CircleID

Comments

Evaluating the Growth of Internet Traffic

• Comment posted Nov 09, 2011 7:41 pm PST — by jeroen
  Is the US walking behind or something? :) Just checking http://www.ams-ix.net/statistics/ that is an average of 750Gigs/s in+out (thus depends if one combines that for more effect); that would thus be a factor 20 of Comcasts's "CRAN" things or 7…

Why Brands Need Their Own TLD - The Mulberry-Sale Site that Scammed Me

• Comment posted Oct 18, 2011 9:12 am PDT — by jeroen
  Even if the 'price' for a TLD will be high, it does not guarantee a thing. The organisations that are in place have already gotten their .com + .cc-tld variants that they need. Matchbox might want to have .mb and…

• Comment posted Oct 18, 2011 8:21 am PDT — by jeroen
  Is that .mb, .mulb, mulberry .mulbarry-bags, .mluberry or .mulberry-sale? Like normal domain names, one can do typo's quite fine when on the TLD level. The only way you are going to get what you are likely looking for is to…

How to Abolish the DNS Hierarchy... But It's a Bad Idea

• Comment posted Jul 13, 2011 8:05 am PDT — by jeroen
  .onion already uses a similar system where they put the hash of the Tor node in DNS and voila, you can also use that to cryptographically know you are talking to at least somebody who was able to come up…

Project dotVinum for .WINE Domain Names

• Comment posted Mar 15, 2011 4:07 pm PDT — by jeroen
  > At least, with a .wine domain name, he will get a better chance to be categorized in the wine results As the various search engines really can't care about the TLD of a website (and that is the only…

• Comment posted Mar 15, 2011 7:08 am PDT — by jeroen
  You register a random domain name, arrange appropriate links and guess what, nobody has to guess what domain name you have, it could be in any TLD. Your "Prohibited Questions" list exactly show why more TLDs are completely ridiculous. If…

IP Blocklists, Email, and IPv6

• Comment posted Mar 02, 2011 8:09 pm PST — by jeroen
  First you block per /128 If there are more than N blocks per /64, you block the /64 (LAN) If there are more than N blocks per /56, you block the /56 (Residential Site) If there are more than N…

The Sad State of WHOIS, and Why Criminals Love It

• Comment posted May 16, 2010 1:50 pm PDT — by jeroen
  Even if you would require that valid information is present(*) and accurate, setting up a fake company with all the official paperwork is too easy. As such, the cost of verification is too high and impossible anyway. As such thus…

• Comment posted May 14, 2010 9:39 am PDT — by jeroen
  It does not matter. For WHOIS there should simply be two option: 1) I am providing proper details as I want to be contacted 2) I don't want to be contacted This, as setting up fake companies in various countries…

Berlin the Latest New TLD Battleground?

• Comment posted Dec 21, 2009 11:29 pm PST — by jeroen
  The whole DotBerlin thing is quite simple: .berlin wants to exist because they cannot get their domain under .berlin.de None of those proposals is 'supported' by the city of Berlin (lets assume they mean the one in Germany) as the…

Accepting New Top-Level Domains As Suffix-Less Cyber Brands

• Comment posted Aug 18, 2009 3:39 pm PDT — by jeroen
  It is not meant to "solve" anything except the deep pockets of several people. Except for the domain parking (which IMHO should simply be forbidden, but then again, how does one argue that you have "real content" and they don't,…

• Comment posted Aug 04, 2009 1:56 pm PDT — by jeroen
  > However at 200K there will be very minimum squatting unless the new holders of > gtld create their own liberal domain selling policies. ibm.casino or ibm.geo etc It looks a lot like you want all these companies to create…

• Comment posted Aug 02, 2009 12:12 pm PDT — by jeroen
  ibm.jobs in DNS points to redirect.www.ibm.com and indeed, that just goes to http://www.ibm.com/us/en/ which is very useful if you want to find a job, google(ibm jobs) = www.ibm.com/employment/ which is much more appropriate and quicker, than trying to guess that…

• Comment posted Aug 02, 2009 9:33 am PDT — by jeroen
  > Say, you want to go to a hotel in Delhi, think Hilton and enter Delhi dot Hilton, Do you mean Delhi, or New Delhi? Is that New Delhi in India, or the one in the US? And then I…

10,000 Domain Names Pre-Ordered Daily for Likely New Top-Level Domains

• Comment posted May 22, 2009 6:34 pm PDT — by jeroen
  > there is a lively market emerging that we would all be wrong to ignore. Thank you for confirming that it is all about the money.

• Comment posted May 22, 2009 6:09 pm PDT — by jeroen
  > We are trying to establish a datapoint You are trying to come up with false data by gathering it through the wrong way. Great! :) There really is no reason for more gTLDs except for domain sellers to be…

• Comment posted May 22, 2009 4:04 pm PDT — by jeroen
  Wow, what a surprise, the domain grabbing companies are willing to pay nothing for loads of domains!!! Now if this 'study' was one where the companies had to pay say 50 US/year for the domain AND had to prove that…

".Pol", a ".Com" for Political Candidates

• Comment posted May 06, 2009 12:00 pm PDT — by jeroen
  I am !!!SPECIAL!!!, as such I need my own TLD. See that that can't work?! Just keep these problems under your own .us domain please. Thank you! Next! Same with IDN for that matter, if there is a need for…

• Comment posted May 02, 2009 9:06 pm PDT — by jeroen
  Reading the other comments, and also realizing that it actually only pertains to a 'website', and not actually for doing communications of any kind (eg they are not going to do email/SIP/FTP/whatever other protocol), just create a "MySpace for Politicians"…

• Comment posted May 02, 2009 1:52 pm PDT — by jeroen
  It looks to me that this is an American (USA that is) problem, as such: *.pol.us Problem solved, and doesn't need to bother the rest of the world. Next!

HTTPS Web Hijacking Goes From Theory to Practice

• Comment posted Feb 24, 2009 4:09 pm PST — by jeroen
  Previous post: http://www.circleid.com/posts/20090105_problem_with_https_ssl_md5/ and in the mean time nobody cares about it at all anymore anyway: https://media.blackhat.com/bh-dc-09/video/Marlinspike/blackhat-dc-09-marlinspike-slide.mov

Dublin.tel Grabbed by Lantec

• Comment posted Feb 02, 2009 12:05 pm PST — by jeroen
  From that text "Imagine if you could add micheleneylon.tel to your address book once and never have to update it manually ever again." Well, unless i forget to pay the bill or there is some freak accident, I will never…

• Comment posted Feb 01, 2009 5:48 pm PST — by jeroen
  or..... Dublin City should be going simply for dublin.ie, which they have and which is ranked #3 in Google. Why would they also have to go for Dublin.* ? .tel might be an 'odd' TLD of course, but then still,…

The Problem With HTTPS SSL Runs Deeper Than MD5

• Comment posted Jan 07, 2009 8:21 am PST — by jeroen
  > You keep coming back to the malware issue but as I keep saying, > it's already game over if you have malware. So the malware issue > is moot in this discussion Thus you must simply accept that a…

• Comment posted Jan 07, 2009 8:11 am PST — by jeroen
  > So why would it be wrong to add a DNS mechanism to this to offer some centralized control? Because without *FULL* DNSSEC, the DNS is just another way to inject more false details. As such it doesn't help. "Caching…

• Comment posted Jan 06, 2009 11:24 pm PST — by jeroen
  > ...it will insist on it perpetually until someone manually deletes or modifies the list… Take a small guess what malware will do for you, totally automatically and free ;) > ...I never advertised the solution as full proof. If…

• Comment posted Jan 06, 2009 10:19 pm PST — by jeroen
  Oh and as we are actually mostly mentioning banks, check http://video.google.com/videoplay?docid=3041861094296331549&hl=en to see a lot more ways to actually get around it all ;)

• Comment posted Jan 06, 2009 10:16 pm PST — by jeroen
  > What I'm trying to say is that in the case of DNS hijacking > (either DNS poisoning or fake wireless hotspot), you won't be fooled by a > fake bank.com when you're trying to go to the real bank.com.…

• Comment posted Jan 06, 2009 8:19 pm PST — by jeroen
  Why is that not a proper DNS name? Mmistypes and fake websites is how phishers work, hacking into "hotspots" really is not worth the effort (unless you get to hack up a big ISP network, but hey, why not go…

• Comment posted Jan 06, 2009 1:48 pm PST — by jeroen
  And how does a normal user know that https://www.bank.com != https://www.b4nk.com !? (and better fake names with the nice IDN names of course, or just https://www.thebank.com) Both will have a valid security certificate, correctly received from a very trusted CA,…

What If I Were Wrong About Edge-Caching?

• Comment posted Dec 17, 2008 12:11 am PST — by jeroen
  Wow, that like sounds exactly what Akamai and other such organizations have been doing for years already. They simply say to an ISP "can we hang up a box, we give you money/it saves you transit/peering costs" et voila, the…

Is the New ".Tel" Domain More than Just a Pretty Web Interface to DNS?

• Comment posted Dec 04, 2008 8:59 am PST — by jeroen
  I am really wondering why I can't just store that info under example.com; unless those applications only want to look inside .tel of course, and they just want to collect more structured data. Also there is this problem of 'privacy'…

China's IP Address Resources 80% Used Up

• Comment posted Sep 23, 2008 9:05 am PDT — by jeroen
  That is strange, as China is just a part of the world and as such ISPs there can just, like every other organisation, request IP addresses from their RIR's, in their case APNIC, and APNIC gets it from the same…

IGF Meeting Blacklisted

• Comment posted Sep 22, 2008 8:07 am PDT — by jeroen
  The solution for this problem, if you are using postfix but other MTA's might have similar functionality: Have postfix with PCRE support, then add to main.cf something like: header_checks = pcre:/etc/postfix/headers.pcre And in the headers.pcre something like that: /^Received:.*\(192.168.19.*authenticated by…

• Comment posted Sep 19, 2008 9:01 am PDT — by jeroen
  No I meant it exactly how I meant it: - check IP against BL, if it is in there assign it a white-score or a black-score - do all your other tests, add it to the score - if score…

• Comment posted Sep 19, 2008 8:51 am PDT — by jeroen
  In IPv6 blocking/listing will happen on the /48 level, then /40 and then /32 to get rid of the whole ISP. /48 is the new /24 ;)

• Comment posted Sep 19, 2008 8:50 am PDT — by jeroen
  Then that spam filtering software is bogus. First of all blacklists should only be used for scoring, next to that, those headers should _NEVER_ be trusted. Lastly, people should use their outbound mailer over submission. I've never had an issue…

• Comment posted Sep 18, 2008 3:00 pm PDT — by jeroen
  One should not send outbound SMTP directly from their host. That is how spam-bots work, not how real people should be doing email. Actually people who are running "Open Wireless" networks and similar systems should be blocking TCP port 25…

Google Further Expanding the Undersea Communications Cable System

• Comment posted Aug 27, 2008 7:46 am PDT — by jeroen
  You mean that rumor that they are building an IX, another shared coop with other companies.

• Comment posted Aug 26, 2008 5:04 pm PDT — by jeroen
  "With a few exceptions, SJC consortium and Unity are reported to have the same members which include Google, Bharti, SingTel, KDDI and Global Transit." Thus clearly not only Google. People do hopefully realize that the other players are big transit…

IPv6 Considered a Problem by Some Users

• Comment posted Aug 20, 2008 6:58 pm PDT — by jeroen
  AICCU Binary Mac OS X i386 binary can be downloaded from http://www.sixxs.net/archive/sixxs/aiccu/mac/aiccu-mac.exe, you will still need to put a config file in /etc/aiccu.conf (see http://www.sixxs.net/tools/aiccu/ for an example) and install TUN/TAP driver if you want AYIYA though. This does avoid…

• Comment posted Aug 20, 2008 6:21 pm PDT — by jeroen
  Yes, I am very aware that the packaging of AICCU has quite some open holes which need to be resolved for quite a number of users to make it much easier in use. Windows is still the largest user base…

• Comment posted Aug 09, 2008 6:59 am PDT — by jeroen
  IMHO 6to4 is a pain, as the setups of these are not verified and nobody actually using IPv6 checks if they are working properly. As there are so many things that can go wrong with 6to4 (both the IPv4 and…

• Comment posted Aug 09, 2008 6:54 am PDT — by jeroen
  In time, just like you upgraded from your good old 28.8k modem to a 56k one and then to DSL, you will be upgrading to something that supports IPv6. Most likely not today, but in time you will. As for…

• Comment posted Aug 08, 2008 10:54 am PDT — by jeroen
  The user can use a different DNS server as a caching resolver. OpenDNS for instance works like a charm. Thus people having DNS issues (because of IPv6 lookups) should definitely change their DNS servers. Reporting the problem to the owner…

• Comment posted Aug 08, 2008 8:01 am PDT — by jeroen
  The problem is indeed with DNS, but not with the connectivity ;) From the small write-up I did on wikipedia to stop that FUD also from spreading there: http://en.wikipedia.org/wiki/IPv6#Disabling_IPv6_because_of_incompatibilities 8<------------------------------------------------------------------- Disabling IPv6 because of incompatibilities Various forums on the Internet…

Google's Cerf Offers Alternate Strategy to Metered Broadband Billing

• Comment posted Aug 05, 2008 11:51 am PDT — by jeroen
  That is not the problem at hand here. The real problem is that the Provider is selling a service and stating "it is 50mbits" and it actually can only do 10mbit if actually used. The problem thus is that they…

• Comment posted Aug 05, 2008 11:43 am PDT — by jeroen
  And actually, the Australian system is pretty good, as you pay for what you get. The problem for .au is though that you don't have so much transit links down under to the rest of the world, and the links…

• Comment posted Aug 05, 2008 11:37 am PDT — by jeroen
  Cable == shared medium then onto ISP network DSL == own copper to the DSLAM (typically the closest phone exchange) then onto ISP network This is why P2P 'hurts' for Cable providers, both upstream and downstream for the whole neighborhood…

• Comment posted Aug 05, 2008 9:41 am PDT — by jeroen
  The main reason why access ISP don't want to go anywhere in this area is simply because they are selling oversubscribed services. When you now get a 20mbit service, you are actually only getting a 1mbit version, in the hope…

Proposal for .sport, a New Top-Level Domain

• Comment posted Jun 17, 2008 11:15 pm PDT — by jeroen
  This whole "idea" of extra TLD's has only one really useful thing: earning money from some virtual bits. There is absolutely no advantage for the end-user to have http://www.football.com or http://www.football.sport or http://www.soccer.sport (which one is the one you want…

CERN's Grid 10,000 Times Faster than Broadband

• Comment posted Apr 07, 2008 8:03 pm PDT — by jeroen
  Wow, due note that the article in question doesn't match up with reality at all and the 'journalist' who wrote it should probably go to school and then maybe try to learn something about networks, The Internet, The World Wide…

In Praise of OpenDNS and a Wii Factoid

• Comment posted Apr 05, 2008 11:54 pm PDT — by jeroen
  As I have a Wii, I finally checked how much "IPv6" is actually in there. The only thing I could find it doing though was that it is doing an AAAA query, though after an A query when going to…

Are Domain Name Registrars Ready for IPv6?

• Comment posted Apr 04, 2008 6:48 pm PDT — by jeroen
  We have been trying to gather all IPv6-glue able and also the registrars which don't have it yet and possibly with their status of when/if it does come at: http://www.sixxs.net/faq/dns/?faq=ipv6glue Of course, as stated on the page, updates are always…

IPv6 Over Satellite: Pie in the Sky?

• Comment posted Feb 28, 2008 9:47 am PST — by jeroen
  IABG press report from 2004: "IABG is pushing the new Internet standard "IPv6 via Satellite"" See: http://www.iabg.de/presse/... That is 4 years ago. It exists and is there and is being used :)

IPv6: Do as I Say or Do as I Do?

• Comment posted Feb 11, 2008 9:37 am PST — by jeroen
  Actually there is a killer application and you mentioned it already a couple of times in your application: VoIP. Or did you get that nice VoIP hardware box working behind a NAT!? ;) Yes, with tricks like having a local…

ICANN CEO: "High Politics" Fueling IGF Debates

• Comment posted Nov 13, 2007 8:01 pm PST — by jeroen
  There is a very simple way for doing TLD's in other names than English. First off all all the software needs to support IDN anyway. They thus convert what is written on screen into punycode. Punycode is actually just ASCII.…

Study Shows German Internet Users Prefer Memorable Domain Names for Cities and Regions

• Comment posted Nov 02, 2007 9:27 pm PDT — by jeroen
  Short summary: Please stay out of the roots if you want something to be done in GERMANY (.de) instead of the WORLD (.) Technical solution for the people requiring this behaviour: echo "search de" >>/etc/resolv.conf as for the text: Oh…

In Praise of OpenDNS and a Wii Factoid

• Comment posted Oct 31, 2007 2:06 am PDT — by jeroen
  David A. Ulevitch said: > You should be lobbying for us to setup a POP near you and to support the features you need. As 'near me' is quite a broad concept (I am moving around between Dublin.ie, Gouda.nl and…

Getting Rid of Whois

• Comment posted Oct 31, 2007 1:45 am PDT — by jeroen
  With the whois for domains (thus not IP space) only containing "DomainsByProxy" and other similar setups and also a lot of bogus information, not even mentioning the fact that a couple of registries don't even allow one to properly add…

In Praise of OpenDNS and a Wii Factoid

• Comment posted Oct 23, 2007 11:14 pm PDT — by jeroen
  That 2012 date is mentioned in an individual draft which is not even remotely going near the RFC queue. That is like me stating hear and now that you should have had IPv6 a hundred years ago… Anything can be…

Local ".city" TLDs as an Opportunity for City Portals

• Comment posted Oct 05, 2007 9:55 am PDT — by jeroen
  Gee and what is the difference between www.tax.city.tld and www.tax.city? The only difference I see is that www.tax.city can be the tax site for that city in the US or for that same city in Germany, The Netherlands, Switzerland, China…

New Paper Discusses Global City TLD's in the Public Interest

• Comment posted Sep 11, 2007 9:21 am PDT — by jeroen
  Dirk Krischenowski said: Dear Jeroen, there's a clear and reasonable answer on the question why a City.xy is not as sexy as a .city. We had a lot of talks with city representatives, not only in Berlin. Is that your…

ICANN Tests IDN TLD (Live!)

• Comment posted Sep 08, 2007 8:53 pm PDT — by jeroen
  William Tan said: The two paragraphs above almost contradict each other; if people don't type in DNS names, there's probably no need to internationalize it. Simple question: are people going to type punycode, yes or no? If no, then why…

More on WHOIS Privacy

• Comment posted Sep 08, 2007 8:35 pm PDT — by jeroen
  John Berryhill said: And there is EXACTLY where the problem is: it’s all about the money. Well, some of us are not independently wealthy, and must work for a living. Like somebody in the 'western countries' will notice 50EUR/USD a…

New Paper Discusses Global City TLD's in the Public Interest

• Comment posted Sep 07, 2007 1:46 am PDT — by jeroen
  And the main question which is not answered is: why is berlin.de. worse than berlin. Or did the people who are cooking this up forget about this thing called hierarchy because of the flashing dollar/euro signs in their eyes?

More on WHOIS Privacy

• Comment posted Sep 06, 2007 7:01 pm PDT — by jeroen
  John Berryhill said: Hey, let's penalize the registrars if 4 out of a million registrants provide false contact data.... And there is EXACTLY where the problem is: it's all about the money. As long as registrars can get away with…

ICANN Tests IDN TLD (Live!)

• Comment posted Sep 06, 2007 6:46 pm PDT — by jeroen
  It's just probably me, but I really don't understand WHY this has to be inserted into the Root Zone (.) ? Delegations for .cn/.th/.<every other country> has already been made for a long long time, and it seems that this…