January 2024 - ncc-announce - mailman.ripe.net

[news] Invoice 2024 and Payment Extensions
by Simon-Jan Haytink 25 Jan '24

25 Jan '24

Dear RIPE NCC members, The RIPE NCC invoice for 2024 will be issued in the coming days. Invoices will be available in the LIR Portal and sent to all billing contacts (please ensure that your billing contact details are up to date). We ask all members to please follow the process as laid out in the RIPE NCC Billing Procedure 2024: https://www.ripe.net/membership/member-support/payment/ripe-ncc-billing-pro… Payment Extensions We have granted payment extensions to members in Ukraine for the past two years due to war taking place there and the difficulties some Ukrainian members have had in paying their invoices. For the 2024 invoicing period, we will apply the normal invoicing approach to all of our members including those in Ukraine. The majority of members in Ukraine have paid their invoices, so we expect that this will affect fewer than 100 members. We will email our Ukrainian members separately to explain this change. We are conscious that some members will still need payment extensions and we will provide these on a per-request basis to members in countries in our service region that are experiencing war in their country. This approach will help to ensure that members are not accumulating debts that might be difficult for them to pay in subsequent years. And it will allow the RIPE NCC to have a more sustainable income stream while accommodating those members who need an extension. To request an extension we ask that members fill out the form at: https://www.ripe.net/participate/forms/apply/payment-extension-form/ Please note that because our billing reminders are automated, we will continue to send billing reminders even when an extension has been granted. If a payment extension has been granted, you should ignore these reminders. Kind regards, Simon Jan Haytink Chief Financial Officer RIPE NCC

1 0

[news] RIPE NCC Member Update: January 2024
by Kjerstin Burdiek 25 Jan '24

25 Jan '24

Dear RIPE NCC members, The January 2024 Member Update is now available on our website. You can access it at: https://www.ripe.net/publications/news/member-update-january-2024/ As you will see, ripe.net has recently been redesigned and has a fresh new look. Our website is now more mobile- and tablet-friendly and also features other accessibility and performance improvements. We’ve also made News more prominent on the home page - we plan to use this more than email to update our members, so make sure to check in regularly and sign up for RSS feeds. After you finish the update, take a look around and let us know what you think! Best regards, Kjerstin Burdiek Communications Officer RIPE NCC

1 0

[meeting] Register Now for RIPE 88!
by RIPE Meeting 23 Jan '24

23 Jan '24

Dear colleagues, You can now register for the RIPE 88 Meeting at: https://ripe88.ripe.net/attend/register/ RIPE 88 will take place at Metropolo Hotel by Golden Tulip in Krakow, Poland from 20-24 May 2024. ------------- Ticket Options ------------- Week ticket: EUR 400 Day ticket: EUR 130 Student (week) ticket: EUR 50 There is an early bird rate available until 1 March 2024. You can find more information about ticket options at: https://ripe88.ripe.net/attend/register/ ------------ Call for Presentations ------------- The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of Feather sessions), workshops, tutorials and lightning talks at RIPE 88. Proposals must be submitted for full consideration no later than 11 March. More information at: https://ripe88.ripe.net/submit-topic/cfp/ ------------- Call for Sponsors ------------- Supporting a RIPE Meeting through sponsorship gives your organisation fantastic exposure in the global Internet community. Get in touch with the RIPE Meeting team if you are interested in sponsoring RIPE 88: https://ripe88.ripe.net/sponsors/become-a-sponsor/ ------------- RIPE Fellowship ------------- If you are in the RIPE NCC service region and need financial assistance to attend RIPE 88, please consider applying for a RIPE Fellowship. We will cover travel, accommodation and a full-week meeting ticket. Apply before 25 February at: https://www.ripe.net/participate/ripe/ripe-fellowship ------------- RACI ------------- The RIPE Academic Cooperation Initiative (RACI) will cover the cost of the meeting ticket, travel and accommodation for successful applicants to present their research at RIPE 88. Apply before 25 February at: https://www.ripe.net/raci/ ------------- Accommodation ------------- We have blocked rooms for RIPE 88 attendees at Metropolo Hotel, which are subject to availability. Reserve now to ensure accommodation at the meeting venue: https://ripe88.ripe.net/attend/accommodation/ ------------- On-site Childcare ------------- We're making it easier for parents to fully participate in the RIPE Meeting by offering professional, on-site childcare at the meeting venue for children aged 6 months to 10 years. Space is limited, so be sure to register before 5 May to confirm your child's place. For more information, visit: https://ripe88.ripe.net/attend/diversity/childcare/ ---------------- Important Dates and Deadlines ---------------- RACI: 25 February RIPE Fellowship: 25 February Accommodation: A block of rooms has been reserved for RIPE Meeting attendees until 3 May, based on first-come, first-served basis. RIPE 88 CfP: 11 March RIPE 88: 20-24 May On-site childcare: First come, first served – limited places available until 5 May. More information on RIPE 88 can be found at: https://ripe88.ripe.net/ Track the #RIPE88 hashtag on social media for the latest updates. See you in Krakow! Kind regards, RIPE 88 Meeting Organisation Team

1 0

[news] Decommissioning of the Recognised IPv4 Transfer Brokers List and IPv4 Transfer Listing Service Completed
by James Kennedy 18 Jan '24

18 Jan '24

Dear members, Following our announcement on 20 November 2023 [1], the IPv4 Transfer Listing Service has now been decommissioned and the Recognised IPv4 Transfer Brokers List has been removed from our website. This follows a decision taken by the Executive Board in October 2023 [2]. Regards, James Kennedy Chief Registry Officer RIPE NCC [1] 20 November 2023 announcement: https://www.ripe.net/ripe/mail/archives/ncc-announce/2023-November/001685.h… [2] 168th Executive Board Meeting Minutes: https://www.ripe.net/about-us/executive-board/minutes/2023/minutes-168th-ex…

1 0

[News] Security Breach: Investigation Update
by Hans Petter Holen 10 Jan '24

10 Jan '24

Dear members, We recently informed you about our investigation into the breach of a member’s RIPE NCC Access account. A more detailed post-mortem analysis, including root causes and mitigations, will be published once the incident has been closed. In the meantime, we would like to inform you about our actions so far and next steps: - We have worked with the affected member to restore services to them. - If we believe that an account is at risk, based on notification from our threat intelligence provider or other sources, we force a password reset and inform the account holders. We are currently looking into automating this process. On average, we reset around 10 passwords per week. - We are performing targeted research to identify leaked RIPE NCC Access accounts in public data breaches. As a precautionary measure, we have forced a password reset on 800 accounts identified as vulnerable and notified the account holders. - The plans for our engineering teams are being reviewed in light of this incident. We are evaluating suggestions for improvement received alongside our existing plans. Our roadmaps will be updated accordingly. - We have decided to make two-factor authentication mandatory for RIPE NCC Access accounts and will prioritise the implementation. More details will be shared on the RIPE NCC Services WG mailing list once the timeline is finalised. ------------------------------- Two-Factor Authentication ------------------------------- If you have not already done so, enable two-factor authentication on your RIPE NCC Access account. Using two-factor authentication across all of your accounts can reduce your exposure to attacks like these. The guide for setting up two-factor authentication on your Access account can be found at: https://www.ripe.net/participate/member-support/ripe-ncc-access/two-step-ve… —-------------------------- Secure Your Account —-------------------------- Please follow our recommendations to help secure your RIPE NCC Access account: - Avoid reusing passwords for login credentials. - Use a password manager to automatically create random passwords and store them. - If you use a password management tool, we recommend that you enable data breach monitoring for your own credential or use https://haveibeenpwned.com/ or similar services. - Please review the accounts associated with your LIR, restrict access to necessary personnel only and remove former employee accounts. If you choose to create your own password: - Passwords are secret. Keep them so. - Use long passwords of at least 14 characters. - Do not reuse passwords. - Use a password manager to remember your password. - If a random password is impractical, use a passphrase instead. If you believe that your account might be vulnerable, please report this to security(a)ripe.net. Details about our technical emergency hotline are available at: https://www.ripe.net/support/contact/technical-emergency-hotline. Kind regards, Hans Petter Holen Managing Director and CEO, RIPE NCC

1 0

Security Breach: Please Enable Two-Factor Authentication
by Hans Petter Holen 04 Jan '24

04 Jan '24

Dear colleagues, In light of the recent incident where a RIPE NCC Access account was compromised, we urge you to review your own account security. ------------------------------- Two-Factor Authentication ------------------------------- If you have not already done so, enable two-factor authentication on your RIPE NCC Access account. Using two-factor authentication across all of your accounts can reduce your exposure to attacks like these. The guide for setting up two-factor authentication on your Access account can be found at: https://www.ripe.net/participate/member-support/ripe-ncc-access/two-step-ve… ------------------------------- Password Recommendations ------------------------------- We also encourage account holders to change their Access account password and follow these recommendations: - Avoid reusing passwords for login credentials. - Use a password manager to automatically create random passwords and store them. - If you use a SaaS based password management tool, enable dark web monitoring for your own credentials. If you choose to create your own password: - Use at least 14 characters to create a password. - Using passphrases can be helpful such as a favourite quote, fictional character name or line of song to greatly increase the length of the password while also making it easier to remember. We are currently investigating the compromise of the RIPE NCC Access account and continue to work with the account holder in question. We would also like to share that we are routinely responding to notifications of possible public breaches containing RIPE NCC Access accounts and actively resetting account passwords while notifying the account holders. In line with the previous resolution by the Executive Board, we are reporting all cases of attempted fraud to the Dutch authorities: https://www.ripe.net/about-us/executive-board/minutes/2017/minutes-110th-ex… Rest assured that the RIPE NCC is committed to taking the necessary steps to ensure the security of our services. We are currently investigating how we can change our roadmaps to make two-step verification mandatory for all RIPE NCC Access accounts as soon as possible and, in the longer term, offer a wider variety of verification mechanisms. If you suspect that your account might be impacted, please report it to security(a)ripe.net. Kind regards, Hans Petter Holen Managing Director and CEO, RIPE NCC

1 0