How the Sale of .ORG Could Hurt Non-Profits IRL

Private equity firm Ethos Capital's attempt to take control of .org, the Internet domain that's home to most of the world's non-profit and public-benefit organizations, has triggered an interesting crisis in Internet governance. The Internet Corporation for Assigned Names and Numbers, or ICANN, is the body responsible for regulating the global domain name industry. For the first time since oversight responsibility over ICANN was passed from the United States National Telecommunications and Information Administration... more

Creating a Russian No-Cyber Zone

In response to Russia's horrific invasion and war against the Ukrainian nation ordered by Dictator Putin that will live in infamy, an array of nations, organizations, and companies have responded to shun and shut off Russia in every possible manner. The actions include no-fly zones, removal from ICT network services, and essentially universal declarations of condemnation. For the first time ever, all Russian proposals to the International Telecommunication Union (ITU) quadrennial standards body plenary known as the WTSA have been "bracketed"... more

The Diet Pill Security Model

The information security industry, lacking social inhibitions, generally rolls its eyes at anything remotely hinting to be a "silver bullet" for security. Despite that obvious hint, marketing teams remain undeterred at labeling their companies upcoming widget as the savior to the next security threat (or the last one -- depending on what's in the news today). I've joked in the past that the very concept of a silver bullet is patently wrong... more

Afnic Observatory - the Domain Name Market in 2022: Towards a Resumption of Growth

Afnic, the association responsible for several Internet Top Level Domains, including the .fr country-code Top Level Domain, has published the 2022 edition of its annual analysis under the title “The Global Domain Name Market”. Here are some highlights of this study. The domain name market posted aggregate growth of +1.9% in 2022, an acceleration that reflects a break in the trend observed since 2019. As we foresaw in last year’s report, 2021 was the “trough” year, with a relative improvement over 2022. more

China Releases Strategy on Cyberspace Cooperation

Ministry of Foreign Affairs and the Cyberspace Administration of China has jointly released a document titled "International Strategy of Cooperation on Cyberspace." more

Bug Bounty Programs: Are You Ready? (Part 3)

The Bug Bounty movement grew out a desire to recognize independent security researcher efforts in finding and disclosing bugs to the vendor. Over time the movement split into those that demanded to be compensated for the bugs they found and third-party organizations that sought to capitalize on intercepting knowledge of bugs before alerting the vulnerable vendor. Today, on a different front, new businesses have sprouted to manage bug bounties on behalf of a growing number of organizations new to the vulnerability disclosure space. more

A Simpler Approach to an Email Deliverability Metric

The term Email Deliverability is used to describe how well a mail flow can reach its intended recipients. This has become a cornerstone concept when discussing quality metrics in the email industry and as such, it is important to understand how to measure it. Email Deliverability is considered to be affected by a mythical metric, the reputation of the sender, which is a measure of that sender behavior over time -- and the reactions of the recipients to his messages. more

TLDs of Vacant or Close to Vacant Places in the World

Royal Pingdom has put together a list of top ten places with designated country code Top-Level Domains that are barely inhabited. The list starts off with '.hm' for Heard and McDonald Islands, an Australlian territory, with zero population. Others include '.pn' for Pitcairn Islands (Population: 50), '.tf' for French Southern and Antarctic Lands (Population: 140), '.cc' for Cocos (Keeling) Islands (Population: 596) and '.va' for the Vatican City (Population: 826). more

GAO Rules IANA Transition Not a Transfer of Government Property Requiring Congressional Approval

The Untied States Government Accountability Office (GAO) has concluded that the IANA transition is not a government transfer of property requiring congressional approval. more

U.S. Now Leading Source of Attack Traffic, Followed by China and Russia

The U.S. became the top attack traffic source in the second quarter of 2010, accounting for 11% of observed attack traffic in total, reports Akamai in its State of the Internet Report released today. According to the report, China and Russia held the second and third place spots, accounting for just over 20% of observed attack traffic. Attack traffic from known mobile networks has been reported to be significantly more concentrated than overall observed attack traffic, with half of the observed mobile attacks coming from just three countries: Italy (25%), Brazil (18%) and Chile (7.5%). more

U.S. Concerned over Increasing Russian Submarine Patrols Near Data Cables

Russian submarines and spy are reported to be aggressively operating near vital undersea cables that carry global Internet communications, according to a story in the New York Times. The issue is raising concerns among some American military and intelligence officials regarding the possibility that Russians might be planning to attack those lines in times of tension or conflict. more

Why We Need to Discard the Word “Multistakeholder”

A CircleID post by Alexander Klimburg takes aim at my article, "The Power to Govern Ourselves," delivered at the Gig-Arts conference in June. That speech, available here on the blog, argued that: "Multistakeholder does not describe a governance model. It never has. It was always a compromised Public Relations concept," one that muddied the distinction between governance by state actors and non-state actors. What really made the Internet institutions unique was their break with sovereignty. more

More Privacy, Bit by Bit

Before the Holidays, Yahoo got a flurry of good press for the announcement that it would (as the LA Times puts it) "purge user data after 90 days." My eagle-eyed friend Julian Sanchez noticed that the "purge" was less complete than privacy advocates might have hoped. more

Google Fiber to Push Speed Limits Again

Dinni Jain, the CEO of Google Fiber, posted a blog last week that talks about dramatically increasing the top speeds available on fiber. He says the specific announcement will come in the coming months to dramatically expand Google Fiber's gigabit offerings. The blog gives a hint at what might be coming. Included in the blog is a speed test from the home of a Google Fiber employee in Kansas City who is receiving 20.2 Gbps. more

When You Hear “Security,” Think “National Sovereignty”

These days you can hardly talk about Internet governance without hearing about security. DNSSEC is a hot issue, ICANN's new president is a cyber-security expert, and cyberattacks seem to be a daily occurrence.
This reflects a larger shift in US policy. Like the Bush administration before it, the Obama administration is making security a high priority for the US. Only now the emphasis is on security in cyberspace. The outlines of the new policy were published in the recent US Cyberspace Policy Review, which even recommends a cyber security office directly in the White House. more