Featured Blogs

Editorials Against PROTECT-IP

First the Los Angeles Times, now the New York Times have both printed editorials critical of the PROTECT-IP bill. Both the LAT and NYT support copyright - and announce as much in their opening sentences. That doesn't mean we should sacrifice Internet security and stability for legitimate DNS users, nor the transparency of the rule of law. more

Perhaps It’s Time to Regulate Microsoft as Critical Infrastructure?

My main argument is about the policy of handling vulnerabilities for 6 months without patching (such as the Google attacks 0day apparently was) and the policy of waiting a whole month before patching this very same vulnerability when it first became an in-the-wild 0day exploit (it has now been patched, ahead of schedule). Microsoft is the main proponent of responsible disclosure, and has shown it is a responsible vendor... I simply call on it to stay responsible and amend its faulty and dangerous policies. more

Supporting SpaceX Starlink in Remote Communities

Five companies are developing low-Earth orbit (LEO) broadband satellite constellations, but, as of now, only SpaceX is planning to market directly to consumers. What sorts of support will they require? A pilot study of Starlink connectivity in remote Chilean communities may provide some answers to that question. The Chilean regulator, SUBTEL, has authorized a year-long pilot study of Starlink connectivity in remote, rural communities and is committed to supporting them during the year. more

Software-Defined Networking: What’s New, and What’s New for Tech Policy?

The Silicon Flatirons Conference on Regulating Computing and Code is taking place in Boulder. The annual conference addresses a range of issues at the intersection of technology and policy and provides an excellent look ahead to the tech policy issues on the horizon, particularly in telecommunications. I was looking forward to yesterday's panel on "The Triumph of Software and Software-Defined Networks", which had some good discussion on the ongoing problem surrounding security and privacy of the Internet of Things (IoT)... more

Space Weather and Broadband

There was an interesting phenomenon that happened in September when Starlink launched 49 new satellites. The satellites were successfully deployed by the rocket, but as the satellites were being maneuvered to reach the final orbital slots, there was a geomagnetic storm that caused 38 of the satellites to fall back to earth. Space storms happen when radiation affects the magnetosphere that surrounds the earth.  more

How Domain Data Helps Thwart BEC Fraud

It's true, domain data has many practical uses that individuals and organizations may or may not know about. But most would likely be interested in how it can help combat cyber threats, which have been identified as the greatest risks businesses will face this year. Dubbed as the greatest bane of most organizations today, cybersecurity can actually be enhanced with the help of domain data. How? more

Wall Street Bailout: Could Learn a Thing or Two From Botnets

Well, at this point, the government is well on its way to bailing out Wall Street from its own incompetence, putting taxpayers on the hook for $700 billion. The worst part is that as Treasury Secretary Hank Paulson puts it, "You're worried about taxpayers being on the hook? Well, guess what? They're already on the hook!" I read that and said "Aw, crap..." Anyhow, Wall Street should maybe learn something from botnet operators. For you see, botnets are not just for sending spam anymore. The bots have diversified their holdings... more

.Org: ICANN’s Betrayals and its Opportunity to Act Now in the Public Interest

ICANN's repeated betrayals of the public interest have created the conditions for Ethos Capital's proposed purchase of .Org. The growing outrage directed at ICANN is raising questions about ICANN's legitimacy and the wisdom of having entrusted ICANN with oversight over the domain name system ("DNS"). ICANN has shown itself to be out of touch with and unresponsive to the public interest. ICANN now has an opportunity to remember its mission... more

Once Begun is ONLY Half Done

In the brief history of Internet governance, few initiatives have been greeted with wider support than the recently signed Affirmation of Commitments between the U.S. Department of Commerce and the Internet Corporation for Assigned Names and Numbers (ICANN). The praise is well deserved, but now it's time to remind ICANN of the problems that the AOC did not solve, most importantly ICANN's ongoing accountability gap. more

Calculating the Return on Investment of Online Brand Protection Projects

In the early days of Online Brand Protection (OBP), before it was commonly understood how damaging to revenue infringements could be, this was an extremely popular topic. I remember delivering webinars on the subject then and even running a couple of half-day in-person workshops for brand owners at major conferences. more

A Framework for Recent Internet Governance Discussions - From Montevideo Statement to 1net

There have been many significant Internet Governance developments in the last several weeks, and so I'd like to take this moment to provide a framework in which to consider these recent events. For the last several years, the leadership of several recognized Internet organizations (ISOC, ICANN, IAB/IETF, IANA, the 5 Regional Internet Registries (RIRs), and W3C; sometimes referred to as the "Internet technical organizations") have met periodically to promote better coordination between these groups. more

Keeping IT Industry Developments in Context

The announcement that Google's chief executive Eric Schmidt is standing down from the Apple board hardly came as a surprise. Google's Android is already powering smartphones that offer an open alternative to Apple's iPhone, while the recent announcement of plans for Chrome OS, an operating system that will directly challenge Mac OS, makes Google a direct competitor to Apple in its core market... more

Registered Your DMCA Contact Address Yet?

It is not much of an exaggeration to say that the Digital Millenium Copyright Act of 1998 makes the Internet as we know it possible. The DMCA created a safe harbor that protects online service providers from copyright suits so long as they follow the DMCA rules. One of the rules is that the provider has to register with the Copyright Office to designate an agent to whom copyright complaints can be sent. The original process was rather klunky; send in a paper form that they scan into their database, along with a check. more

Microsoft is Abandoning SHA-1 Hashes for Updates - But Why?

Microsoft is shipping a patch to eliminate SHA-1 hashes from its update process. There's nothing wrong with eliminating SHA-1 - but their reasoning may be very interesting. SHA-1 is a "cryptographic hash function". That is, it takes an input file of any size and outputs 20 bytes. An essential property of cryptographic hash functions is that in practice (though obviously not in theory), no two files should have the same hash value unless the files are identical. more

Have You Had Your GDPR Training Today?

The suggestion was recently put to the GNSO Council: anyone who becomes a member of a proposed new Expedited Policy Development Process (EPDP) must be able to demonstrate that they have basic knowledge of privacy and data protection. This makes a lot of sense: Would you trust a lawyer who had never been to law school? Or a doctor who had never studied medicine? Of course not. Recently I asked members of our ICANN Community: have you had any GDPR training, classes, or certification? more