<html>
<body>
FYI,<br><br>
In Indonesia, cc-TLD (id-TLD) is on going <br>
for re-delegation process from Individual<br>
Mandatory into Institutional Mandatory since<br>
July 7, 2005:<br>
<a href="http://www.apjii.or.id/layanan/idnic-idTLD.php?lang=ind&PHPSESSID=4d11e36c9d184cca9b5f8458f769c40a" eudora="autourl">
http://www.apjii.or.id/layanan/idnic-idTLD.php?lang=ind&PHPSESSID=4d11e36c9d184cca9b5f8458f769c40a</a>
<br><br>
And, for the proper process and procedure,<br>
Redelegation team has formulized 3 type of<br>
Intitutional bodies, such as:<br>
1:: Foundation (non-for-profit);<br>
2:: Cooperative (semi-profit); and<br>
3:: Society (non-for-profit).<br>
which has been published to the public<br>
since April 24, 2005 to get more input (participation)<br>
from the stakeholders, and then, only one will be chosen<br>
for new id-TLD Registry later on.<br><br>
<a href="http://www.apjii.or.id/domain/index.php">
http://www.apjii.or.id/domain/index.php</a><br>
<a href="http://www.depkominfo.go.id/?pid=domain" eudora="autourl">
http://www.depkominfo.go.id/?pid=domain<br><br>
</a>Thank you,<br>
-teddya<br><br>
At 11:00 PM 5/2/2006, chapter-delegates-request@elists.isoc.org
wrote:<br>
<blockquote type=cite class=cite cite=""><..><br>
Today's Topics:<br><br>
1. Re: Fwd: Big holes in net's heart revealed<br>
(Christian de Larrinaga)<br><br>
Content-Transfer-Encoding: 7bit<br>
From: Christian de Larrinaga <cdel@firsthand.net><br>
Precedence: list<br>
MIME-Version: 1.0 (Apple Message framework v749.3)<br>
Cc: isoc-members-discuss@elists.isoc.org,<br>
<x-tab> </x-tab>isoc
Chapter Delegates <chapter-delegates@elists.isoc.org><br>
To: patrick@vande-walle.eu<br>
References: <4454E691.8040600@vande-walle.eu><br>
In-Reply-To: <4454E691.8040600@vande-walle.eu><br>
Date: Tue, 2 May 2006 09:10:43 +0100<br>
Message-ID:
<25329466-7361-436D-A6FB-7553F86600AA@firsthand.net><br>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed<br>
Subject: Re: [Chapter-delegates] Fwd: Big holes in net's heart
revealed<br>
Message: 1<br><br>
Yes in 2000 for .uk zones. I think it was found that about 75% had
<br>
errors but most of these were not critical, although some were
major <br>
potential problems. <font color="#000080">DNS and other infrastructure
health initiatives <br>
are worth doing but they are a lot of work</font>. There are also
commercial <br>
providers working in this area (competing) and it also has to be
<br>
mentioned that<font color="#000080"> it can get controversial when an
ISP's DNS servers are <br>
found wanting let alone those of a ccTLD registry</font> (which is
not <br>
uncommon).<br><br>
I took this to about 40 ccTLD's over a couple of years and it was
<br>
useful in generating awareness for these services to keep an eye on
<br>
how their infrastructure is working. I also checked out the key
<br>
financial and government institutions in the UK as they are major
<br>
points of vulnerability. This led to some private phone calls
having <br>
to be made rather than a mass press release.<br><br>
I'm happy to talk through this if people want to look into this
further.<br><br>
Christian<br><br>
Christian de Larrinaga<br>
network brokers ltd<br><br>
<br>
On 30 Apr 2006, at 17:32, Patrick Vande Walle wrote:<br><br>
<blockquote type=cite class=cite cite="">Dear all,<br><br>
I see here a potential for a project associating ISOC and its <br>
chapters. I just tested (with http://www.dnsreport.com) how
my <br>
local top ten sites performed on the DNS side. <font color="#000080">The
results were <br>
surprising: open, recursive DNS servers, invalid glue records,
<br>
etc., not to mention numerous violations of RFCs on the SMTP
side</font>. <br>
I guess this is not specific to my country.<br><br>
ISOC chapters could render a good service to their local community
<br>
by testing the DNS servers of their community. This is not a new
<br>
idea actually. ISOC England did a similar project some years
ago.<br><br>
Based on the collected data, the chapter could:<br><br>
- send a detailed report to each company it tested (and maybe gain
<br>
an org member in the process)<br>
- send a statistical report to the local press, which generally
<br>
likes alarming headlines.<br><br>
This would also help establish the local chapter as a reference for
<br>
Internet related issues.<br><br>
The project itself would be to develop a common technical platform
<br>
to perform the tests and extracts the statistics.<br><br>
Best regards<br><br>
Patrick Vande Walle<br>
ISOC Luxembourg<br><br>
<br>
-------- Original Message --------<br>
Subject: Big holes in net's heart revealed<br>
Date: Sun, 30 Apr 2006 08:32:02 -0400<br>
From: David Farber <dave@farber.net><br>
Reply-To: dave@farber.net<br>
Newsgroups: lists.interesting-people<br>
References:
<70935544-E016-41F9-BD0D-619F652C3ECB@WARPSPEED.COM><br><br>
<br>
Something "well known" but not advertised till now. djf
Begin <br>
forwarded message: From: Dewayne Hendricks
<dewayne@WARPSPEED.COM> <br>
Date: April 30, 2006 5:11:08 AM EDT To: Dewayne-Net Technology List
<br>
<dewayne-net@WARPSPEED.COM> Subject: [Dewayne-Net] Big holes
in <br>
net's heart revealed Reply-To: dewayne@WARPSPEED.COM Big holes in
<br>
net's heart revealed By Mark Ward Technology Correspondent, BBC
<br>
News website Simple attacks could let malicious hackers take over
<br>
more than one- third of the net's sites, reveals research. The
<br>
finding was uncovered by researchers who analysed how the net's
<br>
addressing system works. They also found that if the simple attacks
<br>
were combined with so- called denial-of-service attacks, 85% of the
<br>
net becomes vulnerable to take-over. The researchers recommended
<br>
big changes to the net's addressing system to tackle the <br>
vulnerability at its heart. Site seizing When you visit a website,
<br>
such as news.bbc.co.uk, your computer often asks one of the net's
<br>
address books, or domain name servers, for information about where
<br>
that site resides. But the number of computers that have to be
<br>
consulted to find the computers where that site is located often
<br>
makes sites vulnerable to attack by vandals and criminals, found
<br>
Assistant Professor Emin Gun Sirer and Venugopalan Ramasubramanian
<br>
from the Department of Computer Science at Cornell University.
<br>
Professor Sirer told the BBC News website that, on average, 46
<br>
computers holding different information about the components of net
<br>
addresses are consulted to find out where each dotcom site is <br>
actually hosted. But, he said, this chain of dependencies between
<br>
the computers that look after the different parts of net addresses
<br>
creates all kinds of vulnerabilities that clever hackers
could <br>
easily exploit. "The growth of the internet has caused these
<br>
dependencies to emerge," said Professor Sirer. "Instead of
having <br>
to compromise one you can compromise any one of the three
dozen." <br>
All the information gathered and analysed by the researchers has to
<br>
be publicly available to keep the net's addressing system working.
<br>
The research analysed information about almost 600,000 computers.
<br>
The research also revealed that 17% of the servers that host the
<br>
net's address books are vulnerable to attack via widely known <br>
exploits. "Because of these dependencies about one-third of
the <br>
net's names are trivially compromisable by script kiddies," he
<br>
said. One site vulnerable in this way was run by the FBI, said
<br>
Professor. Sirer. Although the five computers that act as the first
<br>
reference point for the fbi.gov domain were secure, one of the five
<br>
that connect to these has yet to install a patch for a well-known
<br>
bug. That computer was fixed after the Cornell team reported its
<br>
findings to the FBI, but hundreds of thousands of sites suffer from
<br>
similar problems. The most vulnerable net domain found by the <br>
survey was that of the Roman Catholic Church in the Ukraine. <br>
Criminals such as phishing gangs would be interested in re- directing
traffic from well-known sites so they can grab key login <br>
and personal details that would help them de-fraud web users. <br>
[snip] Story from BBC NEWS:
<<a href="http://news.bbc.co.uk/go/pr/fr/-/1/hi/%20technology/4954208.stm" eudora="autourl">
http://news.bbc.co.uk/go/pr/fr/-/1/hi/ technology/4954208.stm</a>>
Published: 2006/04/28 13:58:07 GMT Weblog <br>
at:
<<a href="http://weblog.warpspeed.com> /" eudora="autourl">
http://weblog.warpspeed.com> </a> <br>
------------------------------------- You are subscribed as <br>
patrick@isoc.lu To manage your subscription, go to
<a href="http:///" eudora="autourl">http://</a>
v2.listbox.com/member/?listname=ip Archives at:
<a href="http:///" eudora="autourl">http://</a>
<a href="http://www.interesting-people.org/archives/interesting-people/" eudora="autourl">
www.interesting-people.org/archives/interesting-people/</a><br>
_______________________________________________<br>
Chapter-delegates mailing list<br>
Chapter-delegates@elists.isoc.org<br>
<a href="http://elists.isoc.org/mailman/listinfo/chapter-delegates" eudora="autourl">
http://elists.isoc.org/mailman/listinfo/chapter-delegates</a></blockquote>
<br>
<br><br>
<br><br>
_______________________________________________<br>
Chapter-delegates mailing list<br>
Chapter-delegates@elists.isoc.org<br>
<a href="http://elists.isoc.org/mailman/listinfo/chapter-delegates" eudora="autourl">
http://elists.isoc.org/mailman/listinfo/chapter-delegates</a></blockquote>
</body>
</html>