The Sunday Herald reported on Sunday that Best Western was struck by a trojan attack that lead to the possible compromise of about 8 million victims. There is some debate as to the extent of the breach and not a small amount of rumor going around. I'm not entirely disposed to trust corporate press releases for the facts, nor am I going to blindly accept claims of security researchers whose first call is to the PR team when discovering a problem. That said, here is what seems to be the agreed upon facts... more
Recent study indicates that US continues to widen its lead as the number one country when it comes to hosting phishing sites. According to the latest Brandjacking Index just released by MarkMonitor, US-hosted phishing sites grew by ten percent from last quarter -- up from 36 percent to 46 percent. Canada is now at second position with 4.7 percent of all phishing attacks, followed by the Russian Federation (4.5 percent), France (4 percent), and Denmark (4 percent). more
In a potentially damaging cybersecurity revelation, researchers from the cybersecurity company Eclypsium have identified a hidden mechanism in the firmware of motherboards manufactured by Taiwanese company Gigabyte. more
eco, which is the largest internet industry association in Europe, is holding a virtual meeting later this month to discuss Brexit. The meeting, which is scheduled for July 27th at 1200 UTC, will be the first of several dialogues among industry to discuss the potential impact of the UK's exit from the EU on the domain name industry. As I mentioned in a recent post, the exit of the UK from the EU has an "unknown" impact on how domain name registries and registrars will interact with UK based registrants. more
It has become clear that having a big cybersecurity war room is not enough to deliver true end-to-end security throughout the complex networks, systems and structures on which our modern society is based. Furthermore, looking at the forever changing draconian government interventions in this space, it is also obvious that they are often stabbing in the dark. more
ICANN will not delay the launch of its much anticipated program to create hundreds, possibly thousands, of new Internet extensions, nor run a limited ‘pilot program’, as reported today by Kieren McCarthy of .Nxt. "Steve Crocker [ICANN's chairman] admitted that the organization’s Board will be holding a special meeting in the first week of January and that the meeting’s focus will be the launch of the new gTLD program the following week." However that meeting will not consider a delay or limited rollout option. more
Once you've determined that you can trust the signer of a message, as we discussed in part 3, it's easy to extrapolate that various portions of the message are equally trustworthy. For example, when there's a valid DKIM signature, we might assume that the From: header isn't spoofed. But in reality, DKIM only tells us two basic things... more
Google co-founder Larry Page came to Washington last week to take on the National Association of Broadcasters (NAB), the lobbying group that represents over-the-air television stations. It's a whole new adversary for the beleaguered broadcasters, who have been fighting cable and satellite television for years. The Federal Communications Commission is currently considering a proposal, by Google and other tech players. It would allow tech companies to build electronic devices that transmit wireless internet signals over the "white spaces," or the vacant holes in the broadcast television band. "We have an ambitious goal called pervasive connectivity through ubiquitous broadband networks," said Page... more
Google, OpenDNS, content delivery networks and other operators have announced a joint effort called "The Global Internet Speedup," to "make the Internet faster". According to the group, this collaboration will be executed via an open IETF proposed standard called "edns-client-subnet" in order to help better direct content to users thereby decreasing latency, decreasing congestion, increasing transfer speeds and helping the Internet to scale faster and further. more
The talk ranges from new gTLD introductions, the role of ccTLDs in the new landscape, the relationships between registries and registrars, and some predictions for the future. more
The .ORG domain is at a crossroads: What will it be? A simple registry offering domain names for organizations, individuals and others? Or something bigger, as Ethos Capital and the Public Internet Registry propose? Will proposed changes make .ORG better? Or worse? There are valid points on both sides, but as an Internet safety advocate who for two decades has worked to teach children how to be safe online, stop the next young girl from being sex trafficked, and... more
To date, proponents of a neutral internet have had relatively scant reason to raise their voices beyond anything more than a murmur in Australia. While the FCC's Open Internet Order of 2015 has been hailed as a significant win for consumers in the US, and the wording of proposed legislation to institute ex-ante regulation of service providers is soon to be considered in the EU, Aussies have been quarantined from anything other than the fringes of the Net Neutrality debate. more
Afnic, the association that manages and operates various TLDs including the .fr, has published its report on the global domain name market in 2019. The report highlights a slight upturn in the market, which has generally continued the growth initiated in 2018. Thus, the global domain name market accounted for approximately 346 million domain names at the end of December 2019, up 4.7% compared to 4.0% in 2018. more
In the early 2000s, when I began working in the domain name industry, I remember hearing from colleagues about these seemingly elusive ICANN meetings invariably hosted in some pretty incredible places, including Rio de Janeiro, Rome and Cape Town. I remember how some of my colleagues complained about being stuck in windowless conference rooms for hours on end, but secretly thinking that they were probably going to a few meetings, but then actually enjoying a fabulous vacation. more
The US Congress asked the FCC for a bold plan to achieve the bold vision expressed by the Congress... We discussed this issue in our Big Think group and here are some comments. more