- iot-wg - mailman.ripe.net

[Info] RIPE 80 IoT WG Virtual meeting tomorrow
by sandoche Balakrichenan 13 May '20

13 May '20

Dear Colleagues, The IoT remote session will take place tomorrow, 14 May, 14:00-14:30. The agenda : https://ripe80.ripe.net/programme/meeting-plan/iot-wg/ More information on how to participate -https://ripe80.ripe.net/attend/how-to-participate/ <https://ripe80.ripe.net/attend/how-to-participate/> ------------------------- During the session ------------------------- - Questions: Always write NAME and AFFILIATION and keep the question short. -- Zoom: Questions for the presenters should be made only in the Q&A window -- If you don't like Zoom you can use the IRC channel on the live streaming page on RIPE 80 : https://ripe80.ripe.net/live/main -- Zoom chat window is only for discussion -- In Zoom Chat: always select ‘PANELISTS AND ATTENDEES’ otherwise only panelists will see the message - The sessions are recorded and will be published on the RIPE 80 website archives - If you need Live transcription, https://ripe80.ripe.net/live/steno Jim and Sandoche.

1 0

Support Constanze Dietrich for co-chair
by Nigel Titley 13 May '20

13 May '20

I would like to support Constanze for co-chair Nigel Titley

2 1

WG co-chair appointment
by sandoche Balakrichenan 11 May '20

11 May '20

Dear all, Jim announced on 20/04 that he is stepping down as Co-Chair. Two candidates have come forward: Peter Steinhauser and Constanze Dietrich. Thanks to both for volunteering. Constanze :https://www.ripe.net/ripe/mail/archives/iot-wg/2020-April/000493.html Peter :https://www.ripe.net/ripe/mail/archives/iot-wg/2020-April/000482.html We would like to have a consensus determination and announce the new Co-Chair during the RIPE 80 Virtual meeting. Use the appropriate thread(s) with subject line: "Peter Steinhaeuser for co-chair" and "Constanze Dietrich for co-chair" to express your support Jim and Sandoche.

4 5

Agenda for RIPE 80
by Jim Reid 11 May '20

11 May '20

Colleagues, here is the agenda for the WG session on Thursday. Please note the timings are just for guidance. Some topics might need a minute or so more/less than the amount they’ve been allocated. See you all (virtually) on Thursday! 1) Administrivia (5 mins) Conferencing tools reminder Minutes from RIPE79 Update on WG document on Mitigating IoT Attacks 2) NCC IoT Update (5 mins) Marco Hogewoning 3) Preparing SMEs for IoT security standards and regulation (5 mins) Stacie Hoffman, Oxford Information Labs The IoT Security Foundation and Oxford Information Labs are collaborating to help industry adopt baseline security requirements in the consumer marketplace. New published guidance and webinars coming soon. 4) WG co-chair appointment (5 mins) Jim Reid 5) AOB (1 min)

1 0

Re: [iot-wg] Peter Steinhaeuser for co-chair (Anna Mandalari)
by Mandalari, Anna Maria 08 May '20

08 May '20

Hi, I support Peter's candidacy. Anna > On 22 Apr 2020, at 12:57, iot-wg-request(a)ripe.net wrote: > > > ******************* > This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. > If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. > ******************* > Send iot-wg mailing list submissions to > iot-wg(a)ripe.net > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.ripe.net/mailman/listinfo/iot-wg > or, via email, send a message with subject or body 'help' to > iot-wg-request(a)ripe.net > > You can reach the person managing the list at > iot-wg-owner(a)ripe.net > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of iot-wg digest..." > > > Today's Topics: > > 1. Re: it's co-chair selection time! (Peter Steinh?user) > 2. Peter Steinhaeuser for co-chair (Peter Steinh?user) > 3. EdgeSys 2020 Participation (Aaron Ding) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 22 Apr 2020 12:12:14 +0200 > From: Peter Steinh?user <ps(a)embedd.com> > To: IoT WG RIPE <iot-wg(a)ripe.net> > Subject: Re: [iot-wg] it's co-chair selection time! > Message-ID: <4EDE0B10-1D6D-4981-907D-0412677AFA7D(a)embedd.com> > Content-Type: text/plain; charset="utf-8" > > First of all I want to thank Jim for his great work for this working group and his years commitment as a working group chair! > > For the designation of a new working group co-chair I put my hat (again) into the ring. > > I'm seriously concerned about the impact malicious IoT devices will have on the internet's infrastructure. My goal in the working group is defining best practices and standards about how can be best dealt with IoT devices pro-actively to keep the attacks that are already onging and will come to happen under control. Besides that I want to work on providing players from the IoT industry with better practices and - if possible - technical solutions while working with regulators to create better standards that help providing security and privacy. > > Coming from a home gateway/personal router/CPE background (DD-WRT / OpenWRT) such devices are for me potential gatekeepers that can play an important role in securing millions home small networks. Also ISP's should be brought on board, it's in their sole interest as well. To have an effect we need to try to gain a maximum traction in the industry. > > There are already activities (SPIN / IETF home gateway WG, etc.) in this field. As a working group chair I would focus working on connecting the ongoing activities to form technical standards and reference implementations for easy adoption by the industry. I would also work on advocating those to industry players (i.e. via Broadband Forum & prpl Foundation) to get broader support for these activities as well. In my role as project manager for the open source projects in the prpl Foundation I also work on selecting security related technologies for adoption / funding by the prpl Foundation and it's members. > > Being a RIPE member since years and becoming more and more familiar with the works of standardization organizations I am eager to learn more about the proceedings and how to better support the RIPE-community and other standardization organizations. > > It would be my pleasure to work closer with all of you for the better of the internet. > > Sincerly, > Peter > >> Am 20.04.2020 um 18:44 schrieb Jim Reid <jim(a)rfc1035.com>: >> >> My term as WG co-chair ends at RIPE80 or theresabouts. I will not be standing for another term. First of all, bringing in new and hopefully younger faces to freshen things up is long overdue. Second, I only volunteered to bootstrap the new WG. That has been completed. So it?s time to step away and let the WG find somebody else. >> >> There?s some info on WG co-chair responsibilities in RIPE692. Anyone interested in applying who wants more advice on what the job entails, likely time commitments and so on is welcome to contact Sandoche or myself. Or any other recent/current WG co-chair for that matter. >> >> I would also ask potential candidates to start a *new thread* -- eg "Your name for co-chair" or something like that -- when they post on the list so there are meaningful and relevant Subject: headers which make it easier to make a consensus judgement. It?ll save the current co-chairs reading every message on the mailing list to decide if they contain something in favour or against a particular candidate. This will also make it clearer for other members of the list to express their support (or not) for a candidate. >> >> Anyone can volunteer to become a co-chair and you can even nominate yourself. There?s no requirement to have N people nominating a candidate for them be considered for selection (for values of N > 1). >> >> Ideally, it would be good to be able to announce the new co-chair at RIPE80. Though that could be too short notice since the meeting?s just under 4 weeks away. If you think more time is needed to decide, please speak up. There?s no firm deadline and we should take our time about making this appointment - provided of course the new co-chair is in place in plenty of time for RIPE81. Although I think 4 weeks (ish) should be long enough to find a new co-chair, this is for the WG to decide too. >> _______________________________________________ >> iot-wg mailing list >> iot-wg(a)ripe.net >> https://lists.ripe.net/mailman/listinfo/iot-wg > > > Peter Steinh?user, CEO > embeDD GmbH ? Alter Postplatz 2 ? 6370 Stans ? Switzerland > Phone: +41 (41) 784 95 85 ? Fax: +41 (41) 784 95 64 > > >

1 0

Support Constanze Dietrich for co-chair
by Jetten Raymond 07 May '20

07 May '20

Hello, I would also like to express my support for Constanze as a co-chair of the iot-wg, Greetings, Ray For Internal Use Only

1 0

Re: [iot-wg] Peter Steinhaeuser for co-chair
by Ulf Kieber 06 May '20

06 May '20

I support Peter's candidacy. Ulf On Wed, 22 April 2020, Peter Steinhäuser <ps(a)embedd.com> wrote: > Hello everybody, > > I am resending my application since I - shame on me - did not follow the recommendation of Jim to start a new e-mail thread with my application - as stated below I’m still learning but I’m eager to ;) > > First of all I want to thank Jim for his great work for this working group and his years commitment as a working group chair! > > For the designation of a new working group co-chair I put my hat (again) into the ring. > .... -- Ulf Kieber Managing Director Phone: +49 30 2332195 20 Mobile: +49 171 5848914 Skype: ulfkieber Threema: WEAK876B BCIX Management GmbH Geneststraße 5 10829 Berlin Germany https://www.bcix.de/ https://twitter.com/bcix https://www.linkedin.com/company/bcix/ https://www.facebook.com/BCIX.Internet.Exchange

1 0

Constanze Dietrich for co-chair
by Constanze Dietrich 03 May '20

03 May '20

Hi everyone! It’s nice to see the support for Peter as I think he’s a well eligible candidate and I agree with his approach on many levels. That said, I’d like to provide another option by venturing to nominate myself! TL;DR: [Jump to the last paragraph! -->] Now mostly remembered for my comics, I was introduced to the RIPE community at RIPE 74 as part of the RACI program and spoke about my master studies on human factors as security risks in IT operations. Later that year, I was invited to talk at the first RIPE IoT Roundtable Meeting in Leeds where I got to discuss the implications of my studies for the IoT, as well as the implications of rapidly and diversely spreading IoT technologies for the RIPE NCC – the latter of which shortly after has been moved to its own working group! :) Meanwhile, I work for an IT management consultancy and have not seen a single strategy paper without IoT as a focus topic. Having a considerable number of clients in the energy sector, all of them urged onto the trail of “smart everything”, I’m well and truly concerned about the various approaches they take as, one or two steps further, the security impact on critical infrastructures even beyond the Internet could be disastrous. We do indeed need best practices and standards, which is why such endeavours will, by all means, get my full support. Thereby though, we should not forget that, despite existing standards, the IoT is still a huge playground and will continue to be for the foreseeable future. “Internet all the things!”, whether or not there’s a quality seal attached. Hence, to date and from my point of view as someone who studies more service contracts than she’d like, I also see a very high value in creating governance concepts for IoT networks. The role of ISPs in this, e.g. as a kill switch, has been discussed before, and we should develop a position on responsibilities and liability within (and outside) those infrastructures. [-->] My specific fields of interests aside, my main goal as a co-chair is to enable the members of the working group to get into an active exchange – be it by co-organising another IoT hackathon and presenting the results in the IoT session which has been (a lot of work but also) a huge pleasure for me before and during RIPE 79, by documenting and communicating topics of the WG (with or without comics), or by providing the enterprise perspective and a link to a variety of industries that employ IoT technologies. We’re a comparatively new and still somewhat inactive working group and I’d like to change that. Cheers from Berlin! ~ Constanze

8 7

Fwd: Constanze nomination
by Jim Reid 29 Apr '20

29 Apr '20

FYI The message below from the web services team is a little confusing because the underlying problem is the RIPE Forum thing is read-only. Write access to the Forum -- ie posting to WG lists -- stopped a while ago because it was being misused to send spam. Not that this matters much in the context of what Salam was trying to say. The key point here is Salam supports Constanze’s bid for WG co-chair. > Begin forwarded message: > > From: iot-wg-owner(a)ripe.net > Date: Mon, Apr 27, 2020 at 11:41 PM > Subject: Constanze nomination > To: salamyamout(a)gmail.com > > > Hi there, > > We can see that you tried to send an email to the Internet of Things > Working Group. Unfortunately, we have to reject this email because > it’s been sent from an email address that is not subscribed to this > list. > > To make sure your email goes through to the mailing list first check > that you are using the email address with which you subscribed to the > list. If you sent your email from the wrong address, simply resend it > from the correct email address. > > If you want to use this email address to join the discussion on the > mailing list, then subscribe to the mailing list and resend your email > after your subscription has been confirmed. > > You can contact iot-wg-owner(a)ripe.net <mailto:iot-wg-owner@ripe.net> if > you need any further help. > > Best wishes, > > Web Services Team The RIPE NCC > > > > > ---------- Forwarded message ---------- > From: Salam Yamout <salamyamout(a)gmail.com <mailto:salamyamout@gmail.com>> > To: iot-wg(a)ripe.net <mailto:iot-wg@ripe.net> > Cc: > Bcc: > Date: Mon, 27 Apr 2020 23:40:58 +0300 > Subject: Constanze nomination > Dear Chair of the IOT wg > I support the nomination of Constanze as co-chair for the relevance of > her experience and her good integration in the community > I hope that this nomination will be considered > Best > Salam Yamout

1 0

Fwd: [ripe.net #1327526] RIPE Forum - IoT WG mailing list problem
by Jim Reid 28 Apr '20

28 Apr '20

It appears the original complaint was a mistake. Perhaps someone was confused. The RIPE Forum is a read-only medium and people aren’t able to post comments there. No matter. My earlier comment still holds. Expressions of support for co-chair candidates have to be posted on this list. You can’t use RIPE Forum for that even if you wanted to. Thanks to Marita for looking into this. > Begin forwarded message: > > From: "Marita Phelan" <webmaster(a)ripe.net> > Subject: [ripe.net #1327526] RIPE Forum - IoT WG mailing list problem > Date: 28 April 2020 at 14:10:18 BST > To: jim(a)rfc1035.com > Cc: sandoche.balakrichenan(a)afnic.fr > Reply-To: webmaster(a)ripe.net > > I've been doing some checking in the meantime - due to the spam problems we had previously, we closed the forum for posting. It's available in read-only mode, so people can't have been posting comments there anyway.

1 0

RIPE Forum issues and the co-chair selection process
by Jim Reid 28 Apr '20

28 Apr '20

It has been brought to my attention that people have been posting support for co-chair candidates on the RIPE Forum, presumably assuming these messages would reach the mailing list. They don't. Or at the very least some list members aren't seeing those messages of support. I don’t know why that is and haved opened a ticket with the NCC’s webmaster. I’ll let you know what they have to say. FWIW the forum-to-list relaying probably got killed or manually moderated to put an end to the spam that used to be injected into the list via the forum’s web page. If you want to express support for the co-chair candidiates, please comment *on the list* and not via the RIPE Forum. Thanks. The mailing list is where we take consensus decisions. Comments on the RIPE Forum might not reach the list. And if/when they do, Sandoche and I may need to make subjective decisions about whether those Forum comments are genuine or not. Which will be awkward.

1 0

EdgeSys 2020 Participation
by Aaron Ding 22 Apr '20

22 Apr '20

For colleagues interested in IoT, edge computing, edge learning/analytics, EdgeSys'20 programme is now online: https://edge-sys.github.io/2020/programme.html If you'd like to participate, there is an exceptional policy of waiving registration fees for EuroSys and EdgeSys (subject to capacity constraints): https://www.eurosys2020.org/registration/ Look forward to greeting you virtually at EdgeSys next Monday. Cheers, Aaron -- Head of Cyber-Physical Intelligence (CPI) Lab http://homepage.tudelft.nl/8e79t/

1 0

Cyber-Physical Systems and Internet-of-Things Week : Online / Virtual event, April 21-24 2020
by Vesna Manojlovic 20 Apr '20

20 Apr '20

Dear colleagues, this might be interested to the IoT-WG, e.g.: https://conferences.computer.org/iotDI/2020/ & http://open-storm.org/workshop-cps2020/ Please see more event details below. Regards, Vesna Manojlovic Community Builder RIPE NCC -------- Forwarded Message -------- From: Katia Jaffrès-Runser <kjr(a)ENSEEIHT.FR> CPS-IoT Week 2020 (April 21-24) offers complementary registrations to non-authors for the four conferences it brings together : IPSN, ICCPS, HSCC and RTAS, plus guest conferences and workshops : https://www.cse.unsw.edu.au/~cpsiot/cpsweek2020/index.html You can find below the IPSN 2020 General Chair's message that invites you to attend this virtual edition. Stay safe, Damla and Katia N2Women Co-Chairs > Please see below an invitation from the IPSN 2020 general chair to > join this year’s conference at no cost in its new, virtual format. > > ===================================================================================== > > Dear IPSN community,____ > > __ __ > > We are excited to invite you to attend IPSN 2020 for free, from the > comfort of your home office! Please visit our website to see the > detailed program and registration > links: https://ipsn.acm.org/2020/program.html____ > > __ __ > > Also see the attached documents for the event highlights and to learn > more about the virtual format and collaborative tools we provide.____ > > __ __ > > On behalf of the organizing committee, I would like to encourage you > to participate and actively use all of the available tools to connect, > exchange ideas, and provide constructive criticism.____ > > ____ > > Stay safe!____ > > __ __ > > Brano Kusy____ > > IPSN'20 General Chair____ > > brano.kusy(a)csiro.au <mailto:brano.kusy@csiro.au> >

1 0

RIPE80 Agenda
by Jim Reid 20 Apr '20

20 Apr '20

I expect you all know by now that the covid19 pandemic means RIPE80 will be going ahead as a virtual meeting. It will take place over three days, two of them for WG sessions. RIPE80 will have no parallel sessions. So almost all WGs are going to get a 45 minute slot. The meeting plan is here: https://ripe80.ripe.net/programme/meeting-plan/ The IoT WG only has a 30 minute slot. We can probably expect to lose a few minutes too sorting out the AV settings and the handover to the Open Source WG. That means we won’t have enough time for topics that will need a lot of discussion or detailed presentations. There is a small amount of time available in the agenda - say for announcements about an upcoming activity/project or updates about recent IoT-related events. If you have suggestions for possible agenda items or have something to present, please contact the co-chairs at iot-wg-chairs(a)ripe.net and give an indication how much time is needed. Thanks. Hope to see you all (virtually) at RIPE80.

1 0

My response to Ronald Guilmette
by Elad Cohen 18 Apr '20

18 Apr '20

Hello Everyone, Please forgive me for not writing an official response in first set of Ronald's online madness months ago, I was out of hospital after full anesthesia and it took me months to get back to myself. Ronald is misery person with nothing and with no one in his life, the only joy that he have in his life - is for him to serve as the front person of the illegal anonymous organization "The Spamhaus Project". Here is a presentation that "The Spamhaus Project" wrote on themselves (in the following link) and according to it Spamhaus is an illegal anonymous organization - they receive a massive amount of illegally obtained privacy data of internet users from internet companies and internet organizations on a regular basis - and then they share it in illegal way (without any warranty) with law enforcement agencies. https://www.scribd.com/document/445894312/Spamhaus-Illegal-Private-Data-Vio… Ronald doesn't deny himself being part of "The Spamhaus Project", not only that - but his old friend Hank Nussbacher is also part of the illegal anonymous organization "The Spamhaus Project", Hank reminds me Judas Iscariot - Hank obviously have other interests - it is very sad to see a person at the age of Hank acting like a little child. All the few reports that were made were made by reporters which are connected to "The Spamhaus Project" and that are part of "The Spamhaus Project" - not only that, the source of the media reports is a person in "The Spamhaus Project" which is the owner of that illegal twitter account: https://twitter.com/underthebreach , that person is a criminal according to his own words in his own twitter account - and that person is also a master of cyber influence operations (just like what Coconut Guilmette and Cheerleader Nussbacher are doing here, to influence public opinion without any single proof) - and the owner of that twitter account is also an employee of the israeli-based company GeoEdge which financially benefit from that media report because they are a direct competitor of the company using the exact same netblock, so now I'm explaining to you that that root of this all fake story is just business competition, and in addition Coconut Guilmette also attacked the Israeli-based company Divinetworks in Nanog (Coconut Guilmette searched an unreasonable way why they received a specific grant from a global world organization and also defamed them) - so here is why he did it - the Israeli-based company Divinetworks is also a direct competitor of the Israeli-based company GeoEdge - that their employee is a criminal and the owner of the illegal twitter account https://twitter.com/underthebreach and also the "source" for the fake few media reports. In the following link you can see how a high manager in GeoEdge is highly proud in how customers attracted to him after the "low value" of competitors, if only the world would knew how that company does business. https://imgur.com/7DF1NSP That company GeoEdge is not only a criminal company in the way that they do business (because their criminal employee in "The Spamhaus Project" is the one pumped Coconut Guilmette proof-less ideas), but that company is also a criminal in the way that they are tax-evading since 2005 (they are registered in Cyprus with fake-single-owner abroad while they have more actual hidden owners in Israel that didn't pay any tax for their income since 2005, and one of the registered owners is using an international fake name and he is a professional money-laundering person, not only for that Israeli company). They (Coconut Guilmette, Cheerleader Nussbacher and their mob friends at "The Spamhaus Project") are very very afraid of me releasing all the information that I found out on the illegal anonymous organization "The Spamhaus Project" - and that is the only reason that they are attacking me personally in such way, they are trying to ruin my good name - but they didn't succeed and they will not succeed - because anyone that knows me and anyone that will personally know me - will know what they are trying to do and that what they are writing is 100% false. All the personal attack against me - is only because I dared to stood up against "The Spamhaus Project" which is intimidating and hurting many businesses online, and I would and will do it again and again and again, I'm not the kind of a misery bendover jew like Hank that will sell his values and his being for a title, a group acceptance or a few cents. Coconut Guilmette, is not only a sick person, in body and mind, but also a racist and an antisemitic, you can see in the following links his stereotypical mindset: https://imgur.com/AcmgwEX (Coconut Guilmette opinion on all Dutch people as a whole - "Dutch are any more inclined toward cybercrime") https://imgur.com/WUZvdNJ (Coconut Guilmette opinion on all Colombian Network Operators usage of the internet as a whole - "Undoubtedly drug smuggling over HTTP") https://imgur.com/a/1ULfVEC (Coconut Guilmette opinion on the City of Chicago including all of its citizens as a whole - "American city most known for its high ideals and consistantly ethical behavior, Chicago") https://imgur.com/AQCmZlk (Coconut Guilmette identified as racist in Nanog) https://imgur.com/a/Rzrbxkz (Coconut Guilmette identified as antisemitic in Nanog) Besides the above links, Coconut Guilmette is specifically calling me with two words and here he is quoting Shakespeare: https://imgur.com/AcmgwEX , the two words that Coconut Guilmette is calling me are being used in Shakespeare litrature to identify jews in an antisemitic way, Coconut Guilmette is an antisemitic, I'm very sorry to write it but Ripe is not a decisive organization towards racism or antisemitism, the Tone in Ripe management and in Ripe board and in this working group co-chairs, is a very narrow tone that only reflect the good of the people in their positions, Ripe board & management are not taking any actions for Ripe to be a multi-culture multi-national unpolitical organization that it needs to be with the tolerance to anyone and with the decisive intolerance to racism or antisemitism. The encouragement of Cheerleader Nussbacher is even worst because Cheerleader Nussbacher is encouraging someone which is a racist and an antisemitic. Hank, how more self-hating jew can you be ? to support such person only to be part of an illegal anonymous organization ? to support racism ? to support antisemitism ? And to the rest of the community, anyone that wrote to this person - "nice story, but you could say it in other words" - you are a lowlife as Hank is, you don't treat a racist or an antisemitic person with tolerance, period. Ripe is a RIR which is spread over 3 continents over many countries, Ripe members are different from each other by all means, I would expect Ripe community not to tolerate racism in any way and when Ripe members see it - to stand up - like I dared to stand up against "The Spamhaus Project". Ron, seeing a person at your age that knows to get attention only by using racism and antisemitism is sad, but seeing the lowlife Judas Iscariot cheerleading your mental illness is sadder. Here are only some of the real identities of the people behind "The Spamhaus Project": "Rob Shultz" - Rob McEwen (https://www.invaluement.com/) "Thomas Morrison" - Daniel R. Thomas (https://personal.cis.strath.ac.uk/d.thomas/) "Pete Dawes" - Ildiko Pete (https://www.cl.cam.ac.uk/~ip358/) "Vincent Hanna" - Vincent Schonau of Open-Xchange (https://www.linkedin.com/in/vincentschonau/) "Milly Fawcett" - Kelly Molloy of FarSight Security (https://www.linkedin.com/in/kelly-molloy-b886442/) Among others Commericial companies behind "The Spamhaus Project": ThreatSTOP FarSight Security Fastly Cymru Among others Keep on playing with me Coconut Guilmette and Cheerleader Nussbacher and I guarantee to you that the full list will be written here, you can hurt me as much as you please - I am not boneless and will not fold like Hank "Judas Iscariot" Nussbacher. The only reason that Coconut Guilmette returned to life in this thread - is because I wrote two days ago the real identity of "Rob Shultz" (which is Rob McEwen of https://www.invaluement.com/ ) to the co-chairs of this working group with CC to Ripe Board and to Ripe Management, I asked for the initial post of lies of Coconut Guilmette to be removed and I showed to them the relation of one of the current co-chairs of that working group to the illegal anonymous organization "The Spamhaus Project" which the poster Coconut Guilmette is related to it too. (also in the past there was a co-chair of that working group which is part of "The Spamhaus Project", Richard D G Cox, as you can see in his presentation that I linked to it above) That is the only reason (that I revealed that "Rob Shultz" from "The Spamhaus Project" is Rob McEwen) that Coconut Guilmette and Boneless Nussbacher are personally attacking me, not only that - but soon you will also see a new fake media report about me from the same reporter that used the criminal https://twitter.com/underthebreach as his source - all of it (like it was then and like they are trying to do now) - is to maneuver the subject of who are the real people behind "The Spamhaus Project" and to which internet companies and internet organizations they are connected to. "The Spamhaus Project" is an illegal anonymous organization and an unregulated organization, by being unregulated it is abused by the some of the members of it for making money, without any supervision, for example the criminal which is the owner of the illegal twitter account https://twitter.com/underthebreach that did what it did only that GeoEdge will earn a few more cents, such as Laura Atkins from WordToTheWise which is selling a Spamhaus listing removal service (https://wordtothewise.com) such as Vincent Schonau (AKA "Vincent Hanna" of "The Spamhaus Project") from Open-Xchange, a company that Spamhaus are attacking its competitors, and there are many more Spamhaus members that are using Spamhaus for their financial benefits. "The Spamhaus Project" - by being unregulated and unsupervised - is also being used as tool to attack business competitors, this is something that should wake up each and every member of the internet community. Hank, why do you let Coconut Guilmette to do the hard work for you (of defaming me) ? because you know that he have nothing in his life and a lawsuit against him will not result any financial aid ? why are you abusing his mental illness ? you know that he is not fine, why don't you help him like a good old friend ? Go ahead and write what Ron is writing so I will be able to sue you locally in Israel (I'm willing to pay you 100,000 NIS if you are right in a single thing that you wrote or that you will write against me, are you willing to do the same ? are you willing to put your money where your words are? or are you boneless that can only exploit the state of your old friend? ) I respect Ripe NCC and Respect all the members of Ripe Anti-Abuse Working Group. (P.S.: you can recognize now any member of "The Spamhaus Project" that will jump now, if he will attack me or support Ron, you can just ask him a simple question - "show us a single proof" - and you will see that no proof will be displayed, because all of it is part of an illegal "cyber influence operation" by "The Spamhaus Project" pumped by the criminal https://twitter.com/underthebreach) Respectfully, Elad

2 2

Re: [iot-wg] New on RIPE Labs: Visualisations of Periodic IoT Traffic
by Eliot Lear 26 Mar '20

26 Mar '20

Hi Poonam Thanks. The concern here is that the device could choose to identify as something else through a set of false communications. It is indeed an interesting area of research. I am not saying there is nothing to be done, but it is something that requires careful consideration as we aim toward automating policy. I fear in particular that the cloud makes this quite a bit harder, and IOT manufacturer use of their own DNS infrastructure will make it yet more difficult, because we are all using the same cloud infra. Eliot On 19.03.20 15:42, Poonam Yadav wrote: > > Dear Elliot, > > Thank you for your very important question. In the current setting, > our router verifies packets using devices' MAC addresses; it means the > router has a list of mac addresses of all IoT devices. For another > work, we used certificate-based authentication between the router and > device MUD server, something > similar: https://docs.microsoft.com/en-us/azure/iot-edge/how-to-authenticate-downstr… > > We used off-the-self IoT devices so its not easy to integrate many TEE > based solutions. > > Best regards, > > Poonam > > > > On Thu, Mar 19, 2020 at 12:47 PM Eliot Lear <lear(a)ofcourseimright.com > <mailto:lear@ofcourseimright.com>> wrote: > > Very interesting work! > > A cautionary question: > > If I wanted to pretend to be one of these devices on your network, > how hard would it be? > > Eliot > > On 19.03.20 12:56, Poonam Yadav wrote: >> Thanks for sharing! >> >> We have analysed similar pattern in many IoT devices and >> presented periodicity in IoT traffic as FFT (fig 4 - of IoTDI >> paper attached for reference) and some initial results here in >> this report: >> https://www.repository.cam.ac.uk/handle/1810/284092 >> and full paper is here: >> https://dl.acm.org/doi/10.1145/3302505.3310082 >> >> Best regards, >> >> On Thu, Mar 19, 2020 at 10:31 AM Mirjam Kuehne <mir(a)ripe.net >> <mailto:mir@ripe.net>> wrote: >> >> Dear colleagues, >> >> IoT devices often perform activities on a periodic basis. >> Thymen Wabeke >> of SIDN Labs shares his analysis of periodic network traffic >> from IoT >> lightbulbs. Read it on RIPE Labs at: >> >> https://labs.ripe.net/Members/thymen_wabeke/visualisations-of-periodic-iot-… >> >> Kind regards, >> Mirjam Kühne >> RIPE NCC >> >> _______________________________________________ >> iot-wg mailing list >> iot-wg(a)ripe.net <mailto:iot-wg@ripe.net> >> https://lists.ripe.net/mailman/listinfo/iot-wg >> >> >> _______________________________________________ >> iot-wg mailing list >> iot-wg(a)ripe.net <mailto:iot-wg@ripe.net> >> https://lists.ripe.net/mailman/listinfo/iot-wg >

3 2

Re: [iot-wg] New on RIPE Labs: Visualisations of Periodic IoT Traffic
by Mirjam Kuehne 19 Mar '20

19 Mar '20

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi Eliot, Thymen asked me to pass this on to you (but I believe he is now subscribed to the list): - -- Eliot has a valid point. We didn’t focus on this aspect yet, but it’s good to keep that in mind. In general, adversaries can fool any machine learning model once they know the model parameters. One can exploit the parameters to craft so-called "adversarial examples” that will generate a specific output/classification. This is actually a research topic on it’s own called adversarial machine learning [1]. This blog [2] shows some famous examples using images of pandas. [1] https://en.wikipedia.org/wiki/Adversarial_machine_learning [2] https://openai.com/blog/adversarial-example-research/ - --- Kind regards, Mirjam On 19/03/2020 13:47, Eliot Lear wrote: > Very interesting work! > > A cautionary question: > > If I wanted to pretend to be one of these devices on your network, > how hard would it be? > > Eliot > > On 19.03.20 12:56, Poonam Yadav wrote: >> Thanks for sharing! >> >> We have analysed similar pattern in many IoT devices and >> presented periodicity in IoT traffic as FFT (fig 4 - of IoTDI >> paper attached for reference) and some initial results here in >> this report: https://www.repository.cam.ac.uk/handle/1810/284092 >> and full paper is here: >> https://dl.acm.org/doi/10.1145/3302505.3310082 >> >> Best regards, >> >> On Thu, Mar 19, 2020 at 10:31 AM Mirjam Kuehne <mir(a)ripe.net >> <mailto:mir@ripe.net>> wrote: >> >> Dear colleagues, >> >> IoT devices often perform activities on a periodic basis. Thymen >> Wabeke of SIDN Labs shares his analysis of periodic network >> traffic from IoT lightbulbs. Read it on RIPE Labs at: >> >> https://labs.ripe.net/Members/thymen_wabeke/visualisations-of-periodi c-iot-traffic >> >> >> Kind regards, >> Mirjam Kühne RIPE NCC >> >> _______________________________________________ iot-wg mailing >> list iot-wg(a)ripe.net <mailto:iot-wg@ripe.net> >> https://lists.ripe.net/mailman/listinfo/iot-wg >> >> >> _______________________________________________ iot-wg mailing >> list iot-wg(a)ripe.net >> https://lists.ripe.net/mailman/listinfo/iot-wg -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJec4DqAAoJEIZoWwVN2sgM2hUP/RBvIpcXAfHp97uMnfeqzYE4 rSR5Sa5GkQ6uOC3Pu/4uO96ln2m9H/Oy9Bgnz/k3U1KpFPW5MqJHom1Ckmgdxs0a u9/ruzdk/rVCggtWXifY1TIjm0PJ2sOVKd7ERACITlzMOG0xnMll2Ah8NX5AsV2O j+KIO47vbnoZdaqyq/pmCvDQMazEcT2hU9z6KLwIvE436Er6YqluCkvuMPyacARL slj7K2o9gUZJ+3ianIRuRBpGRgTDruSJfEs7XAB+Lfms6BhfspgTANNaRHPMzqLN r8TeaQ7A2swpDnKOyUWWTqT/P/7qK/eZkt/ErWtM55ZFgV8wMZcd8KCsifU+Z1nv oZw67sgJUL618PCHzYdii28FAjciqQaQbLWGDgyOS4ItgSKYh4R2YwcpkqkJHvv4 YY/YjJYqM1cARLlUx3TZzk5PXvWMPc70XQTPpFyyM3t+hIDhnU7qZyt6wBBv2JUP 6j5ep/44XZ4tF4zWkbZZlKbrmkUxCNYPIwHmRZr94Sq8atQMTfw4QoK6hLxw9jf7 XpqAZmsU/2t+6hRHeAack/tvOoVUC1Xzue+upyjrYs8j3otgOPaznWWFN1vIEGZv 8h35qzp+QeQGoB4LjVxVelhdP0uf7GlXjgGgRs+0O308ApMZOz3n4ArO+8SynFhH I/hriOFDdJMqKK8rA6Ci =qLA6 -----END PGP SIGNATURE-----

1 0

New on RIPE Labs: Visualisations of Periodic IoT Traffic
by Mirjam Kuehne 19 Mar '20

19 Mar '20

Dear colleagues, IoT devices often perform activities on a periodic basis. Thymen Wabeke of SIDN Labs shares his analysis of periodic network traffic from IoT lightbulbs. Read it on RIPE Labs at: https://labs.ripe.net/Members/thymen_wabeke/visualisations-of-periodic-iot-… Kind regards, Mirjam Kühne RIPE NCC

2 1

IoT BCOP Document
by sandoche Balakrichenan 18 Mar '20

18 Mar '20

Dear all and Michael, I am piggybacking on Michael's last mail on the IoT BCOP document. We have been discussing this topic for a while and we need to go further. Last time, we discussed there was a brief consensus for this subject within RIPE Scope : "/Best Current Operational Practice (BCOP) document in RIPE scope for proactively mitigating IoT attacks/". If there is an alternative opinion, *please express*. There were proposals from Eliot and others, that we should begin with an *outline*. The initial outline was as follows: ------- The threat Some background on device capabilities and limitations Who can do what to improve the situation? Devices CPE gear Upstreams IoT Manufacturers Consumers (let's not ask much) ------- The functionality for controlling the home network traffic would typically include: Insight in all the devices connected to the home network. Possibility to block traffic. End-user friendly GUI and traffic management possibility. Option to have the traffic management outsourced (e.g. to an ISP). Blocking of compromised IoT devices. ------- We could have discussion on the following points: 1. Outline 2. Volunteers (who wish to contribute) 3. Champions (who will lead the work) - We could limit the number of Champions 4. A deadline These are my two cents. Please feel free with your feedback/contributions. Sandoche.

1 1

Interest for a virtual RIPE 80 meeting
by sandoche Balakrichenan 18 Mar '20

18 Mar '20

Dear all, As you all know RIPE 80 will happen between 11-15 May 2020 in Berlin. With the Covid-19 situation, there is a query from the RIPE meeting Organisers to the chairs on whether there will be interests from the WG to continue with sessions and presentation in case of a remote meeting? In the event, there is a remote meeting, it will be shortened (may be it will happen in a single day) overall RIPE meeting. The chairs would like to know from the WG: A. Would you like to continue with sessions and presentations in the case of a remote meeting? B. If yes to A, do you think we could limit to one or two remote presentations (Overall max. time allocated to IoT WG could be 30 to 40 minutes)? We have already three interesting presentations planned for RIPE 80 or do you think we should allocate the time for presenting any other topic that needs to be discussed urgently. C. Would you envision anything beyond having speaker and slides available with chat and stenography? Thanks for your feedback. RIPE IoT WG Co-chairs, Sandoche and Jim.

6 6

EduRoam for IoT
by sandoche Balakrichenan 10 Dec '19

10 Dec '19

Dear all, I am sure that you might have all heard about EduRoam (https://www.eduroam.org/how/) We are in discussion with some academic partners to develop a platform similar to EduRoam for IoT, initially for Research purposes. The idea initially is to have IoT devices (e.g. LoRa devices) authenticated in visited networks based on its identifier. For example, a LoRa end-device which has established authentication in its home network (e.g. in University A) should be able to connect to a gateway and Network Server in a visited network (e.g. In University B) with the same security credentials. This is not a new idea. We can see that there have been related works at the IETF, WBA alliance etc. The purpose of this mail is to know if any of you are aware of similar work and will this topic be of interest for the RIPE community? Thanks for your suggestions, contacts, feedback. Sandoche.

3 4

New on RIPE Labs: How Consumer IoT Devices Expose Information
by Mirjam Kuehne 13 Nov '19

13 Nov '19

Dear colleagues, For those who missed Anna Maria Mandalari's presentation at RIPE 79, you can now read the summary of her interesting (and scary) research on RIPE Labs: How Consumer IoT Devices Expose Information https://labs.ripe.net/Members/anna_maria_mandalari_2/how-consumer-iot-devic… Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: Results of the IoT Hackathon
by Mirjam Kuehne 12 Nov '19

12 Nov '19

Dear colleagues, The tenth RIPE NCC hackathon took place just before RIPE 79. Four teams of community members worked on a number interesting projects related to the Internet of Things (IoT) and came up with some great results. Check out the findings on RIPE Labs: https://labs.ripe.net/Members/becha/results-of-the-first-iot-hackathon Kind regards, Mirjam Kühne RIPE NCC

2 1

RIPE 79 IoT WG Minutes
by sandoche Balakrichenan 01 Nov '19

01 Nov '19

Dear all, Thanks for reviewing the minutes below and providing your feedback, if any. It will be soon published in the website. Thanks to Marco for drafting the minutes. ---- **** ------- Minutes of the RIPE 79 IoT Working Group Date: 17 October 2019 Chairs: Sandoche Balakrichenan and Jim Reid Scribe: Marco Hogewoning (RIPE NCC) 1. Administrivia The chairs opened the session and introduced the agenda, then continued to introduce the first speaker. 2. The Security Lifecycle of an IoT Device Michael Richardson (Sandelman Software Works) Presentation available at:https://ripe79.ripe.net/archives/video/252 Michael, together with Eliot Lear (Cisco) presented on the different standards and mechanisms that exist to manage the security of IoT devices throughout their lifetime. Eliot also engaged in a short demo regarding a connected printer. Jelte Jansen (SIDN) asked whether there was room for third parties to warn the system about vulnerabilities in a particular device, such as the proposed DOTS â€œcall homeâ€ signal. Michael answered that such an approach would involve some challenges regarding who to trust, taking into account deliberate actions to disconnect a competitor or other forms of â€œdigital vandalism.â€ Alain Durand (ICANN) commented on the complexity of the system, pointing out the many moving parts, and noted that the home environment is a difficult place to protect. Eliot engaged in a small poll with the audience, asking them who believed that there is a role for the ISP to play in protecting the consumer. Whilst Malcom Hutty (LINX) commented the question was too binary, a quick show of hands revealed that although many supported the statement, there wasnâ€™t a clear majority. Eliot further shared his vision of this process being step-by-step, with a gradual implementation to provide agents with the necessary details and asking informative questions to the consumer such as: â€œshould I notify the manufacturer about this problem.â€ Michael shared an anecdote about insurance and the use of online â€œsmartâ€ locks. Malcolm Hutty in his role as consumer stated that the proposed model centered around the fact that the service provider knows best. Although this might work for the majority of consumers, it doesnâ€™t for him as he doesnâ€™t necessarily trust his provider and likes to tinker with the settings himself. Michael in response laid out a system where various MUD configuration files could work in unison and part of the information could even be crowdsourced. Benedikt Stockebrand (Stepladder IT) sought some clarifications on the type of device that could implement the proposed model. Michael clarified this was meant to run on the CPE and provided some details on the inner workings of the protocols. Peter SteinhÃ¤user (embeDD Gmbh) asked how much adoption there was, suggesting that more clarity regarding the liability for vulnerabilities could act as a driver for adoption. Eliot responded that a number of their enterprise systems had support for MUD and he knew several other companies were testing with it, confirming one of them even discovered a bug in the implementation. But he agreed that this still needed a push in the consumer market and adoption there might take a while. Eric van Uden asked if the proposed model was planning to make use of TR69 to control the CPE. Eliot confirmed that one of the parties testing had been CableLabs and they intent to use TR69 or equivalent models to provision the system. After Eliotâ€™s demonstration, Kai Storbeck (XS4ALL) asked if the system had any assurances with regards to compatibility or conformity, to which Eliot responded that people can always lie but it would be discovered. 3. Information Exposure from Consumer IoT Devices: A Multidimensional Network-Informed Approach Anna Maria Mandalari, Imperial College London Presentation available at:https://ripe79.ripe.net/archives/video/257/ Anna Maria presented on her study with a laboratory setup to discover IoT device behavior in regular domestic use. Marco Hogewoning (RIPE NCC) asked for clarification regarding the use of MAC addresses and Anna Maria confirmed that they are regularly seen in unencrypted payload as a form of device identification. Jim Reid (RTFM llp) asked if there was any intention to publish a â€œname and shame listâ€ and whether any of the devices was observed using DNS-over-HTTPs (DoH). Anna Maria responded it was a good idea and they were considering publishing some sort of classifier or ranking system to indicate a deviceâ€™s performance. She said that DoH was not seen in the test network. Jan Zorz (ISOC) offered to run the code in his own home environment to learn more. 4. Update on the IoT Hackathon Rotterdam 2019 Constanze Dietrich, LEXTA Consultants Group Presentation available at:https://ripe79.ripe.net/archives/video/259/ Constanze presented about the experiences and outcomes of the RIPE NCC IoT Hackathon that she helped to organise in the weekend ahead of the RIPE meeting. Jim Reid thanked the organising team, complementing them on the results. 5. Best Current Operational Practice (BCOP) Document in RIPE Scope for Proactively Mitigating IoT Attacks Jim Reid, RTFM llp Presentation available at:https://ripe79.ripe.net/archives/video/261/ Jim, making reference to earlier discussions in the community about creating a document, polled the room if there was still interest. When asked, several people in the room indicated they would be available to help out as volunteers. Sandoche thanked all the participants and closed the meeting.

1 0

clarification on BEREC consultation
by Jim Reid 17 Oct '19

17 Oct '19

Peter kindly pointed out that my earlier mail today on this topic mistakenly quoted an ETSI thing, not the BEREC consultation. Apologies for any confusion. The morning coffee hadn't kicked in when I sent the email. Well that's my excuse and I'm sticking to it. The important thing is unchanged though. The Connnect WG is leading the effort on a community response to the BEREC consultation on identification of the network termination point. If members of the IoT WG have input to that community response, please raise them in the Connnect WG. We can of course discuss BEREC's ideas here. However that is unlikely to influence whatever community response emerges from the Connect WG.

3 4