Why Small and Medium-Size Operators Should Care About Sustainability

A new resource dedicated to small and medium-sized digital infrastructure providers highlights the benefits of incorporating sustainability into their operations, offers a consolidated list of best practices and recommendations, and shares additional resources to help make practical changes to save time, energy, and money. more

Somalia’s Extended Internet Outage Results in Millions of Dollars of Loss per Day, Says Government

Somalia's internet connection was finally restored on Monday after weeks of outage due to a severed undersea cable. more

What Smaller Institutions Can Learn from DDoS Attacks on Big Banks

Since last fall, several waves of distributed denial of service (DDoS) attacks have targeted major players in the U.S. banking industry. JPMorgan Chase, Wells Fargo and PNC were among the first to sustain intermittent damage. Eventually, the top 50 institutions found themselves in the crosshairs... In the months to come, security experts would praise the banks' collective response, from heightened DDoS protection to candid customer communications.. these larger institutions have learned some painful lessons that smaller firms might heed as they seek to minimize risks. more

Trusting Zoom?

Since the world went virtual, often by using Zoom, several people have asked me if I use it, and if so, do I use their app or their web interface. If I do use it, isn't this odd, given that I've been doing security and privacy work for more than 30 years, and "everyone" knows that Zoom is a security disaster? To give too short an answer to a very complicated question: I do use it, via both Mac and iOS apps. Some of my reasons are specific to me and may not apply to you... more

New gTLDs and the Power of “Because”

Despite numerous false starts over the last decade it appears that 2011 will be the year ICANN finally implements a new generic Top-Level Domain (gTLD) process that will lead to the responsible expansion of the domain name space. One of the important remaining steps in this process will be the upcoming meeting between the ICANN Board and the Government Advisory Committee (GAC) intended to resolve a number of outstanding differences. more

The Tale of Thousands of Hacked Modems in Brazil, Affecting Millions

Kaspersky Lab Expert, Fabio Assolini, has provided detailed description of an attack which as been underway in Brazil since 2011 using 1 firmware vulnerability, 2 malicious scripts and 40 malicious DNS servers, affecting 6 hardware manufacturers, resulting in millions of Brazilian internet users falling victim to a sustained and silent mass attack on DSL modems. more

The IANA Transition’s Terrible, Horrible, No Good, Very Bad Day

Thursday, September 8, 2016 was a terrible, horrible, no good, very bad day for the prospects of the IANA functions transition being completed by October 1, 2016. Indeed, that same date - but in 2017 - may be the earliest that the handoff from NTIA to ICANN can be completed, given what last Thursday. The day began with the announcement that Sen. Ted Cruz would be making his first Senate floor remarks since exiting the Republican Presidential race, and that the talk's focus would be a continuation and escalation of his long-standing opposition to "Obama's Internet giveaway". Shortly after 11 am, Sen. Cruz began speaking from his Senate desk... more

Work in Progress: Preparing the Next Round of New gTLDs

There are now more than a thousand new Internet suffixes alongside "the originals" (not talking vampires here, but rather .COM et al). These additional web address endings are called "new gTLDs". Since Internet technical coordinator ICANN's 2012 call for applications for the creation of new gTLDs, and their roll-out starting in 2014 when suffixes such as .BARCLAYS (brand TLD), .NYC (geo TLD) and .SKI (generic TLD) became active, the question of another round of applications has been asked repeatedly. more

The Threat from Within - US v. Fowler, SDFL 2010

The security vendor-phobe at the head of the conference bangs on the podium with his shoe declaring that "The greatest threat comes from within! (buy our product for your network's salvation)." Fear as a marketing strategy can never be underestimated. Particular when the fear is of the misunderstood. Media helps stoke the flames of fear-marketing with stories of fired or disgruntled IT staff who reportedly effectuate their revenge on former employers by bricking systems. more

First Root Zone DNSSEC KSK Ceremony

ICANN will hold the first Root Zone DNSSEC KSK Ceremony on Wednesday 2010-06-16 in Culpeper, VA, USA. ... Attendance within the key ceremony room itself will be limited to just those with an operational requirement to execute the ceremony. However, since this event has generated significant interest, we have made additional space available in an adjacent room for observers who wish to attend the event. more

The Perfect, the Good, and the FCC

It has been a busy week in U.S. communications policy, with an FCC meeting adopting important spectrum policy reforms, an FCC complaint about Comcast's approval policies for cable modems, and a dispute between Comcast and Level 3 over fees for Internet backbone traffic. And late last night, it got even more interesting. more

Stealth Cyberattacks by China’s Volt Typhoon Threaten U.S. Infrastructure: Microsoft Unmasks Espionage Campaign

Microsoft today disclosed the detection of covert and targeted malicious activity aimed at critical infrastructure organizations in the United States. The attack is orchestrated by a state-sponsored group from China, known as Volt Typhoon, with the suspected objective of disrupting the communication infrastructure between the U.S. and Asia during potential future crises. more

The Over-Optimization Meltdown

In simple terms, Meltdown and Spectre are simple vulnerabilities to understand. Imagine a gang of thieves waiting for a stage coach carrying a month's worth of payroll. There are two roads the coach could take, and a fork, or a branch, where the driver decides which one to take. The driver could take either one. What is the solution? Station robbers along both sides of the branch, and wait to see which one the driver chooses. more

The Costs of a Dysfunctional Relationship - Part 1

"The current Board-GAC relationship is dysfunctional and has been so for several years." Never has this line from the ATRT Report seemed so apt as now, when the ICANN board and the GAC are preparing to meet in Brussels. Part 1 of this blog will describe their impasse over the introduction of new generic Top-Level Domains (gTLDs). Part 2 will analyze that impasse and offer recommendations to begin resolving it. more

Damaged Internet Subsea Cables Repaired in Red Sea Amid Militant Attacks on Ships

Repairs on three crucial subsea telecommunications cables in the Red Sea, damaged since February, have begun despite ongoing militant attacks. The AAE–1 cable, a significant 25,000-kilometer fiber optic link between Asia and Europe, was repaired by E-Marine. more