- anti-abuse-wg - mailman.ripe.net

Is SWIP dead?
by Alessandro Vesely 24 May '23

24 May '23

Hi all, I heard about the Shared WHOIS Project from MIPSpace, an IP reputation database who reads in Cc:. They say it should be available at every RIR, but at RIPE I only found this: https://ftp.ripe.net/ripe/inaddr/arin-templates/swipinstruction.txt It is a 1998 article with guidelines for using it. Does it have any validity? I also found a swip.net site, with no content but an expired certificate. IP reputation databases want a proof that a domain has exclusive use of an address or range thereof. There seem to be obvious reasons for such a requirement. And black lists are still a strong anti-spam tool. However, ISPs don't consider it worth, or reserve registration to 1st class customers. While the question in the subject is somewhat rhetorical, isn't there any other way to solve this problem? Any rule or service RIPE might undertake? Best Ale --

1 0

Request for information ICT procurement procedures
by Wout de Natris 22 May '23

22 May '23

Dear colleagues, The internet Standards, Security and Safety Coalition, an IGF Dynamic Coalition, seeks your assistance in the following. Attached you find a PDF inviting you to assist our researchers Liz Orembo and Mallory Knodel in identifying procurement documents in your respective countries and/or organisations. Do they contain a demand for security when purchasing ICTs and if so, what kind? More is explained in the attached PDF. Please consider this request, as your input will make our work far stronger. Should you be able to answer this request, please answer me privately. Best regards, Wout de Natris - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - De Natris Consult Kamerlingh Onnesstraat 43 Tel: +31 648388813 2014 EK Haarlem Skype: wout.de.natris denatrisconsult(a)hotmail.nl<mailto:denatrisconsult@hotmail.nl> http://www.denatrisconsult.nl Blog http://woutdenatris.wordpress.com

1 0

Invitation to ICT procurement and supply chain management workshop
by Wout de Natris 10 May '23

10 May '23

Dear colleagues, Through support of the RIPE Fund, the IGF Dynamic Coalition Internet Standards, Security and Safety Coalition (IS3C) currently undertakes a global research study into procurement and supply chain management policy documents and in how far they advocate using procurement to ensure security by design for ICT and IoT. Imagine how internet and ICT security will improve when governments and large organisations start demanding ICT and IoT products, services and devices to be made secure by design? At EuroDIG, the European Dialogue on Internet Governance, IS3C’s researchers present their intermediate report. You are invited to this (hybrid) workshop and participate actively in the debate. This workshop is an open consultation allowing all stakeholders to share their views on the draft outcomes and conclusions. We hope that you can find the time to join, online or in person, and provide us with the input we need for our final report, to be presented at the Internet Governance Forum in Kyoto, this October. Workshop: IS3C (DC): How to procure and purchase ICTs secure by design? When: Monday 19 June 14.00 - 15.30 EET (11 UTC) Where: University of Tampere, Finland in Room 3 Sign up: https://www.eurodig.org/get-involved/register-for-eurodig-2023/ More info: https://eurodigwiki.org/wiki/Pre_09_2023 Best regards, Wout de Natris IS3C coordinator IS3C: Making the internet more secure and safer - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - De Natris Consult Kamerlingh Onnesstraat 43 Tel: +31 648388813 2014 EK Haarlem Skype: wout.de.natris denatrisconsult(a)hotmail.nl<mailto:denatrisconsult@hotmail.nl> http://www.denatrisconsult.nl Blog http://woutdenatris.wordpress.com

1 0

Draft Agenda RIPE86
by Brian Nisbet 08 May '23

08 May '23

Colleagues, There will be a hybrid meeting of the Anti-Abuse WG at RIPE 86 in Rotterdam. The session is due to take place from 12:00 - 13:00 CEST on Wednesday 24th May. We still have a little space in the agenda if there are any matters you wish to raise. A. Administrative Matters * Welcome * Scribe, Chat, Stenography * MeetEcho Mic & Chat Etiquette * Ratings Where Appropriate * Approve Minutes from RIPE 85 * Finalise agenda * Code of Conduct B. Update * B.1. Recent List Discussion * B.2. RIPE NCC Training Update - Gerardo Viviers, RIPE NCC * B.3. RIPE DB TF Recommendations * B.3. How the RIPE NCC Handles LEA Requests - Theodoros Fyllaridis, RIPE NCC D. Interactions - *D.1. Domain Trust - Dan Owen, Global Cyber Alliance X. A.O.B. Z. Agenda for RIPE 87 As always you can email aa-wg-chair(a)ripe.net with any questions, suggestions or additional agenda items. Regards, Brian, Markus & Tobias Co-Chairs, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 5 Exchange Place, IFSC, Dublin D01 EK83, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Cost-benefit of registering reassignments
by Alessandro Vesely 19 Apr '23

19 Apr '23

Hi all, I found a (minor) black list who blocks my new IP. They say to not even try to ask for delisting unless I am the official owner of the IP. They observe that "rwhois/SWIP is normally offered free of charge by most providers". Sounds oldish, doesn't it? RDAP is working well, at least for numbers, and I see no reason to mention rwhois, SWIP is mentioned in a 1993 RFC[*] in the context of a move toward an "X.500 distributed database model". Where are we now? I see ARIN has relatively recent blogs on that.[†] My ISP says that registration is reserved to non-GPON "privileged fiber" whose costs start at around 10x ordinary fares. How much does RIPE charge for registering reassignments? Why isn't it possible for end-user to claim IP "ownership"? If the IP database were dependable, there wouldn't be so many site-verification TXT records in the DNS. I use RDAP to complain about network abuse, and the average response I get is that they passed the complaint to their customer. Some times ISPs make pressure on the customer to fix security leaks, so this seems good. In some other cases, ISPs ignore complaints, whereas the operator might have been interested. Alternatively, complaints might be sent in Cc: to national CERTs, LEAs, AbuseIPDB, and the like. Simple reassignments can be done without changing abuse-c. Does that still imply any responsibility? Best Ale -- [*] https://datatracker.ietf.org/doc/html/rfc1491#section-2.2.4.1 [†] https://www.arin.net/blog/2018/05/03/which-swip-type-is-right-for-you/

2 2

LEA Transparency Report 2022
by Theodoros Fyllaridis 13 Apr '23

13 Apr '23

Dear colleagues, We have published a transparency report that details the nature and number of requests we received from Law Enforcement Agencies in 2022. You can find the report at: https://www.ripe.net/publications/docs/ripe-794/. Kind regards, Theodoros Fyllaridis Legal Counsel RIPE NCC

1 0

Follow-Up Call for Agenda Items - AA-WG @ RIPE86
by Brian Nisbet 04 Apr '23

04 Apr '23

Colleagues, In May we shall be gathering in Rotterdam for RIPE 86 - https://ripe86.ripe.net/ Registration for the meeting, running from the 22nd - 26th May 2023, is open. The Anti-Abuse WG will be meeting and Markus, Tobias and I would like to remind people that we are interested in topics for discussion, presentations for general enlightenment and, of course, work items for the working group. Speakers & presenters can either be present in Rotterdam or reaching us live via the Internet! The AA-WG session will be taking place on Wednesday the 24th at 09:00 CEST. As always you can reach us at aa-wg-chair(a)ripe.net Thank you, Brian Co-Chair, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 5 Exchange Place, IFSC, Dublin D01 EK83, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Next Anti-Abuse Training webinar is on 6 April 2023
by Gerardo Viviers 21 Mar '23

21 Mar '23

Hello RIPE community, The next date for the anti-abuse training webinar is 6 april 2023. This will be the second time we will deliver this webinar and we want to invite you all to participate. If you already know about the subject, we would really like your feedback to improve the material. And if you are not yet familiar with the topic of handling abuse reports, this webinar is for you! It is an introduction to the topic of network abuse and handling abuse reports. You will understand the importance and added value of abuse management while learning what you need to know to set up an abuse desk. You can register for free here: https://learning.ripe.net/w/courses/35-antiabuse-webinar If you have any questions or comments about this webinar, please feel free to reach out to us. You can email us at <academy(a)ripe.net> or me directly at <gviviers(a)ripe.net>. Best regards, Gerardo Viviers RIPE NCC Learning & Development

1 0

Call for Agenda Items - AA-WG Session at RIPE 86
by Brian Nisbet 08 Mar '23

08 Mar '23

Colleagues, In a little over 2 months we shall be gathering in Rotterdam for RIPE 86 - https://ripe86.ripe.net/ Registration for the meeting, running from the 22nd - 26th May 2023, is open. The Anti-Abuse WG will be meeting and Markus, Tobias and I would invite people to submit topics for discussion, presentations for general enlightenment and, of course, work items for the working group. Speakers & presenters can either be present in Rotterdam or reaching us live via the Internet! The meeting plan has not yet been finalised, but the session will be taking place on either Wednesday or Thursday that week. As always you can reach us at aa-wg-chair(a)ripe.net Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 5 Exchange Place, IFSC, Dublin D01 EK83, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Hijacking and Blocking of Business Users Profiles on Meta Platforms
by Hank Nussbacher 17 Feb '23

17 Feb '23

2 2