<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">+1<div class=""><br class=""></div><div class="">John More<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Aug 23, 2019, at 11:08 AM, Evan Leibovitch <<a href="mailto:evan@telly.org" class="">evan@telly.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><div dir="ltr" class=""><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);">On Fri, 23 Aug 2019 at 10:59, Olivier MJ Crépin-Leblond <<a href="mailto:ocl@gih.com" class="">ocl@gih.com</a>> wrote:<br class=""></div></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div bgcolor="#FFFFFF" class="">With all the safeguards in use, that's really surprising.<br class=""></div></blockquote><div class=""><br class=""></div><div class=""><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);">Surprising? I would say scandalous.</div><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);">And it's an abuse vector that ought to concern At-Large far more than gTLD allocation.</div><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);"><br class=""></div><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);">Why doesn't ICANN have an appeals mechanism that allows maliciously redirected gTLDs to be returned to their original owner if malice can be demonstrated? Since we now now that "all the safeguards in use" can still be circumvented, why isn't there an after-the-fact remedy?</div><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);"><br class=""></div><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);">Yes, it could be messy. But certainly you must all realize that if this goes unchecked it only opens the door to a new form of ransomware along side "we've encrypted your site".<br class=""></div><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);"><br class=""></div><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);">- Evan</div><div class="gmail_default" style="font-family: tahoma, sans-serif; color: rgb(11, 83, 148);"></div><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""> </div><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div bgcolor="#FFFFFF" class="">Best,<br class=""><br class="">Olivier<br class=""><br class=""><div class="gmail-m_8354198719571272498moz-cite-prefix">On 23/08/2019 16:46, Dev Anand Teelucksingh wrote:<br class=""></div><blockquote type="cite" class=""><div dir="ltr" class=""><div class=""><a href="https://www.sonomanews.com/home/a1/9924307-181/hospital-website-hijacked-by-pirates?sba=AAS" target="_blank" class="">https://www.sonomanews.com/home/a1/9924307-181/hospital-website-hijacked-by-pirates?sba=AAS</a></div><div class=""><br class=""></div><div class=""><p class="gmail-m_8354198719571272498gmail-first-paragraph">Sonoma Valley Hospital’s website was hacked earlier this month, forcing the change of its URL and email addresses, hospital officials announced last week.</p><p class="">On Tuesday, Aug. 6, at 6:30 p.m., the hospital’s domain<span class="Apple-converted-space"> </span><a href="http://svh.com/" target="_blank" class="">svh.com</a><span class="Apple-converted-space"> </span>was “maliciously acquired,” said Celia Kruse de la Rosa, the hospital’s communications director.</p><p class="">Hospital CEO Kelly Mather added: “The hijacking of our domain name was surprising and we are finding out, not unusual for highly valuable three letter domain names such as ‘<a href="http://svh.com" class="">svh.com</a>.’”</p><p class="">When it became apparent that the hospital would not get the domain name returned, they “began migrating all internet connectivity to the new and current domain:<span class="Apple-converted-space"> </span><a href="http://sonomavalleyhospital.org/" target="_blank" class="">sonomavalleyhospital.org</a><span class="Apple-converted-space"> </span>(web) and @<a href="http://sonomavalleyhospital.org/" target="_blank" class="">sonomavalleyhospital.org</a><span class="Apple-converted-space"> </span>(email),” de la Rosa said.</p></div></div><br class=""><fieldset class="gmail-m_8354198719571272498mimeAttachmentHeader"></fieldset><pre class="gmail-m_8354198719571272498moz-quote-pre">_______________________________________________
At-Large mailing list
<a class="gmail-m_8354198719571272498moz-txt-link-abbreviated" href="mailto:At-Large@atlarge-lists.icann.org" target="_blank">At-Large@atlarge-lists.icann.org</a>
<a class="gmail-m_8354198719571272498moz-txt-link-freetext" href="https://atlarge-lists.icann.org/mailman/listinfo/at-large" target="_blank">https://atlarge-lists.icann.org/mailman/listinfo/at-large</a>
At-Large Official Site: <a class="gmail-m_8354198719571272498moz-txt-link-freetext" href="http://atlarge.icann.org/" target="_blank">http://atlarge.icann.org</a>
_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a class="gmail-m_8354198719571272498moz-txt-link-freetext" href="https://www.icann.org/privacy/policy" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a class="gmail-m_8354198719571272498moz-txt-link-freetext" href="https://www.icann.org/privacy/tos" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</pre></blockquote><br class=""><pre class="gmail-m_8354198719571272498moz-signature" cols="72">--
Olivier MJ Crépin-Leblond, PhD
<a class="gmail-m_8354198719571272498moz-txt-link-freetext" href="http://www.gih.com/ocl.html" target="_blank">http://www.gih.com/ocl.html</a>
</pre></div>_______________________________________________<br class="">At-Large mailing list<br class=""><a href="mailto:At-Large@atlarge-lists.icann.org" target="_blank" class="">At-Large@atlarge-lists.icann.org</a><br class=""><a href="https://atlarge-lists.icann.org/mailman/listinfo/at-large" rel="noreferrer" target="_blank" class="">https://atlarge-lists.icann.org/mailman/listinfo/at-large</a><br class=""><br class="">At-Large Official Site:<span class="Apple-converted-space"> </span><a href="http://atlarge.icann.org/" rel="noreferrer" target="_blank" class="">http://atlarge.icann.org</a><br class="">_______________________________________________<br class="">By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" rel="noreferrer" target="_blank" class="">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" rel="noreferrer" target="_blank" class="">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</blockquote></div><br clear="all" class=""><br class="">--<span class="Apple-converted-space"> </span><br class=""><div dir="ltr" class="gmail_signature"><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div dir="ltr" class=""><div style="text-align: center;" class=""><div style="text-align: left;" class="">Evan Leibovitch, <span style="font-size: 12.8px;" class="">Toronto Canada</span></div><div style="text-align: left;" class=""><span style="font-size: 12.8px;" class="">@evanleibovitch or </span><span style="font-size: 12.8px;" class="">@el56</span></div></div></div></div></div></div></div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">At-Large mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:At-Large@atlarge-lists.icann.org" style="font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">At-Large@atlarge-lists.icann.org</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://atlarge-lists.icann.org/mailman/listinfo/at-large" style="font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://atlarge-lists.icann.org/mailman/listinfo/at-large</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">At-Large Official Site:<span class="Apple-converted-space"> </span></span><a href="http://atlarge.icann.org/" style="font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">http://atlarge.icann.org</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (</span><a href="https://www.icann.org/privacy/policy" style="font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://www.icann.org/privacy/policy</a><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">) and the website Terms of Service (</span><a href="https://www.icann.org/privacy/tos" style="font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://www.icann.org/privacy/tos</a><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</span></div></blockquote></div><br class=""></div></body></html>