February 2017 - cooperation-wg

FYI: From the European Commission: human rights guidance for 3 business sectors
by Patrik Fältström 20 Jul '19

20 Jul '19

Hi, As you can see below European Commission just released human rights guidance for 3 business sectors. I have helped COM and specifically IHRB with their piece of the work, and I know others on this list have also helped. Everything from more formal support to extremely good comments that have helped making the documents what they finally ended up being. Patrik Fältström Head of Research and Development Netnod Begin forwarded message: > From: <entr-csr(a)ec.europa.eu> > Subject: From the European Commission: human rights guidance for 3 business sectors > Date: 17 juni 2013 18:23:09 CEST > To: <entr-csr(a)ec.europa.eu> > > We are pleased to announce the publication of the European Commission Sector Guides on Implementing the UN Guiding Principles on Business and Human Rights. > > > Download the Guides here: http://ec.europa.eu/enterprise/newsroom/cf/itemdetail.cfm?item_id=6711&lang… > > The Guides – for employment and recruitment agencies, ICT companies, and oil and gas companies – were developed over the past 18 months by Shift and IHRB through extensive research and multistakeholder consultation with representatives from the three industries as well as governments, trade unions, civil society, academia and other experts. Read more about the Guides’ development here. > > Each Guide offers practical advice on how to implement the corporate responsibility to respect human rights in day-to-day business operations in each industry through step-by-step guidance. At each step, they summarise what the UN Guiding Principles expect, offer a range of approaches and examples for how to put them into practice, and link users to additional resources that can support their work. They are intended to help companies “translate” respect for human rights into their own systems and cultures. > > Many thanks to all those who have contributed to this process. > > Best regards, > > > CSR Team > > European Commission > Enterprise and Industry Directorate-General > Unit ENTR.D.1 >

6 12

Europol Communication on Carrier-Grade NAT
by Chris Buckridge 23 Feb '17

23 Feb '17

Dear colleagues, Europol (the European Union’s law enforcement agency) last month sent a communication to the Council of the European Union (the group of government ministers from each EU country) regarding Carrier-Grade NAT (CGN), an issue of direct relevance to many RIPE NCC members and the RIPE community. The communication is available online at: http://www.statewatch.org/news/2017/jan/eu-europol-cgn-tech-going-dark-data… Specifically, it notes that: > With CGN, law enforcement has lost its ability to associate and link a particular cyber criminal’s activity back to a particular IP address. The paper suggests greater regulatory coordination at the EU level regarding CGN, and also notes that: > On 31st January 2017 a European Network of law enforcement specialists in CGN will be established, the secretariat of which will be established [/provided by?] at Europol. The aim of this network is to: > > - document cases of non-attribution linked to CGN in EU, > - document existing best practices to overcome CGN-related attribution problems currently in place in some Member States, > - raise awareness of European policy-makers about the problem of attribution linked to CGN technologies, > - represent the voice of law enforcement developing a common narrative and advocating for a voluntary scheme at EU level to improve traceability by engaging in a coordinated fashion with ISPs and content providers. A press release was also issued by Europol regarding the formation of this new group: https://www.europol.europa.eu/newsroom/news/closing-online-crime-attributio… LEA interest in reducing the use of CGN also came up for discussion at the recent RIPE NCC Roundtable Meeting for Governments and Regulators (held in Brussels on 24 January), where the strong uptake of IPv6 in Belgium was attributed (at least partially) to coordination between law enforcement, national regulators and operators to limit the number of customers that can concurrently share a single IPv4 address. As noted in a previous email, the RIPE NCC and Europol signed an MoU in December 2016 with a focus on sharing expertise in the areas of cybercrime and Internet security. We will be liaising with Europol on this topic, and would appreciate any feedback from the RIPE community on this or related issues. Best regards, Chris Buckridge External Relations Manager RIPE NCC

7 7

SG20 and DONA etc
by Patrik Fältström 06 Feb '17

06 Feb '17

All, I hear rumors SG20 is moving forward with ideas on prescribing DONA etc as The Directory and Naming System to use, and that it is a replacement for DNS. And that there is an upcoming SG20 meeting. I personally find it being very important ITU-T in this case do not "select" specific naming mechanisms at all. There are numerous different systems that after being bootstrapped with the help of DNS and routing can act on its own. And it would be a disaster if ITU-T prescribe something at this time, unless the usage is very very specific and that harmonization really really is needed. If we should spend time on new naming and lookup mechanisms, I would go for some completely new architectures that do not have any kind of root (neither technical, nor administrative) and instead use things like opportunistic encryption and randomization to find identifiers which globally get to know each other via some ad hoc routing mechanism. paf

3 5

CPDP 2017 - Computers, Privacy and Data Protection
by Gordon Lennox 01 Feb '17

01 Feb '17

Last week we had the annual three-day CPDP event in Brussels. CPDP is a fairly big stakeholder conference. The theme this year was 'The age of intelligent machines”. Not so long ago IEEE organised a one-day seminar on "AI and ethics” also in Brussels. So you can sense some common concerns. However you can find details of CPDP here: http://www.cpdpconferences.org Perhaps as CPDP is held in Brussels - even if not in a typical institutional setting - the organisers succeed in attracting a very varied crowd. There were of course folk from the various EU bodies - the parliament, the commission, EDPS and so on. But also regulators from various EU member states and elsewhere, including the US. And the Council of Europe. And of course many academics and folk from industry. And there were well-known names such as Simon Davies, Bertrand de la Chapelle, Gus Hosein, Paul Nemitz, Bart Preneel, Marc Rotenberg, Marietje Schaake, Phil Zimmerman and many, many more, For a sense of industry involvement see: http://www.cpdpconferences.org/sponsors.html But the event is by no means dominated by industry, far from it. Between the implementation of the GDPR and Brexit and the new US administration and concerns about AI, encryption policy, cyber-warfare, mass surveillance, the so-called Internet of Things - internets of things? - and cloudy computing the programme was very rich. You can find the various sessions on YouTube: search with “CPDP 2017”. One that may be of immediate interest was the one organised by ICANN on: The GDPR impact on the domain name community. https://www.youtube.com/watch?v=5We1t1bClro This was not the first time I had participated. But I did sense this year was even better, if only because there was a bit more participation by technology-aware folk. I would hope to see that continue. It would be good to see some RIPE people there next year. It would be even better if NCC could also get involved in some way. Organising a panel? Or sponsoring some nice coffee! Gordon

3 3

ODP: cooperation-wg Digest, Vol 61, Issue 1
by Joanna Kulesza 01 Feb '17

01 Feb '17

Thank you for the recap Gordon. Let me just briefly +1 your idea - CPDP might prove the perfect venue for the unfolding accountability discussion within the RIPE community. Best to all Joanna Kulesza _________________ This message was sent from a mobile device. Please excuse the brevity and errors. -----Wiadomość oryginalna----- Od: "cooperation-wg-request(a)ripe.net" <cooperation-wg-request(a)ripe.net> Wysłano: ‎2017-‎02-‎01 12:00 Do: "cooperation-wg(a)ripe.net" <cooperation-wg(a)ripe.net> Temat: cooperation-wg Digest, Vol 61, Issue 1 Send cooperation-wg mailing list submissions to cooperation-wg(a)ripe.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.ripe.net/mailman/listinfo/cooperation-wg or, via email, send a message with subject or body 'help' to cooperation-wg-request(a)ripe.net You can reach the person managing the list at cooperation-wg-owner(a)ripe.net When replying, please edit your Subject line so it is more specific than "Re: Contents of cooperation-wg digest..." Today's Topics: 1. CPDP 2017 - Computers, Privacy and Data Protection (Gordon Lennox) 2. Re: CPDP 2017 - Computers, Privacy and Data Protection (Johan Helsingius) ---------------------------------------------------------------------- Message: 1 Date: Tue, 31 Jan 2017 22:56:40 +0100 From: Gordon Lennox <gordon.lennox.13(a)gmail.com> To: Cooperation WG <cooperation-wg(a)ripe.net> Subject: [cooperation-wg] CPDP 2017 - Computers, Privacy and Data Protection Message-ID: <8394274F-6907-498B-B813-5AEEA87E20BA(a)gmail.com> Content-Type: text/plain; charset="utf-8" Last week we had the annual three-day CPDP event in Brussels. CPDP is a fairly big stakeholder conference. The theme this year was 'The age of intelligent machines?. Not so long ago IEEE organised a one-day seminar on "AI and ethics? also in Brussels. So you can sense some common concerns. However you can find details of CPDP here: http://www.cpdpconferences.org Perhaps as CPDP is held in Brussels - even if not in a typical institutional setting - the organisers succeed in attracting a very varied crowd. There were of course folk from the various EU bodies - the parliament, the commission, EDPS and so on. But also regulators from various EU member states and elsewhere, including the US. And the Council of Europe. And of course many academics and folk from industry. And there were well-known names such as Simon Davies, Bertrand de la Chapelle, Gus Hosein, Paul Nemitz, Bart Preneel, Marc Rotenberg, Marietje Schaake, Phil Zimmerman and many, many more, For a sense of industry involvement see: http://www.cpdpconferences.org/sponsors.html But the event is by no means dominated by industry, far from it. Between the implementation of the GDPR and Brexit and the new US administration and concerns about AI, encryption policy, cyber-warfare, mass surveillance, the so-called Internet of Things - internets of things? - and cloudy computing the programme was very rich. You can find the various sessions on YouTube: search with ?CPDP 2017?. One that may be of immediate interest was the one organised by ICANN on: The GDPR impact on the domain name community. https://www.youtube.com/watch?v=5We1t1bClro This was not the first time I had participated. But I did sense this year was even better, if only because there was a bit more participation by technology-aware folk. I would hope to see that continue. It would be good to see some RIPE people there next year. It would be even better if NCC could also get involved in some way. Organising a panel? Or sponsoring some nice coffee! Gordon

1 0