Featured Blogs

2012 Security Predictions: APT’s, Mobile Malware and Botnet Takedowns

As the weeks remaining in 2011 dwindle and 2012 peaks out from behind the last page of the calendar, it must once again be that time of year for purposeful reflection and prediction. Or is that navel gazing and star gazing? At the highest level of navel gazing you could probably sum up 2011 with one word -- "More"... But let's put that aside for now. What does 2012 hold in stall for us? more

The Christmas Goat and IPv6 (Year 2)

Last year the municipality of Gavle asked my company if we could help them load share the streaming pictures of the famous Christmas goat in Gävle. I accepted the invitation and set up a separate domain. My own interest in this was of course to track the usage of IPv6 and validation of DNSSEC from the visitors of the site. more

Video Recording Now Available of FCC Dec 6th Workshop on PSTN Transition

If you missed attending or listening to the live stream of the US Federal Communication Commission's (FCC) workshop on the transition of the Public Switched Telephone Network (PSTN) to new technologies that was held last week on December 6th, the FCC has very nicely made a video recording available from their website for viewing... FCC Chairman Julius Genachowski also appeared briefly to provide a few comments. more

Fear of New gTLD Monopolies Is Overblown

You should not worry too much if some of the new generic Top-Level Domain names (gTLDs) become monopolies. ICANN and the registries won't charge monopoly prices as long as they have to worry about the government stepping in. Monopolies normally present two problems for consumers: restricted output and higher prices. In the case of the new gTLDs, restricted output is caused only by ICANN's monopoly over approving gTLD applications. more

gTLDs Opponents Create the Very Confusion They Decry

It's ironic and amusing that while a few well-connected opponents of the new gTLD program were testifying before the U.S. Senate committee, I was asked to help educate top executives of one of the largest global ad agencies and their major clients on the brand marketing and advertising implications of the program. It was clear from the start that virtually all these high-powered executives knew about the program they had learned from the eleventh hour negative campaign. more

ICANN Senate Hearing: The Battle Between Intellectual Property and Multistakeholderism

The US Senate Committee on Commerce, Science and Transportation Hearing on ICANN's Expansion of Top Level Domain Names on December 8, 2001 was all about strategy. The strategy was simple: while the world has its attention turned to the debate on the copyright legislative proposals of the Stop Online Piracy Act (SOPA) and the PROTECT IP Act, let's have another ICANN hearing and try to re-open trademark protection for new gTLDs. more

Technical Comments on Mandated DNS Filtering Requirements of H. R. 3261 (“SOPA”)

About two months ago, I got together with some fellow DNS engineers and sent a letter to the U. S. Senate explaining once again why the mandated DNS filtering requirements of S. 968 ("PIPA") were technically unworkable. This letter was an updated reminder of the issues we had previously covered... In the time since then, the U. S. House of Representatives has issued their companion bill, H. R. 3261 ("SOPA") and all indications are that they will begin "markup" on this bill some time next week. more

Internet Bigger Than Agriculture or Energy Sectors - Importance of R&E Networks

Several months ago McKinsey did a very interesting study on the economic value of the Internet. They pointed out that Internet in the G8 countries as well as Brazil, China, India, South Korea, and Sweden is now bigger than agriculture or energy. The Internet represents 3.4% of GDP and accounted for 21 percent of GDP growth over the last five years among these developed countries and as Vint Cerf pointed out in his blog created 2.6 jobs for every one lost. more

U.S. Government Strongly Affirms ICANN Model and New gTLDs

Larry Strickling, who runs the NTIA (the part of the U.S. Department of Commerce that handles ICANN), yesterday gave an important and remarkable speech to the Practicing Law Institute about Internet governance. His speech, timed to coincide with an orchestrated ICANN-bashing across town in the Senate, was a striking defense of the ICANN model and a repudiation of special pleading outside the process. more

Senate and House Hearings on New Top Level Domains Not Likely to Delay Launch

Yesterday, the US Senate Committee on Commerce, Science and Transportation held hearings on ICANN's expansion of top level domains. Next week the House Energy and Commerce committee will also conduct their hearings on this same topic. more

Greylisting Still Works - Part II

In my last post I blogged about greylisting, a well-known anti-spam technique for rejecting spam sent by botnets. When a mail server receives a an attempt to deliver mail from an IP address that's never sent mail before, it rejects the message with a "soft fail" error which tells the sender to try again later. Real mail senders always retry, badly written spamware often doesn't. I found that even though everyone knows about greylisting, about 2/3 of IPs don't successfully retry. more

Greylisting Still Works - Part I

Greylisting is a hoary technique for rejecting spam sent by botnets and other poorly written spamware. When a mail server receives an attempt to deliver mail from a hitherto unseen sending host IP address, it rejects the message with a "soft fail" error which tells the sender to try again later. Real mail software does try again, at which point you note that the host knows how to retry and you don't greylist mail from that IP again. more

Online Property Protection and the Public Interest

Proposals to enhance online property protection have received a lot of attention lately. Brand managers, goods manufacturers, and content distributors strenuously argue that current law enforcement mechanisms are inadequate to meet the challenges of today's fast-paced marketplace. They specifically note that foreign-based "rogue websites" continue to distribute unlicensed products and content despite existing rules; they maintain that new legislation is needed to empower intellectual rights holders to counter such cyber-criminals more effectively. more

Security, Privacy Issues and USB Drives

In an article on CSO.com.au a report from Sophos Australia is reported on. The anti-virus software company had bought 50 usb drives for analyses at a public transport auction of devices left on the Sydney trains. When they wrote that 66% was infected with malware, I presumed that they were left behind consciously, but were they? more

Beyond Words: Diverse Voices at ICANN and Miscommunications

A few days ago, I sat in a meeting here in Ottawa with our IT Director and Director of Marketing and Communications. These are two highly intelligent people working on the same team, for the same company, talking about a common subject. And yet, something was amiss in achieving mutual understanding. Each was seeing things from his own distinct perspective and as such, speaking his own language. As I reflected on my team's internal dynamic, I began to see parallels in areas that have an even more direct impact on the Internet ecosystem. more