- Security-wg - mailman.ripe.net

FW: What's the real problem with s-p-a-m
by Radu Ghidiceanu 12 Dec '25

12 Dec '25

From: Radu Ghidiceanu via anti-abuse-wg <anti-abuse-wg(a)ripe.net> Sent: Tuesday, November 4, 2025 1:47 PM To: anti-abuse-wg(a)ripe.net Subject: [anti-abuse-wg] What's the real problem with s-p-a-m Hello All, Every now and then I get annoyed by spam issues and have to wait for them to pass, because there's not much I can do. But what's the real problem with spam? We don't know where it comes from? We don't know who they are? Yes, we know! But it seems that everyone likes this thing, so they don't have to do anything. In my opinion, the problem is the (in)competent authorities. It's pointless for us to identify who they are, if there are no consequences. And when it comes to investigations, we keep twiddling our thumbs, thinking that maybe the recipient signed up for a list and forgot, or maybe the law said they had to opt out, or that they didn't have a green tie and, lo and behold, nothing happens till the end. And there's another aspect. The lack of cooperation. We don't know what's going on over the fence, so we don't know how to proceed. Maybe in other countries measures are actually being taken and I don't know. In the last case, I have identified some spammers in the network: LeaseWeb Netherlands B.V. Abuse contact info: abuse(a)nl.leaseweb.com <mailto:abuse@nl.leaseweb.com> and the spam bombardment comes from the IPs: 5.79.97.121 81.171.2.124 178.162.131.126 178.162.136.160 212.32.242.60 Of course, I emailed them on abuse, but I get automated messages that walk me around with confirmations and forms to complete, after which I get answers like they didn't find, didn't identify, etc. But the spam continues from the same addresses That is, more precisely, they are direct spam providers, or the service provider of specialized spam providers. In conclusion, I would like to find out what the authorities in the Netherlands and in other countries are doing in such cases. Are they taking any measures against spammers, or are they doing the same as the authorities in Romania, more precisely, anything so that there will be no case? Thanks, Radu Ghidiceanu CTO RoNIX

1 0

RIPE 91 Draft Minutes for the Security WG session
by Markus de Brün 18 Nov '25

18 Nov '25

Colleagues, Thank you for attending our last meeting at RIPE 91. You can find the draft minutes here: https://www.ripe.net/community/wg/active-wg/security/minutes/security-worki… Please have a look at them and let us know if you have any comments. Regards, Markus

1 0

Security WG @ RIPE 91 - Draft Agenda
by Brian Nisbet 07 Oct '25

07 Oct '25

Colleagues: Here is the draft agenda for our WG session at RIPE 91. The session will take place on Tuesday, 21 October at 16:00 ‐ 17:30 (EEST/UTC +0300) in the Side Room. If you have any other items for this agenda, please email security-wg-chairs(a)ripe.net as soon as possible. A. Administrative Matters * Welcome * Scribe, Chat, Stenography * MeetEcho, Mic & Chat Etiquette * Ratings Where Appropriate * Approve Minutes from RIPE 90 * New Meeting System - Pretalx * Finalise agenda * Code of Conduct B. Update * B.1. Recent List Discussion * B.2. C. Policies - *C.1. D. Interactions - *D.1. Reflections on the Europol Cybercrime Conference - Brian Nisbet E. Presentation - *E.1. "The File That Contained the Keys Has Been Removed: An Empirical Analysis of Secret Leaks in Cloud Buckets and Responsible Disclosure Outcome" - Yury Zhauniarovich, TU Delft X. A.O.B. Z. Agenda for RIPE 92 Regards, Brian Co-Chair, RIPE Security WG Brian Nisbet (he/him) Head of Service Operations HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

RIPE 90 Draft WG Session Minutes
by Brian Nisbet 06 Oct '25

06 Oct '25

Colleagues, In advance of sending out the draft agenda for our session in Bucharest, I wanted to share the draft minutes from Lisbon: https://www.ripe.net/community/wg/active-wg/security/minutes/security-worki… If you could take a look and let us know if there are any issues, that would be great. Approval of the minutes will be on the agenda at the meeting. Thank you, Brian Co-Chair RIPE Security WG Brian Nisbet (he/him) Head of Service Operations HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Call for Presentation – RIPE 91 Security WG
by Markus de Brün 13 Aug '25

13 Aug '25

Dear colleagues, It might still seem far away, but RIPE 91 in Bucharest is approaching. Our Security Working Group session is currently scheduled for Tuesday, 21 October 2025 at 16:00. From RIPE 91 onwards, all plenary and working group proposals can be submitted through the same system, Pretalx. Please submit your proposals by 15 September 2025 via: https://pretalx.ripe.net/ripe91/cfp When submitting, please keep in mind: - Talk type: This field is not relevant for our WG – you may simply choose “Talk”. - Track: Please select "Security WG". - Duration: Indicate the total time you will need, including Q&A. More information on how to submit a talk can be found here: https://ripe91.ripe.net/present/how-to-submit-a-talk/ If you have questions about potential topics or the session in general, feel free to reach us at security-wg-chairs(a)ripe.net. As usual, both in-person and remote participation in the working group will be possible. We look forward to your submissions. Best regards, Brian, Tobias, Markus

2 1

Source Address Validation (SAV) Deployment and Operational Practices
by Scaglione, Nicholas 07 Aug '25

07 Aug '25

Friends: uRPF and similar SAV techniques have been around for long, with new variants recently/being standardized by the IETF (EFP-uRPF, BAR-SAV). We have done simulations to evaluate the impacts of these variants. To improve our research, we set up a short, quick survey for network managers and administrators of ASNs. In this study, we want to understand the deployment challenges, operational considerations, adoption trends and operator concerns in this area. It would be amazing if you could respond to the survey, available in: https://forms.gle/3rRtCTa2xk217tyd6 We really appreciate your help. The form also contains an option to leave your email for us to send you our research results (paper, simulations, survey). Thanks a lot!! ----------------------------------- Nicholas Scaglione Ph.D. Student School of Computing [UConn Wordmark]

1 0

European Commission informal Expert Group for a Technology Roadmap on Encryption
by Romain Bosc 08 Jul '25

08 Jul '25

Colleagues, As you may know, the European Commission is setting up an informal "Expert Group for a Technology Roadmap on Encryption" -- deadline is September 1. The Commission is looking for technical profiles coming from either the public or private sectors with expertise in cyber security, encryption and decryption, crime investigation, forensics, telecoms, big data and AI, data protection, etc. This is an important one because the group will advise the Commission on the implementation of current legislation but also in the preparation of new legislative and policy initiatives. Find more information including the 'Terms of Reference' and 'Call for Applications' at: https://ec.europa.eu/transparency/expert-groups-register/screen/expert-grou… All best Romain -- Romain Bosc Sr Public Policy & Governance Officer RIPE NCC E: rbosc(a)ripe.net

1 0

Recent Emails
by Brian Nisbet 16 May '25

16 May '25

Colleagues, Recently there have been some very off topic and repeated emails to the group from someone who was previously removed from the Anti-Abuse WG Mailing List for repeated unacceptable behaviour. After the first email we put them into moderation and they chose to deal with this by subscribing a new address and sending the same email. The Co-Chairs will be reinforcing the ban as it did not carry over. And temporarily we have put a moderation hold on subscribing to the mailing list, but hopefully we won't need that for too long. If you have any questions about this, please ask, but we won't be going back over the reasons for the ban in the first place. Thank you, Brian Co-Chair, RIPE Security WG Brian Nisbet (he/him) Head of Service Operations HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Second post in NANOG
by elad＠afri.holdings 15 May '25

15 May '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello, I kindly bring my following linked second post in NANOG to the attention of the RIPE community: https://lists.nanog.org/archives/list/nanog@lists.nanog.org/thread/25GSIL2G… Kind Regards, Elad -----BEGIN PGP SIGNATURE----- Version: ProtonMail wrsEARYKAG0FgmgmRrAJkAOTxlTETyIURRQAAAAAABwAIHNhbHRAbm90YXRp b25zLm9wZW5wZ3Bqcy5vcmeZxuCF42Y5ghWDY5XQRJjuBySZLBeyUbp675aY 082juRYhBIDKpTRODxrUC0u8qAOTxlTETyIUAACEDAD/ZxfZbIlbmMjFnUIY JeNLrfiZKdNWGsD/GSPQD3MRJ+4A/2q0GW9M1xTxWs56/6sGdZ6mWRcDxL7B nMMhpJ39bdMF =Dp/s -----END PGP SIGNATURE-----

1 0

Post in NANOG
by info＠netstyle.io 14 May '25

14 May '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello, I kindly bring my following linked post in NANOG to the attention of the RIPE community: https://lists.nanog.org/archives/list/nanog@lists.nanog.org/thread/25GSIL2G… Kind Regards, Elad -----BEGIN PGP SIGNATURE----- Version: ProtonMail wsG5BAEBCgBtBYJoJHNXCZCAS+uEnipSW0UUAAAAAAAcACBzYWx0QG5vdGF0 aW9ucy5vcGVucGdwanMub3JncpnCjtqDqw3hbUjc7g60Fq6RVx3RVpzEjxXI SYw6lvwWIQTD50Y2bI5NSOj/nnWAS+uEnipSWwAADCgP/RxcnOV09msZ7CPk jbJ8n6BKACQmOwzdTiqbU/cETyUj9ur868arK6iqVpt7U/MfmZ3ZF6LuIjs1 kz/8I69KewMpmKnsgu7v1yXlEY0WXubRix3KXoQsNFXm835SK2jgr7+rzyzU wzcYq8wlYRnfwAG4uyztEM76kmjl9Dql3q2E5UCk1hpLwPFOUjQmFwKYQKjx 7v9q2AKI+C24v15DwuubyT++FGMsAL9GQI9mJZ5S4wTaCmNj0Ma3/AFLnFbI +3ER5aiaGcbg8xVJHEHPXSbEJOxk3cjJxVm3fH44UOS7KZxdtA76/Jovfqqn 0uoB6HvRYhD66mU1GsQEGE2/HjAuYTSQYECOxcfTImtWelnqpg5N0y3Uyt9a v3LiskpP1Pw+xtoZK0ZqSGAB5SqROEFaGny3U5zALS4xI6T4Wqm4b2SgXwFx pFY1OnO/uA8iigHBNN85VcjXc1Vi3BX1rTGZil/JVkpoSZPP23Q90fvvp27p +7BQcpnmD7g/NyjCfjmylHG2Wx/rBBIPv8Q40aHfAy3EqDjMq6RZnNtWK1Iw miSAq+hfSiVhXL5wwMeZH8x7zS5sb8WbSU1fDViey3HpC5qUJU/wa31l2rnh /DqpINvlJ6XIzcXbdEWFV9kDGLkQvdiu7/PD88WDuWjoVvJepTeCiFc/siGc ConMBcs4 =kDGD -----END PGP SIGNATURE-----

1 0