<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:admin="http://webns.net/mvcb/"
	xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
	<channel>
		<title>Garth Bruen &#45; CircleID</title>
		<link>http://www.circleid.com/</link>
		<description>Postings from Garth Bruen on CircleID</description>
		<dc:language>en</dc:language>
		<dc:rights>Copyright 2012, unless where otherwise noted.</dc:rights>
		<dc:date>2011-04-04T14:46:00-08:00</dc:date>
		

		
		<item>
			<title> Garth Bruen Discussing Whois, DNSSEC and Domain Security (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/garth_bruen_discussing_whois_dnssec_and_domain_security</guid>
			<link>http://www.circleid.com/posts/garth_bruen_discussing_whois_dnssec_and_domain_security</link>
			<description><![CDATA[NameSmash <a href="http://www.namesmash.com/?p=659">has interviewed</a> <a href="http://www.circleid.com/members/3296">Garth Bruen</a>, Internet security expert and creator of Knujon, on some key issues under discussion during the recent ICANN meetings in San Francisco. Topics include Whois, DNS Security Extensions (DNSSEC) and generic Top-Level Domains (gTLDs) -- issues of critical importance particularly with ICANN's expected roll-out of thousands of new gTLDs in the coming years. <a href="http://www.circleid.com/posts/garth_bruen_discussing_whois_dnssec_and_domain_security">More...</a>]]></description>
			<dc:date>2011-04-04T14:46:00-08:00</dc:date>
		</item>
		
		<item>
			<title> KnujOn Releases New Security, Abuse and Compliance Report (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20110315_knujon_releases_new_security_abuse_and_compliance_report</guid>
			<link>http://www.circleid.com/posts/20110315_knujon_releases_new_security_abuse_and_compliance_report</link>
			<description><![CDATA[We have just issued a new report detailing abuse of the Domain Name System and Registrar contract compliance issues. The report specifically discusses several items including: Registrars with current legal issues; Illicit Use of Privacy-Proxy WHOIS Registration; A study on the contracted obligation for Bulk WHOIS Access; and more. <a href="http://www.circleid.com/posts/20110315_knujon_releases_new_security_abuse_and_compliance_report">More...</a>]]></description>
			<dc:date>2011-03-15T10:32:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Proxy-Privacy User Higher for Illicit Domains (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20110310_proxy_privacy_user_higher_for_illicit_domains</guid>
			<link>http://www.circleid.com/posts/20110310_proxy_privacy_user_higher_for_illicit_domains</link>
			<description><![CDATA[WHOIS issues are looming large for the ICANN meeting next week, starting with an all-day WHOIS Policy Review on Sunday (background). WHOIS is a subject that has been the recent topic of a number of issues including a debacle over potentially disclosing the identities of compliance reporters to spammers and criminal domainers. <a href="http://www.circleid.com/posts/20110310_proxy_privacy_user_higher_for_illicit_domains">More...</a>]]></description>
			<dc:date>2011-03-10T08:46:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Two Years Later Dozens of Registrars Still in the Shadows (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20101203_two_years_later_dozens_of_registrars_still_in_the_shadows</guid>
			<link>http://www.circleid.com/posts/20101203_two_years_later_dozens_of_registrars_still_in_the_shadows</link>
			<description><![CDATA[In June of 2008 KnujOn reported that 70 Registrars did not have a business address listed in the InterNIC Registrar Directory. Only after reporting a month later that little had changed did ICANN perform a mass update of the directory. On further inspection we found many of the newly disclosed addresses were phantom locations, false addresses, and PO boxes. <a href="http://www.circleid.com/posts/20101203_two_years_later_dozens_of_registrars_still_in_the_shadows">More...</a>]]></description>
			<dc:date>2010-12-03T09:45:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Policy Failure Enables Mass Malware: Part II (ICANN and OnlineNIC) (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100929_policy_failure_enables_mass_malware_part_ii_icann_and_onlinenic</guid>
			<link>http://www.circleid.com/posts/20100929_policy_failure_enables_mass_malware_part_ii_icann_and_onlinenic</link>
			<description><![CDATA[On Wednesday September 29th at 1PM there will be a meeting in the Old Executive Building in Washington D.C. with Registries and domain Registrars to discuss illegal Internet sales of prescription drugs. ICANN was originally invited but declined because citing "inappropriateness" . One "U.S." Registrar who definitely will not be in attendance is OnlineNIC <a href="http://www.circleid.com/posts/20100929_policy_failure_enables_mass_malware_part_ii_icann_and_onlinenic">More...</a>]]></description>
			<dc:date>2010-09-29T09:05:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Policy Failure Enables Mass Malware: Part I (Rx-Partners/VIPMEDS) (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100922_policy_failure_enables_mass_malware_part_i_rx_partners_vipmeds</guid>
			<link>http://www.circleid.com/posts/20100922_policy_failure_enables_mass_malware_part_i_rx_partners_vipmeds</link>
			<description><![CDATA[This is the first in a series of releases that tie extensive code injection campaigns directly to policy failures within the Internet architecture. In this report we detail a PHP injection found on dozens of university and non-profit websites which redirected visitor's browsers to illicit pharmacies controlled by the VIPMEDS/Rx-Partners affiliate network. This is not a unique problem, however the pharmacy shop sites in question: HEALTHCUBE[DOT]US and GETPILLS[DOT]US should not even exist under the .US Nexus Policy. <a href="http://www.circleid.com/posts/20100922_policy_failure_enables_mass_malware_part_i_rx_partners_vipmeds">More...</a>]]></description>
			<dc:date>2010-09-22T20:08:00-08:00</dc:date>
		</item>
		
		<item>
			<title> GlavMed Hacks U.S. Government Website (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/glavmed_hacks_us_government_website</guid>
			<link>http://www.circleid.com/posts/glavmed_hacks_us_government_website</link>
			<description><![CDATA[<a href="http://www.circleid.com/members/3296/">Garth Bruen</a> writes: <a href="http://www.legitscript.com/blog/133">A report in LegitScript</a> takes a look at Russian rogue Internet pharmacy hacking US government website. "As rogue Internet pharmacy networks become more sophisticated, even US government websites are at risk. Today, we're taking a look at how a rogue Internet pharmacy linked to a criminal network operating out of Russia and Eastern Europe has hacked into a US government website. The Millennium Challenge Corporation, a US foreign aid agency, utilizes a ".gov" top-level domain, which is assigned to the control of the US government. Domain names ending in .gov are typically administered by the General Services Administration." <a href="http://www.circleid.com/posts/glavmed_hacks_us_government_website">More...</a>]]></description>
			<dc:date>2010-08-04T07:43:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Who Is Blocking WHOIS? Part 2 (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/who_is_blocking_whois_part_2</guid>
			<link>http://www.circleid.com/posts/who_is_blocking_whois_part_2</link>
			<description><![CDATA[We have just returned from the Brussels, Belgium ICANN meeting where we released our Registrar audit, the Internet "Doomsday Book." There are many topics covered in the report, but we wanted to follow up specifically on the issue of WHOIS access and add data to our previous column Who Is Blocking WHOIS? which covered Registrar denial of their contracted obligation to support Port 43 WHOIS access. <a href="http://www.circleid.com/posts/who_is_blocking_whois_part_2">More...</a>]]></description>
			<dc:date>2010-06-29T07:38:00-08:00</dc:date>
		</item>
		
		<item>
			<title> KnujOn Releases Internet "Doomsday Book" (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100621_knujon_releases_internet_doomsday_book</guid>
			<link>http://www.circleid.com/posts/20100621_knujon_releases_internet_doomsday_book</link>
			<description><![CDATA[Reporting from Brussels, Belgium. Since January KnujOn has been conducing its own audit of ICANN Registrar contractual compliance and illicit commerce within the generic Top-Level Domain (gTLD) space. Our findings are shocking. <a href="http://www.circleid.com/posts/20100621_knujon_releases_internet_doomsday_book">More...</a>]]></description>
			<dc:date>2010-06-21T08:10:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Who is Blocking WHOIS? (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/who_is_blocking_whois</guid>
			<link>http://www.circleid.com/posts/who_is_blocking_whois</link>
			<description><![CDATA[On April 16 ICANN issued a breach notice to Turkish Registrar Alantron for not consistently providing access to its WHOIS database via Port 43, a command-line query location that all Registrars are required to supply under conditions of their contract with ICANN under section 3.3.1. Four days later they issued a breach to Internet Group do Brazil for the same problem. ... The WHOIS record, as we all know, is a massive fraud with illicit parties filling records with bogus information and hiding behind anonymity. <a href="http://www.circleid.com/posts/who_is_blocking_whois">More...</a>]]></description>
			<dc:date>2010-06-07T08:10:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Registrar Abacus America is in Corporate Delinquency (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100601_registrar_abacus_america_is_in_corporate_delinquency</guid>
			<link>http://www.circleid.com/posts/20100601_registrar_abacus_america_is_in_corporate_delinquency</link>
			<description><![CDATA[KnujOn has retrieved a document indicating that the ICANN-Accredited Registrar <em>Abacus America</em> is in Corporate Delinquency in the state of Kansas. Kansas defines a company as Delinquent if "The business entity has not filed its annual report and fee by the due date." ... This incident is significant because Abacus America was cited by LegitScript and KnujOn for sponsoring an unlicensed pharmacy selling Schedule 3 substances... <a href="http://www.circleid.com/posts/20100601_registrar_abacus_america_is_in_corporate_delinquency">More...</a>]]></description>
			<dc:date>2010-06-01T07:47:00-08:00</dc:date>
		</item>
		
		<item>
			<title> When Registrars Look the Other Way, Drug-Dealers Get Paid (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100504_when_registrars_look_the_other_way_drug_dealers_get_paid</guid>
			<link>http://www.circleid.com/posts/20100504_when_registrars_look_the_other_way_drug_dealers_get_paid</link>
			<description><![CDATA[Since November of last year we have been discussing the problem of illicit and illegal online pharmacy support by ICANN-accredited Registrars. In several articles and direct contact with the Registrars we have tirelessly tried to convey the seriousness of this problem, many listened, some did not... With the background information already known, the case presented here is much more specific and concerns EvaPharmacy, which was until recently, the world's largest online criminal pharmacy network. <a href="http://www.circleid.com/posts/20100504_when_registrars_look_the_other_way_drug_dealers_get_paid">More...</a>]]></description>
			<dc:date>2010-05-04T09:05:00-08:00</dc:date>
		</item>
		
		<item>
			<title> MIT 2010 Spam Conference Starts Tomorrow... (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/20100324_mit_2010_spam_conference_starts_tomorrow</guid>
			<link>http://www.circleid.com/posts/20100324_mit_2010_spam_conference_starts_tomorrow</link>
			<description><![CDATA[In January we presented the glorious history of the MIT spam conference, today we present the schedule for the first day. Opening session will be from this author, Garth Buren with a topic entitled The Internet Doomsday Book, with details be released the same day as the presentation. Followed by Dr. Robert Bruen with a review of activities since the last MIT spam conference... <a href="http://www.circleid.com/posts/20100324_mit_2010_spam_conference_starts_tomorrow">More...</a>]]></description>
			<dc:date>2010-03-24T11:19:00-08:00</dc:date>
		</item>
		
		<item>
			<title> Should a Domain Name Registrar Run from a PO Box? (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/should_a_domain_name_registrar_run_from_a_po_box</guid>
			<link>http://www.circleid.com/posts/should_a_domain_name_registrar_run_from_a_po_box</link>
			<description><![CDATA[In 2008 KnujOn published a report indicating that 70 ICANN accredited Registrars had no publicly disclosed business location. The fundamental problem was one of community trust and consumer faith. Registrars extend their legitimacy to their domain customers who then transact and communicate with the public. <a href="http://www.circleid.com/posts/should_a_domain_name_registrar_run_from_a_po_box">More...</a>]]></description>
			<dc:date>2010-01-28T11:43:00-08:00</dc:date>
		</item>
		
		<item>
			<title> WHOIS Privacy Considered "Material Falsification" (Featured Blog)</title>
			<guid isPermaLink="true">http://www.circleid.com/posts/whois_privacy_considered_material_falsification</guid>
			<link>http://www.circleid.com/posts/whois_privacy_considered_material_falsification</link>
			<description><![CDATA[<a href="http://www.circleid.com/members/3296/">Garth Bruen</a> writes: Sedo reports that a "recent decision by the Court of Appeals for the 9th Circuit has determined that using WHOIS privacy on domains may be considered 'material falsification' under federal law. The defendants in US v. Kilbride (9th Cir., 2009) were convicted under the CAN-SPAM Act in a case that involved criminal charges of intentional email spamming. Enacted by the US Congress in 2003, the CAN-SPAM Act prohibits false or misleading transmission information, deceptive headers, and requires email solicitations to give an easy opt-out method and be labeled as an advertisement, including the senders physical post address. Commercial emails that use false or misleading headers, or violate other CAN-SPAM provisions, such as falsified registration information, are subject to fines of up to $11,000 for each unsolicited email sent." <a href="http://www.circleid.com/posts/whois_privacy_considered_material_falsification">More...</a>]]></description>
			<dc:date>2010-01-20T13:59:00-08:00</dc:date>
		</item>
		
	</channel>
</rss>
