From kimh at arin.net  Thu Feb 10 21:19:59 2000
From: kimh at arin.net (Kim Hubbard)
Date: Thu, 10 Feb 2000 21:19:59 -0500
Subject: ASO mailing list announcement/reminder
Message-ID: <005501bf7436$80ec77a0$ccfc95c0@arin.net>


 Reminder: ICANN ASO - Website and Discussion Lists

 This is an announcement to all parties with interests in management of
 Internet Address space and related resources.

 The Address Supporting Organisation of ICANN (the Internet Corporation for
 Assigned Names and Numbers) was established last year, and has assumed its
 responsibilities under the ICANN Bylaws for coordination of global policy
 development in relation to Internet Addresses and related resources. The
 nine-member Address Council has also been established, in accordance with
 the ASO MoU and ICANN Bylaws.

 Since its establishment, the ASO has established mailing lists
 and a website to ensure that its processes are open and transparent, and
accessible to all parties with an interest in Internet resource management
issues.

 Three ASO mailing lists are now available for public access to ASO
 information, and for input into the ASO process:

     aso-announce - for announcements and other information
                      relating to the ASO (read only list)
     aso-policy   - for open discussion on policy and other
                      ASO matters (open subscription list)
     aso-comment  - for comment and input of any kind (no subscription
necessary)

 The ASO website is also now available, at http://www.aso.icann.org, and
 carries information relating to the ASO, Address Council, and policy
matters
 which may be under consideration; as well as complete archive of the above
mailing lists.

 At this time the Address Council is seeking participants in the ASO
process,
 and encourages all interested parties to subscribe to the mailing lists
 above.  For information on how to subscribe, please visit the ASO website.

 We look forward to your participation!


 Paul Wilson
 for the Address Council and ASO Secretariat.




From kimh at arin.net  Sun Feb 13 20:37:45 2000
From: kimh at arin.net (Kim Hubbard)
Date: Sun, 13 Feb 2000 20:37:45 -0500
Subject: ARIN Database
Message-ID: <001401bf768c$19094480$ccfc95c0@arin.net>

 
 Over the last week, an individual faked mail headers and
 successfully changed the email addresses on the POC records 
 associated with a handful of Class A records in ARIN's database.
 After successfully modifying the POC records, he modified the 
 inverse mapping servers listed on those Class A network records.
 
 Once identified, corrections were made to the records in question.
 
 We have spoken with the individual who appeared to have made the 
 unauthorized changes, however, he claims to have been hacked himself
 and is not responsible for submitting the bogus modification requests.
 He said his mailboxes looked fake and utmp entries had been tampered
 with on his machine.
 
 Prior to this incident, the ARIN engineering staff had been looking
 into adding security mechanisms to our database.  We would like to 
 invite the community to discuss possible security mechanisms that may 
 be implemented using the following mailing list:
 
    Database Implementation Working Group
    dbwg at arin.net
 
 To join this mailing list, visit http://www.arin.net/members/mailing.htm
 This mailing list is open to the public.
 
 Regards,
 
 American Registry for Internet Numbers (ARIN)