Featured Blogs

Canadian Government Quietly Pursuing New ISP Code of Conduct

If approved, the code would technically be voluntary for Canadian ISPs, but the active involvement of government officials suggests that most large providers would feel pressured to participate. The move toward an ISP code of conduct would likely form part of a two-pronged strategy to combat malicious software that can lead to cybercrime, identity theft, and other harms. First, the long-delayed anti-spam legislation features new disclosure requirements for the installation of software along with tough penalties for non-compliance. more

A Look at How the Internet Routes Around Damage: Measuring Global Effects of Storm Sandy

Hurricane Sandy caused major damage in both the Caribbean and the North-Eastern part of the USA. In an earlier article (RIPE Atlas - Superstorm Sandy) we showed data on 15 RIPE Atlas probes that are located in or near the affected areas in the USA. Most of these locations now appear to be back to normal round trip times to targets we monitor. But the effects of Hurricane Sandy were felt beyond the immediately affected area. more

The Next Stage of the Broadbanding of the World

The UN Broadband Commission -- which I assisted in establishing and to which I am special advisor -- is now in its fifth year. Set up by the two UN agencies, UNESCO and ITU, it received the support of 50 leading international people such as government ministers, heads of a range of UN and associated organisations, and CEOs of leading private industry companies. Overall it is a public-private partnership. It is chaired by the President of Rwanda, Paul Kagame, and Carlos Slim from Mexico. more

Privacy and Security - Five Objectives

It has been a very busy period in the domain of computer security. With "shellshock", "heartbleed" and NTP monlink adding to the background of open DNS resolvers, port 445 viral nasties, SYN attacks and other forms of vulnerability exploits, it's getting very hard to see the forest for the trees. We are spending large amounts of resources in reacting to various vulnerabilities and attempting to mitigate individual network attacks, but are we making overall progress? What activities would constitute "progress" anyway? more

Global Payments Breach Confirmation

This morning, Global Payments held a conference call with investors and analysts covering their earlier breach announcement and projected earnings. Global Payments had also released an update advisory yesterday stating that "the company believes that the affected portion of its processing system is confined to North America and less than 1,500,000 card numbers have been exported" and that only Track 2 card data may have been stolen. more

ICANN and the Developing World: Examining The Outreach Program

Shravanti Reddy?s recent piece draws attention to an important issue that has nagged at ICANN ever since the ill-fated at large elections, when participants from the developed world greatly outnumbered those from the developing world. This imbalance was somewhat mitigated by the regional delineation of candidates, but it nonetheless raised two important questions that have yet to be settled:

First, how can ICANN (and, more generally, Internet governance) be more inclusive of developing countries? And second (less often asked, but perhaps even more important): Why should developing countries care about ICANN -- i.e., why does the answer to the first question even matter? This article discusses some recent developments related to the first question; a later article will consider some specific reasons why ICANN matters to the developing world. more

Eliminating Access to WHOIS - Bad for All Stakeholders

Steeped deep in discussions around the European Union's General Data Protection Regulation (GDPR) for the past several months, it has occurred to me that I've been answering the same question for over a decade: "What happens if WHOIS data is not accessible?" One of the answers has been and remains the same: People will likely sue and serve a lot of subpoenas. This may seem extreme, and some will write this off as mere hyperbole, but the truth is that the need for WHOIS data to address domain name matters will not disappear. more

Four Critical IT Elements for a More Productive Business

IT is now a boardroom discussion. Beyond troubleshooting server issues and maintaining network security, IT initiatives must provide company-wide ROI and work in unison with other department objectives. But the link between corporate efficiency and technology spending isn't always obvious -- here are four critical IT elements your business needs to improve productivity. more

Berkman Broadband Study: Mixing Passion and Scholarship

Last week, comments were filed with the FCC in response to the Berkman study of international broadband comparisons... Many of the comments were not supportive of the Harvard Berkman study. In an earlier blog posting, we had observed that there appeared to be statistical problems in the Berkman study that would not hold up to peer review. Our comments may have understated the extent of the problems. more

Internet Population Passes 1 Billion, and We’re Still Afraid

We're learning this week that we have officially passed the one billion number in terms of people using the Internet. Eric Schonfeld writes in his article on TechCrunch that the number is probably higher than that. One billion is a staggering number, even though it makes up only 15 to 22 percent of the world's population. Nevertheless, those one billion Internet users give us a lot to deal with on their own in terms of social and security issues on the web. more

Really? A Hearing on New gTLDs at this Late Stage?

To the dismay of many (and the chagrin of some), it appears as though the US House Subcommittee on Intellectual Property, Competition and the Internet will be conducting a hearing on New generic Top-Level Domains (gTLDs). Meanwhile, ICANN is careening towards the finish line of the new gTLD Program with a vote by the ICANN Board scheduled for June 20th. Just what this all means remains to be seen. more

The Promise of Multi-Signer DNSSEC

DNSSEC is increasingly adopted by organizations to protect DNS data and prevent DNS attacks like DNS spoofing and DNS cache poisoning. At the same time, more DNS deployments are using proprietary DNS features like geo-routing or load balancing, which require special configuration to support using DNSSEC. When these requirements intersect with multiple DNS providers, the system breaks down. more

Belgian Country Code Now Supports Internationalized Domain Names

Earlier this week dns.be launched Internationalized Domain Names (IDNs). The Belgian registry opted to support the accented characters for Dutch, French and German. In so doing they've also ended up providing support for other European languages, such as Swedish, Finnish and Danish... The registry reported quite a bit of interest in the launch with over 3000 IDN domains being registered in the first hour. That number had practically doubled by close of business on the first day. more

Starlink Sales Are Straining Capacity in Parts of the U.S. And Canada

On June 5th Elon Musk said SpaceX had nearly 500,000 customers in 32 nations and 9 languages. By now, there must be 500,000 customers, most of whom are in the U. S. and Canada, and their performance is suffering. In the first quarter of this year, OOKLA reported that the median Starlink download speed fell from 104.97 to 99.55 Mbps in the U.S. and from 106.64 to 97.4 Mbps in Canada. more

Netflix Has Buyer’s Remorse Over Its Paid Peering Deal With Comcast

Soon after capitulating to Comcast's surcharge demand for improved treatment of its traffic, Netflix got better downstream delivery speeds. Apparently Comcast did not have to undertake a major bandwidth expansion program. Much to the immediate relief of Netflix, Comcast merely needed to allocate more ports for Netflix traffic. So with a reallocation of available bandwidth, Comcast solved Netflix's quality of service dilemma apparently without degrading service to anyone else, upstream or downstream. more