[AfrICANN-discuss] collaborative effort to help defeat Conficker
(aka Downadup) worm
Douglas Onyango
ondouglas at yahoo.com
Fri Mar 13 09:08:30 SAST 2009
Alain,
Thanks for the heads-up.
Please note that four days ago, an updated version of the conflicker was found, this update scans not 250 but 50,000 Domain names.
Details
http://www.securityfocus.com/brief/923?ref=rss
Douglas onyango +256(0712)981329
If you are not part of the solution, your are part of the Problem.
--- On Thu, 3/12/09, africann-request at afrinic.net <africann-request at afrinic.net> wrote:
From: africann-request at afrinic.net <africann-request at afrinic.net>
Subject: AfrICANN Digest, Vol 25, Issue 9
To: africann at afrinic.net
Date: Thursday, March 12, 2009, 7:45 PM
Send AfrICANN mailing list submissions to
africann at afrinic.net
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.afrinic.net/mailman/listinfo.cgi/africann
or, via email, send a message with subject or body 'help' to
africann-request at afrinic.net
You can reach the person managing the list at
africann-owner at afrinic.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of AfrICANN digest..."
Today's Topics:
1. ICANN To IP Experts: Come Back With A Solution For Internet
Trademark Protection (Anne-Rachel Inn?)
2. The DNSSEC Industry Coalition Announces the Formation of Its
Registrar Review Team (Anne-Rachel Inn?)
3. collaborative effort to help defeat Conficker (aka Downadup)
worm (ALAIN AINA)
----------------------------------------------------------------------
Message: 1
Date: Thu, 12 Mar 2009 15:32:44 +0100
From: Anne-Rachel Inn? <annerachel at gmail.com>
Subject: [AfrICANN-discuss] ICANN To IP Experts: Come Back With A
Solution For Internet Trademark Protection
To: africann at afrinic.net
Message-ID:
<bd1bfd500903120732k76b40db7m49a4b7b90d88e3df at mail.gmail.com>
Content-Type: text/plain; charset="windows-1252"
*12 March 2009*
ICANN To IP Experts: Come Back With A Solution For Internet Trademark
Protection By Monika Ermert
<http://www.ip-watch.org/weblog/author/monika/>for
*Intellectual Property Watch* @ 1:00 pm
http://www.ip-watch.org/weblog/2009/03/12/icann-to-ip-experts-come-back-with-a-solution-for-internet-trademark-protection/
Trademark issues are emerging with the upcoming introduction of new generic
top-level domains on the internet, and the board members of the body
introducing the names has passed the ball back to intellectual property
experts to find answers.
The Intellectual Property Constituency of the Internet Corporation for
Assigned Names and Numbers (ICANN, the internet technical coordinating body)
has been asked to work out a viable solution “no later than 24 May 2009.”
Trademark issues have been defined as one of four overarching issues still
to be solved before ICANN can finalise the application procedure for the
next hundreds or thousands of top-level domains from .eco to .music.
In its resolution on Friday in Mexico City, the ICANN board decided to
request that the ICANN Generic Name Supporting Organization (GNSO)
Intellectual Property Constituency - in consultation with ICANN staff -
convene an “implementation recommendation team” comprised of an
“internationally diverse group of persons with knowledge, expertise, and
experience in the fields of trademark, consumer protection, or competition
law, and the interplay of trademarks and the domain name system.” The team
is to “develop and propose solutions to the overarching issue of trademark
protection in connection with the introduction of new gTLDs.”
“We have reached out to the IP community saying, ‘You come back to us with
some proposal how this should be solved,’” said ICANN Board Chairman Peter
Dengate Thrush. An IP lawyer by profession, Dengate Thrush said he was
confident that a proposal would be brought back to ICANN because of the
“track record” of the IP experts. “We have gone through this already once
in
1998/99,” he said. The debates 10 years ago resulted in the formation of the
Uniform Domain-Name Dispute-Resolution
Policy<http://www.icann.org/en/udrp/udrp.htm>(UDRP), built into the
system to fight domain grabbing. Many domain-name
disputes under the UDRP are brought to the World Intellectual Property
Organization, which is expected to release its annual report on internet
disputes next week.
The danger of name-grabbing at the first stage and the concern that
trademark owners will be pressured to protect their brands in hundreds of
new TLDs led to a flurry of critical comments during the comment period last
year for the first version of the Applicant’s Guidebook to the new domains.
Even the US government called into question the need for new gTLDs asking
for studies on the issue of market demand and market impact.
ICANN recently published “preliminary” versions of studies prepared by
Dennis Carlton, economics professor at the University of Chicago and
highest-ranking economist in the Antitrust Division of the US Justice
Department between 2006 and 2008. The draft texts came under heavy critique
from participants at the ICANN meeting in Mexico.
After ICANN’s decision on the implementation recommendation team there are
some concerns with regard to the composition of group by outside observers.
Board member Dennis Jennings of Ireland said he was glad that the resolution
taken included internationality as a principle for the group. The discussion
about IP issues seemed to have been “driven by big business and West, or
North American intellectual property interests,” he said, adding that
“other
dimensions that need to be taken into account.”
Wendy Seltzer, non-voting liaison of the At-Large Advisory Committee on the
board said she hoped that members of other communities would be “consulted
early in the process and would have full opportunities to analyse proposals
that come out of this working group.”
”All interested constituencies will have the opportunity to provide input to
the group,” wrote Kristina Rosette, an IP lawyer at Covington & Burling
who
represents the IP Constituency in the GNSO. This means the opportunity to
provide input before drafting starts and during the early stages as well as
the opportunity to comment on the draft, she said in a written statement to
*Intellectual Property Watch*.
”It may also mean membership on the team,” Rosette added. “To my
knowledge,
that aspect has not been decided nor has the size of the team.” But she
would expect that the group could be established in the next 10 days.
Rosette also said she was confident that the IP Constituency could
ultimately present a solution acceptable to other constituencies.
Members of other constituencies in first reactions were worried that the IP
Constituency would start over and neglect the policy development process
that has taken place over years on the new gTLD introduction. They complain
that the constituency has taken part in it and now is given a privileged
chance to push their interests.
“We need a solution,” Dengate Thrush said of the trademark issue. If the
report is not acceptable to other constituencies in ICANN, “we will start
our own work for a solution,” he said.
Government Involvement
The chairman of the ICANN Government Advisory Committee (GAC), Janis
Karklins, welcomed the steps taken to ensure IP protection but criticised a
proposal that geographic names be given the same level of protection rather
than higher protection.
So far GAC advice on the protection of country and place names has not been
“fully taken into account,” Karklins said, as ICANN provided protection for
the top level but not the second level of the upcoming new gTLDs. The second
level would be in the form of @name.othername.
Dengate Thrush reacted to this by saying that there might be a need for the
GAC to reconsider parts of its advice, “partly because they’re difficult to
implement and partly because they’re in conflict with other policy
decisions.”
Dengate Thrush also confirmed that as details of the different processes of
introducing new gTLDs and new internationalised country-code top-level
domains (IDN ccTLDs) becoming much clearer, the possibility for different
start times for each set of names would become more real.
Dengate Thrush asked, “Now that the possibility of divergence is becoming
more real, what is the policy behind that?” and called for discussion on the
question at the next ICANN meeting to be held in Sydney on 21-26 June.
*Monika Ermert may be reached at info at ip-watch.ch.*
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://lists.afrinic.net/pipermail/africann/attachments/20090312/cc1d38a8/attachment-0001.htm
------------------------------
Message: 2
Date: Thu, 12 Mar 2009 15:33:43 +0100
From: Anne-Rachel Inn? <annerachel at gmail.com>
Subject: [AfrICANN-discuss] The DNSSEC Industry Coalition Announces
the Formation of Its Registrar Review Team
To: africann at afrinic.net
Message-ID:
<bd1bfd500903120733t7d4a4d3eh3c6e4211e86fff13 at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
http://www.earthtimes.org/articles/show/the-dnssec-industry-coalition-announces,746093.shtml
RESTON, VA -- 03/11/09 -- The DNSSEC Industry Coalition (
http://dnsseccoalition.org) announces today the formation of its Registrar
Review Team following the 34th public meeting of the Internet Corporation of
Assigned Names and Numbers (ICANN) in Mexico City, Mexico. The Registrar
Review Team is comprised of companies that will provide the coalition with
valuable information from a registrar's unique perspective.
"I welcome the registrars who have joined the Coalition and are leading
efforts for widespread adoption of DNSSEC," says Alexa Raad, CEO of .ORG,
The Public Interest Registry and founder of the DNSSEC Coalition.
"Registrars are critical to the overall deployment of DNSSEC, and we look
forward to long term collaboration with this important technical upgrade."
"MarkMonitor® aims to be at the forefront of methods to secure our
customers' brands," says Ihab Shraim, Chief Security Officer with
MarkMonitor. "DNSSEC is a very important next step to the future of a safe
and secure online environment and we look forward to working with the
Coalition to make DNSSEC implementation a reality in the industry."
The Registrar Review Team consists of Name.com, Names Beyond, DynDNS,
Corporation Service Company (CSC), and MarkMonitor. Membership to the DNSSEC
Industry Coalition is open to domain name registries, registrars and
industry securities experts.
"Registrars are the next step in the Coalition's membership, and I am
thrilled to have them on board with us," says Steve Crocker, CEO of
Shinkuro, Inc. and co-chair of the DNSSEC Industry Coalition. "I look
forward to working closely with the registrar review team to streamline
their implementation process."
Coalition members include Top-Level domain registries of .ORG, The Public
Interest Registry, the .org registry operator; Afilias Limited, registry
services provider to 15 top level domains; .SE (the Internet Infrastructure
Foundation), the .se registry operator; EDUCAUSE, the .edu registry
operator; Nominet, the .uk registry operator; VeriSign, Inc., the .com,
.net, .tv, and .cc registry operator; SIDN, the .nl registry operator, and
NeuStar, Inc., the .biz and .us registry operator. The coalition is also
supported by industry security experts such as Shinkuro, Inc.; NL Net Labs;
InfoBlox, Internet Systems Consortium, Inc.; Internet Society; OARC, Kirei
AB; and Secure64 Software Corporation.
Hailing itself as an action oriented group, it seeks organizations willing
to contribute and support the widespread adoption of DNSSEC.
About Domain Name Security Extensions (DNSSEC)
With DNSSEC, Internet users know that their Internet-based communications
such as web site visits and email correspondence actually connect to the
parties they intend to reach. DNSSEC thwarts attacks such as pharming, cache
poisoning, and DNS redirection that have been used to commit fraud,
distribute malware, or steal personal or confidential information. For more
information on DNSSEC, please visit http://www.dnssec-deployment.org.
About the DNSSEC Industry Coalition
The DNSSEC Industry Coalition is a global group of registries and industry
experts whose mission is to work collaboratively to facilitate adoption of
Domain Name Security Extensions (DNSSEC) and streamline the implementations
across Domain Name Registries. Members work together to establish a
consistent set of tools and applications, shared best practices,
specifications and shared nomenclature. DNSSEC Industry Coalition members
include both generic Top-Level Domain and country code Top-Level Domain
registries along with industry and educational experts of the Domain Name
System. The Coalition was founded by .ORG, The Public Interest Registry in
August 2008.
More Information
Kate Russell
RMR & Associates (for Public Interest Registry)
Phone: +1 (301) 230.0045 x19
Email: Email
Contact<http://www2.marketwire.com/mw/emailprcntct?id=B80C3BCBE4F8C8B5>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://lists.afrinic.net/pipermail/africann/attachments/20090312/bd80cc7e/attachment-0001.htm
------------------------------
Message: 3
Date: Thu, 12 Mar 2009 16:44:06 +0000
From: ALAIN AINA <aalain at trstech.net>
Subject: [AfrICANN-discuss] collaborative effort to help defeat
Conficker (aka Downadup) worm
To: africann at afrinic.net
Message-ID: <164C03F4-1BEF-4EF6-BC0D-618B9F37EE77 at trstech.net>
Content-Type: text/plain; charset="us-ascii"
hi all,
Sorry for late notice but wee've all been busy. I wanted for security
reasons, to just reiterate something that is talked about in the below
link on the ICANN website: the conflicker worm.
The Conficker worm uses DNS to receive instructions, to spread and
launch DDoS attacks. It contains an algorithm which randomly
generates 250 domains names for the week. For example the list used
during the week 17-31 jan from
http://www.f-secure.com/weblog/archives/downadup_domain_blocklist_17_31.txt
shows domains under gtld and cctld. This keep changing and the
number of domains generated keeps increasing with every new version of
conflicker. So please be careful on registrations of domains names
under your CCTLDs.
ICANN announcement is at :
http://www.icann.org/en/announcements/announcement-2-12feb09-en.htm
mentioned that some companies has joined the effort to help
contains the worn propagation and impact.
Best to all,
--alain
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://lists.afrinic.net/pipermail/africann/attachments/20090312/eda3d57c/attachment.htm
------------------------------
_______________________________________________
AfrICANN mailing list
AfrICANN at afrinic.net
https://lists.afrinic.net/mailman/listinfo.cgi/africann
End of AfrICANN Digest, Vol 25, Issue 9
***************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.afrinic.net/pipermail/africann/attachments/20090313/d769939e/attachment-0001.htm
More information about the AfrICANN
mailing list