- ttf - lists.iana.org

language interpretation inside Zoom
by Abdeldjalil Bachar Bong May 22, 2020

May 22, 2020

Hello All this week I participated in a virtual meeting of the United Nations with the Zoom and I saw that there is option to display language integration (French, Spanish,Russia.. ) and follow with this language interpretation without leaving the Zoom platform. for ALAC's meetings with interpretation other than English (FR, ES, RU) so will be a reflection for our working group to see this option. here are some screenshots that I made for information. ------------ Cordialement ABDELDJALIL BACHAR BONG ---------------------------------- PRESIDENT & CEO "HOUSE OF AFRICA" E-mail: bachar(a)houseof.africa Twitter: @HOUSEOFAFRIK WEBSITE : www.houseof.africa Whatsapp: +23566274284 Skype: Bongbour ------------------------------------- Le Secrétaire Exécutif/Executive Secretary Forum sur la Gouvernance de l'Internet au Tchad (FGI Tchad) / Chad Internet Governance Forum ------------------------------------- E-mail: Bachar(a)igf.td Website: www.igf.td Twitter :@IGFCHAD https://twitter.com/bacharbong Tél:0023566274284 N'djaména(Tchad) --------------------------------------------- |AFRINIC Fellow|ISOC CHAD Member|ICANN/AFRALO Member|NEXTGEN Fellow|GIVE1PROJECT MEMBER|IGFSA MEMBER|ACIEDD BOARD MEMBER|UN YOUTH DELEGATE - CHAD 2016-2018|ICANN60 Fellow ||Youth Peacebuilder|VP United Nations Association of Chad (UNA-Tchad)||

3 3

NXNSAttack - vulnerability that exploits the way DNS recursive resolvers operate
by Dev Anand Teelucksingh May 21, 2020

May 21, 2020

"The NXNSAttack is a new vulnerability that exploits the way DNS recursive resolvers operate when receiving NS referral response that contains nameservers but without their corresponding IP addresses (i.e., missing glue-records). The number of DNS messages exchanged in a typical resolution process might be much higher in practice than what is expected in theory, mainly due to a proactive resolution of name-servers’ IP addresses. This inefficiency becomes a bottleneck and might be used to mount a devastating attack against either or both, recursive resolvers and authoritative servers. The NXNSAttack is more effective than the NXDomain attack: i) It reaches an amplification factor of more than 1620x on the number of packets exchanged by the recursive resolver. ii) Besides the negative cache, the attack also saturates the ’NS’ resolver caches. A responsible coordinated disclosure procedure has been performed following the discovery of the NXNSAttack described in the paper below. Several DNS software vendors and service providers have adopted measures to protect against the destructive measures of the NXNSAttack." http://www.nxnsattack.com/

1 0

REMINDER / Meeting invitation: At-Large Technology Taskforce Call on Monday, 18 May 2020 at 15:00 UTC
by ICANN At-Large Staff May 18, 2020

May 18, 2020

**If you require a dial-out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number.** Dear All, The next At-Large Technology Taskforce Call is scheduled for Monday, 18 May 2020 at 15:00 UTC for 60 mins. For other times: https://tinyurl.com/yanjfbvj The agenda and call details can be found at: https://community.icann.org/x/PYEEC Zoom Room: https://icann.zoom.us/j/95126240492 / Meeting ID: 951 2624 0492 Password: 8a012359J! ADIGO Conference Bridge: EN: 1638 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann Main Wiki Space: https://community.icann.org/x/FpfbAQ If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

DATE CORRECTION / Meeting invitation: At-Large Technology Taskforce Call on Monday, 18 May 2020 at 15:00 UTC
by ICANN At-Large Staff May 5, 2020

May 5, 2020

**If you require a dial-out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number.** Dear All, The next At-Large Technology Taskforce Call is scheduled for Monday, 18 May 2020 at 15:00 UTC for 60 mins. For other times: https://tinyurl.com/yanjfbvj The agenda (to be updated) and call details can be found at: https://community.icann.org/x/PYEEC Zoom Room: https://icann.zoom.us/j/95126240492 / Meeting ID: 951 2624 0492 Password: 8a012359J! ADIGO Conference Bridge: EN: 1638 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann Main Wiki Space: https://community.icann.org/x/FpfbAQ If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

At-Large Technology Taskforce Call
by ICANN Policy Calendar May 5, 2020

May 5, 2020

**If you require a dial-out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number.** Dear All, The next At-Large Technology Taskforce Call is scheduled for Monday, 18 May 2020 at 15:00 UTC for 60 mins. For other times: https://tinyurl.com/yanjfbvj The agenda (to be updated) and call details can be found at: https://community.icann.org/x/PYEEC Zoom Room: https://icann.zoom.us/j/95126240492 / Meeting ID: 951 2624 0492 Password: 8a012359J! ADIGO Conference Bridge: EN: 1638 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann Main Wiki Space: https://community.icann.org/x/FpfbAQ If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

Meeting invitation: At-Large Technology Taskforce Call on Monday, 18 January 2020 at 15:00 UTC
by ICANN At-Large Staff May 5, 2020

May 5, 2020

**If you require a dial-out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number.** Dear All, The next At-Large Technology Taskforce Call is scheduled for Monday, 18 January 2020 at 15:00 UTC for 60 mins. For other times: https://tinyurl.com/yanjfbvj The agenda (to be updated) and call details can be found at: https://community.icann.org/x/PYEEC Zoom Room: https://icann.zoom.us/j/95126240492 / Meeting ID: 951 2624 0492 Password: 8a012359J! ADIGO Conference Bridge: EN: 1638 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann Main Wiki Space: https://community.icann.org/x/FpfbAQ If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

At-Large Technology Taskforce Call
by ICANN Policy Calendar May 5, 2020

May 5, 2020

**If you require a dial-out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number.** Dear All, The next At-Large Technology Taskforce Call is scheduled for Monday, 18 January 2020 at 15:00 UTC for 60 mins. For other times: https://tinyurl.com/yanjfbvj The agenda (to be updated) and call details can be found at: https://community.icann.org/x/PYEEC Zoom Room: https://icann.zoom.us/j/95126240492 / Meeting ID: 951 2624 0492 Password: 8a012359J! ADIGO Conference Bridge: EN: 1638 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann Main Wiki Space: https://community.icann.org/x/FpfbAQ If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

WEBINAR INVITE: Understanding DNS over TLS (DoT) and DNS over HTTPS (DoH)
by Evin Erdogdu April 26, 2020

April 26, 2020

?Dear TTF and CPWG Members, Sharing the below invite regarding DoT and DoH technology. The technology was noted as a topic of interest for At-Large during ICANN67. Please do attend and share with those who may be interested. Best, Evin ________________________________ From: NA-Discuss <na-discuss-bounces(a)atlarge-lists.icann.org> on behalf of Joe Catapano <joe.catapano(a)icann.org> Sent: Friday, April 24, 2020 2:36 PM To: NARALO Subject: [NA-Discuss] WEBINAR INVITE: Understanding DNS over TLS (DoT) and DNS over HTTPS (DoH) Dear stakeholders, I wanted to alert you to a webinar being hosted by ICANN's Middle East team. Full details are below, the time is friendly to North America. If you have any questions, you can ask me or Fahd Batayneh, who is copied here. Have a good weekend, Joe You are cordially invited to attend a webinar entitled "Understanding DNS over TLS (DoT) and DNS over HTTPS (DoH)". The webinar takes place on Monday 27 April 2020 at 13.00 - 14.00 UTC. Kindly register your interest to attend the webinar here >> https://icann.zoom.us/meeting/register/tJYofu6qpzIjGdZxe8nKSLUUBa20siKttOAy [icann.zoom.us]<https://urldefense.proofpoint.com/v2/url?u=https-3A__icann.zoom.us_meeting_…>. Once you register, you will receive instructions on how to join the call. More on the agenda and other details here >> https://features.icann.org/event/icann-speaking-events/webinar-middle-east-… [features.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__features.icann.org_eve…>. -- Joseph Catapano Manager, Stakeholder Engagement, North America ICANN Direct: +1.202.249.7544 Mobile: +1.202.550.6018 Skype: joe.catapano.icann Twitter: @JosephCatapano

2 1

ZOOM 90-Day Security Plan Progress Report: April 15
by Alfredo Calderon-Serrano April 20, 2020

April 20, 2020

https://blog.zoom.us/wordpress/2020/04/15/90-day-security-plan-progress-rep… The newly released Security icon in the toolbar provides Zoom Meetings hosts and co-hosts with one-click access to a number of existing Zoom security features, including Lock Meeting and Enable the Waiting Room. Changes to Zoom’s default settings We’ve made changes to Zoom’s default meeting settings to improve security before a meeting starts. Both meeting passwords and Waiting Rooms are enabled by default for our free Basic users and single Pro users, while those in our K-12 education program need a password to join a meeting. Waiting Rooms also are on by default for those K-12 users. Enhanced meeting password complexity Account owners and admins can now configure minimum meeting password requirements to include numbers, letters, and special characters, or allow only numeric passwords. Free Basic account users will now use alphanumeric passwords by default instead of numeric passwords. Changes to data center routing Starting April 18, account admins will have the ability to choose whether or not their data is routed through specific data center regions, giving users more control of their interactions with Zoom’s global network. Learn more about the process in our blog post. Bug bounty program with Katie Moussouris of Luta Security Zoom will be working with Luta Security to reboot our bug bounty program. Luta Security was founded by Katie Moussouris, who created some of the most important vulnerability programs still running today. She started Microsoft Vulnerability Research and Symantec Vulnerability Research, and also started Microsoft’s and the Pentagon’s bug bounty programs. Luta Security will be assessing Zoom’s program holistically with a 90-day “get well” plan, which will cover all internal vulnerability handling processes. Read more in Katie’s blog post. Alfredo Calderón Sent from my iPad

8 10

Re: [technology taskforce] ZOOM 90-Day Security Plan Progress Report: April 15
by Alan Greenberg April 18, 2020

April 18, 2020

Daniel, you have been involved in technology long enough to know that there are never any real guarantees. All we can do is identify systems that SEEM to be good, and then do our best to avoid/bypass/fix problems as they are discovered. As Olivier implies, the folks at Zoom seem to be taking this seriously, and that is a MAJOR asset. I recall many decades ago (in a universe far far away?) a new product was delivered (it was a text editor). Within weeks of its delivery, there we an enormous number of bugs reported. Management almost killed the product before they were made to realize that bugs are normal in any new product (even one like this editor which had been subject to a large amount of pre-shipment usage and testing). What was unique in this case was that the product was SO GOOD (both powerful and easy to use) compared to other editors out there, that it was quickly adopted by many users and was being subject to unusually heavy use so soon after shipment. And bugs were discovered (and incidentally fixed in record time by the development team). I think that what we are seeing with Zoom at the moment is quite comparable. Alan At 2020-04-18 05:33 PM, DANIEL NANGHAKA wrote: >Are we still safe with zoom amidst all the flaws that have been identified? > >There was a time when a simple flaw was discover >during an ICANN meeting, and Adobe Connect was >shutdown. Is there an analysis of the effects. >What is the security guarantee that we have on zoom? > >Daniel KN >á§ > >On Sat, 18 Apr 2020 at 17:17, Alfredo >Calderon-Serrano via ttf ><<mailto:ttf@atlarge-lists.icann.org>ttf(a)atlarge-lists.icann.org> wrote: ><https://blog.zoom.us/wordpress/2020/04/15/90-day-security-plan-progress-rep…>https://blog.zoom.us/wordpress/2020/04/15/90-day-security-plan-progress-rep… > >[] > > >[] > > >The newly released ><https://blog.zoom.us/wordpress/2020/04/08/zoom-product-updates-new-security…>Security >icon in the toolbar provides Zoom Meetings hosts >and co-hosts with one-click access to a number >of existing Zoom security features, including >Lock Meeting and Enable the Waiting Room. > >Changes to Zoomâs default settings > >Weâve made changes to Zoomâs default meeting >settings to improve security before a meeting >starts. Both meeting passwords and Waiting Rooms >are enabled by default for our free Basic users >and single Pro users, while those in our K-12 >education program need a password to join a >meeting. Waiting Rooms also are on by default for those K-12 users. > >Enhanced meeting password complexity > >Account owners and admins can now configure >minimum meeting password requirements to include >numbers, letters, and special characters, or >allow only numeric passwords. Free Basic account >users will now use alphanumeric passwords by >default instead of numeric passwords. > >Changes to data center routing > >Starting April 18, account admins will have the >ability to choose whether or not their data is >routed through specific data center regions, >giving users more control of their interactions >with Zoomâs global network. Learn more about >the process in our ><https://blog.zoom.us/wordpress/2020/04/13/coming-april-18-control-your-zoom…>blog >post. > >Bug bounty program with Katie Moussouris of Luta Security > >Zoom will be working with Luta Security to >reboot our bug bounty program. Luta Security was >founded by Katie Moussouris, who created some of >the most important vulnerability programs still >running today. She started Microsoft >Vulnerability Research and Symantec >Vulnerability Research, and also started >Microsoftâs and the Pentagonâs bug bounty >programs. Luta Security will be assessing >Zoomâs program holistically with a 90-day >âget wellâ plan, which will cover all >internal vulnerability handling processes. Read >more in Katieâs ><https://www.lutasecurity.com/post/luta-security-and-zoom>blog post. > >Alfredo CalderÃ³n > >Sent from my iPad >_______________________________________________ >ttf mailing list ><mailto:ttf@atlarge-lists.icann.org>ttf(a)atlarge-lists.icann.org >https://mm.icann.org/mailman/listinfo/ttf > >_______________________________________________ >By submitting your personal data, you consent to >the processing of your personal data for >purposes of subscribing to this mailing list >accordance with the ICANN Privacy Policy >(<https://www.icann.org/privacy/policy>https://www.icann.org/privacy/policy) >and the website Terms of Service >(<https://www.icann.org/privacy/tos>https://www.icann.org/privacy/tos) >You can visit the Mailman link above to change >your membership status or configuration, >including unsubscribing, setting digest-style >delivery or disabling delivery altogether (e.g., for a vacation), and so on. > >Content-Type: image/png; name="past-week.png" >Content-Disposition: inline; filename="past-week.png" >Content-ID: <1718f340ff6c282b48a1> >X-Attachment-Id: 1718f340ff6c282b48a1 > >Content-Type: image/png; name="next-week.png" >Content-Disposition: inline; filename="next-week.png" >Content-ID: <1718f340ff6ecbabac92> >X-Attachment-Id: 1718f340ff6ecbabac92 > > >_______________________________________________ >ttf mailing list >ttf(a)atlarge-lists.icann.org >https://mm.icann.org/mailman/listinfo/ttf > >_______________________________________________ >By submitting your personal data, you consent to >the processing of your personal data for >purposes of subscribing to this mailing list >accordance with the ICANN Privacy Policy >(https://www.icann.org/privacy/policy) and the >website Terms of Service >(https://www.icann.org/privacy/tos) You can >visit the Mailman link above to change your >membership status or configuration, including >unsubscribing, setting digest-style delivery or >disabling delivery altogether (e.g., for a vacation), and so on.

1 0