- ncc-services-wg - mailman.ripe.net

RIPE NCC Registry Investigation Report Published
by James Kennedy 16 May '24

16 May '24

Dear colleagues, We have published a report detailing the findings of an investigation into an attempt to defraud the registry. The report is available at: https://www.ripe.net/support/documentation/disclosures-and-reports/ripe-ncc… In recent months, we have uncovered an unusual pattern of incidents concerning unauthorised access to certain LIR accounts. Attempts were made to gain access to resources through fraud and to transfer resources without authorisation from the legitimate holders. Following an investigation, the unauthorised transfers were reverted and the membership of the party submitting fraudulent documents has been terminated. We, therefore, encourage our members to work with us to ensure the security of your resources and to report any suspicious activity concerning your accounts. We recommend the following measures: - Be vigilant about the validity of your email domains and email security. - Ensure that all contacts in your LIR account are valid and kept up to date. - Report any suspicious activity to us immediately. - Store account credentials in a secure manner, and stop using shared accounts. Kind regards, James Kennedy Chief Registry Officer RIPE NCC

1 0

Agenda for the NCC Services WG meeting at RIPE 88
by Rob Evans 13 May '24

13 May '24

Hi, This is the agenda for our meeting during RIPE 88 in three weeks’ time. Cheers, Rob (on behalf of the WG co-chairs) RIPE NCC Services Working Group May 22, 2024, 14:00 - 15:30 CEST. Krakow, PL, and virtually. A. Welcome, admin. [5 minutes] B. Update from the RIPE NCC, Hans Petter Holen [30 minutes] C. Technology Update, Felipe Victolla Silveira [25 minutes] D. Registry Update, James Kennedy [20 minutes] Z. Open Mic [10 minutes]

1 1

Retiring ns.ripe.net
by Paul de Weerd 02 May '24

02 May '24

Dear colleagues, We have published a RIPE Labs article on how we believe it is now time to retire the secondary DNS service for member’s reverse DNS delegations, ns.ripe.net: https://labs.ripe.net/author/anandb/retiring-nsripenet/ We are proposing to retire the secondary DNS service by the end of 2024 and we're asking for your input and feedback on this proposal. Please share any feedback on the DNS Working Group mailing list by 16 May 2024. Once we’ve collected your feedback, we will discuss this topic in the DNS Working Group session at RIPE 88 on Wednesday, 22 May 2024. Paul de Weerd Manager Global Information Infrastructure team RIPE NCC

1 0

RIPE NCC Access Security Investigation Report Published
by Hans Petter Holen 24 Apr '24

24 Apr '24

Dear colleagues, We have published a report on our findings and actions taken following an investigation into a security breach concerning RIPE NCC Access, our Single Sign-On system. This report follows the last update that we shared with you in January this year [1]. Since the launch of the investigation, we have made two-factor authentication mandatory for all RIPE NCC Access accounts, strengthened password requirements, improved monitoring for leaked credentials and automated the process of resetting passwords for any credentials found in data breaches. Read the full report at: https://www.ripe.net/support/documentation/disclosures-and-reports/ripe-ncc… We further recommend that members follow our security recommendations: - Please restrict account access to necessary personnel only - Follow password security best practices - Actively monitor data breaches for your own credentials If you have any concerns about the security of your RIPE NCC Access account, please contact us at ncc(a)ripe.net. Regards, Hans Petter Holen, CEO and Managing Director RIPE NCC [1] https://www.ripe.net/ripe/mail/archives/ncc-announce/2024-January/001695.ht…

1 0

New RIPE Labs Article - Building a stable future for the RIPE NCC
by Remco van Mook 18 Apr '24

18 Apr '24

Dear colleagues, I’d like to draw your attention to an article that was just published on RIPE Labs, about building a stable future for the RIPE NCC. As it touches on some very foundational aspects all across the various working groups and NCC membership, I thought it important to share, and I would very much like to ask everyone for their input and ideas. In order to not spread the discussion too much across the various mailing lists, I suggest that we use the general RIPE list (which I’ve put into the reply-to field of this email. I’m currently in the process of organising a BOF during RIPE 88 on this topic as well and am looking forward to a constructive discussion! Kind regards, Remco van Mook RIPE NCC Executive Board

1 1

Enhancing the Security of RIPE NCC Access
by Felipe Victolla Silveira 10 Apr '24

10 Apr '24

Dear colleagues, Over the past few months, the RIPE NCC has been working on enhancing the security of RIPE NCC Access. In a new article on RIPE Labs, I explain the recent enhancements we've implemented and provide an overview of forthcoming developments you can anticipate from us: https://labs.ripe.net/author/felipe_victolla_silveira/enhancing-the-securit… Kind regards, Felipe Victolla Silveira Chief Technology Officer RIPE NCC

2 1

Using Google for RIPE NCC Email
by Felipe Victolla Silveira 04 Apr '24

04 Apr '24

Dear colleagues, We want to inform you that from today we will be using Google for some of our email infrastructure at the RIPE NCC - we use Gmail to host our mailboxes, filter mail for spam and malware, and send some of our outgoing mail through their mail servers. On some emails we send, the headers will show they passed through the Google servers, but it’s still the same RIPE NCC you’re talking with. We have been using Google Workspace for some time internally for other purposes, so this change allows us to reduce operational overhead at no extra cost. All of the external cloud providers that we use are published here for transparency: https://www.ripe.net/support/documentation/cloud-technology-status/ Regards, Felipe Victolla Silveira Chief Technology Officer RIPE NCC

1 0

RIPE NCC Quarterly Planning Q2 2024
by Adonis Stergiopoulos 02 Apr '24

02 Apr '24

Dear colleagues, We have now published the Q2 2024 quarterly plans for our development teams: https://www.ripe.net/support/documentation/quarterly-planning Our plans include the work that will be carried out in the next few months and give you the opportunity to comment on those plans and suggest items that the RIPE NCC should be working on going forward. The plans cover the following areas: - Learning & Development - RIPE Database - Business Applications, including the LIR Portal, Registry Services and other applications. - DNS and K-root - RIPE Atlas - RIPEstat - Resource Public Key Infrastructure (RPKI) - Routing Information Service (RIS) - Information Security, Risk, and Compliance We have also made some changes to our reporting process. First, following our website refresh, we made it easier to identify the completed work items of previous quarters. You can check this by clicking on the ‘Archived Plans’ sub-page for each area. Second, we have decided to discontinue reporting on our ‘Information Technology (IT)’ area as we could only provide limited details, and the information was mostly relevant to internal teams. The previous IT plans will remain active on our website until they expire as part of our archiving process. If you have any questions or any input on these plans, please reach out to us. Kind regards, Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC

1 0

Adding more than one 2FA authenticator to your account
by Povl Ole Haarlev Olsen 28 Mar '24

28 Mar '24

Hi. Now than 2FA is mandatory when logging in on the RIPE website, it would be nice if we could add more than one 2FA authenticator / TOTP generator to our account and use either when logging in. For example using either Authy on your phone or Yubico Authenticator on your computer. That way, if you lose your phone, you can still log in from your computer and revoke access from the Authy app, until you get a new phone and set up a new 2FA authenticator on it. On some other sites where you can use multiple 2FA authenticators, they even show which authenticator was used the last N times you logged in. It makes it very easy to spot, if someone has gained access to your 2FA authenticator secrets and is actively using that access. I hope, you'll consider the idea. Thanks in advance... -- Povl Ole

1 0

Secure login SSO idP
by David Ron 27 Mar '24

27 Mar '24

To whom it may concern at RIPE NCC, My name is David Ron, Administrator for Cellcom Israel, ASN1680, AS-NV. Following your notification from yesterday Mandatory 2FA on RIPE NCC Access Accounts<https://www.ripe.net/publications/news/mandatory-2fa-on-ripe-ncc-access-acc…> I am reaching out to propose enhancing information security and user experience. Specifically, we would like to suggest ripe support organizational users with the domain login to access your site via Single Sign-On (SSO) through our Identity Provider (IdP) We believe this integration will streamline the login process and bolster security measures. Best Regards, David Ron Network Engineer Cellcom This e-mail message may contain confidential, commercial and privileged information or data that constitute proprietary information of Cellcom Israel Ltd. Any review or distribution by others is strictly prohibited. If you are not the intended recipient you are hereby notified that any use of this information or data by any other person is absolutely prohibited. If you are not the intended recipient, please delete all copies. Thank You. https://cellcom.co.il

1 0