May 2022 - anti-abuse-wg - mailman.ripe.net

personal data in the RIPE Database
by denis walker 07 Jun '22

07 Jun '22

Colleagues I have raised an issue on the DB WG mailing list about publishing in the database the identity of natural persons holding resources. So far no one has been willing or able to support any public interest value in doing so. As things stand all personal data in the RIPE Database will have to be removed, or hidden from public view. If you have an opinion about this the conversation is here https://www.ripe.net/ripe/mail/archives/db-wg/2022-May/007432.html cheers denis 2022-01 proposal author

10 45

UCEPROTECT DNSBL possibly abusive practice and RIPEStat Blacklist entries widget
by Kristijonas Lukas Bukauskas 19 May '22

19 May '22

Hello, I noticed that RIPE NCC uses uceprotect-level1, uceprotect-level2 and uceprotect-level3 in RIPEStat Anti Abuse Blacklist Entries widget. There have been controversial positions about this blacklist recently: 1) https://success.trendmicro.com/solution/000236583-Emails-being-rejected-by-… [1] 2) https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html [2] UCEPROTECT blacklists the whole range of IP addresses, including the full IP range of some autonomous systems: UCEPROTECT states, '_Who is responsible for this listing? YOU ARE NOT! Your IP was NOT directly involved in abuse but has a bad neighborhood. Other customers within this range did not care about their security and got hacked, started spamming, or were even attacking others, while your provider has possibly not even noticed that there is a serious problem. We are sorry for you, but you have chosen a provider not acting fast enough on abusers'_) [http://www.uceprotect.net/en/rblcheck.php [3]]. It asks for a fee if some individual IP address wants to be whitelisted (http://www.whitelisted.org/), It abuses people who decide to challenge their blacklist by publishing conversations in their so-called _Cart00ney_ (http://www.uceprotect.net/en/index.php?m=8&s=0 [4]; http://www.uceprotect.org/cart00neys/index.html [5]). And the other type of threatening: http://www.uceprotect.org/ Does RIPE NCC have any position on this specific blacklist? Thank you! Links: ------ [1] https://success.trendmicro.com/solution/000236583-Emails-being-rejected-by-… [2] https://blog.sucuri.net/2021/02/uceprotect-when-rbls-go-bad.html [3] http://www.uceprotect.net/en/rblcheck.php [4] http://www.uceprotect.net/en/index.php?m=8&s=0 [5] http://www.uceprotect.org/cart00neys/index.html

16 42

Draft Agenda - AA-WG Session @ RIPE 84
by Brian Nisbet 16 May '22

16 May '22

Colleagues, Here is the very draft agenda for our working group session happening both in Berlin and online next month. The session is due to take place at 09:00 CEST on Thursday 19th May. We still have time in the agenda for discussions, work items, policy proposals or presentations. If you have anything in mind please email aa-wg-chairs(a)ripe.net A. Administrative Matters * Welcome * Scribe, Chat, Stenography * Mic & Chat Etiquette * Ratings Where Appropriate * Approve Minutes from RIPE 83 * Finalise agenda * Code of Conduct B. Update * B1. Recent List Discussion C. Policies - *C.1. D. Interactions - *D.1. RIPE NCC Abuse Handling Training *D.2. DNS Abuse Institute Reporting Tool *D.3. RIPE DB TF Report E. Presentation - *E.1. DDoS First Aid - Matthias Wichtlhuber, DE-CIX X. A.O.B. Z. Agenda for RIPE 85 Regards, Brian Co-Chair, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

2 1

Reminder: AA-WG Session @ RIPE 84
by Brian Nisbet 11 May '22

11 May '22

Colleagues, Just a reminder about our hybrid session at RIPE 84 next week in Berlin and online. The current agenda is here: https://ripe84.ripe.net/programme/meeting-plan/aa-wg/ but there is still some time available, so if you would like to add something to the agenda, please let us know! Remember, this can be a couple of minutes of a point to raise, an idea for a policy or work item, a note of concern, anything related to the WG's work. It certainly doesn't have to be a full presentation with slides and all! Please let us know at aa-wg-chairs(a)ripe.net or find one of us in person in Berlin if you're at the meeting. Looking forward to seeing many of you next week! Brian Co-Chair, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0