The naming community has spent a lot of time and energy trying to categorize online harms and put them inside or outside the purview of Registrars and Registries. gTLD Rrs and Rys have a consensus position (malware, botnets, pharming, phishing) but for many reasons other interests are always trying to expand that in various directions. My recommendation to this group is to put aside the edge cases and worry about them after you’ve made progress on core issues. Otherwise you risk burning valuable energy on endless and intractable definitional debates. What are the most prevalent 2 or 3 problems that have consensus? Focus on those, make a difference. Wade into the murkier waters when you’ve built more capacity and experience. Regards, Graeme -------------------- Graeme Bunton Director, DNS Abuse Institute 647-702-3323 https://dnsabuseinstitute.org/ From: anti-abuse-wg <anti-abuse-wg-bounces@ripe.net> on behalf of anti-abuse-wg-request@ripe.net <anti-abuse-wg-request@ripe.net> Date: Friday, February 11, 2022 at 05:15 To: anti-abuse-wg@ripe.net <anti-abuse-wg@ripe.net> Subject: [EXTERNAL] anti-abuse-wg Digest, Vol 122, Issue 8 CAUTION: This email came from outside your organization. Don’t trust emails, links, or attachments from senders that seem suspicious or you are not expecting. Send anti-abuse-wg mailing list submissions to anti-abuse-wg@ripe.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.ripe.net/mailman/listinfo/anti-abuse-wg<https://lists.ripe.net/mailman/listinfo/anti-abuse-wg> or, via email, send a message with subject or body 'help' to anti-abuse-wg-request@ripe.net You can reach the person managing the list at anti-abuse-wg-owner@ripe.net When replying, please edit your Subject line so it is more specific than "Re: Contents of anti-abuse-wg digest..." Today's Topics: 1. Re: RIPE NCC Anti-Abuse Training: Next Steps & WG Input! (Laura Atkins) ---------------------------------------------------------------------- Message: 1 Date: Fri, 11 Feb 2022 10:14:49 +0000 From: Laura Atkins <laura@wordtothewise.com> To: Brian Nisbet <brian.nisbet@heanet.ie> Cc: "anti-abuse-wg@ripe.net" <anti-abuse-wg@ripe.net> Subject: Re: [anti-abuse-wg] RIPE NCC Anti-Abuse Training: Next Steps & WG Input! Message-ID: <05B5A3CD-D424-41C8-877C-B7A6F3BE9A5F@wordtothewise.com> Content-Type: text/plain; charset="utf-8" I?m going to try and make the call, but one thing that strikes me as important for any abuse training process is to call out different kinds of abuse online. There are things that are abuse of the internet. Abuse that harms the ability of the internet to work or for people to use the internet. Things like dDoS and spam and even phishing, mailbombing, etc. They are problems that affect a lot of people. Often we can use raw numbers of reports or complaints or traffic mapping to identify these kinds of abuses. We can usually point to objective measures and justify taking actions based on those objective measurements. They harm us collectively as a community and an infrastructure. There are those things that are abuse on the internet. This is people using internet services to harm individuals. Harassment and stalking and doxxing are examples of this. These are problems that are targeted at individuals. We can?t use raw numbers of reports or complaints or traffic mapping to identify these kinds of abuses. They are targeted at usually vulnerable or marginal individuals (or sometimes communities). In this case we don?t get the raw numbers of complaints, there?s not an objective measurement of harm. Taking action requires much more judgement on the part of the network owner. Then there are things I?ve not figured out a category for. Is it abuse to spread disinformation and propaganda campaigns? Is it abuse to sell snake oil and fear based on lies and propaganda? Is it abuse to organize a insurrectionist attack on a platform? Does the network owner have an obligation to shut down traffic? How do we tell the difference between good uprisings (Arab Spring) and bad uprisings? What do we do about Nazi and white supremacist websites that allow for actual scholarly and critical discussion of them? I certainly don?t have the answers. I think one of the learning goals should be to understand the scope and breadth of online abuse. Also making it clear what kinds of things operators must take action against and what responsibilities they have to the infrastructure and to individuals. We?re not law enforcement, but law enforcement hasn?t kept up with a lot of the abuse taking place on the internet. I think that is worthy of discussion. laura

On 10 Feb 2022, at 09:25, Brian Nisbet <brian.nisbet@heanet.ie> wrote:

Colleagues,

Since we last spoke about the proposed training the NCC have been working with various community members to put a draft syllabus in place for further discussion.

This is a link to the feedback document for this draft:

https://docs.google.com/document/d/1M9Wrqu-VKGGwMfJQGK0NlTs5UzH6xJ2_HR2MkTBVR2w/edit?usp=sharing<https://docs.google.com/document/d/1M9Wrqu-VKGGwMfJQGK0NlTs5UzH6xJ2_HR2MkTBVR2w/edit?usp=sharing> <https://docs.google.com/document/d/1M9Wrqu-VKGGwMfJQGK0NlTs5UzH6xJ2_HR2MkTBVR2w/edit?usp=sharing<https://docs.google.com/document/d/1M9Wrqu-VKGGwMfJQGK0NlTs5UzH6xJ2_HR2MkTBVR2w/edit?usp=sharing>>

What the NCC and the Co-Chairs would love is if everybody could just comment what they think they understand from the learning goals as they?re written and suggest any changes or additions and obviously ask any questions. We?d also like the feedback on the webinar flow design.

It?s important for everybody to understand that the learning objectives are the basis for the training. These are the skills that the learner must acquire. With these skills we also expect a change of attitude towards abuse handling (which is we think the purpose of this training).

While discussion on the list is welcomed and encouraged, we've also planned a Zoom session for any interested parties to discuss this further. This will take place on Wednesday 23rd February at 14:00 CET:

https://ripe.zoom.us/j/8221791822?pwd=ZFY0MnNQeWJsTkhQSFlyeEZlUkNJQT09<https://ripe.zoom.us/j/8221791822?pwd=ZFY0MnNQeWJsTkhQSFlyeEZlUkNJQT09> <https://ripe.zoom.us/j/8221791822?pwd=ZFY0MnNQeWJsTkhQSFlyeEZlUkNJQT09<https://ripe.zoom.us/j/8221791822?pwd=ZFY0MnNQeWJsTkhQSFlyeEZlUkNJQT09>>

Meeting ID: 822 179 1822 Passcode: 1277

Hopefully with discussion on list and at the session on the 23rd we can move this into a final draft and progress from there.

Thanks,

Brian Co-Chair, RIPE AA-WG

Brian Nisbet (he/him) Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet@heanet.ie <mailto:brian.nisbet@heanet.ie> www.heanet.ie <http://www.heanet.ie/<http://www.heanet.ie>> Registered in Ireland, No. 275301. CRA No. 20036270 --

To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://lists.ripe.net/mailman/listinfo/anti-abuse-wg<https://lists.ripe.net/mailman/listinfo/anti-abuse-wg> <https://lists.ripe.net/mailman/listinfo/anti-abuse-wg<https://lists.ripe.net/mailman/listinfo/anti-abuse-wg>> -- The Delivery Experts

Laura Atkins Word to the Wise laura@wordtothewise.com Email Delivery Blog: http://wordtothewise.com/blog<http://wordtothewise.com/blog>