Cyber Crime: An Economic Problem

During ISOI 4 (hosted by Yahoo! in Sunnyvale, California) whenever someone made mention of RBN (the notoriously malicious and illegal bulletproof hosting operation, the Russian Business Network) folks would immediately point out that an operation just as bad was just "next door" (40 miles down the road?), working undisturbed for years. They spoke of Atrivo (also known as Intercage). The American RBN, if you like... more»

Unreasonable ccTLD Registry Price Increases!

It highly concerns me when domain registries controlling a certain Top-Level Domain (TLD) raise the wholesale prices they charge to registrars (domain retailers) without consultation to domain registrants (domain buyers). When this happens, all the registrars will need to pay more to the registry for every domain which they register or renew for a customer. They will in turn raise their prices to cover the additional cost to them. Transferring the domains to a different registrar will not help, as all the registrars for that TLD will be forced to raise prices as they all have to pay more to the registry. Don't think it hasn't happened before? more»

Domain Name Lessons from Napster

I first outline a brief history of free file-sharing technology, then draw some general and domain name lessons, then outline the what, how, and why that make your activism effective and necessary... The domain name industry is decentralized and atomic in that anyone from anywhere in the world can register a domain name, keep the ownershp name and address private, and host it from a country where the U.S. and European legal systems don't apply. Thus, legal action will only drive domain owners further underground. more»

New gTLDs String Theory for Bidders

The following is most of the generic Top-Level Domain (gTLD) strings applied for in the 2000 and 2003 applications. Some are two, and even one character ASCII strings. Some have since been approved, or disapproved (which of course means nothing in the 2008 round). It is a universe of 180 strings. Enjoy. more»

Chrome: Getting Microsoft's Goat

Historically there has been nothing which gets Microsoft's attention as fast as a platform for applications which threatens Windows dominance. Google's Chrome is obviously such a platform; Google can afford to challenge Microsoft; it's healthy for innovation that it does. Can Microsoft still rise to the challenge? Way back when I was at Microsoft -- 1991 to 1994, Lotus Notes was the threat du jour... Since I was responsible for the development of what was to become Microsoft Exchange, I was in charge of that war for a while... more»

New gTLDs Questions Not Answered: Which Kind of Auction?

I was expecting something that would discuss the unique properties, if any, of the domain name market, and the types of inventory theoretically available to allocate, and the expected outcomes for the various types of auctions, and some showing that for some desired policy goals, whether greatest gain to seller or lowest loss to buyer, or something entirely different, the expected outcomes. This would assist the better informed, bottom-up, stakeholder-driven, consensus policy making. Is the domain name market indistinguishable from the spectrum market? If name spaces are distinguishable from units of spectrum... more»

Copycat Web Malware Exploitation Kits are Faddish

or the cheap cybercriminals not wanting to invest a couple of thousand dollars into purchasing a cutting edge web malware exploitation kit with all the related and royalty free updates coming with it (a pirated copy of which they could ironically obtain several moths later), there are always the copycat malware kits... Taking into consideration the proprietary nature of some of the kits, the business model of malware kits was mostly relying on their exclusive nature next to the number, and diversity of the exploits included in order to improve the infection rate. This simplistic assumption on behalf of the coders totally ignored the possibility of their kits leaking to the general public... more»

Do "brandsucks.com" Names Really Have a "Destructive Potential"?

"'Sucks.com is the rightmost anchor of nearly 20,000 domains registered today. Two thousand domains have 'stinks.com' on the right and about the same number of domains begin with the term 'boycott'," write the authors of the recently released paper The Power of Internet Gripe Sites. According to their (interesting) study, 35% of the "brandsucks" domains are owned by the brand while 45% are available for registration. They thus advise brand owners "to take a serious look at the traffic that these names garner and the kind of unique marketing opportunity they can afford." ...I do not fully agree with their conclusions... more»

New Geographical Top-Level Domains and Auctions

I was surprised by ICANN's "Economic Case for Auctions in New gTLDs" paper especially with view to the latest presentation on the new generic Top-Level Domain (gTLD) implementation process in Paris. That Paris presentation highlighted the protection of community interests such as religious organisations, geographically based communities or indigenous groups and suggested a preference of bona fide community-based applicants against pure generic applications for the same string. Contrary to this the only text passage in the current paper where ICANN considered the community-based applicants is "a 25% bidding credit could be offered to community-based bidders whose community is located primarily in least-developed countries". This reminds me of the discussion on discounts for HIV medicine... more»

Public Sharing and a New Strategy in Fighting Cyber Crime

A couple of years ago I started a mailing list where folks not necessarily involved with the vetted, trusted, closed and snobbish circles of cyber crime fighting (some founded by me) could share information and be informed of threats. In this post I explore some of the history behind information sharing online, and explain the concept behind the botnets mailing list... we may not be able to always share our resources, but it is time to change the tide of the cyber crime war, and strategize. One of the strategies we need to use, or at least try, is public information sharing of "lesser evils" already in the public domain. more»