A few weeks ago, the New York Times published an article saying that the Stuxnet worm, which infected a large number of Iran's nuclear power plants, was a joint effort between the United States and Israel. The program began under former president George W. Bush and continued under President Obama. Last month, the Washington Post ran an article saying that the US and Israel collaborated in a joint effort to develop Flame and that work included Stuxnet. more
The time is now to make sure your brand makes it onto the list of new top-level domain names. Brand owners should immediately start re-enforcing your brands by promoting ".Your Brand" as a top-level domain (TLD) extension. You must implement the strategy through a two-stage process: free ride on pre-launch discussions and submit your application request with ICANN during the application period. more
Like many, I've been watching the rollout of the first 150+ new Top-Level Domains (TLD) with interest. Since the delegation of ????. back in October, we've seen all sorts of TLDs launched -- from brands like .monash to generics like .build. There has been intense scrutiny within our industry on the zone file registration numbers of these delegated TLDs to measure whether or not they are successful. To be fair, this is not a surprise. We've been conditioned by past generic TLD launches to focus on registration numbers. more
Yesterday, the US Federal Communications Commission (FCC) voted to allow qualified devices to operate on a license-exempt basis in unused portions of TV channels 2-51, spectrum commonly referred to as "TV white spaces." A lot has already been written about this move... But what is missing in these discussions is the bigger picture. more
Now that ICANN's Last Resort Auctions are becoming an imminent reality, more and more applicants with gTLDs in contention are coming to the conclusion that they would be better off in a private auction. As a result, there is a renewed discussion of the various approaches that have been proposed. Interesting new suggestions have also been made within the gTLD applicant community. more
Linguistic Internet is becoming stronger with the first leap to develop non-Latin applications, as Arabic Language SSL Certificates has been launched by M/s ArabicSSL with the support of Live Multilingual Translator and The Multilingual Internet Group. This step is highly appreciable because this will ensure the security and stability and develop trust over new Internet layers of Internationalized Domains (IDN TLDs). more
This weekend Jari Arkko, Chair of the Internet Engineering Task Force (IETF), and Stephen Farrell, IETF Security Area Director, published a joint statement on the IETF blog titled: "Security and Pervasive Monitoring"... They go on to outline some of the IETF's general principles around security and privacy as well as some of the new developments. They also point out a vigorous (and still ongoing) discussion within the IETF around how to improve the security of the Internet in light of recent disclosures. more
Earlier today, Google and Verizon offered a widely publicized "Proposal for an Open Internet." There's been extensive comment with lots of reasons not to like it, but one I haven't seen is that the proposal would make it much harder to filter so-called "mainsleaze" spam. ... The problem is that under the pitifully weak CAN-SPAM law, a lot of spam is entirely legal. more
As a follow up to Susan Brenner's Networks and Nationalization and my comment there, I will go further in this post and talk about the "cyberwar" and "offense" aspects of her article. I think I made this point elsewhere as well... but before getting into a war, it'd be a brilliant idea to actually know that you can win. Cyberwarfare is the sort of game where you don't really need to be a huge government with the largest standing army in the world and sophisticated weaponry in order to win... more
The ICANN 69 meeting has come to a close, with no progress on DNS abuse or implementation of the Privacy/Proxy Services Accreditation policy (PPSAI). While ICANN is uniquely positioned to do so, it refuses to do anything proactive about DNS abuse, with its executives overtly attempting to limit its role to data collection. Moreover, its refusal to implement community-driven initiatives such as the PPSAI points to a growing trend where ICANN is backing away from its public interest responsibilities, to the detriment of the Internet and its users. more
According to reports, China Telecom has announced a complete schedule of IPv6 deployment including commercial trials currently underway. A full commercial launch is scheduled for 2012 while retreating from IPv4 network and services will begin in 2015. China Telecom has also announced various goals as part of the IPv6 transition which includes building a self-supporting IPv6 business and upgrading enterprise and residential gateways to support IPv6 access for government, enterprise and residential customers. more
The time was - way back around the turn of the century - when all Internet companies believed that the Internet should be free from government regulation. I lobbied along with Google and Amazon to that end (there were no Twitter and Facebook then); we were successful over the objection of traditional telcos who wanted the protection of regulation. The FCC under both Democrats and Republicans agreed to forbear from regulating the Internet the way they regulate the telephone network; the Internet flourished, to put it mildly. more
The fifth-annual survey of domain name servers (DNS) on the public Internet -- called a "Pandora's box of both frightening and hopeful results" -- was released today by The Measurement Factory in partnership with Infoblox. more
EFF and 26 other organizations, including Wikimedia Foundation, Public Knowledge, National Council of Nonprofits, YWCA and YMCA, sent a letter today to the Internet Society (ISOC), urging it to stop the sale of the Public Interest Registry (PIR) -- operator of .ORG top-level domain -- to private equity firm Ethos Capital. more
There's lots of security advice in the press: keep your systems patched, use a password manager, don't click on links in email, etc. But there's one thing these adages omit: an attacker who is targeting you, rather than whoever falls for the phishing email, won't be stopped by one defensive measure. Rather, they'll go after the weakest part of your defenses. You have to protect everything -- including things you hadn't realized were relevant. more