments on travel policy and funding, we need to make those heard. Thanks, and comments welcome! --Wendy -- Wendy Seltzer -- wendy(a)seltzer.org Visiting Professor, American University Washington College of Law Fellow, Berkman Center for Internet & Society http://cyber.law.harvard.edu/seltzer.html http://www.chillingeffects.org/ https://www.torproject.org/

8 14

Questionnaires
by Thompson, Darlene July 16, 2008

July 16, 2008

Hi all, Further to one of my last e-mails (the FOR SHAME one), attached are the two questionnaires that need to be filled out ASAP. Thank you, D ᑕᓕᓐ ᑕᒻᓴᓐ ᓄᓇᓕᖕᓂ ᖃᕆᓴᐅᔭᕐᕕᒋᔭᐅᔪᓐᓇᕐᑐᓄᑦ ᑎᑎᕋᖅᑎ ᑮᓇᐅᔭᓕᕆᓂᕐᒧᑦ ᐊᐅᓚᑦᑎᔨᒃᑯᑦ ᐱᔨᑦᑎᕋᖅᕕᖓᑦ ᐃᓕᓐᓂᐊᕐᓂᓕᕆᔨᒃᑯᑦ ᓄᓇᕗᑦ ᒐᕙᒪᖓᑦ ᑎᑎᖅᑲᓂᐊᕐᕕᖓ 1000, ᐊᓪᓚᕝᕕᖓ 910 ᐃᖃᓗᐃᑦ, ᓄᓇᕗᑦ dthompson(a)gov.nu.ca ᐅᖄᓚᐅᑎ: 867 975-5631 ᓱᑲᑦᑐᒃᑰᕈᑎ: 867 975-5610 Taliin Taamsan Nunalingni Qaritauyani Atuqtauningitnun Titiraqtia Nunavut Kavamangat Titiraqarvia 1000, Nayugaa 910 Iqaluit, Nunavut dthompson(a)gov.nu.ca Hivayautik : 867 975-5631 Kayumiktuk : 867 975-5610 Darlene Thompson Community Access Program Administrator Corporate Services Division Department of Education Government of Nunavut PO Box 1000, Station 910 Iqaluit, Nunavut, X0A 0H0 dthompson(a)gov.nu.ca Ph: 867 975-5631 Fax: 867 975-5610 Darlene Thompson Administratrice du programme d’accès communautaire Division des services ministériels Ministère de l’Éducation Gouvernement du Nunavut Case postale 1000, Succursale 910 Iqaluit Nunavut, X0A 0H0 dthompson(a)gov.nu.ca Tél. : 867 975-5631 Téléc. : 867 975-5610

1 0

RAA Amendments Consultation
by At-Large Staff July 16, 2008

July 16, 2008

Dear All: FYI, with respect to the RAA Consultation, as I mentioned to many of you in Paris, the documents are being translated now and should be ready shortly. Beau, the lead on ALAC for the RAA Working Group, has asked that a briefing be scheduled for the members of the WG and we are working on arranging this at present. -- Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

5 4

Gmail Reveals the Names of All Users
by Jeffrey A. Williams July 16, 2008

July 16, 2008

All, especially Vint, Well Vint, seems yet again Google has proven their disregard for your users privacy and security. Bad show, IMO! Thanks allot for propagating even more UCE/Spam there Vint! >:( < sarcasm intended > Oh yes, and BTW Vint, now that this errant mistake has surfaced, how long to you think it is going to be before technical terrorist or organized Internet crime groups are going to exploit it? My guess is, it's already too late... Second question Vint: Why in the HELL don't you folks at Google test out your code vigorously BEFORE you release it to the public? You of all people should know better. See: Have you ever wanted to know the name of admin(a)gmail.com? Now you can. Through a bug in Google calendars http://blog.holdenkarau.com/2008/07/gaping-whole-in-gmail-privacy.html the names of all registered Gmail accounts are now readily available. All you need to find out the names of any gmail address is a Google calendar account yourself. Depending on your view this ranges from a harmless "feature" to a rather serious privacy violation. According to some reports, spammers are already exploiting this "feature"/bug to send personalized spam messages. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Europe May Put ACTA Back On Faster Track
by Jeffrey A. Williams July 16, 2008

July 16, 2008

All, FYI: [ Picked text/plain from multipart/alternative ] http://www.ip-watch.org/weblog/index.php?p=1152 Intellectual Property Watch 16 July 2008 Europe May Put ACTA Back On Faster Track By Monika Ermert for Intellectual Property Watch Despite earlier statements by European negotiators that the planned Anti-Counterfeiting Trade Agreement (ACTA) would need time for fine- tuning, nations seem to accept a fast track movement now. ACTA has been mentioned as an agenda item of the French presidency of the European Union (from July to January), the European Commissions Trade Directorate General (DG Trade) prepared a public report about its consultation with stakeholders in June, and the European Parliament has included ACTA in a draft report on the impact of counterfeiting on international trade. On Tuesday, Luc Chatel, secretary of state for consumer affairs and industry, and spokesman for the French government, explained that [pdf] the fight against piracy and counterfeiting is high on the agenda of the French presidency. Chatel said, During her presidency, France will work hard to make progress in this fight by taking a global approach. France would aim to present, during the EU Council meeting on competition policies 25-26 September, an integrated concept including a new plan for border controls that would update the border regulation currently in effect. In addition to creating an observatory against counterfeiting and better cooperation and information exchange among EU governments - using also the European Anti-Fraud Office, ACTA is indispensable to realising global cooperation and the enforcement of IP rights, Chatel said. A DG Trade spokesperson told Intellectual Property Watch, If you have the G8 leaders and the EU presidency behind it, then clearly there is a lot of dynamism. The Commission is prepared to help move forward with the negotiations. DG Trade is preparing a public report on its consultation with stakeholders on 23 June attended by around one hundred participants from industry and civil society. The European Parliaments Committee on International Trade also is working on the issue. International Trade Committee Member Daniel Caspary, European Peoples Party (EPP) member, told Intellectual Property Watch that he welcomes the approach of targeted global penal law sanctions. There are some questions with regard to civil rights, he said. But the Commission, which has been mandated to negotiate for the EU by the Council of Ministers, promised to take care of this issue. Draft Report sees ACTA as Pressure Tool Caspary said he is expecting amendments seeking safeguards for fundamental civil rights to a draft Parliament Report on the impact of counterfeiting on international trade prepared by liberal MEP Gianluca Susta. The report is clearly positive about ACTA and proposes that the full Parliament should call on the Commission to continue its fight against counterfeiting and piracy in parallel with the multilateral negotiations, also by means of bilateral, regional and multilateral agreements and also should call on the Commission and the member states to make all appropriate efforts to achieve a swift and satisfactory conclusion to the ACTA agreement. The entry into force of ACTA, Susta said in the report, would be an essential international benchmark and could ensure that counterfeiting is suppressed more effectively and provide an important tool for putting pressure on non-signatory third countries. The draft report also welcomes the growing interest by WTO member countries in ACTA and would hope that the agreement could also be signed by China. Caspary said it was clear to him that searches by border control authorities, for example in China, had to be backed by a judges decision. Anything else is impossible, he said, because otherwise one would open the gates for industrial espionage. Caspary downplayed the fact that for an assessment of ACTA members of Parliament should at least have a look at the draft text. Other observers confirmed that during an update given to the Trade Committee by DG Trade officials there were requests for the document. But so far ACTA negotiations have been held behind closed doors. The next meeting of negotiators is expected at the end of the month after a meeting planned for this week had to be postponed, sources said. A Critical Assessment of EU Bilateral Trade Agreements A more cautious approach in bilateral trade agreements with regard to fighting counterfeiting and piracy is recommended in a briefing paper requested by the International Trade Committee and prepared by Duncan Matthews of Queen Mary College, University of London. Matthews asks in his summary that inclusion of IP enforcement in agreements had to be done on the basis of adequate evidence on the level of counterfeiting and piracy, recommends that the European Parliament should consider the need to balance flexibilities in the TRIPS agreement with the need for additional provisions in bilateral agreements and warns that agreements that contain provisions on recourse to bilateral dispute settlement mechanisms risk weakening the multilateral dispute settlement system. TRIPS refers to the World Trade Organization Agreement on Trade-Related Aspects of Intellectual Property Rights. As IP rights are private rights, the main responsibility for taking measures to protect and enforce intellectual property rights should lie with individual right holders, said Matthews. He recommended establishing a parliamentary forum or an inter-parliamentary observatory to monitor and assess the impact of bilateral agreements in the fight against counterfeiting and piracy. On ACTA, he notes concerns by observers that ACTA would impose a narrow trade agenda at the expense of global cooperation and evidence- based policies, criminalising non-commercial copyright and trademark infringements, reinforcing digital rights management (DRM) technologies contrary to fair use principles in copyright law, and protecting internet service providers (ISPs) from liability for the actions of their subscribers. Matthews analysis might give some members of the EU Parliament second thoughts, yet so far it seems that Parliament will be kept outside of the negotiations. Parliament would be consulted, but as long as the Lisbon Treaty has not been signed there is no co-decision role for the Parliament on this, according to the DG Trade spokesman. Representatives of several non-governmental organisations have begun digging into the question of whether this legal assessment is correct, given that there was no harmonisation with regard to penal law sanctions against IP violations in the European Union. This has been blocked so far by member states. Monika Ermert may be reached at info(a)ip-watch.ch. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

DNS Security holes: Not a Guessing Game, comments by Paul Vixie
by Jeffrey A. Williams July 16, 2008

July 16, 2008

All, FYI from circle ID: Comment by Paul Vixie http://www.circleid.com/posts/87143_dns_not_a_guessing_game/#4238 While ISC is totally ready and willing to cooperate with ICANN on the root zone demo David mentioned, that demo is of technology, not political will, and is therefore somewhat off-topic. I want the real root zone signed with a real key so that TLDs who sign themselves will have a secure place to publish their TLD keys. I have searched the world and I've busted into every smoke filled room on it, and I have still not found the person who can say "yes" to that, nor have I found the people who are currently saying "no". What I do know is that if ICANN and USG had the political will to make this happen, it would happen. My note: Well I find this interesting attempt to hold out the olive branch while at the same time attempting to keep a distance from ICANN. Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0