Two miles (and a short Tube ride) from where ICANN is gathering in London, rests an original copy of the Magna Carta, which introduced the concept of imposing limits on the powers of the king. I'm taking the proximity of this icon of constitutional history as a good omen for our task: to create a charter to limit ICANN's powers and enhance its accountability, in the wake of the U.S. Government's decision to terminate its legacy role. more
In the midst of the election season, Congress passed a plethora of Internet related laws. Most involved child protection. One involved webcaster protection. Wasting no time, the impact of the new laws is already being felt through federal agency implementation. On Friday, the National Telecommunications and Information Administration (NTIA) in the Department of Commerce released the following notice... more
In Asia -- a region that at various points in its recent history has been a hotbed for civil unrest, secessionist movements and political instability -- the line between national security and public interest can be difficult to draw. A session organised by the Internet Society at the recently held RightsCon Southeast Asia in Manila shed some light on the perceived trade-offs between national security objectives and digital rights, in particular freedom of expression and privacy. more
Just a few months after Yahoo confirmed a massive data breach impacting half a billion users, the company today disclosed a second major breach of its systems affecting over a billion users. more
Do you have new information about DNSSEC or DANE that you would like to share with the wider community? Have you created a new tool or service? Have you found a way to use DNSSEC to secure some other service? Do you have new statistics about the growth or usage of DNSSEC, DANE or other related technology? If so, and if you will be in Copenhagen, Denmark, for ICANN 58 in March 2017 (or can get there), please consider submitting a proposal to speak at the ICANN 58 DNSSEC Workshop! more
While many were expecting a decision of strict Registry/Registrar separation, in an unexpected ruling, it was announced that ICANN will not restrict cross-ownership between Registries and Registrars. While the current set of agreements prohibits Registries from acquiring Registrars, they do not prohibit Registrars from applying for or operating TLDs. The Board Resolutions also made note of the fact that while individually negotiated contracts have included restrictions on Registry ownership of Registrars, cross-ownership provisions have varied over time and no formal "policy" on this topic has ever been recommended by the GNSO or adopted by ICANN. more
A couple of years ago I started a mailing list where folks not necessarily involved with the vetted, trusted, closed and snobbish circles of cyber crime fighting (some founded by me) could share information and be informed of threats. In this post I explore some of the history behind information sharing online, and explain the concept behind the botnets mailing list... we may not be able to always share our resources, but it is time to change the tide of the cyber crime war, and strategize. One of the strategies we need to use, or at least try, is public information sharing of "lesser evils" already in the public domain. more
The Biden administration is investigating China Mobile, China Telecom, and China Unicom over concerns that these companies could potentially exploit their access to U.S. data through their cloud and internet services, potentially sharing this data with the Chinese government. more
A few days ago, I sat in a meeting here in Ottawa with our IT Director and Director of Marketing and Communications. These are two highly intelligent people working on the same team, for the same company, talking about a common subject. And yet, something was amiss in achieving mutual understanding. Each was seeing things from his own distinct perspective and as such, speaking his own language. As I reflected on my team's internal dynamic, I began to see parallels in areas that have an even more direct impact on the Internet ecosystem. more
Network Neutrality is a hot topic in the US. The FCC held hearings in my neighborhood recently (while I was in Asia). Now I see Professor Susan Crawford will be testifying next Tuesday at a House Judiciary Committee hearing on "Net Neutrality and the First Amendment." I look forward to her remarks, but I worry that the whole discussion will be focused on "IP Pipes," that is connectivity at network layer 3. This distracts us from the fundamental problem... more
The RIPE NCC is 20 years old and it now has over 8,000 members. In this article we are looking at the growth curve and the composition of the membership: what industry do RIPE NCC members come from today. The RIPE NCC became the first Regional Internet Registry in September 1992 (six months after it was set up as the secretariat for the European operators community, RIPE). more
As Reddit recently learned it's not a great idea to use the Amazon EC2 cloud to host mailservers. There are a number of reasons for this, most of them related to the reputation of mail coming from EC2 servers. When you're using machines in the cloud, changing IP addresses is as simple as initializing a new server. Spammers discovered this almost as soon as the EC2 cloud became public. more
China's insomniac twitterati were on fire this afternoon U.S. time, powered no doubt by much caffeine and sugar in the the wee hours of the morning in China. Half an hour before Google's David Drummond posted his announcement that Google.cn is now effectively operating from Google.com.hk, Guangzhou-based open source programmer @LEMONed broke the
news that google.cn was being redirected to the Hong Kong service. Reacting to the news, @wentommy quipped: "One Google, One World; One China, No Google." more
Any vendor in the platform business knows that their primary product is programming interfaces -- the so-called APIs that developers depend upon in order to deliver applications. The API exposes features of the platform, and differentiate applications running on that platform from all others. Lose control of the API, and you will lose control of the developer. Developers are the leading indicator for platform success. Ergo, lose the developer, lose the platform. more
The period around the end of the nineteenth century and the start of the twentieth century saw a number of phenomenal advances in the physical sciences. There was J.J. Thompson's discovery of the electron in 1897, Max Planck's quantum hypothesis in 1900, Einstein's ground-breaking papers on Brownian motion, the photoelectric effect and special relativity in 1905, and Ernest Rutherford's study of the nucleus published in 1911 to mention but a few of the fundamental discoveries of the time. more