September 2011 - Rt4-whois - lists.icann.org

Fwd: WHOIS Review Group Briefingf - DNS Abuse Examples
by Sharon Lemon Sept. 20, 2011

Sept. 20, 2011

With the attachment now Sent from my iPad Begin forwarded message: > From: "FLAHERTY, Jonathan" <jonathan.flaherty(a)soca.x.gsi.gov.uk> > Date: 16 September 2011 07:54:48 PDT > To: "FLAHERTY, Jonathan" <jonathan.flaherty(a)soca.x.gsi.gov.uk>, "'sharonchallis(a)aol.com'" <sharonchallis(a)aol.com>, "MILES, Lee" <lee.miles(a)soca.x.gsi.gov.uk> > Cc: "TIBBS, Mark" <mark.tibbs(a)soca.x.gsi.gov.uk>, "KIBBEY, Gary" <gary.kibbey(a)soca.x.gsi.gov.uk> > Subject: RE: WHOIS Review Group Briefingf - DNS Abuse Examples > > NOT PROTECTIVELY MARKED > > NOT PROTECTIVELY MARKED > > Hi Sharon, > > Please ignore the previous email, as Mark pointed out its a very old version !!. > > Please find attached a brief report on the registrant WHOIS abuse of the DNS in relation to what Cyber have seen this year across our main area of activity. > > Also listed in the report is planned ALERT reporting process to ICANN for your reference. > > If you need anything more from me such as some more examples please do not hesitate to contact me. > > Many thanks > > Jon Flaherty | HVOM | SOCA Cyber & Forensics | 0207 855 2808 | 07919 218439 | jonathan.flaherty(a)soca.x.gsi.gov.uk > > This information is supplied in confidence by SOCA, and is exempt from disclosure under the Freedom of Information Act 2000. It may also be subject to exemption under other UK legislation. Onward disclosure may be unlawful, for example, under the Data Protection Act 1998. Requests for disclosure to the public must be referred to the SOCA FOI single point of contact, by email on PICUEnquiries(a)soca.x.gsi.gov.uk or by telephoning 0870 268 8677. > > > > > All E-Mail sent and received by SOCA is scanned and subject to assessment. Messages sent or received by SOCA staff are not private and may be the subject of lawful business monitoring. E-Mail may be passed at any time and without notice to an appropriate branch within SOCA, on authority from the Director General or his Deputy for analysis. This E-Mail and any files transmitted with it are intended solely for the individual or entity to whom they are addressed. If you have received this message in error, please contact the sender as soon as possible. > > > > > The original of this email was scanned for viruses by the Government Secure Intranet virus scanning service supplied by Cable&Wireless Worldwide in partnership with MessageLabs. (CCTM Certificate Number 2009/09/0052.) On leaving the GSi this email was certified virus free. > Communications via the GSi may be automatically logged, monitored and/or recorded for legal purposes. >

1 0

Compliance - gaps and recommendations
by Emily Taylor Sept. 20, 2011

Sept. 20, 2011

Hi guys I've been awake for a while, and have started to pull together gaps and recommendations on compliance for today's discussions. I have not got as far as the feedback from stakeholders section (covering Registry/Registrar meeting and the visit to MdR, as I need to spend more time studying the transcript of our Singapore meetings). However, this should be enough to get our discussions started today. Excuse typos. Best, Emily -- * * 76 Temple Road, Oxford OX4 2EZ UK t: +44 (0)1865 582 811 • m: +44 (0)7540 049 322 emily(a)emilytaylor.eu *www.etlaw.co.uk* Emily Taylor Consultancy Limited is a company registered in England and Wales No. 730471. VAT No. 114487713.

2 1

Adobe Connect Room
by Alice Jansen Sept. 20, 2011

Sept. 20, 2011

Dear Review Team Members, Please join the Adobe Connect Room<http://icann.adobeconnect.com/whois-review/> during the session. Thanks! Kindest regards Alice

1 0

Fwd: CENTR WHOIS data
by Emily Taylor Sept. 20, 2011

Sept. 20, 2011

FYI CENTR has promised to share some WHOIS data with us. They have also said that one of their newest surveys deals with the circumstances in which opted out WHOIS data is shared with third parties. This will not be ready for a few weeks at least. But I will share with you when we have the aggregated data. Kind regards Emily ---------- Forwarded message ---------- From: Patrick Myles <patrick(a)centr.org> Date: 15 September 2011 16:27 Subject: CENTR WHOIS data To: emily(a)emilytaylor.eu Cc: Peter Van Roste <peter(a)centr.org> Hi Emily – **** ** ** Peter Van Roste asked me to give you an overview of data we have on WHOIS in context of CENTR members. **** ** ** In November 2010, we launched a survey to the membership (25 ccTLDs responded) which included questions on the following: **** ** ** **· **The type of data which can be hidden in the WHOIS in cases of; private persons, non-private persons**** **· **How holders request to hide information in the WHOIS**** **· **Numbers on the use of proxies to hide data**** ** ** Previous to this survey, another survey on WHOIS took place in late 2009 which focused on the more fundamental aspects of WHOIS – technical barriers (CAPTCHA, limits on queries, type of WHOIS access (website/command line/other), misuse of WHOIS from third parties, etc. **** ** ** Aggregate use of the data is a possibility. We would of course in this case appreciate being cited as well as knowing in advance the intended use of the data. **** ** ** Hope this helps, **** ** ** Best Regards**** ** ** *[image: cid:image001.jpg@01CC7227.E27EBEF0]*** *Patrick Myles*** *Information Manager* ** *** * *CENTR - Belliardstraat 20, 1040 Brussels, Belgium*** *tel +32 2 627 5550 - fax +32 2 627 5559 * *www.centr.org** **– twitter: centrnews*** * * ** ** ** ** -- * * 76 Temple Road, Oxford OX4 2EZ UK t: +44 (0)1865 582 811 • m: +44 (0)7540 049 322 emily(a)emilytaylor.eu *www.etlaw.co.uk* Emily Taylor Consultancy Limited is a company registered in England and Wales No. 730471. VAT No. 114487713.

1 0

New applicant guidebook - WHOIS requirements for us to consider
by Emily Taylor Sept. 20, 2011

Sept. 20, 2011

Hi everyone Looking forward to our meeting tomorrow, and seeing you guys this evening. The New Applicant Guidebook was published today http://www.icann.org/en/announcements/announcement-4-19sep11-en.htm Take a look at Question Number 26 of the application form (see page A-19). My question for the review team is this: - the criteria for WHOIS are over and above those currently required, and to some extent represent the wish list that the compliance team and others have communicated to us - Once the new gTLDs have run through, we will have 3 concurrent WHOIS regimes in operation , ie the Thin WHOIS of .com and .net (100m domains), Thick WHOIS of the other "old" gTLDs, and the gold plated WHOIS service for new gTLDs. My question for us is - how will these concurrent, differing systems impact on consumers? Will they understand what's required? How will the compliance effort cope with all these differing systems? Kind regards Emily -- * * 76 Temple Road, Oxford OX4 2EZ UK t: +44 (0)1865 582 811 • m: +44 (0)7540 049 322 emily(a)emilytaylor.eu *www.etlaw.co.uk* Emily Taylor Consultancy Limited is a company registered in England and Wales No. 730471. VAT No. 114487713.

3 3

Announcement on ICANN website
by Alice Jansen Sept. 20, 2011

Sept. 20, 2011

Dear Review Team Members, Just dropping a line to let you know that we have posted a note on the ICANN website to announce your meeting. Note in the meeting details: The Review Team may invoke the Chatham House Rule and enter into a closed session at any time. Please go to: http://www.icann.org/en/announcements/announcement-19sep11-en.htm and https://community.icann.org/display/whoisreview/Marina+del+Rey+Meeting for full reference. Thanks, Kindest regards Alie

1 0

WHOIS Policy Review Team Meeting
by Alice Jansen Sept. 20, 2011

Sept. 20, 2011

Dear Review Team Members, I hope that you all had a smooth journey. Please be kindly reminded that the meeting will be held at the Courtyard Marriott (Maxella Avenue 13480, Marina del Rey) - Palos Verde Room. A light continental breakfast will be served tomorrow in our meeting room at 8:00 o'clock. According to the agenda (attached for your convenience), discussions will begin at 9:00. Please do not hesitate to contact me should you have questions or concerns. Thanks, Kindest regards Alice

1 0

The 4 GNSO Whois Studies - now underway
by kathy＠kathykleiman.com Sept. 20, 2011

Sept. 20, 2011

Hi All, As you know, the GNSO is studying key Whois issues (on request from GAC). Liz Gasster has been kind enough to send me the link to a website that summarizes all four studies -- http://gnso.icann.org/issues/whois/studies [1] -- and I am sure she would be happy to answer qusetions about them. Best, Kathy ----- some highlights ----- Whois Misuse Study [2]. This study examines the extent to which public Whois contact information for gTLD domain names is misused to address harmful communications such a phishing or identity theft. The Carnegie Mellon University Cylab [3] in Pittsburgh, PA, USA is performing this study and expects to have initial results in late 2012. To learn more about this study: click on the link above. Whois Registrant Identification Study [4]. This study uses Whois to classify entities that register gTLD domain names, including natural persons, legal persons, and Privacy/Proxy service providers. Using associated Internet content, it then classifies entities using those domains and potentially commercial activities. Contract negotiations are underway to perform this study, with results expected mid 2012. To learn more about this study: click on the link above. Whois Privacy and Proxy Services Abuse Study [5]. This study examines the extent to which gTLD domain names used to conduct illegal or harmful Internet activities are registered via Privacy or Proxy services to obscure the perpetrator's identity. Contract negotiations are underway to perform this study, with results expected late 2012. To learn more about this study: click on the link above. Whois Privacy and Proxy Relay/Reveal Survey [6]. This survey will determine the feasibility of conducting a future in-depth study into communication Relay and identity Reveal requests sent for gTLD domain names registered using Proxy and Privacy services. The Interisle Consulting Group in Boston, MA, USA is performing this survey and expects to have initial results late 2011. To learn more about this study: Contact info(a)whois-survey.net [7]. Links: ------ [1] http://gnso.icann.org/issues/whois/studies [2] http://www.icann.org/en/announcements/announcement-28sep09-en.htm [3] http://www.cylab.cmu.edu/ [4] http://gnso.icann.org/issues/whois/tor-whois-registrant-id-studies-20may11-… [5] http://www.icann.org/en/announcements/announcement-2-18may10-en.htm [6] http://gnso.icann.org/issues/whois/whois-pp-relay-reveal-feasibility-survey… [7] mailto:info@whois-survey.net

1 0

Advice for Dakar
by kathy＠kathykleiman.com Sept. 20, 2011

Sept. 20, 2011

BODY { font-family:Arial, Helvetica, sans-serif;font-size:12px; } Hi All, Welcome to all arriving in MDR; hi to those who met informally this afternoon (Sharon, Emily, Omar, Bill, Susan and me). We were talking about Senegal travel, and I promised to circulate some advice I found about arriving in Dakar to the Team. See you tomorrow (or tonight for dinner). Best, Kathy ‎(The following is from FLYERTALK about Dakar arrivals and shared earlier among a list of regular ICANN attendees) When the plane arrives it parks on the tarmac, passengers descend stairs and take a passenger bus to the terminal (which is nearby). (Visit bathroom, get your airport necessities in order, etc. before you land ) Visitors fill out the entry/exit /tourist forms and get into the line to have health forms (especially Yellow Fever) checked. Then ...you go to your right and after someone collects your "tourist" form, you enter into the baggage area. Here you must be (and look) alert for the rest of the airport process. Entry into the airport terminal from the Dakar side is pretty tightly controlled, so usually the people in the baggage area have some legitimate reason to be there - to help you and others. Get your own cart. (It’s possible/likely that there will be some or many legitimate porters who will give you a cart, help get you through customs and get you transport. I try to do this stuff by myself. Use your judgment, people may be genuinely helpful or up to "other" business, in equally charming ways. You tip the person who helps you. Collect your baggage (the sooner the better)). You'll bring your baggage to the scanners - lifting each piece on to the conveyor belt or counter. Then the baggage goes through the machine, you might have a chat with the customs person, and you are done. At this point you are facing windows with people from hotels or organizations holding up signs with the names of the people they are meeting or the group who has sent someone to pick up people. If you arrange for this service in advance (see below), your name/their organization probably will appear. Or your pick up person will meet you just outside the customs door which is to the right of the windows (as you face the windows). If you are not being picked up, then here are your next steps: The worst place in Dakar in my mind, is between the exit from the baggage/customs area and the exit from the terminal just to the right, and sitting down in a cab or van with all your luggage stowed. Here among the usual crowd of people waiting, are slick, fast people who are up to who -knows- what. People may push up against you, crowd you, talk fast, etc. offering to change money (NO), get you a cab (maybe). There will be crowds mainly behind some low barricades, waiting for the arrival of their friends and relatives. There will be others right outside the terminal door who are likely to be crowding you, touching you; this is not what a normal polite Senegalese person would do. And if/when it happens, be very alert and guard your stuff, pockets, etc. Be alert, polite, quietly assertive, look like you have your wits about you. So your job is to get that mode of transport and make sure you are paying a fair fare to wherever you are going in Dakar - downtown/Plateau, somewhere on the Corniche, outlying hotels? (Before leaving home, ask someone on the Dakar end what that fare should be - better yet, get them to pick you up ). Here is what I suggest doing if you are not having someone pick you up: Ask your hotel, business, etc. to arrange pick up at airport for you, providing you with the information you seek/need. Otherwise: You can check out the ACI Baobab Center. This is an American nonprofit which does a variety of cross cultural and educational programs for Senegalese/other West African and Americans, Canadians, Europeans, etc. Google ACI Baobab to learn more. For a reasonable fee they will pick you up in their van or car or one of their taxi partners and deposit you where you are going. Someone will be at the airport (outside the baggage/customs area) to meet you. You arrange this with ACI, ask them your questions in advance, etc. Their service is especially helpful when it is time to leave. If your flight is at 2 am, for example, you need to be at the airport 2/3 hours in advance. Their van/taxi man will pick you up on time (though I usually double check with ACI and the driver that you are all squared away in advance) and get you to the departure area easily.

1 0

Fwd: WHOIS Review Group Briefingf - DNS Abuse Examples
by Sharon Lemon Sept. 19, 2011

Sept. 19, 2011

Thought you all might find this interesting. Sent from my iPad Begin forwarded message: > From: "FLAHERTY, Jonathan" <jonathan.flaherty(a)soca.x.gsi.gov.uk> > Date: 16 September 2011 07:54:48 PDT > To: "FLAHERTY, Jonathan" <jonathan.flaherty(a)soca.x.gsi.gov.uk>, "'sharonchallis(a)aol.com'" <sharonchallis(a)aol.com>, "MILES, Lee" <lee.miles(a)soca.x.gsi.gov.uk> > Cc: "TIBBS, Mark" <mark.tibbs(a)soca.x.gsi.gov.uk>, "KIBBEY, Gary" <gary.kibbey(a)soca.x.gsi.gov.uk> > Subject: RE: WHOIS Review Group Briefingf - DNS Abuse Examples > > NOT PROTECTIVELY MARKED > > NOT PROTECTIVELY MARKED > > Hi Sharon, > > Please ignore the previous email, as Mark pointed out its a very old version !!. > > Please find attached a brief report on the registrant WHOIS abuse of the DNS in relation to what Cyber have seen this year across our main area of activity. > > Also listed in the report is planned ALERT reporting process to ICANN for your reference. > > If you need anything more from me such as some more examples please do not hesitate to contact me. > > Many thanks > > Jon Flaherty | HVOM | SOCA Cyber & Forensics | 0207 855 2808 | 07919 218439 | jonathan.flaherty(a)soca.x.gsi.gov.uk > > This information is supplied in confidence by SOCA, and is exempt from disclosure under the Freedom of Information Act 2000. It may also be subject to exemption under other UK legislation. Onward disclosure may be unlawful, for example, under the Data Protection Act 1998. Requests for disclosure to the public must be referred to the SOCA FOI single point of contact, by email on PICUEnquiries(a)soca.x.gsi.gov.uk or by telephoning 0870 268 8677. > > > > > All E-Mail sent and received by SOCA is scanned and subject to assessment. Messages sent or received by SOCA staff are not private and may be the subject of lawful business monitoring. E-Mail may be passed at any time and without notice to an appropriate branch within SOCA, on authority from the Director General or his Deputy for analysis. This E-Mail and any files transmitted with it are intended solely for the individual or entity to whom they are addressed. If you have received this message in error, please contact the sender as soon as possible. > > > > > The original of this email was scanned for viruses by the Government Secure Intranet virus scanning service supplied by Cable&Wireless Worldwide in partnership with MessageLabs. (CCTM Certificate Number 2009/09/0052.) On leaving the GSi this email was certified virus free. > Communications via the GSi may be automatically logged, monitored and/or recorded for legal purposes. > <Domain Name WHOIS Abuse - 16.09.11.doc>

1 0