Featured Blogs

My Domain Reputation Is Bad, Should I Get a New Domain?

Many companies have the occasional "oops" where they send email they probably shouldn't have. This can often cause a decrease in reputation and subsequent delivery problems. Some companies rush to fix things by changing domains. Brand new domains, those registered less than 30 days, have really bad reputations. Blame the spammers and scammers who exploited a loophole and sent tons of untraceable spam from newly registered domains that they then abandoned without paying for them. more

What is the Future for Mobile Network Operators?

The telecommunication industry is continuing to resist structural changes, but the reality is that if they don't transform, technology will do it for them. We have seen the fixed telecom operators slowly being pushed back into the infrastructure utility market. Mobile networks are moving in that same direction - that is, the largest part of their network will be a utility, with currently two, three or four mobile infrastructure providers per country... the industry is facing serious problems. more

FON and BT: Wifi Today; Mobile Tomorrow?

A deal announced today between British Telecom and upstart FON allows BT's Internet customers to share their own broadband connections via WiFi and, in turn, be able to access WiFi free at "thousands" (doesn't say how many) of FON hotspots around the world operated by other Foneros... When you buy home Internet access from BT and opt into this plan, you are also buying roaming access at no extra charge. The technology is supposed to assure that the part of the connection which you share is segregated from your own access so that there are no security problems caused by the sharing. more

.WINE New gTLD is Here, Thanks to Politicians

It is no news that the .WINE and .VIN new gTLDs are to be announced soon by Donuts and if the month of November is the very month everybody has been waiting for, at the beginning of the Sunrise Periods, many questions arise regarding the protection of wine geographical indications... There is a lot to say regarding the length of time it took to launch .wine and .vin new gTLDs and, most of all, how difficult it has been to protect its wine Geographical Indications (also called "wine GIs"). more

Senate Judiciary Committee Hearing on Botnet Takedowns (July 15, 2014)

The background is of course quite interesting, given how soon it has followed Microsoft's seizure of several domains belonging to Dynamic DNS provider no-ip.com for alleged complicity in hosting trojan RAT gangs, a couple of days after which the domains were subsequently returned -- without public comment -- to Vitalwerks, the operator of No-IP. This is by no means a new tactic for Microsoft, who has carried out successful seizures of various domains over the past two or three years. more

2012 Global Phishing Trends: Uptime Down, Numbers Up

Despite security advances over the past year, including the increased deployment of DNSSEC, pirates continue to wreak havoc on the Internet. But before you decide that Internet security innovations are futile, consider this: online criminals are just like burglars in the physical world; they don't take new ways of blocking their best efforts lying down. They come up with new and, in some cases, stronger plans of attack. more

European Data Protection Supervisor Smacks ICANN Over Privacy Issues With 2013 RAA

ICANN has been sent a letter by the European Data Protection Supervisor calling them out with respect to both data collection, retention and privacy within the context of the 2013 Registrar contract (RAA). The letter is the first instance of one, to my knowledge, which makes reference to the ECJ's recent ruling that rendered the data retention directive null and void. more

DMA Requires Email Authentication, Do We Care?

Last week the DMA announced with considerable fanfare that their members should all use e-mail authentication. DMA members send a lot of bulk e-mail, but not much that would be considered spam by any normal metric. (Altria's Gevalia Kaffee is one of the few exceptions.) Their main problem is their legitimate bulk mail, sent in large quantities from fixed sources, getting caught by ISPs spam filters. That happens to be one problem for which path authentication schemes like SPF and Sender ID are useful, since they make it easier to add known fixed source mailers to a recipient ISP's whitelist, and that's just what AOL and probably other big ISPs use it for. While the DMA may be implying that this is a virtuous move, in reality it's something that their members are doing anyway for straightforward business purposes. more

Amazon’s Orbiting Infrastructure

I have been following satellite Internet service since the 1990s, but I was surprised when I learned last week that Amazon had filed an application for a 3,236-satellite constellation of low-earth orbit Internet service satellites - Project Kuiper. I shouldn't have been surprised - Amazon was an infrastructure company from the start. In his first post-IPO letter to shareholders in 1997, Jeff Bezos pointed out that their distribution center capacity grew from 50,000 to 285,000 square feet and said their goal remained... more

The Role of the BFR in SpaceX’s Satellite Internet Service

SpaceX started with their Falcon 1 booster followed by several versions of the Falcon 9. The Falcon Heavy will fly later this year, and the rocket that will take the first person to Mars is called, for now, the Big F*ing Rocket or BFR. The 150-ton BFR payload will be ten times that of the Falcon 9. It will have an extra landing-guidance engine for reliable reusability and SpaceX also expects to be able to soft-land and reuse the second-stage payload rocket as well as its protective nose cone, substantially reducing cost per launch. more

Is ICANN Producing Jewels?

Excavation is fun. You get to rumble around on heavy equipment bashing up this and tearing up that. Each scoop uncovers original earth. As your big machine chews up the hill, an occasional sparkle suggests a raw gem or two. ...ICANN business is still predominately conducted on Email lists/forums. Email lists and forums are good at excavating... more

When DNSBLs Go Bad

I have often remarked that any fool can run a DNS-Based Blacklist (DNSBL) and many fools do so. Since approximately nobody uses the incompetently run black lists, they don't matter. Unfortunately, using a DNSBL requires equally little expertise, which becomes a problem when an operator wants to shut down a list. When someone sets up a mail server (which we'll call an MTA for Mail Transfer Agent), one of the tasks is to configure the anti-spam features, which invariably involves using DNSBLs. more

DotCo Launch: Over 90 Thousand Domain Names in 15 Minutes!

DotCo, which is the ccTLD for Colombia, is opening up to general public registration today. According to official sources from both Neustar and CoInternet the registry has handled over 90 thousand registrations in the first 15 minutes! ... While the initial registration phase of any new domain extension can attract a lot of media interest and a flood of registrations you need to look at the "big picture". more

Networks and Nationalization

This post isn't about -- or isn't only about -- the use of computer technology to commit crimes. It's more about the use of computer technology to commit war. A few weeks ago, I was part of a conversation about the legal issues cyberwarfare raises. We were talking about various scenarios -- e.g., a hostile nation-state uses cyberspace to attack the U.S. infrastructure by crippling or shutting down a power grid, air traffic control systems, financial system, etc. Mostly, we were focusing on issues that went to the laws of war, such as how and when a nation-state that is the target of a cyberattack can determine the attack is war, rather than cybercrime or cyberterrorism. more

Is DNSSEC Worth the Effort?

A blog post has created some attention online through its extremely negative attitude to DNSSEC. Through the years, I have come in contact with many arguments against DNSSEC that suggest that anyone who is critical has not managed to or wanted to familiarize themselves with what DNSSEC is and does. We have received many questions concerning the article, so I feel it's appropriate to respond to the criticism. more