Bug Bounty Programs: Are You Ready? (Part 2)

In Part 1 of "Bug Bounty Programs: Are You Ready?" we examined the growth of commercial bug bounty programs and what organizations need to do before investing in and launching their own bug bounty. In this part, we'll discuss why an organization needs to launch a bug bounty program, and what limits the value they will likely extract from such an investment. more

5G Carriers Hoping for Handouts

The Information Technology Industry Council (ITI) published a recent report that looks at "5G policy Principles and 5G Essentials for Global Policymakers." For those who don't know ITI, they are a DC-based lobbying group that represents most of heavy-hitter tech firms, and which works to help shape policy on tax, trade, talent, security, access, and sustainability issues. I don't think I've seen another document that so clearly outlines the hopes of the big US cellular companies. more

Iranian Influence Operation Worldwide Significantly Larger Than Previously Identified

An apparent Iranian influence operation targeting internet users worldwide is reported as significantly larger than previously identified, Reuters reports. more

FCC Confirms Tom Wheeler as the New Chairman

The U.S. Senate has unanimously confirmed Tom Wheeler to be chairman of the Federal Communications Commission. The former wireless industry lobbyist, nominated by President Obama back in May, will be replacing acting chairwoman Mignon Clyburn, who stepped in for former FCC chief Julius Genachowski when he left five months ago. more

Availability Analysis of Brandable Variant-String Domain Names

For any entity looking to launch a new company or other initiative, a primary requirement is often the selection of an appropriate brand name and the acquisition of a relevant associated domain name. In light of the increasing shortage of short, unregistered memorable names on popular domain name extensions (TLDs), many organisations are choosing to adopt novel or invented brand names and/or consider the use of alternative TLDs. more

An Inquiry Into an Organization’s Security Priorities

In the wake of recent high-profile security incidents, I started wondering: what, generally speaking, should an organization's security priorities be? That is, given a finite budget - and everyone's budget is finite - what should you do first? More precisely, what security practices or features will give you the most protection per zorkmid? I suggested two of my own, and then asked my infosec-heavy Twitter feed for suggestions. more

The Legacy of the Pai FCC

As is normal with a change of administration, there are articles in the press discussing the likely legacy of the outgoing administration. Leading the pack in singing his own praises is former FCC Chairman Ajit Pai, who recently published this document listing a huge list of accomplishments of the FCC under his Chairmanship. Maybe it's just me, but it feels unseemly for a public servant to publish an official self-praise document. more

5G First in China’s Key Industrial Investment

Four Chinese ministries issued the policy document in September, called "Guiding Opinions on Expanding Investment in Strategic Emerging Industries and Cultivating Strengthened New Growth Points and Growth Poles." As you can see below, in this document, 5G was the top recommendation. The National Development and Reform Commission, Ministry of Science and Technology, Ministry of Industry and Information Technology, and the Ministry of Finance came together to suggest priorities for the 14th Five-Year Plan. more

Africa, Let’s Embrace v6 Now!

AFRINIC is the regional Internet registry for Africa, and our core activity is to manage and distribute Internet numbers resources (IPv4, IPv6 and ASN's) to the 57 economies in Africa. IPv4 address scarcity is a very real issue worldwide, the internet keeps growing and the demand for Internet addresses will continue to grow. Africa has the lowest number of Internet users in the world. Internet's penetration in Africa jumped from very low level in 2009, to around 16% of individuals in 2013 and over 20% in 2015. more

Ren to Donald Trump: Take Our 5G, Please

Ren Zhengfei tells the Economist and the NY Times he is prepared to give the US essentially everything the President has asked, including the crown jewels: the complete design and source code of Huawei's 5G system. Ren would "license the entire Huawei 5G platform to any American company that wants to manufacture it and install it and operate it, completely independent of Huawei." more

EFF: Internet Went All Out in Support of Net Neutrality

Yesterday's "Day of Action to Save Net Neutrality," resulted in more than 3.4 million emails to U.S. Congress and more than 1.6 million comments to the Federal Communications Commission. more

Digital Activist Aaron Swartz Found Dead

Aaron H. Swartz, a computer activist, co-founder of Reddit and co-author of the "RSS 1.0" specification, died in New York on Friday. Swartz, 26 years of age, committed suicide in New York City on Jan. 11, according to his uncle. more

Move Fast and Regulate Things

The international community is converging on one notion at least: that Facebook cannot be prosecutor, judge and jury of its own achievements and transgressions. The calls to regulate social media companies first came from various legislative bodies, then from civil society and national policymakers, then from the CEO of Facebook itself, "to preserve what is best about [the Internet]." If some scepticism followed that was natural enough – was the company sincere in calling for more regulation? more

Making ICANN Relevant, Responsive and Respected

Understandably, just now new gTLDs are uppermost in the minds of people in the domain name business. For the general Internet user, some other issues retain their crucial importance: upholding the global public interest, enhancing governance within ICANN and beyond, making the Multi-Stakeholder Model (MSM) truly efficient, sustainable, and equitable. "Making ICANN Relevant, Responsive and Respected" ("R3") sets out to identify the main challenges facing the Internet community, especially in ICANN, and offers recommendations in each of the areas explored. more

Recent Case in Federal Court Shows Inefficiencies of Anticybersquatting Consumer Protection Act

A recent case1 from a federal court in Kentucky shows why the Anticybersquatting Consumer Protection Act (15 U.S.C. 1125(d) - the "ACPA") can be - when compared to the Uniform Domain Name Dispute Resolution Policy ("UDRP") - a relatively inefficient way of resolving a domain name dispute. Here is a quick rundown of the facts. Defendant owned a business directly competitive to plaintiff ServPro. Plaintiff had used its mark and trade dress since the 1960's... more