- NA-Discuss - lists.icann.org

Re: [NA-Discuss] [At-Large] Pre-Qualification for Registry Services Providers
by Jeffrey A. Williams Aug. 13, 2008

Aug. 13, 2008

JFC and all, Yes, for instance Who exactly? JFC Morfin wrote: > At 06:03 14/08/2008, Bret Fausett wrote: > >The note below is disappointing. > >On Aug 12, 2008, at 11:43 PM, At-Large Staff wrote: > >>During the exploration of the initiative, ICANN consulted with > >>the community including technical experts and gTLD and ccTLD > >>registries and registry service providers. > > Names? > jfc > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

NARALO Summary Minutes 11 August 2008
by At-Large Staff Aug. 12, 2008

Aug. 12, 2008

Dear all, Darlene Thompson kindly prepared the summary minutes for yesterday¹s NARALO teleconference. Please find the minutes and the audio recording on the meeting page: https://st.icann.org/naralo/index.cgi?11_august_2008 Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

1 0

Google Using DoubleClick Tracking Cookies
by Jeffrey A. Williams Aug. 12, 2008

Aug. 12, 2008

All, Although there are a few here that could care less about others privacy, which IMHO is far less than reasonably considerate. There is a growing trend to put a stop to unsolicited intrusions such as, but not limited to Tracking Cookies which Google is famous for. Vint, let be very blunt here. I and our members are getting very irritiated by this nonsense, especially sense Google nearly a year ago stated that they were going to cease doing this sort of foolishness. So now I suppose that because it is doubleclick, owned by Google, that will be the equivication excuse for being less than honest in Googles earlier pledge? Bait and switch eh? Well Google has yet again just been exposed.... See: News coming out of the letters the House Energy and Commerce Committee sent to a number of broadband and Internet companies about their policies and practices on user tracking. The committee has now made public 25 responses to its queries, and many companies, including Google, http://www.washingtonpost.com/wp-dyn/content/article/2008/08/11/AR200808110… acknowledge using targeted-advertising technology without explicitly informing customers. The Committee is considering legislation to require explicitly informing the consumer of the type of information being gathered and any intent to use it for a different purpose, and a right to say "no" to the collection or use. The submitter notes that, while Google denies using deep packet inspection, if the traffic is a Google search or email to or from a Gmail account, Google does not need DPI to see the contents of the message. "The revelations came in response to a bipartisan inquiry of how more Internet companies have gathered data on customers. Edward J. Markey (D-Mass.) said 'Increasingly, there are no limits technologically as to what a company can do in terms of collecting information... and then selling it as a commodity to other providers.' Some companies like NebuAd have tested deep-packet inspection with some broadband providers Knology and Cable One. Google said that it had begun to use the DoubleClick ad-serving cookie that allow the tracking of Web surfing across different sites but said it was not using deep packet inspection. Google promotes the fact that its merger with DoubleClick provides advertisers 'insight into the number of people who have seen an ad campaign,' as well as 'how many users visited their sites after seeing an ad.' Microsoft and Yahoo acknowledge the use of behavioral targeting. Yahoo says it allows users to turn off targeted advertising on its Web sites; Microsoft has not yet responded to the committee." Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

More IPC/RIAA nonsense: Collegiate Resistance To RIAA In Michigan
by Jeffrey A. Williams Aug. 12, 2008

Aug. 12, 2008

All, As an ongoing saga FYI: http://recordingindustryvspeople.blogspot.com/ NewYorkCountryLawyer writes "There are now at least http://www.p2pnet.net/story/16699 three complaints being investigated in Michigan against the RIAA's unlicensed investigator, SafeNet a/k/a MediaSentry, one of which was http://recordingindustryvspeople.blogspot.com/2008/08/central-michigan-univ… filed by Central Michigan University itself. Two other complaints have been filed by students, one from http://news.slashdot.org/article.pl?sid=08/07/09/2228226&tid=123 Northern Michigan University and one from http://recordingindustryvspeople.blogspot.com/2008/08/university-of-michiga… University of Michigan. This appears to be part of http://chronicle.com/free/v54/i49/49a00104.htm the growing sense of exasperation colleges and universities are feeling over the RIAA's harassment." P.S. seems yet again there is a significant disconnect if not down right disgust with the IPC's RIAA, and it is growing... So again I call for ICANN to sanction the IPC or revoke the RIAA's membership... Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

20 August 1400 UTC: Briefing Session on the Amendments on the RAA
by At-Large Staff Aug. 12, 2008

Aug. 12, 2008

Dear all, We would like to invite you to a briefing and discussion session attended by Tim Cole, Chief Registrar Liaison, and the At-Large RAA Working Group and members of the At-Large community on the Draft amendments to the Registrar Accreditation Agreement (RAA). The public consultation period on the RAA has recently ended in English, but the consultation materials were posted in French and Spanish on 6th August and comments in those languages will be taken until the end of August. The At-Large community will be developing its views, incorporating the viewpoints of its Spanish and French-speaking participants, as follow-up actions from the briefing. The teleconference will provide an opportunity for all participants to ask questions and discuss the RAA Amendments consultation and documents and for those in the Spanish and French-speaking communities to receive any background information on the RAA, its history and the reasons that led to the creation of the amendments that they require. Participants are requested to provide their comments or questions in advance, to the extent possible, at the following URL by using the Comment¹ button at the top of the page: https://st.icann.org/alac/index.cgi?draft_amendments_to_raa You will also find participation instructions on this page. Presenters/Moderators: Tim Cole, Chief Registrar Liaison, oversees the registrar new and renewal accreditation process. He has been intensively involved in the RAA consultation process. Beau Brendler is an ALAC member from North America and the ALAC focal point for the At-Large Registrar Registrant Relations Working Group. Background Information: The Registrar Accreditation Agreement (RAA) is the contract that governs the relationship between ICANN and its approximately 900 accredited registrars. The current agreement has been in place since May 2001. As the market has developed and the number of ICANN accredited registrars and domain name registrations have grown significantly, it has become clear that certain amendments should be made to this important agreement. The amendments are intended to provide clarity and certainty regarding the duties of registrars and the rights of registrants. In March 2007, Dr. Paul Twomey, President and CEO of ICANN called for a comprehensive review of the RAA and the Accreditation process. The results of that review included a Board resolution describing an approach for arriving at and implementing amendments. In accordance with that resolution, ICANN has solicited public input for possible changes to the RAA and the accreditation process. The Staff has drafted a set of proposed amendments in accordance with that input, information received at workshops and public fora to date, and consultations with the gTLD Registrar Constituency. The Teleconference is scheduled on Wednesday, 20 August at 1400 UTC. There will be simultaneous interpretation in French and Spanish. All ICANN stakeholder community members are welcome to participate, especially those who are primarily French and/or Spanish-speakers. Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

5 5

FW: Regional Advise for the Foundation for Building Sustainable Communities
by Thompson, Darlene Aug. 11, 2008

Aug. 11, 2008

Hi all, Please let me know if you are opposed to this organization's application. It appears to me that everything in the due diligence report is clear. Darlene Darlene A. Thompson Community Access Program Administrator Nunavut Dept. of Education / N-CAP P.O. Box 1000, Station 910 Iqaluit, NU X0A 0H0 Phone: (867) 975-5631 Fax: (867) 975-5610 E-mail: dthompson(a)gov.nu.ca <mailto:dthompson@gov.nu.ca> ________________________________ From: At-Large Staff [mailto:staff@atlarge.icann.org] Sent: Tuesday, August 05, 2008 8:07 AM To: Evan Leibovitch; Thompson, Darlene Subject: Regional Advise for the Foundation for Building Sustainable Communities Dear Evan, Dear Darlene, Please find attached the application and the Due Diligence form for the Foundation for Building Sustainable Communities. We kindly ask you to provide us with the regional advice for this application in your capacity as regional Secretariat. In order to proceed with the application on time we should receive the regional advice by August 28th. Thank you for your assistance. Regards, Nick Ashton-Hart, Matthias Langenegger, Frederic Teboul ICANN At-Large Staff email: staff(a)atlarge.icann.org

1 0

Re: [NA-Discuss] [ga] Vixies vixens make big boo boo on successful Russian DNS hack
by Jeffrey A. Williams Aug. 11, 2008

Aug. 11, 2008

Dr. Joe and all, As you know, I know what you mean vis a vi Palmer. I routinely delete his posts. I shall not add spice to his goulash. I know you Joe, so even at times we may not always agree fully, I always consider your thoughts carefully and fully before commenting one way of another. I also know that you are a very knowledgeable person in various areas of expertise in the IT arena. Like myself, raw politics is not your plate of caviare. Joe Baptista wrote: > > > On Sun, Aug 10, 2008 at 9:54 PM, Jeffrey A. > Williams <jwkckid1(a)ix.netcom.com> wrote: > > Well your very welcome indeed! >:) After all what is a > meal, > if not with the proper spice to enhance properly the savory > taste > eh? Unless of course that meal is best served cold... Food > for > thought prhaps? You be the judge. > > > Indeed. Sometimes a chilly affair is delicious. But this one I think > I would prefer spicy hot. > > Have you noticed the recent appeals to my person from one Thomas > Baxter (a.k.a. John Palmer). My fellow monitor and chair in their > silence don't seem to mind if we take the group into a brief encounter > with libel and slander. They are reminded if they have concerns they > should be addressed by the three of us in private first. > > I think I should reply but was hoping for one more appeal. I get a > kick out of Palmers attempts to libel and slander me on the GA. But i > think I'll continue my silence until Palmer really starts squealing. > > What do you think. Have we got game? > > regards > joe baptista > > > > > Joe Baptista wrote: > > > > > > > On Sun, Aug 10, 2008 at 3:12 AM, Jeffrey A. > > Williams <jwkckid1(a)ix.netcom.com> wrote: > > > > > > Dr. Joe and all, > > > > Thanks for also saving/archiving the original story. > > > History if > > saved in this manner can never be truthfully > revised. BTW, > > I > > and 200 odd other or our members also archived this > story > > including all metadata for forensics purposes as well > if > > needed > > in the future for legal purposes. I hope SANS will > also be > > covering it as well as did NetworkWorld. > > > > > > Your a gem Jeff, if not a joy to add flavour to our > gatherings. > > > > cheers > > joe baptista > > > > > > > > > > FWIW, it may be time to keep a closer watch on > Circleid, > > which I have also written for on occasion. Yellow > > journalism > > is not a good thing... > > > > Joe Baptista wrote: > > > > > > > > The news story below was first published on > CircleID. It > > has since > > > been yanked and is no where to be found on > CircleID. > > Maybe we are > > > witnessing a bit of history revision. This makes > me sad > > because > > > CircleID was a publication I once wrote for. In > fact I > > was one of the > > > first paid writer for the organization. Probably > the only > > one at the > > > time. And it is sad to see revision at an > organization I > > was once > > > associated with. > > > > > > However it is understandable considering Vixie, the > sacred > > cow of DNS, > > > made such a stupid and silly statement in the > article. > > > > > > Basically an internet researcher in Russia was able > to > > break the Vixie > > > patch and poison a servers cache after some 10 > hours, > > billions of > > > connections over a gigabit connection. Vixies > response > > was "before > > > somebody gets all excited about it let's be clear > that it > > takes two > > > billion packets on average to defeat UDP port > > randomization, which in > > > this case was a fully utilized gigabit Internet > connection > > for a > > > period of ten hours." and proceeded to draw > parallels > > that the level > > > of risk was reasonably low because of this > > rationalization. > > > > > > I think sometime Vixie lives in the dark ages of > the net, > > when > > > everything was low bandwidth and script kiddies > were a > > novelty. > > > Indeed Polyakov, the Russian researcher, should be > > congratulated for > > > his success in this attack considering the poor > russian > > was using such > > > limited resources. > > > > > > Unlike script kiddies or real internet criminals > Polyakov > > did not have > > > the resources required, being hundreds of thousands > of > > computers > > > connected through a maze of IRC botnets on hundreds > of > > thousands of > > > both DSL and gigabit connections to conduct a > proper > > attack. Poor man > > > had to do it with one computer and one high speed > internet > > link. If > > > he had better resources - like the kiddies - he > could > > probably do it > > > in much less time - 10 - 20 minutes? > > > > > > Under these circumstances I'm not surprised the > story was > > yanked. The > > > quote makes Vixie look like an idiot. > > > > > > In any case - here is the original story no longer > > published at > > > CircleID. > > > > > > > > > Latest news postings on CircleID > > > URL: http://www.circleid.com/news/ > > > Updated: 10 hours 46 min ago > > > > > > Emergency DNS Patch Still Vulnerable, Proves > Russian > > Physicist > > > > > > 10 hours 19 min ago > > > A Russian physicist has been able to successfully > poison > > the latest > > > BIND patch with fully randomized ports. In other > words, > > the emergency > > > fix put in place to patch the Domain Name System > (DNS) > > vulnerability > > > for BIND, Internet's most popular DNS software, has > been > > demonstrated > > > to be vulnerableand still exploitable by > criminals. > > > > > > Evgeniy Polyakov from Moscow, Russia in a blog post > today, > > has shown > > > how using two fairly powerful computers and a fast > > broadband > > > connection, one could successfully attack the > patched DNS > > server in > > > less than 10 hours. With a fast connection, "any > trojaned > > machine can > > > poison your DNS during one night" says Polyakov in > his > > blog post. > > > > > > As demonstrated by security expert, Dan Kaminsky on > > > Wednesday at the > > > Black Hat security conference, the vulnerability, > if > > exploited by > > > criminal, could be detrimental to the Web as well > as > > services such as > > > email. > > > > > > Paul Vixie, president of the Internet Systems > Consortium > > (ISC), the > > > organization in charge of maintaining the BIND > software > > has verified > > > that Polyakov's exploit looks real. However "before > > > somebody gets all > > > excited about it," Vixie says, "let's be clear that > it > > takes two > > > billion packets on average to defeat UDP port > > randomization, which in > > > this case was a fully utilized gigabit Internet > connection > > for a > > > period of ten hours." In other words, the > probability of a > > successful > > > attack is fairly minimal. On the other hand, in the > case > > of an > > > unpatched server, an attack was "narrowed down to > six > > seconds," Vixie > > > noted. > > > > > > In the long term, Vixie says "we'll go on improving > our > > forgery > > > resilience, as will every recursive DNS > implementor, while > > we continue > > > pushing DNSSEC as the ultimate long term solution > to the > > entire > > > forgery problem including this off-path-attacker > problem." > > > > > > > > More under: DNS, DNSSEC, Security > > > Categories: Net coverage > > > > > > -- > > > Joe Baptista > > > www.publicroot.org > > > PublicRoot Consortium > > > > > > ---------------------------------------------------------------- > > > > > > The future of the Internet is Open, Transparent, > > Inclusive, > > > Representative & Accountable to the Internet > community > > @large. > > > > > > ---------------------------------------------------------------- > > > > > > Office: +1 (360) 526-6077 (extension 052) > > > Fax: +1 (509) 479-0084 > > > > > > > > Regards, > > > > Spokesman for INEGroup LLA. - (Over 281k > > members/stakeholders strong!) > > "Obedience of the law is the greatest freedom" - > > Abraham Lincoln > > > > "Credit should go with the performance of duty and > not with > > what is > > very often the accident of glory" - Theodore > Roosevelt > > > > "If the probability be called P; the injury, L; and > the > > burden, B; > > liability depends upon whether B is less than L > multiplied > > by > > P: i.e., whether B is less than PL." > > United States v. Carroll Towing (159 F.2d 169 [2d > Cir. > > 1947] > > ===== > > > ========================================================= > > Updated 1/26/04 > > CSO/DIR. Internet Network Eng. SR. Eng. Network data > > security IDNS. > > div. of Information Network Eng. INEG. INC. > > ABA member in good standing member ID 01257402 E-Mail > > > jwkckid1(a)ix.netcom.com > > My Phone: 214-244-4827 > > > > > > > > > > > > -- > > Joe Baptista > > www.publicroot.org > > PublicRoot Consortium > > > ---------------------------------------------------------------- > > > The future of the Internet is Open, Transparent, > Inclusive, > > Representative & Accountable to the Internet community > @large. > > > ---------------------------------------------------------------- > > > Office: +1 (360) 526-6077 (extension 052) > > Fax: +1 (509) 479-0084 > > > > Regards, > > > > Spokesman for INEGroup LLA. - (Over 281k > members/stakeholders strong!) > > > > "Obedience of the law is the greatest freedom" - > > Abraham Lincoln > > > > "Credit should go with the performance of duty and not > with what is > > very often the accident of glory" - Theodore Roosevelt > > > > "If the probability be called P; the injury, L; and the > burden, B; > > liability depends upon whether B is less than L multiplied > by > > P: i.e., whether B is less than PL." > > United States v. Carroll Towing (159 F.2d 169 [2d Cir. > 1947] > > > =============================================================== > > > Updated 1/26/04 > > CSO/DIR. Internet Network Eng. SR. Eng. Network data > security IDNS. > > div. of Information Network Eng. INEG. INC. > > ABA member in good standing member ID 01257402 E-Mail > > jwkckid1(a)ix.netcom.com > > My Phone: 214-244-4827 > > > > > > > > -- > Joe Baptista > www.publicroot.org > PublicRoot Consortium > ---------------------------------------------------------------- > The future of the Internet is Open, Transparent, Inclusive, > Representative & Accountable to the Internet community @large. > ---------------------------------------------------------------- > Office: +1 (360) 526-6077 (extension 052) > Fax: +1 (509) 479-0084 > > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [At-Large] Updates to New gTLD Program Implementation andauctioning model.
by Jeffrey A. Williams Aug. 11, 2008

Aug. 11, 2008

Chris and all, Good point, good argument, and your conclusion is of course spot on. But Chris, some of these folks are dreamers. As such they seek the good nature of capitalists to support their rice/begging bowl of demands or desires. That's of course not how raw Capitalism works, and never has been. ICANN is gluten for more money as having more money equates to more power and influence. Remember, as I am sure you do, influence is always for sale, but rarely for free. This ALAC proposal is so weak as to be pitiful. The IPC and BC will see it in a New York second. Only DOC/NTIA can nix the ICANN new gTLD auction implimentation proposal. IMO and the opinion of our members, they should do so. But I doubt that they will. NameCritic wrote: > I like your thoughts about the funds going into an account to assist those > that cannot afford the high price ICANN wants for the creation of a new TLD. > How would you suggest the playing field be equal in terms of small business > owners vs. large corporations? Auctions favor the larger corporation or > anyone with more money. That has never been an equitable solution. Do you > believe that those who created TLDs in other roots with the intention of > being added to the ICANN root should have no preference given to them? With > domain names, first come, first serve was always the accepted method. The > new ICANN gTLD process ignores those who have already shown their > intentions, many for several years, in favor of whoever can pay the most > money. You really think this is fair? > > Chris McElroy > > ----- Original Message ----- > From: "Alan Greenberg" <alan.greenberg(a)mcgill.ca> > To: <at-large(a)atlarge-lists.icann.org> > Sent: Sunday, August 10, 2008 5:20 PM > Subject: Re: [At-Large] Updates to New gTLD Program Implementation and > auctioning model. > > > Patrick and Hong, I find your comments a strong over-reaction. > > > > The issue that is being discussed is how to handle the situation of > > multiple people applying for the same TLD, and they cannot come to an > > agreement amongst themselves. Classic examples are ".web" and ".mail" > > but there are plenty of other examples. > > > > The paper discusses the various ways of addressing such conflicts, > > and comes to the conclusion that auctions are probably the preferable > > path. If you disagree with this, that is fine. The only seeming > > practical alternative is a subjective analysis of which is the best > > for the overall good of the Internet or the communities or whatever > > (the so-called beauty contest). I find that alternative far too > > fraught with potential problems, but if that is what you favour, it > > would be interesting to hear how you think it can be done properly. > > > > Using an auction to resolve the conflict does indeed mean that .web > > will not likely go to a small not-for-profit organization. If that is > > your concern, then in my mind, you are being somewhat unrealistic. > > > > On the positive side, the possible auctions of these relatively few > > high-profile TLDs will likely bring in a LOT of money. It has > > repeatedly been suggested that this wind-fall profit not be simply > > wrapped into ICANN general funds, or even used to offset the costs of > > offering new gTLDs. But rather it be used to (with appropriate > > caution) make it less expensive and less onerous for not-for-profits, > > cultural communities and developing countries folks to acquire new gTLDs. > > > > Now THAT is something that I think At-Large should make a strong > > statement about. > > > > Alan > > > > > > At 09/08/2008 06:03 PM, Hong Xue wrote: > >>Thanks for drawing our attention on this paper. Given that the new gTLD > >>process embraces the IDN TLDs, the paper presents a very surprising, or > >>shocking view, on allocation of TLDs. If the paper is primarily on the > >>economic consideration, I wonder if the ICANN has any other consideration, > >>such as protecting cultural diversity and bridging digital divide, on > >>selection of new gTLDs (IDN gTLDs). As a governing body of a critical > >>Internet resources, ICANN should envisage the values that are more > >>important > >>and fundamental than the highest bidding amount. I echo what has been > >>precisely stated by Vittorio: > >> > >>Another wrong assumption is that monetary value is the only quantity that > >>counts.In fact, personally I think that the "value" of a TLD is mostly > >>connected to other factors. For example, one is how many final users of > >>the > >>Internet will ever use services located inside that TLD; another one is > >>how > >>strongly these people will feel attached to that TLD, i.e. whether the TLD > >>contributes to build any kind of "community identity" for an online group > >>of > >>people that presently does not have it; a third one is whether the new TLD > >>will spawn innovative uses of the DNS or enable innovative services. None > >>of > >>these is directly connected to monetary value, and it is quite disturbing > >>to > >>me that an organization like ICANN, which is meant to steward scarce > >>global > >>public resources in the interest of the entire community of the Internet, > >>still seems to have such a partial and narrow view of where the value of > >>the > >>Internet itself lies. > >>Hong > >> > >> > >> > >> > >>On Sat, Aug 9, 2008 at 11:14 PM, Patrick Vande Walle > >><patrick(a)vande-walle.eu > >> > wrote: > >> > >> > http://icann.org/en/announcements/announcement-08aug08-en.htm > >> > > >> > ICANN has published a paper from its contractor PowerAuctions LLC, > >> > regarding the use of auctions to award new TLD strings in case of > >> > contention. > >> > > >> > http://icann.org/en/topics/economic-case-auctions-08aug08-en.pdf > >> > > >> > I think it would be important that the At Large speaks up. The model > >> > proposed in the document is a purely capitalistic one. It is based on > >> > the assumption that all gTLDs are created to make as much money as > >> > possible. Smaller, community based TLDs seem quite difficult to launch > >> > in such context. > >> > > >> > The mere possibility of auctions will actually generate contention on > >> > some strings. The little guys wishing to establish a not-for-profit TLD > >> > will be outplayed by the wealthy ones. > >> > > >> > A public forum has been established at > >> > http://forum.icann.org/lists/auction-consultation/. > >> > Comments to auction-consultation(a)icann.org before 8 September 2008. > >> > > >> > -- > >> > Patrick Vande Walle > >> > > >> > > >> > _______________________________________________ > >> > At-Large mailing list > >> > At-Large(a)atlarge-lists.icann.org > >> > > >> > > >> http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > >> > > >> > At-Large Official Site: http://atlarge.icann.org > >> > > >>_______________________________________________ > >>At-Large mailing list > >>At-Large(a)atlarge-lists.icann.org > >>http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > >> > >>At-Large Official Site: http://atlarge.icann.org > > > > > > > > _______________________________________________ > > At-Large mailing list > > At-Large(a)atlarge-lists.icann.org > > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > > > At-Large Official Site: http://atlarge.icann.org > > > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [At-Large] Updates to New gTLD Program Implementation andauctioning model.
by Jeffrey A. Williams Aug. 11, 2008

Aug. 11, 2008

Alan and all, I don't think it has a chance in hell! The ALAC and the NARALO's need to be self funding and should have been long before now. Than they could have argued from a point of strength. Instead as penniless themselves, they go begging. Such is a poor strategy and likely than not, a strategy of mostly failure. Alan Greenberg wrote: > It will not be easy regardless of any goodwill and the best of > intentions. But it seems like a reasonable goal. > > Alan > > At 11/08/2008 06:56 AM, Jacqueline A. Morris wrote: > >Hi Alan > >Coming from the developing world, I like your idea - but am not > >confident that it will happen. I hope ALAC will support such a > >proposal, and work to make it iron-clad, so that it cannot be easily > >circumvented, and so that the fund does not end up assisting > >registrars, registries, IP lawyers, etc. to get cheaper domains. > >Jacqueline > > > >Alan Greenberg wrote: > >> > >>On the positive side, the possible auctions of these relatively few > >>high-profile TLDs will likely bring in a LOT of money. It has > >>repeatedly been suggested that this wind-fall profit not be simply > >>wrapped into ICANN general funds, or even used to offset the costs > >>of offering new gTLDs. But rather it be used to (with appropriate > >>caution) make it less expensive and less onerous for > >>not-for-profits, cultural communities and developing countries > >>folks to acquire new gTLDs. > >> > >>Now THAT is something that I think At-Large should make a strong > >>statement about. > > _______________________________________________ > At-Large mailing list > At-Large(a)atlarge-lists.icann.org > http://atlarge-lists.icann.org/mailman/listinfo/at-large_atlarge-lists.ican… > > At-Large Official Site: http://atlarge.icann.org Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0

Re: [NA-Discuss] [ga] were all screwed - the only solution is obvious - smart ids dns
by Jeffrey A. Williams Aug. 11, 2008

Aug. 11, 2008

Dr. Joe and all, I don't know if OpenDNS has what your suggesting deployed. But it is slowly becoming far more clear that ICANN is not fully deploying or implementing DNSSEC. I cannot for certain determine as to why, however. I can only suspect that ICANN doesn't have the horses, nor does the IANA any longer, to properly implement DNSSEC. Same for IPSEC, BTW. Further, selling DNSSEC to Registries, Registrars, and Registrants, as well as ISP/IAP's is not going well, nor for that matter is IPv6, thank god. One should also consider or actually recognize that IP registries are far more security vulnerable than the roots, DN registries and registrars, or registrants. But I would like to believe and certainly hope that the GAC recognizes how important DNS security is, and to some degree why it is so. Let's hope that the FCC and DOC/NTIA can hold ICANN properly and fully accountable as well as liable as critical economic health and governmental infrastructure is at stake. Right now though the ignorance of DNS security as a necessity is still wide spread. The touchy-feely social engenerring folks and their associated groups don't see this as a significant danger. When they get bit, maybe than they will. What's needed IMPO is that DNS needs a major re-write, especially Bind. Vixie could do it, Bernstine could do it, I have along with my execellent technical staff, done it, and there are a precious few others that could do it, none are that interested, as it is a significant task. For the Social Engenerring folks not to understand how important this is, is beyond reasonable thinking. ICANN, the IANA, and especially the IETF know better, so ICANN's SSAC not adaquately addressing this is simply not excusable, and they know it! However Dr. Joe, we're not all "screwed", as you so elequently put it, yet. >:) However seems that we are all exposed, as it were. >:( Joe Baptista wrote: > People, were all screwed thanks to this DNS vulnerability. It is > truly a monster in the making and we are being bamboozled into > thinking DNSSEC will save our sorry souls. And the ease of causing > damage to internet infrastructure is enormous. > > Every banking transaction, every communication channel can now be high > jacked by any script kiddie with a network of bots. And we are being > asked to settle for DNSSEC which is clear is not so secure and easily > broken by - guess who - script kiddies. When the kiddies figure out > how to control the DNS through these vulnerabilities were going to be > a mess. > > My main concern are the criminals who will soon also discover how > these flaws can be exploited. Port randomization as has been show > does not work. It just take more time to do. Bernsteins concern with > the year 2015 is very real today. > > I've asked Vixie some questions and gotten some replies. I hate to > say this but the only real way left to guard against this attack is an > intrusion detection system (IDS) to monitor any recursive DNS server > and a good well behaved firewall. > > I addressed the fix for these problems back Jan 2007 in the > Public-Root Name Server Operational Requirements document published by > INAIC. The sections are 4.2.7 to 4.2.9. The reference document is at > the following URL. > > http://www.publicroot.org/technical/root-server-standards.pdf > > In any case thats what now needs to be done to secure DNS ASAP. A > would recommend a smart IDS that not only detects but also based on a > set of rules attempt to find and correct the answer or response to the > DNS server in real time. I expect OpenDNS has this sort of thing > deployed. > > cheers > joe baptista > > -- > Joe Baptista > www.publicroot.org > PublicRoot Consortium > ---------------------------------------------------------------- > The future of the Internet is Open, Transparent, Inclusive, > Representative & Accountable to the Internet community @large. > ---------------------------------------------------------------- > Office: +1 (360) 526-6077 (extension 052) > Fax: +1 (509) 479-0084 > > Regards, Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!) "Obedience of the law is the greatest freedom" - Abraham Lincoln "Credit should go with the performance of duty and not with what is very often the accident of glory" - Theodore Roosevelt "If the probability be called P; the injury, L; and the burden, B; liability depends upon whether B is less than L multiplied by P: i.e., whether B is less than PL." United States v. Carroll Towing (159 F.2d 169 [2d Cir. 1947] =============================================================== Updated 1/26/04 CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of Information Network Eng. INEG. INC. ABA member in good standing member ID 01257402 E-Mail jwkckid1(a)ix.netcom.com My Phone: 214-244-4827

1 0