July 2019 - anti-abuse-wg - mailman.ripe.net

Re: [anti-abuse-wg] [Misc] Research project on blacklists
by Sebastian Wiesinger 19 Jul '19

19 Jul '19

* ac <ac(a)main.me> [2019-07-18 08:29]: > It is about: "evaluating and improving the accuracy of blacklists." > > The entire post is arrogant, obnoxious, offensive and inaccurate and is > an oxymoron. Tbh the only mails I get this vibe from in this thread are yours. Could you tune it down a bit? There is no reason to be this aggressive. It seems this is legitimate research and if you do not agree with it don't take the survey. Regards Sebastian -- GPG Key: 0x58A2D94A93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant

5 7

Re: [anti-abuse-wg] Reminder: Mailing List Code of Conduct
by Brian Nisbet 19 Jul '19

19 Jul '19

Andre, Thank you for your apology. We seem to live in an increasingly complex world and the trade-offs between convenient and open/free have never seemed quite so... difficult... to me at least. Should you feel you can return to us at some point and engage in a continually constructive manner, you would be welcome. Brian Co-Chair, RIPE AA-WG Brian Nisbet Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270 > -----Original Message----- > From: anti-abuse-wg <anti-abuse-wg-bounces(a)ripe.net> On Behalf Of ac > Sent: Friday 19 July 2019 06:34 > To: Brian Nisbet <brian.nisbet(a)heanet.ie> > Cc: anti-abuse-wg(a)ripe.net > Subject: Re: [anti-abuse-wg] Reminder: Mailing List Code of Conduct > > > Hi, > > I apologise for my recent poor behavior and my use of profanity (specifically > the word "bullshit") - I have grown much less tolerant of large tech and as > society is losing this war anyway, it is causing me enormous amounts of > stress. When innocent things happen that contribute negatively to the > advancement of a free and open society and play into the hands of the > dominating players, I lose my cool... > > This is not cool and not fair to you and I am sorry :( > > I do understand that my behavior does not serve my cause and I am not a > nice enough person to simply be myself on this list, so my choices are to be > someone else or to leave. > > So long and thanks for all the fish, > > Andre > > On Thu, 18 Jul 2019 16:44:45 +0000 > Brian Nisbet <brian.nisbet(a)heanet.ie> wrote: > > > Colleagues, > > > > Because we wish to be very open on this, the Co-Chairs would like to > > remind everyone of the RIPE Mailing List/RIPE Forum Code of Conduct. > > > > https://www.ripe.net/participate/mail/ripe-mailing-list-ripe-forum-cod > > e-of-conduct > > > > There is plenty of room for debate, discussion and even arguments on > > this list and in this community. What there isn't room for is > > attacking people, for shutting down arguments with ad hominem attacks > > and for choosing to be rude rather than taking the opportunity to > > educate. All of this is a balance, but sadly here discussion is > > unbalanced more frequently than it should be. > > > > We have a great wish to see that useful discussion continue and > > flourish. > > > > Where the Co-Chairs feel that there are issues, we will contact the > > relevant parties personally to discuss and take whatever action is > > deemed necessary after those discussions. > > > > Thanks, > > > > Brian > > Co-Chair, RIPE AA-WG > > > > Brian Nisbet > > Service Operations Manager > > HEAnet CLG, Ireland's National Education and Research Network 1st > > Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland > > +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie > > Registered in Ireland, No. 275301. CRA No. 20036270 > > > > >

1 0

Reminder: Mailing List Code of Conduct
by Brian Nisbet 19 Jul '19

19 Jul '19

Colleagues, Because we wish to be very open on this, the Co-Chairs would like to remind everyone of the RIPE Mailing List/RIPE Forum Code of Conduct. https://www.ripe.net/participate/mail/ripe-mailing-list-ripe-forum-code-of-… There is plenty of room for debate, discussion and even arguments on this list and in this community. What there isn't room for is attacking people, for shutting down arguments with ad hominem attacks and for choosing to be rude rather than taking the opportunity to educate. All of this is a balance, but sadly here discussion is unbalanced more frequently than it should be. We have a great wish to see that useful discussion continue and flourish. Where the Co-Chairs feel that there are issues, we will contact the relevant parties personally to discuss and take whatever action is deemed necessary after those discussions. Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

2 1

Re: [anti-abuse-wg] Research project on blacklists
by Karl-Josef Ziegler 18 Jul '19

18 Jul '19

The person seems to be real: https://erg.berkeley.edu/people/hossain-anushah/

1 0

Re: [anti-abuse-wg] [Misc] Research project on blacklists
by Barry Greene 18 Jul '19

18 Jul '19

Not a joke. Just a researcher exploring ways to quantify and measure. Always important to have the academic doing the due diligence on our operational assumptions. > On Jul 17, 2019, at 07:40, ac <ac(a)main.me> wrote: > > > This is a joke email, right? > > Is it the 1st of April already? :) > > Andre > > On Wed, 17 Jul 2019 13:42:21 +0200 > Anushah Hossain <anushah(a)icsi.berkeley.edu> wrote: > >> Hi everyone, >> >> I'm a researcher at UC Berkeley and the International Computer Science >> Institute. My colleagues and I are working on evaluating and >> improving the accuracy of blacklists. As part of this work, we'd like >> to hear from you about the blacklists you currently use, what you >> perceive as their strengths and weaknesses, and any thoughts you have >> on how they might be improved. >> >> We've prepared an anonymous survey where you can share your views: >> https://berkeley.qualtrics.com/jfe/form/SV_200mg5hnQiAOgUl >> >> If you have five to ten minutes free today to fill it out, I would >> greatly appreciate your help! Thank you, and please don't hesitate to >> respond to me with comments or questions. >> >> (Apologies if you receive this message twice - trying to minimize >> cross-posting while still reaching a broad audience) >> >> Best, >> Anushah >> > >

3 3

Re: [anti-abuse-wg] [Misc] Research project on blacklists
by Fi Shing 18 Jul '19

18 Jul '19

The only organisation that is in a prime position to implement any meaningful blacklist is a RIR like RIPE itself. Anything less than RIR level blacklisting is what is known as "whac a mole" https://en.wikipedia.org/wiki/Whac-A-Mole But, as it comes down to time and money, the likes of which even google and facebook etc are not motivated to part with in terms of accountability, organisations like RIPE, APNIC, ICANN etc. All of them, without exception, refuse to engage in responsible practices. They are happy to take money to issue resources, but taking them away is equated to sacrilege. In an ideal world, the employees of RIPE etc should be arrested in jailed for aiding and abetting crime. --------- Original Message --------- Subject: Re: [anti-abuse-wg] [Misc] Research project on blacklists From: "ac" <ac(a)main.me> Date: 7/18/19 3:20 pm To: anti-abuse-wg(a)ripe.net Oh. Lets look more at this then. "UC Berkeley" - USA "International Computer Science Institute" "evaluating and improving the accuracy of blacklists." "including a web link, which is tracked and cross tracked" "an anonymous survey" Dude, let us be frank: On this list we discuss abuse, in the open and directly. People on this list has "skills" and can all be anonymous on this list, if they wish to, in fact, many are. (I do not and I am not private) We are talking about email blacklists? right? as the routing blacklists do not bother the evil tech monopolies! It is a fact that the spam from the top ten USA tech companies are the most challenging abuse on the planet - as this type of abuse, is the hardest to combat. - Twitter does not even accept abuse complaints. Facebook does not care and Google mixes spam with ham all the time to defeat email blacklists Why not study the reasons for the percentage increase in the use of inspection/tracking/non private/invasive anti abuse technologies in use by the largest email and dominant players, Google and Microsoft, of ipv6 and the reason why these huge tech players HAVE to push for ipv6 email servers relay to ensure their future dominance of email relay? Instead of "My colleagues and I are working on evaluating and improving the accuracy of blacklists" As, imnsho, that is absolute USA bullshit. and is not even possible. I would go sofar as to state that such research is not intended to "improve" anything but to cement the monopolies we fight daily and is on the EVIL side of the fight. Andre On Wed, 17 Jul 2019 10:01:16 -0700 Barry Greene <barryrgreene(a)gmail.com> wrote: > Not a joke. > > Just a researcher exploring ways to quantify and measure. Always > important to have the academic doing the due diligence on our > operational assumptions. > > > On Jul 17, 2019, at 07:40, ac <ac(a)main.me> wrote: > > > > > > This is a joke email, right? > > > > Is it the 1st of April already? :) > > > > Andre > > > > On Wed, 17 Jul 2019 13:42:21 +0200 > > Anushah Hossain <anushah(a)icsi.berkeley.edu> wrote: > > > >> Hi everyone, > >> > >> I'm a researcher at UC Berkeley and the International Computer > >> Science Institute. My colleagues and I are working on evaluating > >> and improving the accuracy of blacklists. As part of this work, > >> we'd like to hear from you about the blacklists you currently use, > >> what you perceive as their strengths and weaknesses, and any > >> thoughts you have on how they might be improved. > >> > >> We've prepared an anonymous survey where you can share your views: > >> > >> If you have five to ten minutes free today to fill it out, I would > >> greatly appreciate your help! Thank you, and please don't hesitate > >> to respond to me with comments or questions. > >> > >> (Apologies if you receive this message twice - trying to minimize > >> cross-posting while still reaching a broad audience) > >> > >> Best, > >> Anushah > >> > > > >

1 0

[Misc] Research project on blacklists
by Anushah Hossain 18 Jul '19

18 Jul '19

Hi everyone, I'm a researcher at UC Berkeley and the International Computer Science Institute. My colleagues and I are working on evaluating and improving the accuracy of blacklists. As part of this work, we'd like to hear from you about the blacklists you currently use, what you perceive as their strengths and weaknesses, and any thoughts you have on how they might be improved. We've prepared an anonymous survey where you can share your views: https://berkeley.qualtrics.com/jfe/form/SV_200mg5hnQiAOgUl If you have five to ten minutes free today to fill it out, I would greatly appreciate your help! Thank you, and please don't hesitate to respond to me with comments or questions. (Apologies if you receive this message twice - trying to minimize cross-posting while still reaching a broad audience) Best, Anushah -- Anushah Hossain, PhD Student Energy and Resources Group, UC Berkeley

3 2

Privacy Ukraine LLC
by zedsdead＠cock.li 15 Jul '19

15 Jul '19

RIPE member Known Holdings Ltd operated by Krunoslav Begic set-up a fake entity called "Privacy Ukraine LLC" (AS206106) to host criminal enterprises. org-name: Privacy Ukraine LLC org-type: OTHER address: Mykhaila Kotsyubynskoho St, 4b address: Kiev 01030 There is no "Privacy Ukraine LLC" on this address, and there is no phone number, nor working email account either. We believe that this entity was setup in order to reduce the amount of abuse complaints coming to Mr. Begic's main account. There are only illegal websites on all of the /24's totaling 1,024 addresses. He assigned an entire /24 to one of the most notorious piracy websites operated out of Sweden by Antoine Hedgecock a/k/a macnibblet of Interactive Solutions and Roave: https://bgp.he.net/net/185.192.125.0/24#_dns Google's Transparency Report: https://transparencyreport.google.com/copyright/domains/camgirlvideos.org This domain had 929,954 URLs over 25,121 individual requests requested for delisting from our Search results. https://transparencyreport.google.com/copyright/domains/camgirl.gallery This domain had 3,551,534 URLs over 34,726 individual requests requested for delisting from our Search results.

2 1

Update on Impact Analysis for 2019-03, “BGP Hijacking is a RIPE Policy Violation”
by Marco Schmidt 12 Jul '19

12 Jul '19

Dear colleagues, We would like to give you an update on our impact analysis for the policy proposal 2019-03, “BGP Hijacking is a RIPE Policy Violation”. After feedback from the initial Discussion Phase, the proposers have created a second version of the proposal that will move forward to the Review Phase. As per the Policy Development Process (PDP), the RIPE NCC must perform an impact analysis on the proposal and publish this before the Review Phase can begin. We usually aim to finish our analysis within four weeks. In this case, our review has taken much longer than normal. This is because the proposal creates a completely new process within the RIPE NCC, with a number of operational, legal and communications implications. The proposal also outlines detailed steps for this process that have to be checked for consistency and feasibility. We are almost finished and expect this to be ready soon. The WG Chairs will then work with the proposers to determine when the new version of the policy should be published (along with our impact analysis) so that the Review Phase can start. Kind regards, Marco Schmidt Policy Officer RIPE NCC Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum

2 1