Cryptocurrency Mining Attacks for the First Time Detected on Industrial Control Systems

A water utility in Europe was compromised by cryptocurrency malware mining attack; the attack is the first public discovery of an unauthorized cryptocurrency miner impacting industrial controls systems. more

ALAC Meets the ICANN Board

For three years, I've been a member of ICANN's "Interim" At-Large Advisory Committee, ALAC. At this Vancouver meeting, for the first time, the ICANN Board met with us, and Bret captured it on mp3 for podcast. ALAC criticized ICANN's proposed settlement with VeriSign, and then spoke about the problems with the current structure for at-large participation. more

U.S. Uses Domain Names As New Way to Regulate the Net

Governments have long sought ways to regulate Internet activity, whether for the purposes of taxation, content regulation, or the application of national laws. Effective regulatory measures have often proven elusive, however, since, unlike the Internet, national laws typically end at the border. Earlier this month, the United States began to move aggressively toward a new way of confronting the Internet's jurisdictional limitations - the domain name system. more

Russia Appears to Have Begun Providing an Internet Connection to North Korea

Network experts monitoring North Korea have detected activation of a new internet path out of North Korea. Doug Madory, Director of Internet Analysis at Dyn, along with North Korea expert Martyn Williams, report that at 09:07:51 UTC on 1 October 2017, the country's single internet provider, Star JV (AS131269), gained a new connection to the global internet through Russian fixed-line provider Transtelecom (AS20485), often referred to as TTK. more

MIT 2010 Spam Conference Starts Tomorrow…

In January we presented the glorious history of the MIT spam conference, today we present the schedule for the first day. Opening session will be from this author, Garth Buren with a topic entitled The Internet Doomsday Book, with details be released the same day as the presentation. Followed by Dr. Robert Bruen with a review of activities since the last MIT spam conference... more

CENTR Reports on Latest ccTLD Stats

The Council of European National Top level Domain Registries (CENTR) has released its 7th edition of DomainWire Stat Report with special focus on European country code Top-Level Domains (ccTLDs). According to the report, the top 20 largest ccTLDs currently represent roughly 82% of all ccTLD registrations globally and 37% of all domain names globally (gTLDs, ccTLDs etc). more

Bruce Schneier to Speak About Internet Surveillance at IETF 88 Technical Plenary Next Week

How do we harden the Internet against the kinds of pervasive monitoring and surveillance that has been in recent news? While full solutions may require political and legal actions, are there technical improvements that can be made to underlying Internet infrastructure? As discussed by IETF Chair Jari Arkko in a recent post on the IETF blog, "Plenary on Internet Hardening", the Technical Plenary at next weeks IETF 88 meeting in Vancouver, BC, Canada, will focus on this incredibly critical issue. more

Cloud Computing Can Make You More Secure

The number one concern cited for avoiding cloud computing is security. And there is a reason for that. Cloud providers have demonstrated some spectacular failures in the past, including Amazon's near total shutdown of an entire region, Dropbox's authentication snafu, and innumerous cloud providers that go belly-up. However, in the long run, cloud computing is destined to become more secure than in-house IT. I will briefly describe two dynamics in the industry that point in that direction, with substantiating evidence. more

Broadband Usage in 2Q 2025 by US Households: Persistent Demand, Hardware Strain

OpenVault recently published its Broadband Insights Report for the end of the second quarter of 2025. OpenVault is documenting the continued growth in broadband usage by U.S. households. One of the most useful statistics from OpenVault is the average monthly broadband usage per household in gigabytes. Below is the trend in average monthly U.S. download and upload volumes since the first quarter of 2021. more

DNSSEC Adds Value?

The recent news that .uk, .arpa and .org may sign their zones sometime this year is indeed good news. Each domain is highly significant... As the DNSSEC registry infrastructure moves inexorably forward -- primarily driven by top level pressure and considerations of National Interest -- it now behoves us to clearly articulate the benefits of DNSSEC to domain owners and registrars. In particular I want to focus on the vast majority of us to whom cold, hard cash is important and parting with it requires as a minimum tangible benefits or, in extreme cases, surgical intervention. more

The Long Gestation and Afterlife of New gTLDs

ICANN continues to flail, pointlessly. The latest in a series of missteps that could easily have been avoided is its recommendations on what to do about a report on the potential for confusion and misaddressing when someone's internal network names match the name for a new gTLD, and they have misconfigured their routers and/or DNS to the extent that someone typing in a new gTLD name might end up in the middle of someone else's network. more

Painting Ourselves Into a Corner with Path MTU Discovery

In Tony Li's article on path MTU discovery we see this text: "The next attempt to solve the MTU problem has been Packetization Layer Path MTU Discovery (PLPMTUD). Rather than depending on ICMP messaging, in this approach, the transport layer depends on packet loss to determine that the packet was too big for the network. Heuristics are used to differentiate between MTU problems and congestion. Obviously, this technique is only practical for protocols where the source can determine that there has been packet loss. Unidirectional, unacknowledged transfers, typically using UDP, would not be able to use this mechanism. To date, PLPMTUD hasn't demonstrated a significant improvement in the situation." Tony's article is (as usual) quite readable and useful, but my specific concern here is DNS... more

What Is the World Community Grid?

Innovation is one of those words that is a bit hard to internalize. Merriam-Webster says innovation is the introduction of something new or a new idea, method, or device. That would be a narrow definition, perhaps even obsolete. Innovation is much more than invention or introducing new technology. Some would say that innovation is more of a state of mind, an attitude. One thing is for sure: innovation is happening more quickly; it is more open and more collaborative. more

Quintett Leads Net Mundial Initiative (NMI): New Steam for an Enabling Multistakeholder Platform

At June 30, 2015 the Inaugural Meeting of the Coordination Council of the NetMundial Initiative (NMI.CC) elected a "Quintett" to guide its activities through the global Internet Governance Ecosystem. Alibaba's CEO Jack Ma from China, ICANN's President Fadi Chehade, Brazilian's Minister Virgilio Almeida and two woman: Eileen Donahou from Human Rights Watch (HRW)) and Marilia Maciel from the Center of Technology and Society (CTS) in Rio de Janeiro are sharing now the helm to bring more steam to this new innovative multistakeholder platform. more

New gTLDs and Concept of a Universal Directory

The concept of a universal directory does not exist on the Internet. There are thousands of directories of all kinds and online Yellow Pages in many countries. All of these websites are different, accessed differently and operated differently: for example, Yellow Pages in France are different from their equivalent in Spain and Italy. There is no standard directory operated behind the same name worldwide. more