Colonial Pipeline, which accounts for close to half of the United States East Coast's fuel, has shut down its operations due to a cyberattack. The incident, believed to be the largest successful cyberattack on oil infrastructure in the U.S., was disclosed over the weekend. more
I'm a network engineer, and like many engineers I often gravitate to the big projects; large networks with problems of scale and complexity in my case. However, I also consider myself a student of Occam's razor and often quote Antoine de Saint-Exupéry: "perfection is reached not when there is nothing left to add, but when there is nothing left to take away." In this spirit of "less is more" I have recently become intrigued by the problems appearing in home networking. more
It's not been the best of years for ICANN. Leaving aside for a few seconds the controversy about xxx, and the allegations of improper behavior about the .Net assignment, ICANN has had a lot to deal with. The troubles began with the UN Working Group on Internet Governance hell bent on fixing ICANN, even though ICANN says nothing is broke. That trouble remains and isn't likely to go away for some time. And then, just when it seemed that the UN and ITU was the cause of all ICANN's problems, the old ally, US Government's DOC, decided that it was going to be in charge of ICANN. ...This could be the beginnings of a distinct change where the centralized DNS as we know it gradually gives way to some next generation structure which is far more decentralized. The coming 12 months may see some significant changes in this area. more
The Internet is on the verge of undergoing one of its most significant changes in its 40-year history. The Internet Corporation for Assigned Names and Numbers (ICANN) is finalizing plans to introduce non-Latin characters such as Arabic, Korean, Greek, Hindi, Japanese and Cyrillic. Non-Latin domain names -- commonly referred to as Internationalized Domain Names or IDNs -- could be up and running as early as middle of next year according to ICANN. Peter Dengate Thrush, chairman of the ICANN board, told reporters: "This is the biggest change technically to the Internet since it was invented 40 years ago... [a] fantastically complicated technical feature." more
The DNSSEC is a security protocol for providing cryptographic assurance (i.e. using the public key cryptography digital signature technology) to the data retrieved from the DNS distributed database (RFC4033). DNSSEC deployment at the root is said to be subject to politics, but there is seldom detailed discussion about this "DNS root signing" politics. Actually, DNSSEC deployment requires more than signing the DNS root zone data; it also involves secure delegations from the root to the TLDs, and DNSSEC deployment by TLD administrations (I omit other participants involvement as my focus is policy around the DNS root). There is a dose of naivety in the idea of detailing the political aspects of the DNS root, but I volunteer! My perspective is an interested observer. more
A group of experts from Interisle Consulting Group released a paper today, reporting a comprehensive study of the phishing landscape in 2020. The study's goal was to capture and analyze a large set of information about phishing attacks to better understand how much phishing is taking place, where it is taking place, and better ways to fight them. more
In his article titled, "End of Life Announcement", John Walker (author of the Speak Freely application) makes a few arguments about Network Address Translation (NAT) that are simply not true: "There are powerful forces, including government, large media organisations, and music publishers who think this situation is just fine. In essence, every time a user--they love the word "consumer"--goes behind a NAT box, a site which was formerly a peer to their own sites goes dark, no longer accessible to others on the Internet, while their privileged sites remain. The lights are going out all over the Internet. ...It is irresponsible to encourage people to buy into a technology which will soon cease to work." more
2025 is not a banner year for the status quo. A fashion for deregulation, ignoring processes and questioning whatever was long-established is finding enough adherents that even things which work well are being upended. That's why those looking for leverage to use in hurried dealmaking, or countries with plans to rebalance where digital power lies, may find a handy tool in ICANN. more
The financial industry is all about pinstripe suits, excessive Excel sheets and boring data. Or is it? Financial markets are more colorful than their reputation: take a look at Bloomberg's or Reuters' sites, and you'll see that pork belly is as much an object of investment speculation as coffee, electricity, bananas, hides, or fishmeal. Recently, the universe of data available to financial analysts and investment bankers grew further, with the addition of the Internet Domain Name Index (IDNX) to leading financial data distributors Bloomberg (ticker symbol: IDNX <Index>) and Reuters (ticker symbol: .IDNX). more
In the second part of this 3-part series article, the issue of UDRP in proving bad-faith domain registrations is examined with respect to the trademark's characteristics. The first part of this article can be found here. In assessing whether there is a passive holding of a domain name, panels look carefully into the trademark's characteristics in question, namely what is the degree of reputation and distinctiveness of the trademark in question. more
Iran's political filtering during the recent 2009 presidential campaign and the role of the Internet in the post-election turmoil has brought a heightened level of attention to the country's Internet filtering system. According to a status report just updated by the OpenNet Initiative, the Internet censorship system in Iran has become one of the most comprehensive and sophisticated in the world. Iran and China are the only countries that aggressively filter the Internet using their own technology. Iran's aggressive filtering measures "have contributed to the implementation of a centralized filtering strategy and a reduced reliance on Western technologies," says OpenNet. more
In a video interview conducted during the NSCS ONE conference, Paul Vixie CEO of Farsight Security further discusses the topic of his presentation titled: "Defective by Design -- How the Internet's Openness is Slowly Poisoning Us". more
A case study by Efficient Frontier mentions how using the Google Adsense for Domains network doubled the conversion ratio of search ads for their clients. According to their website, "Efficient Frontier manages more than $400 million in annual PPC spend under management, counts 80 of the top 500 search advertisers as clients and manages over 30 million keywords"... "When we analyzed the results, we were shocked. We didn't expect to see that domain park sites can bring in the quality of traffic necessary..." more
When it comes to stealing domain names, I suspect that there are two reasons why so many web bandits appear to be immune from ICANN (the Internet Corporation for Assigned Names and Numbers uses the acronym ICANN): the first reason I discussed in my last column on domain name theft (where I described a substantive void in domain name "regulation" as a primary factor for the increasing incidence of domain name theft), the second reason, which is the focus of this column, is the procedural anomaly that currently infuses ICANN's uniform dispute resolution process (UDRP) by providing no administrative forum for domain name registrants who become victims of domain name theft carried out by ICANN's registrars. more
Universal Acceptance is the topic of the moment, explained in one simple sentence: in the new gTLD world, it means that various groups (the DNS, ICANN and a few others) are working hard to make new domain names better accepted by the existing technical Internet infrastructure. A video extracted from the "ICANN 52" meeting explains it in 50 slides but I suggest a pause on slide 17, because it shows where the issues are and what remains to be fixed to give the ultimate answer to that question. more