February 2021 - members-discuss

Test mail
by MIR E. ALI 09 Aug '21

09 Aug '21

Dear members I am testing if you guys are able to receive my mail for any future discussions. Please reply if received. Thanks This message and the documents attached to it, if any, are intended only for the use of the addressee and may contain confidential and/or privileged information. If you are not the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you receive this in error, please notify the sender immediately and then delete the message received in error from your computer, destroy all copies that you may have created. Please note any views or opinions expressed in this email are solely those of the sender and do not necessarily represent those of Saudia Aerospace Engineering Industries (SAEI). SAEI accepts no liability for any damage caused by any virus transmitted by this email. Furthermore, the company does not warrant a proper and complete transmission of this information, nor does it accept liability for any delays

8 7

Re: [members-discuss] [ncc-announce] Attack on RIPE NCC Access - Please Enable Two-Factor Authentication
by Steffen Weinreich 19 Feb '21

19 Feb '21

Hi Ivo, Thanks for the heads up. It would be usefull if a LIR Admin user in the portal could see if "his" users have the 2FA enabled. That way I could encourage my colleagues without 2FA to enable. CC: to the members-discuss for feedback on the suggestion. mit freundlichen Grüßen Steffen Weinreich -- Wireless Logic mdex GmbH Bäckerbarg 6, 22889 Tangstedt, Germany Am 18.02.21 um 16:49 schrieb Ivo Dijkhuis: > Dear colleagues, > > Last weekend, RIPE NCC Access, our single sign-on (SSO) service was > affected by what appears to be a deliberate ‘credential-stuffing’ > attack, which caused some downtime. We mitigated the attack, and we are > now taking steps to ensure that our services are better protected > against such threats in the future. > > Our preliminary investigations do not indicate that any SSO accounts > have been compromised. If we do find that an account has been affected > in the course of our investigations, we will contact the account holder > individually to inform them. > > We would like to ask you to enable two-factor authentication on your > RIPE NCC Access account if you have not already done so to ensure that > your account is secure. In general, using two-factor authentication > across all your accounts can help limit your exposure to such attacks. > > If you notice any suspicious activity in your RIPE NCC Access account, > please contact us immediately at <security(a)ripe.net>. > > Best regards, > > Ivo Dijkhuis > Senior Information Security Officer, > RIPE NCC >

6 5

Abwesenheitsmeldung: Re: [ncc-announce] Attack on RIPE NCC Access - Please Enable Two-Factor Authentication
by p.glauber＠stadtwerke-forchheim.de 19 Feb '21

19 Feb '21

Sehr geehrte Damen und Herren, vielen Dank für Ihre E-Mail. Ich werde am 22.02.2021 wieder im Hause sein. Beachten Sie bitte, dass Ihre E-Mail nicht weitergeleitet wird. In dringenden Fällen wenden Sie sich bitte per Mail an die Abteilung Telekommunikation oder rufen Sie uns an. Die Mail-Adresse lautet foone(a)stadtwerke-forchheim.de Nach meiner Rückkehr werde ich Ihre E-Mail bearbeiten. Freundliche Grüße Patrick Glauber Stadtwerke Forchheim GmbH Haidfeldstraße 8 91301 Forchheim Telefon: 09191 613 218 E-Mail: p.glauber(a)stadtwerke-forchheim.de Internet: www.stadtwerke-forchheim.de

1 0

Re: [members-discuss] [ncc-announce] Attack on RIPE NCC Access - Please Enable Two-Factor Authentication
by Jan-Henning Plassmann 19 Feb '21

19 Feb '21

Hi to all! +1 to Steffen’s idea. +1 to Elvis‘s idea. Mit freundlichen Grüßen p.p.a. Jan Plassmann JHP-IT.net UG & Co. KG Mail: <mailto:jan.plassmann@jhp-it.net> jan.plassmann(a)jhp-it.net Telefon: +49 30 120 85 58 - 23 Mobil: +49 1522 865 32 81 ----------------------------------------------------------------------------- JHP-IT.net UG & Co. KG Just Handle IT Professionally Schillerstrasse 10 10625 Berlin Mail: <mailto:office@jhp-it.net> office(a)jhp-it.net Telefon: +49 30 120 85 58 - 20 Telefax: +49 30 120 85 58 - 21 Geschäftsstelle Hamburg: Am Wasserberg 11b 22869 Schenefeld Telefon: 040 – 84 60 25 37 Telefax: 040 – 18 11 65 83 Geschäftsführerin und Inhaberin: Anna Bisping Einzelprokura: Jan-Henning Plassmann Sitz der Gesellschaft: Berlin Handelsregister: Berlin Charlottenburg HRA 50707 B, USt.-Id.-Nr: DE 301 403 084 Bankverbindung: Berliner Volksbank, IBAN: DE05 1009 0000 2557 4290 02, BIC: BEVODEBB This message and any attachments are confidential as a business secret and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient, please telephone or e-mail the sender and delete this message and any attachment from your system. Also, if you are not the intended recipient you should not disclose the content or take / retain / distribute any copies. Diese von Ihnen erhaltene E-Mail und die anliegenden Dateien sind das Geheimnis des Unternehmens und sind ausschließlich für die angeführten Adressaten bestimmt. Sollten Sie nicht der richtige Empfänger sein, informieren Sie bitte umgehend den Absender und vernichten Sie diese E-Mail. Unbefugte Weitergabe der erhaltenen Informationen sowie das unerlaubte Kopieren / Speichern / Verbreiten der erhaltenen Informationen ist nicht gestattet Von: members-discuss <members-discuss-bounces(a)ripe.net> Im Auftrag von Elvis Daniel Velea Gesendet: Freitag, 19. Februar 2021 09:48 An: Steffen Weinreich <steffen.weinreich(a)mdex.de> Cc: Ivo Dijkhuis <ivo.dijkhuis(a)ripe.net>; members-discuss(a)ripe.net Betreff: Re: [members-discuss] [ncc-announce] Attack on RIPE NCC Access - Please Enable Two-Factor Authentication Hi, +1 to Steffen’s idea. Also, a couple of questions... how can I find out if someone (attempts to) login with my SSO? Can the RIPE NCC provide a page showing a list of last 5-10-100 (un)successful logins? How about e-mail notifications (with the IP address of the attacker) when a failed login attempt is made? Can I get an e-mail notification that someone has logged in, every time a successful login happens? - I’d like these to be opt-in Elvis On Fri, Feb 19, 2021 at 00:40 Steffen Weinreich <steffen.weinreich(a)mdex.de <mailto:steffen.weinreich@mdex.de> > wrote: Hi Ivo, Thanks for the heads up. It would be usefull if a LIR Admin user in the portal could see if "his" users have the 2FA enabled. That way I could encourage my colleagues without 2FA to enable. CC: to the members-discuss for feedback on the suggestion. mit freundlichen Grüßen Steffen Weinreich -- Wireless Logic mdex GmbH Bäckerbarg 6, 22889 Tangstedt, Germany <https://www.google.com/maps/search/B%C3%A4ckerbarg+6,+22889+Tangstedt,+Germ…> Am 18.02.21 um 16:49 schrieb Ivo Dijkhuis: > Dear colleagues, > > Last weekend, RIPE NCC Access, our single sign-on (SSO) service was > affected by what appears to be a deliberate ‘credential-stuffing’ > attack, which caused some downtime. We mitigated the attack, and we are > now taking steps to ensure that our services are better protected > against such threats in the future. > > Our preliminary investigations do not indicate that any SSO accounts > have been compromised. If we do find that an account has been affected > in the course of our investigations, we will contact the account holder > individually to inform them. > > We would like to ask you to enable two-factor authentication on your > RIPE NCC Access account if you have not already done so to ensure that > your account is secure. In general, using two-factor authentication > across all your accounts can help limit your exposure to such attacks. > > If you notice any suspicious activity in your RIPE NCC Access account, > please contact us immediately at <security(a)ripe.net <mailto:security@ripe.net> >. > > Best regards, > > Ivo Dijkhuis > Senior Information Security Officer, > RIPE NCC > _______________________________________________ members-discuss mailing list members-discuss(a)ripe.net <mailto:members-discuss@ripe.net> https://lists.ripe.net/mailman/listinfo/members-discuss Unsubscribe: https://lists.ripe.net/mailman/options/members-discuss/elvis%40v4escrow.net -- This message was sent from a mobile device. Some typos may be possible.

1 0

autoresponders/tickets subscribed to this list (was: Re: [ncc-announce] Attack on RIPE NCC Access - Please Enable Two-Factor Authentication
by Elvis Daniel Velea 19 Feb '21

19 Feb '21

Dear RIPE NCC, I would be embarrassed to have members continue to ask for years for a fix to this problem. When will you fix this issue? It keeps coming back again and again. I sent an e-mail to this mailing list and got several automatic responses again... 1. Dear belastingdienst, can you unsubscribe your ticketing system de.belastingdienst(a)belastingdienst.nl from this mailing list? I got two emails from you... 2. Dear cpro(a)mib.cpro.fr, please stop asking me to click on links for my e-mails to be delivered to your inbox. If you don’t want my e-mails, just unsubscribe, please. 3. Dear info(a)parsnafe.com, I have no idea what your e-mail written in Persian (?) means. Please unsubscribe auto-responders from this mailing list. ... and the list can continue. I really hope the RIPE NCC will come up with a solution to this, it’s not like we haven’t asked for it for decades... /elvis On Fri, Feb 19, 2021 at 00:47 Elvis Daniel Velea <elvis(a)v4escrow.net> wrote: > Hi, > > +1 to Steffen’s idea. > > Also, a couple of questions... how can I find out if someone (attempts to) > login with my SSO? > > Can the RIPE NCC provide a page showing a list of last 5-10-100 > (un)successful logins? > > How about e-mail notifications (with the IP address of the attacker) when > a failed login attempt is made? > Can I get an e-mail notification that someone has logged in, every time a > successful login happens? > - I’d like these to be opt-in > > Elvis > > On Fri, Feb 19, 2021 at 00:40 Steffen Weinreich <steffen.weinreich(a)mdex.de> > wrote: > >> Hi Ivo, >> >> Thanks for the heads up. >> >> It would be usefull if a LIR Admin user in the portal could see if "his" >> users have the 2FA enabled. That way I could encourage my colleagues >> without 2FA to enable. >> >> CC: to the members-discuss for feedback on the suggestion. >> >> mit freundlichen Grüßen >> >> Steffen Weinreich >> >> -- >> Wireless Logic mdex GmbH >> Bäckerbarg 6, 22889 Tangstedt, Germany >> <https://www.google.com/maps/search/B%C3%A4ckerbarg+6,+22889+Tangstedt,+Germ…> >> >> Am 18.02.21 um 16:49 schrieb Ivo Dijkhuis: >> >> > Dear colleagues, >> > >> > Last weekend, RIPE NCC Access, our single sign-on (SSO) service was >> > affected by what appears to be a deliberate ‘credential-stuffing’ >> > attack, which caused some downtime. We mitigated the attack, and we are >> > now taking steps to ensure that our services are better protected >> > against such threats in the future. >> > >> > Our preliminary investigations do not indicate that any SSO accounts >> > have been compromised. If we do find that an account has been affected >> > in the course of our investigations, we will contact the account holder >> > individually to inform them. >> > >> > We would like to ask you to enable two-factor authentication on your >> > RIPE NCC Access account if you have not already done so to ensure that >> > your account is secure. In general, using two-factor authentication >> > across all your accounts can help limit your exposure to such attacks. >> > >> > If you notice any suspicious activity in your RIPE NCC Access account, >> > please contact us immediately at <security(a)ripe.net>. >> > >> > Best regards, >> > >> > Ivo Dijkhuis >> > Senior Information Security Officer, >> > RIPE NCC >> > >> >> _______________________________________________ >> members-discuss mailing list >> members-discuss(a)ripe.net >> https://lists.ripe.net/mailman/listinfo/members-discuss >> Unsubscribe: >> https://lists.ripe.net/mailman/options/members-discuss/elvis%40v4escrow.net > > >> -- > This message was sent from a mobile device. Some typos may be possible. > -- This message was sent from a mobile device. Some typos may be possible.

1 0