July 2019 - Ssr2-review - lists.icann.org

Zoom
by Jennifer Bryce July 22, 2019

July 22, 2019

Dear SSR2 Review Team, Please see the below note regarding Zoom, on behalf of ICANN IT. --- Hello, We acknowledge and understand your concern with using Zoom as a native app from your device, following recent public disclosures by a security researcher. Contrary to confusing messaging on different public fora, Zoom does not have a “hidden application” with access to camera and microphone. The facts are as follows: * A localhost web server was installed to allow for easy launching of the Zoom application, functioning as an API between Zoom and a browser * This server never had any access to your camera or microphone in and of itself. It only had the ability to launch Zoom. * Further, for any unauthorized access to your camera to take place, your settings would need to be misconfigured in the way the researcher detailed in the first part of his disclosure. * Microphone access was never an issue in this regard. Since the public disclosure, Zoom has also taken steps to mitigate the vulnerabilities. On 9 July an application update was released to entirely remove the web server, as well as a new option to manually uninstall the Zoom application (including the web server and saved user settings). On 10 July, Apple issued an update to ensure the Zoom web server was removed from Macs, even if the user had not yet run the Zoom application update. Zoom worked with Apple to test this update, which requires no user interaction. Finally, on 14 July, Zoom released another application update to further address the settings misconfiguration which could have allowed for cameras to be on by default as you join a meeting. For more information on how Zoom has responded to the public disclosure, please visit here<https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/> and here<https://blog.zoom.us/wordpress/2019/07/10/security-update-and-our-ongoing-e…>. ICANN stands by its decision to offer Zoom for Remote Participation/Collaboration. If you are still hesitant to use a native Zoom app from your device, we recommend you uninstall the application and join Zoom meetings via browser. This is an option for any Zoom meeting. Please see this link<https://www.icann.org/news/blog/known-zoom-vulnerabilities> for past ICANN blog post regarding Zoom. Let us know if you have any further questions or concerns with which we can assist. -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

SSR2 and Zoom Vulnerablilites
by MSSI Secretariat July 19, 2019

July 19, 2019

Hello SSR2 Review Team, As mentioned on last week’s plenary regarding the Zoom issue for Mac devices, please view the following post; https://www.icann.org/news/blog/known-zoom-vulnerabilities. With kind regards, Brenda --- Brenda Brewer, Projects & Operations Assistant Multistakeholder Strategy & Strategic Initiatives (MSSI) Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

3 2

Apologies
by Weissinger, Laurin July 18, 2019

July 18, 2019

Dear all, I’m facing travel delays and likely won’t be able to join the call at all or only with a few minutes delay. Many thanks Laurin Sent from my mobile phone.

3 2

Call summary: SSR2 17 July
by Jennifer Bryce July 18, 2019

July 18, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #78, 17 July 2019 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/U5ujBg. The transcript usually becomes available 5 - 7 business days after the meeting. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

SSR2 Face to Face Day 2 | 2 November 2019
by MSSI Secretariat July 17, 2019

July 17, 2019

SAVE THE DATE: SSR2 Face to Face Meeting - Day 2 at ICANN66 | Montreal Saturday, 2 November 2019 -- 9:00 AM - 5:00 PM/EDT (local Montreal time) -- time zone support here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=SSR2+Face+to+Face…> Remote participation details TBA.

1 0

SSR2 Face to Face Day 1 | 1 November 2019
by MSSI Secretariat July 17, 2019

July 17, 2019

SAVE THE DATE: SSR2 Face to Face Meeting - Day 1 at ICANN66 | Montreal Friday, 1 November 2019 -- 9:00 AM - 5:00 PM/EDT (local Montreal time) -- time zone support here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=SSR2+Face+to+Face…> Remote participation details TBA.

1 0

ACTION REQUESTED: SSR2 Doodle for attending ICANN66 in Montreal
by MSSI Secretariat July 17, 2019

July 17, 2019

Dear SSR2 Review Team Members, Please see the doodle poll; https://doodle.com/poll/tgryybhsxwrimkrh and select the days you intend to be at the ICANN 66 | Montréal<https://meetings.icann.org/en/montreal66> meeting. Reminder, the SSR2 Face to Face meeting is scheduled for 1-2 November. Please provide your input as quickly as possible so the results may be shared with the leadership team. Thank you. With kind regards, Brenda --- Brenda Brewer, Projects & Operations Assistant Multistakeholder Strategy & Strategic Initiatives (MSSI) Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

1 0

Proposed update to the workplan
by Russ Housley July 17, 2019

July 17, 2019

Dear SSR2 Review Team: On the plenary call a few minutes ago, I shared a proposed timeline for the SSR2 report. It was: - produce the recommendations and rationale for each recommendation by the ICANN meeting in Montreal in early November; - share recommendations with the community during the ICANN meeting in Montreal; - have a face-to-face meeting in January to address the feedback received during the ICANN meeting in Montreal; and - release the draft report for public comment in late January or early February. No one on the call saw any obstacles to meeting this timeline. Does anyone that could not make the call see any? Russ

4 3

SSR2 agenda 17 July 2019
by Jennifer Bryce July 16, 2019

July 16, 2019

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Wednesday 17 July at 14:00 UTC. 1. Welcome, roll call, SOI updates 2. Review work plan<https://docs.google.com/spreadsheets/d/1XLcwTpl-BgC9O0Jzag7C7DKj4rYXeLYE9YB…> and timeline 3. AOB 4. Confirm action items, decisions reached Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Call summary: SSR2 11 July
by Jennifer Bryce July 12, 2019

July 12, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #77, 11 July 2019 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/UJujBg. The transcript usually becomes available 5 - 7 business days after the meeting. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0