May 2018 - cooperation-wg - mailman.ripe.net

FYI: From the European Commission: human rights guidance for 3 business sectors
by Patrik Fältström 20 Jul '19

20 Jul '19

Hi, As you can see below European Commission just released human rights guidance for 3 business sectors. I have helped COM and specifically IHRB with their piece of the work, and I know others on this list have also helped. Everything from more formal support to extremely good comments that have helped making the documents what they finally ended up being. Patrik Fältström Head of Research and Development Netnod Begin forwarded message: > From: <entr-csr(a)ec.europa.eu> > Subject: From the European Commission: human rights guidance for 3 business sectors > Date: 17 juni 2013 18:23:09 CEST > To: <entr-csr(a)ec.europa.eu> > > We are pleased to announce the publication of the European Commission Sector Guides on Implementing the UN Guiding Principles on Business and Human Rights. > > > Download the Guides here: http://ec.europa.eu/enterprise/newsroom/cf/itemdetail.cfm?item_id=6711&lang… > > The Guides – for employment and recruitment agencies, ICT companies, and oil and gas companies – were developed over the past 18 months by Shift and IHRB through extensive research and multistakeholder consultation with representatives from the three industries as well as governments, trade unions, civil society, academia and other experts. Read more about the Guides’ development here. > > Each Guide offers practical advice on how to implement the corporate responsibility to respect human rights in day-to-day business operations in each industry through step-by-step guidance. At each step, they summarise what the UN Guiding Principles expect, offer a range of approaches and examples for how to put them into practice, and link users to additional resources that can support their work. They are intended to help companies “translate” respect for human rights into their own systems and cultures. > > Many thanks to all those who have contributed to this process. > > Best regards, > > > CSR Team > > European Commission > Enterprise and Industry Directorate-General > Unit ENTR.D.1 >

6 12

Fixing threat intelligence for you
by Alex Smirnoff 18 May '18

18 May '18

Hi everyone, I decided to re-animate my old project: to fix threat intelligence for vulnerability management. First of all, why is it broken? (a picture attached) because today's threat intel is massively based on attack events, which means you get it too late. My idea is to create and maintain a database of available exploit capabilities, which whould help you to know (hopefully slightly in advance) what you need to urgently patch right now. https://uisgcon.org/pdf/uisgcon13-alex-smirnoff+what-is-wrong-with-informat… sildes 23-46 contain a more precise description of how would it look like. Yet I cannot do it by myself: i need either people to help me, or money to hire people, hosting resources, or probably all of the above. Anyone could suggest me a good direction to look for?

1 0

Massive IP blockings in Russia
by Alexander Isavnin 16 May '18

16 May '18

Dear colleagues! I’m not pleased to inform you that RosComNadzor, a Russian Communication supervisory body, has started blocking huge ranges of IPs belonging to different cloud infrastructures, mostly Amazon and Google Cloud. Those ranges include: 13.52.0.0/14, 13.56.0.0/14, 18.184.0.0/15, 18.194.0.0/15, 18.196.0.0/15, 34.192.0.0/10, 34.240.0.0/13, 34.248.0.0/13, 35.156.0.0/14, 35.160.0.0/13, 35.176.0.0/15, 52.0.0.0/11, 52.192.0.0/11, 52.208.0.0/13, 52.28.0.0/15, 52.58.0.0/15, 54.144.0.0/12, 54.160.0.0/12, 54.228.0.0/15, 54.72.0.0/15, 54.88.0.0/16. Russian ISPs MUST fully block all traffic to such networks. The list is frequently updated and gets automatically propagated to ISP every once in a while, failure to block any address may result in 1500eur fine. The infrastructure listed above is being added to the blocklist under “counter-terrorist and counter-extremist” order of the General Prosecutor Office, #27-31-2015/Id4082-15, issued in 2015 and often used for blocking an arbitrary unwanted content. The real reason for such blocking is an attempt to cut access to Telegram messenger, which refused to provide end-to-end encryption keys to the Federal Security Service (previously known as KGB). This is a case similar to San-Bernardino shooter’s, where the FBI was denied access to the shooter’s iPhone, but courts in Russia have made completely opposite decision. Telegram’s infrastructure is being blocked by a different decision by RosKomNadzor, #2-1779/2018. Cloud infrastructures are being blocked for massive proxy and VPN hosting used to dodge messenger blocking. It is said, that more Apple and Google networks may be blocked soon for apps updates and push notifications delivery for Telegram. We hope to still have the global IP connectivity to keep you informed about how the situation develops. Do not be surprised if some of your services placed in cloud infrastructures will miss Russian customers. You can monitor the number of IP addresses, domains and URLs to be blocked in Russia at the https://2018.schors.spb.ru/ page (run by the famous ENOG community member Phil Kulin). Detailed information (also via API) is available at the https://reestr.rublacklist.net run by RosKomSvoboda civil society group. Kind regards, Alexander Isavnin Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum

2 1

New on RIPE Labs: The GDPR: Amendments to the RIPE Database
by Mirjam Kuehne 14 May '18

14 May '18

Dear colleagues, This is our fourth in a series of RIPE Labs articles discussing the General Data Protection Regulation (GDPR) implementation. Here we're looking at amendments that will be needed to the RIPE Database in order to ensure GDPR compliance: https://labs.ripe.net/Members/maria_stafyla/how-were-implementing-the-gdpr-… Kind regards, Mirjam Kühne RIPE NCC

1 0

RIPE NCC Hosts Workshop for Russian LEAs
by Chris Buckridge 10 May '18

10 May '18

Dear colleagues, Last week, on 31 January 2018, we held a one-day workshop for Russian Law Enforcement Agencies (LEAs) in Moscow. The workshop was attended by 19 participants. The event followed the format of similar LEA capacity-building efforts in other parts of our service region. LEAs learned about the RIR system and the respective roles of RIPE and the RIPE NCC, and there were discussions on the RIPE Database and the RIPE Policy Development Process (PDP). The concerns of LEAs were primarily around issues of attribution (knowing who is using an IP address at a given point in time). IPv6 deployment and the Internet of Things (IoT) were also topics of interest. We went over the current policy proposals in the PDP, including the proposal initiated by the LEA community, 2017-02, "Regular abuse-c Validation" and encouraged LEAs to participate. Last year, the RIPE NCC signed a Memorandum of Understanding (MoU) with the Ministry of Telecom and Mass Communications of the Russian Federation, an agreement which helped to make this initiative possible. We will be hosting similar capacity-building events with LEAs in Armenia and the UAE later this week. You can find the agenda and presentations from the workshop here: https://www.ripe.net/participate/meetings/lea-meetings/ripe-ncc-lea-meeting… <https://www.ripe.net/participate/meetings/lea-meetings/ripe-ncc-lea-meeting…> Kind regards Chris Buckridge External Relations Manager RIPE NCC

10 20

Co-op WG agenda for RIPE76
by Johan Helsingius 03 May '18

03 May '18

The current version of the Co-op WG agenda is up on https://ripe76.ripe.net/programme/meeting-plan/coop-wg/ Thursday, 17 May 09:00 - 10:30 1. CGN and an Analytical Approach to Policymaking - Marco Hogewoning 2. Consolidation in the Internet Ecosystem - Jari Arkko 3. Regulatory Developments in the EU - Chris Buckridge 4. EURALO and the RIPE Community - Oliver Crépin-Leblond 5. Protecting the Public Core of the Internet - Joanna Kulesza Julf & Achilleas

1 0

EU TLD & Brexit
by Gordon Lennox 01 May '18

01 May '18

My attention was drawn to this new policy from Brussels: https://www.theregister.co.uk/2018/03/29/eu_dumps_300000_ukowned_domains_in… Of interest to people involved with domain names, people who have names registered under EU or who are still thinking about it and who are resident in the UK or thinking about moving there? Nationality does not count: residence does. Gordon

5 8