- Security-wg - mailman.ripe.net

LEA Transparency Report 2025
by Theodoros Fyllaridis 31 Mar '26

31 Mar '26

Dear colleagues, We have published a transparency report that details the nature and number of requests we received from Law Enforcement Authorities in 2025. You can find the report at: https://www.ripe.net/publications/docs/ripe-854/ Kind regards, Theodoros Fyllaridis Legal Counsel RIPE NCC

1 0

Call For Agenda Items - Security WG @ RIPE 92
by Brian Nisbet 25 Feb '26

25 Feb '26

Colleagues, RIPE 92 is coming over the horizon and we would like to open the call for agenda items for the meeting. RIPE 92 will be taking place from the 18th - 22nd May 2026 in Edinburgh, Scotland. The Security WG session will be taking place at 16:00 UTC +1 on Tuesday 19th May. As with RIPE 91 (and beyond!), all plenary and working group proposals can be submitted through the same system, Pretalx. Please submit your proposals by 10th April 2026 via: https://pretalx.ripe.net/ripe-92/ marking them for the Security WG When submitting, please keep in mind: - Talk type: This field is not relevant for our WG – you may simply choose “Talk”. - Track: Please select "Security WG". - Duration: Indicate the total time you will need, including Q&A. More information on how to submit a talk can be found here: https://ripe92.ripe.net/present/how-to-submit-a-proposal/ The WG is interested in policy proposals, discussions, presentations and other formats that are relevant to us. These may touch of operational security matters, issues that people are seeing, legislation or regulation, emerging trends or the like. One potential area of interest is existing or emerging threats related to AI/LLMs, or tools in that area. This is not an opportunity for sales pitches or similar, rather to discuss and raise awareness about security related matters that are happening in the real world. If you have questions about potential topics or the session in general, feel free to reach us at security-wg-chairs(a)ripe.net. As usual, both in-person and remote participation in the working group will be possible. We look forward to your submissions. Best regards, Brian, Tobias, Markus Brian Nisbet (he/him) Head of Service Operations Asiera (formerly HEAnet), Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie<http://www.heanet.ie> www.asiera.ie<https://www.asiera.ie/> Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Invitation to IGF PQC transition webinar
by Wout de Natris - van der Borght 03 Feb '26

03 Feb '26

Dear colleagues, The IGF secretariat, Dynamic Coalition IS3C and Afnic organise a webinar on this urgent topic that, if conducted in a timely and coordinated fashion, will prevent many forms of abuse on the internet in the future. The date is Thursday 26 February from13.00 to 14.30 UTC. In order to participate, you have to register with the IGF secretariat, that is hosting the webinar. You can do so here: https://intgovforum.zoom.us/meeting/register/uj1wOTiUQxOx4Sx9KBh-yg. This is the list of speakers: Benoît Ampeau, Head Afnic Labs Sandoche Balakrichenan, Head of R&D Partnerships, Afnic Pierre Bonis, Director-General Afnic Nicolas Fiumarelli, ISOC Uruguay/IS3C WG 1 chair João Moreno Falcão, Cyber security consultant/IS3C WG 9 vice-chair Wout de Natris - van der Borght, IS3C coordinator I look forward to welcome you at our webinar, where you will have ample time for discussion and questions. Kind regards, Wout de Natris - van der Borght Coordinator IS3C

1 0

FW: What's the real problem with s-p-a-m
by Radu Ghidiceanu 12 Dec '25

12 Dec '25

From: Radu Ghidiceanu via anti-abuse-wg <anti-abuse-wg(a)ripe.net> Sent: Tuesday, November 4, 2025 1:47 PM To: anti-abuse-wg(a)ripe.net Subject: [anti-abuse-wg] What's the real problem with s-p-a-m Hello All, Every now and then I get annoyed by spam issues and have to wait for them to pass, because there's not much I can do. But what's the real problem with spam? We don't know where it comes from? We don't know who they are? Yes, we know! But it seems that everyone likes this thing, so they don't have to do anything. In my opinion, the problem is the (in)competent authorities. It's pointless for us to identify who they are, if there are no consequences. And when it comes to investigations, we keep twiddling our thumbs, thinking that maybe the recipient signed up for a list and forgot, or maybe the law said they had to opt out, or that they didn't have a green tie and, lo and behold, nothing happens till the end. And there's another aspect. The lack of cooperation. We don't know what's going on over the fence, so we don't know how to proceed. Maybe in other countries measures are actually being taken and I don't know. In the last case, I have identified some spammers in the network: LeaseWeb Netherlands B.V. Abuse contact info: abuse(a)nl.leaseweb.com <mailto:abuse@nl.leaseweb.com> and the spam bombardment comes from the IPs: 5.79.97.121 81.171.2.124 178.162.131.126 178.162.136.160 212.32.242.60 Of course, I emailed them on abuse, but I get automated messages that walk me around with confirmations and forms to complete, after which I get answers like they didn't find, didn't identify, etc. But the spam continues from the same addresses That is, more precisely, they are direct spam providers, or the service provider of specialized spam providers. In conclusion, I would like to find out what the authorities in the Netherlands and in other countries are doing in such cases. Are they taking any measures against spammers, or are they doing the same as the authorities in Romania, more precisely, anything so that there will be no case? Thanks, Radu Ghidiceanu CTO RoNIX

1 0

RIPE 91 Draft Minutes for the Security WG session
by Markus de Brün 18 Nov '25

18 Nov '25

Colleagues, Thank you for attending our last meeting at RIPE 91. You can find the draft minutes here: https://www.ripe.net/community/wg/active-wg/security/minutes/security-worki… Please have a look at them and let us know if you have any comments. Regards, Markus

1 0

Security WG @ RIPE 91 - Draft Agenda
by Brian Nisbet 07 Oct '25

07 Oct '25

Colleagues: Here is the draft agenda for our WG session at RIPE 91. The session will take place on Tuesday, 21 October at 16:00 ‐ 17:30 (EEST/UTC +0300) in the Side Room. If you have any other items for this agenda, please email security-wg-chairs(a)ripe.net as soon as possible. A. Administrative Matters * Welcome * Scribe, Chat, Stenography * MeetEcho, Mic & Chat Etiquette * Ratings Where Appropriate * Approve Minutes from RIPE 90 * New Meeting System - Pretalx * Finalise agenda * Code of Conduct B. Update * B.1. Recent List Discussion * B.2. C. Policies - *C.1. D. Interactions - *D.1. Reflections on the Europol Cybercrime Conference - Brian Nisbet E. Presentation - *E.1. "The File That Contained the Keys Has Been Removed: An Empirical Analysis of Secret Leaks in Cloud Buckets and Responsible Disclosure Outcome" - Yury Zhauniarovich, TU Delft X. A.O.B. Z. Agenda for RIPE 92 Regards, Brian Co-Chair, RIPE Security WG Brian Nisbet (he/him) Head of Service Operations HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

RIPE 90 Draft WG Session Minutes
by Brian Nisbet 06 Oct '25

06 Oct '25

Colleagues, In advance of sending out the draft agenda for our session in Bucharest, I wanted to share the draft minutes from Lisbon: https://www.ripe.net/community/wg/active-wg/security/minutes/security-worki… If you could take a look and let us know if there are any issues, that would be great. Approval of the minutes will be on the agenda at the meeting. Thank you, Brian Co-Chair RIPE Security WG Brian Nisbet (he/him) Head of Service Operations HEAnet CLG, Ireland's National Education and Research Network North Dock Two, 93-94 North Wall Quay, Dublin 1, D01 V8Y6 +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

Call for Presentation – RIPE 91 Security WG
by Markus de Brün 13 Aug '25

13 Aug '25

Dear colleagues, It might still seem far away, but RIPE 91 in Bucharest is approaching. Our Security Working Group session is currently scheduled for Tuesday, 21 October 2025 at 16:00. From RIPE 91 onwards, all plenary and working group proposals can be submitted through the same system, Pretalx. Please submit your proposals by 15 September 2025 via: https://pretalx.ripe.net/ripe91/cfp When submitting, please keep in mind: - Talk type: This field is not relevant for our WG – you may simply choose “Talk”. - Track: Please select "Security WG". - Duration: Indicate the total time you will need, including Q&A. More information on how to submit a talk can be found here: https://ripe91.ripe.net/present/how-to-submit-a-talk/ If you have questions about potential topics or the session in general, feel free to reach us at security-wg-chairs(a)ripe.net. As usual, both in-person and remote participation in the working group will be possible. We look forward to your submissions. Best regards, Brian, Tobias, Markus

2 1

Source Address Validation (SAV) Deployment and Operational Practices
by Scaglione, Nicholas 07 Aug '25

07 Aug '25

Friends: uRPF and similar SAV techniques have been around for long, with new variants recently/being standardized by the IETF (EFP-uRPF, BAR-SAV). We have done simulations to evaluate the impacts of these variants. To improve our research, we set up a short, quick survey for network managers and administrators of ASNs. In this study, we want to understand the deployment challenges, operational considerations, adoption trends and operator concerns in this area. It would be amazing if you could respond to the survey, available in: https://forms.gle/3rRtCTa2xk217tyd6 We really appreciate your help. The form also contains an option to leave your email for us to send you our research results (paper, simulations, survey). Thanks a lot!! ----------------------------------- Nicholas Scaglione Ph.D. Student School of Computing [UConn Wordmark]

1 0

European Commission informal Expert Group for a Technology Roadmap on Encryption
by Romain Bosc 08 Jul '25

08 Jul '25

Colleagues, As you may know, the European Commission is setting up an informal "Expert Group for a Technology Roadmap on Encryption" -- deadline is September 1. The Commission is looking for technical profiles coming from either the public or private sectors with expertise in cyber security, encryption and decryption, crime investigation, forensics, telecoms, big data and AI, data protection, etc. This is an important one because the group will advise the Commission on the implementation of current legislation but also in the preparation of new legislative and policy initiatives. Find more information including the 'Terms of Reference' and 'Call for Applications' at: https://ec.europa.eu/transparency/expert-groups-register/screen/expert-grou… All best Romain -- Romain Bosc Sr Public Policy & Governance Officer RIPE NCC E: rbosc(a)ripe.net

1 0