Signposts in Cyberspace: An NRC Report on the DNS and Internet Navigation

In light of the recent decision by the United States government to "maintain its historic role in authorizing changes or modifications to the authoritative root zone file" and ICANN's recent decisions to add more gTLDs (including .xxx), and to renew VeriSign as the .net registry, readers may be interested in the just-published report of the National Research Council's Computer Science and Telecommunications Board, Signposts in Cyberspace: The Domain Name System and Internet Navigation. ...a comprehensive policy-oriented examination of the Domain Name System in the broader context of Internet navigation. more

Learning to Love the WTO: How Trade Policy Can Save Open Internet - and Bridge the Digital Divide

From the dawn of the mainstream commercial Internet in the late 1990s until quite recently, the world trade and Internet communities have been almost entirely disconnected from one another. This isn't surprising, given that trade policy historically follows technological developments with a considerable 'lag.' As the senior-most 'permanent representative' on the ground in Geneva from the for-profit tech sector, a big part of my job is to try and translate the Internet for the Diplomatic Corps across many different policy subjects. more

Facing the Facts on Internet Governance

Having just arrived in Tunis for the WSIS, my weekly Law Bytes column (Toronto Star version, freely available version) focuses on the Internet governance issues that are likely to dominate discussions all week. I argue that claims about a "digital Munich" and a U.N. takeover are not helpful to arriving at an appropriate solution (though based on discussions this morning it does not appear that things are moving very far away from such claims). more

The Biggest gTLD Problem Has Just Appeared on the Horizon

A letter sent earlier this month by the ICANN Board to the Governmental Advisory Committee (GAC) should cause every new gTLD applicant's ears to prick up. Having been through every one of the applications for 1,396 different Internet extensions, the world's governments not only issued formal warnings for 199 of them, but also asked what mechanisms were in place to make sure that people did what they said they would in their applications. more

Slowly Cracking the DNSSEC Code at ICANN 43

As regular readers know, ICANN holds lengthy, in-depth discussions devoted to DNSSEC at each of its three annual meetings. The half-day session held at ICANN 43 in Costa Rica last month was particularly interesting. What became clear is that the industry is quickly moving into the end-user adoption phase of global DNSSEC deployment. more

Why DNS is Broken, in Plain English

At ICANN's meeting in Egypt last week, I had the opportunity to try and explain to various non-technical audiences why the Domain Name System (DNS) is vulnerable to attack, and why that is important, without needing a computer science degree to understand it. Here is the summary. more

Cyber-Terrorism Rising, Existing Cyber-Security Strategies Failing, What Are Decision Makers to Do?

While conventional cyber attacks are evolving at breakneck speed, the world is witnessing the rise of a new generation of political, ideological, religious, terror and destruction motivated "Poli-Cyber™" threats. These are attacks perpetrated or inspired by extremists' groups such as ISIS/Daesh, rogue states, national intelligence services and their proxies. They are breaching organizations and governments daily, and no one is immune. more

12 Common Mistakes Made By Bad Faith Cybersquatters

Some cybersquatters register domains in bad faith as part of a business plan to monetize domains by leveraging famous trademarks and high-traffic web sites. Some cybersquatters just don't understand the law. In this this tongue-in-cheek post, we provide a real world case study of the most common mistakes made by cybersquatters when registering trademark protected domains in bad faith. more

LACNIC, Google, CaribNOG and Internet Society to Hold ‘Internet Week Trinidad and Tobago’

The Latin American and Caribbean Internet Registry (LACNIC) and Google will hold a series of workshops next month as part of Internet Week Trinidad and Tobago, an event intended to advance the Internet development agenda of the wider region. The workshops are part of a project through which LACNIC and Google seek to strengthen digital markets in Central American and Caribbean countries. This joint project seeks to enhance local connectivity and strengthen the ecosystem for entrepreneurs. more

How Not to Get Your Mail Delivered

A small company in suburban Philadelphia called Holomaxx recently filed two lawsuits against large webmail providers, complaining that they weren't delivering mail from Holomaxx. The first suit is against Microsoft and Return Path, and the second suit is against Yahoo and Cisco/Ironport. Neither is going anywhere. more

So Long, Farewell: The Worst DDoS Attacks of 2016

The year 2016 will go down in infamy for a number of reasons. It was the year an armed militia occupied an Oregon wildlife refuge, Britain voted to Brexit, an overarching event that will simply be referred to as The Election occurred, and Justin Bieber made reluctant beliebers out of all of us. 2016 was also the worst year on record for distributed denial of service (DDoS) attacks by a margin that can only be considered massive. more

Outcome of UK IGF 2014 As I Saw It

The UK IGF was held on 1st July 2014 at St. Ermin's hotel, London, England. The Nominet Chair Baroness Rennie Fritchie gave the sponsor's welcoming remarks. She said "The IGF provides an opportunity for discussion, dialogue, divergent views, and encourages people to speak-up". The event had about 50 participants. The Minister for Culture, Communication and the Creative Industries Hon. Ed Vaizey, MP gave his keynote speech and fielded questions from participants. more

Cryptocurrency Mining Attacks for the First Time Detected on Industrial Control Systems

A water utility in Europe was compromised by cryptocurrency malware mining attack; the attack is the first public discovery of an unauthorized cryptocurrency miner impacting industrial controls systems. more

Increasing DNSSEC Adoption - What if We Put DNSSEC Provision in the Hands of Registries?

There has been a lot of criticism about the worthiness of DNSSEC. Low adoption rates and resistance and reluctance by Registrars to take on the perceived burden of signing domains and passing-on cryptographic material are at the crux of the criticism. I'm a believer in DNSSEC as a unique and worthwhile security protocol and as a new platform for innovation. It's the reason I've long advocated for and continue to work toward a new model of DNSSEC provisioning. more

It’s March Madness Time and I Want My IPTV!

IPTV is on the horizon. Maybe I watch too much basketball, but the first thing I pictured was turning my flat screen into a big PC-like monitor with multiple windows showing several games, and perhaps even checking email and trying to do a bit work in another (admittedly much smaller) window. You could drag and drop, expand or shrink the games to whatever size you wanted just like you do on a PC with applications. Since the source video could come from different geographical regions in the country, you could catch the NCAA game they are showing in your local region while also watching another game from another region... For some, IPTV is a reality. But for the most part deployments are limited. more