Should You Whitelist Your Vulnerability Scanning Service Provider?

Unlike consultant-led penetration testing, periodic or continual vulnerability scanning programs have to operate harmoniously with a corporation's perimeter defenses. Firewalls, intrusion prevention systems, web proxies, dynamic malware analysis systems, and even content delivery networks, are deployed to protect against the continuous probes and exploit attempts of remote adversaries -- yet they need to ignore (or at least not escalate) similar probes and tests being launched by the managed security service providers an organization has employed to identify and alert upon any new vulnerabilities within the infrastructure or applications that are to be protected. more

First Broad Internet Census Since 1982 Reveals Surprising Number of Unused IPv4 Addresses

In the upcoming Internet Measurement Conference being held next week in Vouliagmeni, Greece, a team of six researchers will be presenting a paper called "Census and Survey of the Visible Internet," based on a comprehensive census of more 2.8 billion allocated IP addresses on the Internet. The research is claimed to be the first comprehensive census of its kind in more than two decades. more

Verizon and Skype: Who’s the Winner?

Until only recently, has it been remotely plausible to consider such different companies joining forces. I've written about Skype often, and for the most part, they've been a threat for incumbents of all stripes. To hear about this from Verizon during such a public event makes it very clear that the sands are shifting once more, and yet again, VoIP is the culprit. more

No Virginia, You Have No Duty to Secure Your WiFi Access Point

Every now and again a report flies across the network about the police breaking down someone's door and attempting to arrest the home owner for bad things online - assuming that whatever happened from that person's Internet connection is their fault. Now there are lots of problems with this - lots of problems. But one of the big ones is that anyone can access an open access point... more

Come to the First Ever Dedicated New gTLD Conference: .nxt

Sometimes the heavens align. With the release of a number of resolutions from the ICANN Board on Sunday, we learnt two things: One, that there is a determined drive to get the rules for new Internet extensions, gTLDs, finalized in December at a meeting in Cartagena. And two, that the meeting immediately after that - in March 2011 - will be held in San Francisco. more

Google Playing to Win in the 700 MHz Auctions

Many say Google will bid to lose in the upcoming 700 MHz auctions and many more are equivocating. The idea is Google's entry alone will induce enough openness, and besides they couldn't afford to become an operator. This shows a total lack of understanding! more

The Senate Should Take the DOTCOM Act Off Cruz Control

Recently we speculated on the question "Will 2016 Politics Trump Bipartisan Support for the MSM and DOTCOM Act?" That article discussed the possibility that the Obama Administration's decision to relinquish ICANN stewardship via the periodic re-awarding of the IANA functions contract might arise in the ongoing U.S. Presidential sweepstakes, most likely from a Republican entrenched in the far right wing of that Party. We also discussed whether its introduction might erode the currently broad and bipartisan Congressional acceptance of the transition... more

Who Are the True Multi-Stakeholders in ICANN?

During ICANN Durban, I attended the Country Code Names Supporting Organisation (ccNSO) 10 year anniversary celebrations. ICANN Chairman, Dr Steve Crocker, was on hand to congratulate the ccNSO on their 10 years and revered them as the "true multi-stakeholders in ICANN". Post Durban, I was reviewing notes and I came across a similar statement made during a ccNSO session that country code Top-Level Domains (ccTLDs) "represent the best functioning multi-stakeholder model" in the ICANN ecosystem. Is this entirely accurate? more

ICANN CEO: Top-Level Domain Expansion Has Been Anything But Rushed

In response to the Washington Post's December 11 article title "What's the .rush?", directed at the expansion of new TLDs, Rod Beckstrom, ICANN's President and CEO has replied in a letter to the Washington Post stating: ""The program of the Internet Corporation for Assigned Names and Numbers (ICANN) to open the Internet to new top-level domain names (TLDs) has been anything but rushed..." more

Examining Stuart Lynn’s Domain Name Plans - Part I

Last month ICANN began soliciting comments on Stuart Lynn's A Plan for Action Regarding New gTLDs, which will be one of the Internet governance organization's primary discussion topics at its December meeting in Amsterdam. more

50K .uk Domains Registered on Opening Day, Nominet Reports

Within 24 hours of opening, .uk domain registrations have topped the sales charts, according to Nominet. "More than 50,000 domains were registered, making this one of the fastest selling new domain releases on record, and beating the first day sales for all of the current batch of new generic Top Level Domains by a large margin." more

RCC Pushes for State-Led Internet Governance Ahead of WSIS+20 Review

As we approach the WSIS+20 Review, the future of Internet governance is at a crossroads. In its January 29th submission, the Regional Commonwealth in the Field of Communications (RCC) - representing Russia, Armenia, Azerbaijan, Kyrgyzstan, Uzbekistan, Tajikistan, and Rostelecom - advocates for a state-led governance model that challenges the Western-led multistakeholder approach. The submission reflects an ongoing ideological divide between sovereignty and openness in digital governance. more

ICANN Issues Guidance to Domain Registrars and Registries in Light of Hurricane Maria

ICANN has issued a guidance notice to registrars and registries in relation to Hurricane Maria, which caused massive damage throughout the Caribbean. This isn't the first time that this has happened, with a previous incident in Asia triggering action from both registrars and registries to give domain name registrants impacted by the natural disaster breathing space. more

Coordinating Attack Response at Internet Scale

How do we help coordinate responses to attacks against Internet infrastructure and users? Internet technology has to scale or it won't survive for long as the network of networks grows ever larger. But it's not just the technology, it's also the people, processes and organisations involved in developing, operating and evolving the Internet that need ways to scale up to the challenges that a growing global network can create. more

Will Googlerola Be Able to Fight Data Caps?

"Is Google Turning Into a Mobile Phone Company?" asks the headline in Andrew Ross Sorkin's New York Times story. Wrong question, IMHO. But is Google doing the deal at least partly to give it leverage over wireless providers? I think so. The biggest threat to the growth of Smart Phones and tablets and other Google businesses like YouTube is the imposition of data caps and metered pricing by wireless providers like at&t and Verizon Wireless. more