<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><font size="+1"><font face="Lucida Grande">I certainly apologize
if I offended anyone from APWG here, but I consulted Peter
Cassidy prior to posting my message, and he is as mystified as
I am about what could have offended people here. And If I am
misrepresenting Peter, I am sure I will hear from him shortly
since he is an observer on this group and since we have been
pals for a very long time, (read over 20 years so who's
counting), he will surely let me know right away!</font></font></p>
<p><font size="+1"><font face="Lucida Grande">I happen to think the
APWG is a great organization, that is why I volunteer to help
out with the Stop-think-connect program, something I think
deserves all the support it can get.</font></font></p>
<p><font size="+1"><font face="Lucida Grande">Cheers Stephanie</font></font><br>
</p>
<br>
<div class="moz-cite-prefix">On 2017-06-08 11:16, Gomes, Chuck
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:6DCFB66DEEF3CF4D98FA55BCC43F152E74BC7EEA@BRN1WNEXMBX01.vcorp.ad.vrsn.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Lucida Grande";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Jonathan
makes some useful suggestions here. We certainly should not
single out companies or organizations in a derogatory
manner, but that should not prevent us from asking questions
about specific companies or organizations if those questions
are not critical of them and are designed to help our
understanding.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Chuck<o:p></o:p></span></p>
<p class="MsoNormal"><a name="_MailEndCompose"
moz-do-not-send="true"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></a></p>
<span style="mso-bookmark:_MailEndCompose"></span>
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<a class="moz-txt-link-abbreviated" href="mailto:gnso-rds-pdp-wg-bounces@icann.org">gnso-rds-pdp-wg-bounces@icann.org</a>
[<a class="moz-txt-link-freetext" href="mailto:gnso-rds-pdp-wg-bounces@icann.org">mailto:gnso-rds-pdp-wg-bounces@icann.org</a>]
<b>On Behalf Of </b>jonathan matkowsky<br>
<b>Sent:</b> Thursday, June 08, 2017 5:38 AM<br>
<b>To:</b> Stephanie Perrin
<a class="moz-txt-link-rfc2396E" href="mailto:stephanie.perrin@mail.utoronto.ca"><stephanie.perrin@mail.utoronto.ca></a><br>
<b>Cc:</b> RDS PDP WG <a class="moz-txt-link-rfc2396E" href="mailto:gnso-rds-pdp-wg@icann.org"><gnso-rds-pdp-wg@icann.org></a><br>
<b>Subject:</b> [EXTERNAL] Re: [gnso-rds-pdp-wg] Who is in
charge? (was Re: Why the thin data is necessary)]<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">I am
not sure if calling a position you are advocating for
naive is the same as calling you naive, but it isn't
helpful for sure. We need to all listen to each other
when considering policy, and acknowledge the importance
of all stakeholders and seek to understand their points
of view. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span
style="font-family:"Tahoma",sans-serif">We
also need to try and build consensus</span></b><span
style="font-family:"Tahoma",sans-serif">. We
all have an obligation to ensure that </span><span
style="font-family:"Arial",sans-serif">policy
development and decision-making processes will reflect <b>the
public interest</b>, irrespective of personal
interests and the interests of the entity to which we as
individuals might owe our appointment.</span><span
style="font-family:"Tahoma",sans-serif"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><br>
We all owe each other to behave in a professional manner and
demonstrate <b>appropriate behavior</b>.<o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif"> This
includes acting in
<b>good faith</b> with other participants. I want to
say that <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">while
I am certain it was not intended, that<o:p></o:p></span></p>
</div>
<p class="MsoNormal"> people <o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">will<o:p></o:p></span></p>
</div>
<p class="MsoNormal"> react emotionally when you single out
APWG without<o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">
necessarily<o:p></o:p></span></p>
</div>
<p class="MsoNormal">having any <o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">real
need to<o:p></o:p></span></p>
</div>
<p class="MsoNormal"> do so<o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif"> for
purposes of discussion<o:p></o:p></span></p>
</div>
<p class="MsoNormal">.<o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif"> I
know it upset me.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">I
think h<o:p></o:p></span></p>
</div>
<p class="MsoNormal">ow data is "shared" within APWG,
an international coalition unifying the global response to
cybercrime across industry, government and law-enforcement
sectors and NGO communities
<o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">is <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">a<o:p></o:p></span></p>
</div>
<p class="MsoNormal">different issue than sharing Whois data.<o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif"> I
would encourage everyone to consider whether singling
out a company like has been done with DomainTools or
APWG, is <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">appropriate
or like I believe, <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span
style="font-family:"Tahoma",sans-serif">foreseeably
derails the consensus building efforts in violation of
ICANN Expected Standards of Behavior</span></b><span
style="font-family:"Tahoma",sans-serif">.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif">On
a side note, a<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif"> threat
researcher or analyst is not the equivalent of an
investigator. So focusing on certifying investigators
is irrelevant to any issue within the working group. </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Tahoma",sans-serif"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-family:"Arial",sans-serif">Regards,</span><span
style="font-family:"Tahoma",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">Jonathan Matkowsky<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Thu, Jun 8, 2017 at 11:55 AM,
Stephanie Perrin <<a
href="mailto:stephanie.perrin@mail.utoronto.ca"
target="_blank" moz-do-not-send="true">stephanie.perrin@mail.utoronto.ca</a>>
wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC
1.0pt;padding:0in 0in 0in
6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p><span
style="font-size:13.5pt;font-family:"Lucida
Grande",serif">Calling me naive, ill
informed etc. does not actually answer the
question folks. It is, I am afraid, a valid
question. What criteria does an organization
like APWG apply, when it admits members and
shares data with them? How do you ensure you
are not sharing data with organizations who are
going to misuse it? that data of course is much
more that what we are talking about with thin
data, but I did actually work on this issue on
successive versions of the anti-spam
legislation. Oddly enough, government lawyers
examining the issue (mostly from the competition
bureau who deal with criminal matters) never
labelled me "naive".</span><o:p></o:p></p>
<p><span
style="font-size:13.5pt;font-family:"Lucida
Grande",serif">Folks, can we please try to
be polite to one another on this list? When I
have questions like this, I often check with
experts before I ask. They don't call me naive,
they answer my questions.</span><o:p></o:p></p>
<p><span
style="font-size:13.5pt;font-family:"Lucida
Grande",serif">Thanks again.</span><o:p></o:p></p>
<p><span
style="font-size:13.5pt;font-family:"Lucida
Grande",serif">Stephanie</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 2017-06-08 01:54, Neil
Schwartzman wrote:<o:p></o:p></p>
</div>
<blockquote
style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">My experience differs
slightly. They aren’t ignored. The presence of
these .TLDs is a strong indicator of abuse which
bears further investigation.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">To the point at hand: I
believe the notion of certifying private
cybercrime investigators to be painfully
naive (do I ignore reports from someone
without a Internet Investigator License? Do
we disallow them access to data?),
impractical in the developed world, and
deeply chauvinistic, patronizing and
exclusionary to our colleagues in emerging
nations where capacity building is exactly
what’s needed to deal with next-gen abuse.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<blockquote
style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Jun 8, 2017, at
2:36 AM, allison nixon <<a
href="mailto:elsakoo@gmail.com"
target="_blank"
moz-do-not-send="true">elsakoo@gmail.com</a>>
wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span
style="font-size:9.5pt;font-family:"Helvetica",sans-serif">We're
getting there. Entire top level
domains are already ignored on many
networks like .science, .xyz, .pw,
.top, .club, et cetera</span><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>gnso-rds-pdp-wg mailing list<o:p></o:p></pre>
<pre><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" moz-do-not-send="true">gnso-rds-pdp-wg@icann.org</a><o:p></o:p></pre>
<pre><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" moz-do-not-send="true">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><br>
_______________________________________________<br>
gnso-rds-pdp-wg mailing list<br>
<a href="mailto:gnso-rds-pdp-wg@icann.org"
moz-do-not-send="true">gnso-rds-pdp-wg@icann.org</a><br>
<a
href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg"
target="_blank" moz-do-not-send="true">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>