June 2021 - anti-abuse-wg - mailman.ripe.net

UCEPROTECT DNSBL possibly abusive practice and RIPEStat Blacklist entries widget
by Kristijonas Lukas Bukauskas 19 May '22

19 May '22

Hello, I noticed that RIPE NCC uses uceprotect-level1, uceprotect-level2 and uceprotect-level3 in RIPEStat Anti Abuse Blacklist Entries widget. There have been controversial positions about this blacklist recently: 1) https://success.trendmicro.com/solution/000236583-Emails-being-rejected-by-… [1] 2) https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html [2] UCEPROTECT blacklists the whole range of IP addresses, including the full IP range of some autonomous systems: UCEPROTECT states, '_Who is responsible for this listing? YOU ARE NOT! Your IP was NOT directly involved in abuse but has a bad neighborhood. Other customers within this range did not care about their security and got hacked, started spamming, or were even attacking others, while your provider has possibly not even noticed that there is a serious problem. We are sorry for you, but you have chosen a provider not acting fast enough on abusers'_) [http://www.uceprotect.net/en/rblcheck.php [3]]. It asks for a fee if some individual IP address wants to be whitelisted (http://www.whitelisted.org/), It abuses people who decide to challenge their blacklist by publishing conversations in their so-called _Cart00ney_ (http://www.uceprotect.net/en/index.php?m=8&s=0 [4]; http://www.uceprotect.org/cart00neys/index.html [5]). And the other type of threatening: http://www.uceprotect.org/ Does RIPE NCC have any position on this specific blacklist? Thank you! Links: ------ [1] https://success.trendmicro.com/solution/000236583-Emails-being-rejected-by-… [2] https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html [3] http://www.uceprotect.net/en/rblcheck.php [4] http://www.uceprotect.net/en/index.php?m=8&s=0 [5] http://www.uceprotect.org/cart00neys/index.html

16 42

Making the internet more secure: An invitation
by Wout de Natris 17 Jun '21

17 Jun '21

Dear colleagues, On Monday 28 June at 11.30 UTC (13.30 CET) the Dynamic Coalition on Internet Standards, Security and Safety presents itself, its three working groups that started in 2021 and their respective workplans and mission statements. You are kindly invited to join this virtual workshop. A more secure and safer Internet, ICT and IoT, is in the interest of every end user. Whether corporate, public services or individuals, all end users should be adequately protected by state of the art security, available in the form of Internet standards and ICT/IoT best practices concerning security. Presently these standards and best practices are seriously underused, leaving the world at large, and its private and public interests, less protected than is currently possible. The DC-ISSS aims to ensure that standards and best practices play their full role in addressing these challenges through establishing the conditions for their wider, more effective and more rapid adoption by key decision-takers in the implementation chain. Said deployment is of direct interest to your organisation. Closing the gap between the theory and the practices of digital security is the main theme of the DC’s working groups. The gap between the theory of roadmaps on IoT security and secure-by-design devices and sensors. The gap between current tertiary schooling in cyber security curricula and the demands industry and other employers make on, not only, educational facilities but also those graduating there. The gap between the necessity of a more secure digital environment and the lack of active, security demand and thus offer of security. Deployment equals a significantly higher level of protection against the exploitation of vulnerabilities, hacks and extortion. It’s in your interest. In this session the current three working groups: security by design – Internet of Things; education and skills and; procurement, supply chain management and the creation of a business case for deployment will present their respective plans for 2021. These plans will be published shortly on the IGF website here: (https://www.intgovforum.org/multilingual/content/dynamic-coalition-on-inter…). On the same page you can join the email list of the DC-ISSS. The second half of the session is your opportunity to raise questions, suggest research or direction, to add expertise and knowledge to the programme. The DC-ISSS Leadership team is open to have one on one sessions during EuroDIG or after. Please let us know if you are interested to learn more. The DC-ISSS is in need of support. 1) Contributions in kind in the form of knowledge and expertise. 2) Introductions to experts and expert organisations. 3) Financial contributions to conduct the research, the writing of reports, to conduct active outreach and allow for support, coordination and presentations. We look forward to welcoming you on Monday 28 June, 11.30 UTC (13.30 CEST). Do not forget to register on the EuroDIG website in order to participate. (https://www.eurodig.org/get-involved/register-for-eurodig-2021/), 25 June at the latest. Best regards, Wout de Natris Coordinator DC-ISSS DC-ISSS: Making the Internet more secure and safer - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - De Natris Consult Kamerlingh Onnesstraat 43 Tel: +31 648388813 2014 EK Haarlem Skype: wout.de.natris denatrisconsult(a)hotmail.nl<mailto:denatrisconsult@hotmail.nl> http://www.denatrisconsult.nl Blog http://woutdenatris.wordpress.com

1 0

RIPE 82 Anti-Abuse WG minutes
by Brian Nisbet 09 Jun '21

09 Jun '21

Colleagues, Please find attached the minutes of our recent meeting, lovingly prepared by the NCC. Please do take a look and come back to the Co-Chairs with any issues or corrections. Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0