Archive | security RSS feed for this section

ICANN Board Seeks Input On Government Advice

ICANN has opened a comment period to get feedback and guidance on the GAC advice from Beijing. The comment period details and some background may be found here. It’ll be interesting to see how this plays out, as it’s very clear that a lot of new TLD applicants are very angry when faced with potentially [...]

Continue Reading Comments { 3 }

.TC, .GD and .VG Having “Issues”

Key Systems’ subsidiary KSregistry GmbH runs the backend registry for .tc, .gd and .vg on behalf of Adams Names. However it looks like there’s been some kind of issue with the management of the country codes and of Adams Names. The details at this juncture are not clear, but KS have issued a statement: Today, [...]

Continue Reading

IEDR Issue Statement About Security Incident

IEDR issued a statement yesterday in relation to the hijacking of google.ie and yahoo.ie The statement (IEDR_Statement_F_issued_9_November_2012) which is included below admits that their site was compromised and that the registrar was not to blame. IEDR has concluded an investigation by the company and external security consultants of an unauthorised intrusion into the company’s systems [...]

Continue Reading

IEDR Take Website Offline Following High Profile Domain Hijacks

The IEDR websites are currently unavailable. However this time there is a holding page which carries a simple explanatory message: IEDR systems are currently unavailable. We apologise for the inconvenience to our customers. As you may be aware, there was a security incident on Tuesday 9th October, involving two high profile .ie domains. There was [...]

Continue Reading

IEDR Lose Google.ie?

This could prove to be quite embarrassing. It looks like IEDR have allowed the nameservers for the domain google.ie to be updated to point to a 3rd party and away from Google. Effectively this means that google.ie and any services that rely on it are currently not working. Here’s the current whois record for Google.ie. [...]

Continue Reading

Icelandic Registry To Introduce “Very Important Domains”

The Icelandic registry (.is) plans on introducing extra levels of protection to some domains and their registrants. The new program is called “Very Important Domains” or VID for short (yes another acronym and you’ll have to excuse my childish snigger when I misread it as VDS) It’s not clear from the registry’s announcement how exactly [...]

Continue Reading

.Nz Registry Enables DNSSEC

The .nz domain registry has announced that they have enabled DNSSEC in the New Zealand namespace: New Zealanders will be able to better secure their web presence from today, thanks to a major technical security deployment by InternetNZ subsidiaries .nz Registry Services (NZRS) and the Domain Name Commission (DNCL). Following more than two years of [...]

Continue Reading

RIPE RPKI Breaks 1000 Barrier

RIPE have announced that the 1000th LIR has signed up for RPKI. Considering that only a few months ago there was a distinct possibility that RPKI would be halted entirely in the RIPE region this milestone is of extra significance. Resource Certification offers LIRs validatable proof of holdership. In addition, it allows LIRs to make [...]

Continue Reading
Iran Twitter Flag

Iran Blocks SSL

The Iranian government has blocked secure sites ie. ones using SSL with “https”. The blocking means that  any service or website based outside Iran that uses a security certificate is inaccessible from within Iran. Whether Iranians are able to circumvent this via other means or not isn’t clear, though there are probably ways that the [...]

Continue Reading

StopBadware.org Introduces Program For Hosting Providers

Malware, hacked sites, defacements etc., are all nasty. Getting all stakeholders in the Internet Community to take ownership and ultimately to take action is not easy. A new program from StopBadware might be a move in the right direction, though ultimately it will come down to how well it’s promoted.   In short, hosting providers [...]

Continue Reading
Nominet - Lord

Nominet Research Team Finds DNS Bug

Simon McCalla has posted some details on the Nominet management blog about how their research team and in particular Roy Arends were instrumental in finding the latest bug in BIND. Disclosure: As a registrar I was informed about the bug before it was made public, but couldn’t speak of it in public Related articles UK [...]

Continue Reading
The hierarchical domain name system, organized...

ICANN Security and Stability Advisory Committee On DNS Blocking

ICANN’s Security and Stability Advisory Committee (SSAC) has published a paper on DNS Blocking. SSAC 50: DNS Blocking: Benefits Versus Harms is available for download in PDF here The paper isn’t very long and has a short list of points that people should be aware of when considering implementing DNS blocking: 1. The organization imposes [...]

Continue Reading
A team competing in the CTF competition at DEF...

ICANN Hires New CSO – Jeff Moss

ICANN has apparently hired Jeff Moss (aka Dark Tangent) as CSO. Moss is a well known figure in the internet security community and was founder of Black Hat and the Def Con conferences. However isn’t Moss a bit conflicted? Isn’t he on one of the review teams? So how can he work for ICANN whilst [...]

Continue Reading
This photo is licensed under a Creative Common...

High Profile DNS Still Vulnerable To Kaminsky Exploit

Continue Reading

NL Registry Introduces Phishing Alert Service

Continue Reading