Cyberwar vs No Cyberwar

I was browsing CircleID the other day and came across Bruce Schneier's article on cyberwar. Schneier's article, and the crux of his point, is that the term cyber war and the threat of cyber warfare has been greatly exaggerated. The real problem in cyberspace is not the threat of cyber warfare wherein a foreign government, or possibly non-state actor, conducts a cyber attack on another nation. more

$59M and Counting: ICANN Board Downgrades Community Say on Use of Last Resort Auction Proceeds

ICANN's new gTLD program provides for last resort auctions to settle contention sets where the competing applicants are unable to reach agreement by negotiation or private auction, with the proceeds going to a segregated ICANN account. With the recent $25 million bid of Google to secure control of the .App registry the total proceeds of those ICANN auctions has swelled to $58.8 million. The final sum by the end of the first round could go higher, perhaps to more than $100 million. That's serious money. more

Let American Telcos and Cablecos Merge - But Declare Infrastructure a Utility

While there is much discussion in the United States about the mergers of Comcast and Time Warner Cable, and of AT&T and DirectTV, issues such as this are generally discussed from a very narrow perspective and, we maintain, from the wrong underlying telecoms regime operating in that country - one that has stifled competition in the telecoms for nearly two decades. The same wrong parameters apply to the endless debates on net neutrality an issue that is, by the way, largely of significance to the US market alone. more

China’s Latest Internet Crackdown

Seven different government agencies, including the Ministry of Public Security and the State Council Information Office declared war on Internet smut today. 19 Internet companies, including Google, Baidu, Sina, and others, were cited for "violating public morality and harming the physical and mental health of youth and young people."... Another Chinese language report, including video of a TV report with footage of computer servers being confiscated by police at an unknown location and unknown time... more

ICANN Begins Public DNSSEC Test Plan for the Root Zone

The deployment of Domain Name System Security Extensions (DNSSEC) for the root zone got an official start today with its public signing for the first time. DNSSEC for the root zone is a joint effort between ICANN and VeriSign, with support from the U.S. Department of Commerce to improve security of the Internet's naming infrastructure. Kim Davies, ICANN's Manager of Root Zone Services, says: "What happened today was the deliberately un-validatable root zone started being published on l.root-servers.net. It is anticipated this will be rolled out across the other root servers over the coming months. This phase is designed to identify any issues with the larger DNS response sizes associated with DNSSEC data." more

Watch ION Belfast / UKNOF Live Tuesday, Sept 9, for IPv6, DNSSEC, BGP Security and More

On Tuesday, September 9, 2014, you have a great opportunity to watch live a very packed agenda full of great sessions about IPv6, DNSSEC, routing/BGP security and other components of Internet infrastructure streaming out of the UKNOF / ION Belfast event in Belfast, UK. All of the sessions can be seen live. more

Updates on the Georgian Cyber Attacks

This is an update of my previous post on the subject. To be honest here, no one truly knows what's going on in Georgia's Internet except for what can be glimpsed from outside, and what has been written by the Georgians on their blog (outside their country). They are probably a bit busy avoiding kinetic bombing... more

Intelligence Exchange in a Free Market Economy

The U.S. Government is causing a huge disservice to protection and defense in the private sector (80%+ of CIKR) by creating an ECS that contains monetary incentive for a few large players to exert undue control over the availability, distribution, and cost of security threat indicators. While there may be a legitimate need for the federal government to share classified indicators to entities for protecting critical infrastructure, the over-classification of indicator data is a widely recognized issue that presents real problems for the private sector. ECS as currently construed creates monetary incentives for continued or even expanded over-classification. more

DNS RPZ, Malicious Domains… Bring Your Own Policy. Dress Casual.

Paul observed that most new domain names are malicious. Are they? Since the "dawn of tasting", some 30 million domain names have been created for the purposes of interposition on existing name to resource mappings. That is a third of the .COM historical growth, and mostly in the last five years. ... It is difficult not to conclude that interposition on persistent, public referents is without malice, and that the malicious parties are advertisers seeking to transform public referents into private property, as promotional devices... more

Amazon’s Orbiting Infrastructure

I have been following satellite Internet service since the 1990s, but I was surprised when I learned last week that Amazon had filed an application for a 3,236-satellite constellation of low-earth orbit Internet service satellites - Project Kuiper. I shouldn't have been surprised - Amazon was an infrastructure company from the start. In his first post-IPO letter to shareholders in 1997, Jeff Bezos pointed out that their distribution center capacity grew from 50,000 to 285,000 square feet and said their goal remained... more

Majority of Popular Mobile-Only VPNs Are Run by Chinese Nationals or Located in China

While the current VPN market appears to be filled with numerous products by various companies, recent research that took a closer look into the market revealed very unexpected results. more

Lessons from .Build One Year After Launch: Q&A with CEO and Founder George Minardos

The .build domain namespace opened in General Availability in April 2014, as a domain name designed specifically for the online needs of the building industry and beyond. As the appointed technical provider for .build, ARI Registry Services powered the launch and continued technical operations for this global domain name. A year into the life of the namespace, ARI Registry Services' Head of Global Consulting Tony Kirsch caught up with George Minardos, CEO of .build to talk about his insights to date, what he's learnt about the domain name industry, and a look at where he thinks it is heading. more

The Impact of Rising Sea Level on Internet Infrastructure

A recent study predicts that rising sea level might result in as much as 4,067 miles of fiber conduit being under water and 1,101 nodes (data centers, Internet exchanges, cable landing points, etc.) surrounded by water in U. S. coastal cities in 15 years. Paul Barford, professor of computer science at the University of Wisconsin, and his colleagues have been compiling data on the physical Internet and making it available to the research community at the Internet Atlas Web portal since 2011. more

Dutch Geographic TLDs Refuse Public Access to Whois Data

Organizations behind two of the new geographic top-level domains, .amsterdam and .frl, have refused to provide public access to information about the registrants of domain names, otherwise known as Whois records. more

The Christmas Goat and IPv6 (Year 12)

This year could be the fifth year in a row where the goat isn't burned down. But early in the morning of Dec 17th, it was on fire by an arsonist who got caught a few minutes later. So Stephan Lagerholm, who had visited me earlier for some IPv6 site seeing in Gävle and I were lucky to get this photo. The traffic went down by 5% from last year, and I don't have any good explanation for that. The visitors with many hits in the logs are always from the same countries where North America and Europe are dominating. more