- ncc-services-wg - mailman.ripe.net

Re: [ncc-services-wg] Enforce 2FA for RIPE NCC Access account (Hank Nussbacher)
by hmi＠ripe.net 04 Jan '24

04 Jan '24

Hi Hank, > On 04/01/2024 12:04, Benedikt Neuffer wrote: > > I believe I have found a bug in RIPE Portal 2FA access. To whom should > I report it? Feel free to send it to security [at] RIPE [dot] net. Cheers Hisham > > Thanks, > Hank

2 1

Security Breach: Please Enable Two-Factor Authentication
by Hans Petter Holen 04 Jan '24

04 Jan '24

Dear colleagues, In light of the recent incident where a RIPE NCC Access account was compromised, we urge you to review your own account security. ------------------------------- Two-Factor Authentication ------------------------------- If you have not already done so, enable two-factor authentication on your RIPE NCC Access account. Using two-factor authentication across all of your accounts can reduce your exposure to attacks like these. The guide for setting up two-factor authentication on your Access account can be found at: https://www.ripe.net/participate/member-support/ripe-ncc-access/two-step-ve… ------------------------------- Password Recommendations ------------------------------- We also encourage account holders to change their Access account password and follow these recommendations: - Avoid reusing passwords for login credentials. - Use a password manager to automatically create random passwords and store them. - If you use a SaaS based password management tool, enable dark web monitoring for your own credentials. If you choose to create your own password: - Use at least 14 characters to create a password. - Using passphrases can be helpful such as a favourite quote, fictional character name or line of song to greatly increase the length of the password while also making it easier to remember. We are currently investigating the compromise of the RIPE NCC Access account and continue to work with the account holder in question. We would also like to share that we are routinely responding to notifications of possible public breaches containing RIPE NCC Access accounts and actively resetting account passwords while notifying the account holders. In line with the previous resolution by the Executive Board, we are reporting all cases of attempted fraud to the Dutch authorities: https://www.ripe.net/about-us/executive-board/minutes/2017/minutes-110th-ex… Rest assured that the RIPE NCC is committed to taking the necessary steps to ensure the security of our services. We are currently investigating how we can change our roadmaps to make two-step verification mandatory for all RIPE NCC Access accounts as soon as possible and, in the longer term, offer a wider variety of verification mechanisms. If you suspect that your account might be impacted, please report it to security(a)ripe.net. Kind regards, Hans Petter Holen Managing Director and CEO, RIPE NCC

2 1

Draft minutes NCC Service WG - RIPE87
by Bijal Sanghani 03 Jan '24

03 Jan '24

Dear colleagues, All the very best for a happy and healthy 2024, from all the Services-WG chairs. We are pleased to inform you the draft minutes from the NCC Services Working Group sessions at RIPE87 have now been published: https://www.ripe.net/participate/ripe/wg/active-wg/services/minutes/ripe-87 I’d like to take the opportunity to remind you that previous meeting minutes can be found on the services working group pages: https://www.ripe.net/participate/ripe/wg/active-wg/services/ RIPE NCC Services Working Group ripe.net Please let us know if you have any questions or comments. Kind regards, NCC Services WG Chairs Bijal, Rob and Janos

1 0

2023-03 Policy Proposal "Voluntary Transfer Lock" Implemented
by Angela Dall'Ara 03 Jan '24

03 Jan '24

Dear colleagues, We are pleased to announce that we have implemented the RIPE Policy Proposal 2023-03 “Voluntary Transfer Lock”. The new policy allows the holders of resources registered with the RIPE NCC to inform the RIPE NCC that certain resources must not be transferred for a certain amount of time. The archived policy proposal can be found at: https://www.ripe.net/participate/policies/proposals/2023-03 The RIPE Document "Voluntary Transfer Lock" is available at: https://www.ripe.net/publications/docs/ripe-806 The Request Form and Procedure are available at: https://www.ripe.net/manage-ips-and-asns/resource-transfers-and-mergers/vol… Kind regards, Angela Dall'Ara Policy Officer RIPE NCC

1 0

RIPE NCC Quarterly Planning Q1 2024
by Fergal Cunningham 20 Dec '23

20 Dec '23

Dear all, The Q1 2024 quarterly plans for our development teams are now published at: https://www.ripe.net/support/documentation/quarterly-planning Our quarterly planning includes the work we will be carrying out in the next few months in: - RPKI - Learning & Development - RIPE Database - Business Applications, including the LIR Portal, Registry Services and other applications - DNS and K-root - RIPE Atlas - RIPEstat - RIS - Information Technology - Information Security, Risk and Compliance The goals of publishing our planning are to be transparent about the work we will be carrying out in the coming months, to get your input on those plans, and to foster a dialogue with our members and the community about what you would like to see the RIPE NCC work on going forward. If you have any input on these plans or suggestions for future work, please reach out to us. Kind regards, Fergal Cunningham Head of Membership Engagement RIPE NCC

1 0

Figuring out RIPE meetings
by Shane Kerr 05 Dec '23

05 Dec '23

Dear RIPE NCC services working group, I spoke up during the RIPE NCC services working group during the AOB (any other business) time at the end of the session during the RIPE 87 meeting. We only had a very short amount of time, and I did not warn anyone. More than one person asked me for clarification, so I thought I should send an e-mail to explain. This is that e-mail. There are two places where discussions about the RIPE meeting could happen, either in the RIPE list (with the whole RIPE community) or in the RIPE NCC services working group (for non-member RIPE NCC services). I picked the RIPE NCC services, because I think it is basically about implementation and not about over-arching meeting goals. There is definitely discussion to be had about meeting goals - for example how to deal with a meeting that grows over time - but that is not my focus here. Basically I wanted to rant a bit about two things: 1. The last few meeting locations have not been great. 2. Communication about meetings has been been poor. The most recent meeting, near Rome, was in a location that meant you had to either stay in the meeting venue hotel or take a taxi to get to the meeting every day. It was also far away from the actual city, so getting out to visit a restaurant or even just be away from the venue at all took some time. There are a lot of valid complaints about the way the meeting venue was laid out, but my main concern was the choice of venue itself. The meeting before this, RIPE 86 in Rotterdam, was in a conference center. That is not necessarily bad - RIPE 78 in Rotterdam was in a conference center that was actually pretty good. In the case of RIPE 86 in Rotterdam the conference center was far from anything else, including hotels and restaurants. It could be reached by public transport or by just cycling or walking, so it was better than Rome, but still not great. RIPE 85 in Belgrade was probably a better location as far as venue. The main issues with that meeting were due to it being in Serbia, which has both benefits and drawbacks, but discussion about which countries or regions are appropriate for a RIPE meeting probably belongs on the RIPE list. I realize that there are a lot of reasons why venues were chosen, but I feel like we as the RIPE community have no insight into these. Which leads me to my second point of communication being poor. To me, it feels like we (the RIPE community) are basically just observers in how our own meetings are arranged, and end up having to accept whatever is delivered by our vendor (the RIPE NCC). I do not think this is how anyone wants the RIPE meetings to be arranged, and I definitely do not think that there is any blame here... possibly we have all kind of slowly moved into a situation where the RIPE NCC has done such a good job of handling meetings over the years that we just let them handle everything apart from the actual agendas and discussions. What I was asking for at the microphone at RIPE 87 was for more communication about future meeting planning from the RIPE NCC, and if possible some discussion around it. Arranging conferences or meetings has been especially difficult since the end of the COVID-19 lockdowns, but we (the RIPE community) are in this together along with the RIPE NCC. The RIPE community is willing to help when it makes sense, and can be trusted to be understanding otherwise. Hisham from the RIPE NCC grabbed for a quick chat some time after the RIPE NCC services working group session. He was very open about the challenges that the RIPE NCC are facing planing RIPE meetings, as well as a lot of the thought processes they have around selecting cities, picking venues, and so on. The meetings have not been dropped or ignored, and I know that the RIPE NCC is going to be giving us some interesting articles meeting organization in the near future. I really appreciate him reaching out to me, and look forward to everyone learning about the efforts around meeting planning. Anyway, that's it. No secret agenda or hidden meanings, I promise! 😄 Cheers, -- Shane

7 7

Re: [ncc-services-wg] New article on RIPE Labs: Redesigning ripe.net
by Phillip Oldham 27 Nov '23

27 Nov '23

Hello Aleksi Thanks for your feedback. I think I need to clarify a couple of things, which I should have made a little more clear in the article. Firstly, the article relates specifically to www.ripe.net, our public website. These changes won’t affect the functionality or design of our other websites such as the RIPE Database, stat.ripe.net, atlas.ripe.net, etc. This means that your workflow shouldn’t be affected if you’re using one of these tools. Secondly, in the article, “fully responsive design” refers to the practice of making a website’s layout change based on the size of the screen on which it is presented. Generally this practice doesn’t change the content on the page itself, instead it moves the content around to best fit the screen size and orientation. For example, a page displayed on a tablet device would use a slightly smaller font size and reduced image sizes compared to how the page would display on the larger screen of a laptop. The page’s HTML and contents would be the same in both cases, and the transition between layouts doesn't require the page to reload. This also shouldn’t affect your workflow, and the changes we’re making in this respect will be limited to the www.ripe.net website. I hope this answers your concerns. If not, please feel free to reach out and I can provide more detail. Best regards Phillip Oldham Manager, Web Services RIPE NCC On 21/11/2023 10:53, ncc-services-wg-request(a)ripe.net wrote: > Date: Tue, 21 Nov 2023 11:53:39 +0200 > From: Aleksi Suhonen <ripe-ml-2023(a)ssd.axu.tm> > To: ncc-services-wg(a)ripe.net > Subject: Re: [ncc-services-wg] New article on RIPE Labs: Redesigning > ripe.net > Message-ID: <4ea8f573-85e8-4566-b7e2-002e7528e38f(a)ssd.axu.tm> > Content-Type: text/plain; charset=UTF-8; format=flowed > > Hello, > > On 10/11/2023 16:37, Phillip Oldham wrote: >> Following up on plans laid out back in our Activity Plan and Budget >> 2023, over the past year we've been working towards improving >> ripe.net. In this new article on RIPE Labs, I give an overview of the >> changes we have in mind and a sneak preview of the new design: > The previous iteration (or two?) have been plagued by things that look > like links, but are not in fact links, so you can't open them in another > tab. I hope this design pattern will be discontinued. > > When working with a smallish number of RIPE objects, I like to open them > all into separate tabs first. Then I go through the tabs and check each > object for the changes required, if any, and then close them as they > have been dealt with. Once I run out of tabs, I know I've covered > everything, and I can sleep soundly. > > The RIPE labs article talks about "fully responsive design" which to me > sounds like I would need to responsively make a new search for objects > after each object I've handled. This is a nightmare, as I'd > inevitably/accidentally end up checking some objects several times, and > at the end of the day I still couldn't be sure that I've done everything > I set out to do. > > My 2 cents, >

1 0

Candidates for NCC Services WG Co-chair
by Rob Evans 24 Nov '23

24 Nov '23

Dear colleagues, The nomination period for co-chair of the NCC Services Working Group closed yesterday, and we are happy to say we have two candidates: - Stefan Wahl - Janos Zsako Between now and our meeting in Rome, we'd like to invite the candidates to say why they would like to co-chair the working group, and we'd ask participants in the WG to express support for one or other candidate. Cheers, Rob & Bijal

6 5

RIPE Labs article on maintaining a strong organisation through 2024
by Hans Petter Holen 23 Nov '23

23 Nov '23

Dear all, Today I published the final RIPE Labs article in a series focused on the RIPE NCC’s Draft Activity Plan and Budget 2024: https://labs.ripe.net/author/hans_petter_holen/strong-and-stable-in-2024-th… In this last instalment, I focus on how we will maintain a strong and stable organisation through the work of the Organisational Sustainability area of the RIPE NCC as well as a final word on the draft activity plan. If you have feedback on the draft document please let me know on the members-discuss mailing list or in person next week at RIPE 87. Kind regards, Hans Petter Holen Managing Director and Chief Executive Officer RIPE NCC

1 0

New article on RIPE Labs: Redesigning ripe.net
by Phillip Oldham 21 Nov '23

21 Nov '23

Dear colleagues, Following up on plans laid out back in our Activity Plan and Budget 2023, over the past year we've been working towards improving ripe.net. In this new article on RIPE Labs, I give an overview of the changes we have in mind and a sneak preview of the new design: https://labs.ripe.net/author/phillip-oldham/page-under-construction-redesig… Phillip Oldham (he/him) <poldham(a)ripe.net> Manager, Web Services RIPE NCC Stationsplein 11, 1012 AB Amsterdam

2 1