[technology taskforce] Adobe Connect issues at ICANN61

[Harold Arcos]

Information shared by Dev:

https://www.icann.org/news/blog/issues-with-adobe-connect-at-icann61

“...."Yesterday we were notified by a member of the Security and Stability
Advisory Committee of what appears to be a potentially serious security
issue affecting our use of Adobe Connect.

In order to protect the members of the multistakeholder community, and out
of an abundance of caution, we have suspended our Adobe Connect services.
This means that Adobe Connect services will not be available for the rest
of ICANN61.”

The security issue regarding Adobe Connect is likely the one posted by
Adobe on “patch Tuesday”

https://helpx.adobe.com/security/products/connect/apsb18-06.html

“Adobe has released a security update for Adobe Connect. This update
resolves an unrestricted SWF file upload vulnerability (CVE-2018-4921),
which could be exploited to conduct cross-site scripting attacks. This
update also resolves an OS command injection vulnerability in the Adobe
Connect URI handler on Windows (CVE-2018-4923) that could result in
unintended arbitrary local file removal or forced uninstall of the
application. ”

regards
H

On Wed, Mar 14, 2018 at 11:48 AM, Satish Babu <sb at inapp.com> wrote:

> Thanks Harold.
>
> I don't know if the Adobe Connect issue will persist beyond ICANN61...if
> it does, the TTF may have to provide some suggestions.
>
>
>
>
>
>
> satish
>
>
> On Wed, Mar 14, 2018 at 11:45 AM, Harold Arcos <harold.arcos at gmail.com>
> wrote:
>
>>
>> I would like to propose to create a format or template with the TTF logo
>> and complete it when there are some problems like this one (Adobe Connect).
>>
>> Anyway, there is always an official announcement from ICANN, so we can
>> forward, republish or retweet in several ways.
>>
>> regards
>>
>>
>> On Wed, Mar 14, 2018 at 6:46 AM, Satish Babu <sb at inapp.com> wrote:
>>
>>> Shouldn't we inform the At-Large community about this issue?
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> satish
>>>
>>>
>>>
>>>
>>> ---------- Forwarded message ----------
>>> From: Maryam Bakoshi <maryam.bakoshi at icann.org>
>>> Date: Wed, Mar 14, 2018 at 6:31 AM
>>> Subject: NEW SESSION INFORMATION ICANN61
>>> To: NCSG-DISCUSS at listserv.syr.edu
>>>
>>>
>>> Dear all,
>>>
>>>
>>>
>>> Due to security difficulties, (see Goran’s blog here[icann.org]
>>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_news_blog_issues-2Dwith-2Dadobe-2Dconnect-2Dat-2Dicann61&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=PDd_FX3f4MVgkEIi9GHvVoUhbecsvLhgsyXrxgtbL10DTBs0i1jYiBM_uTSDzgqG&m=fxijpUJu6LmmroHN9tH8OL-ro_yRzrp5RcsF-DsRnHY&s=_RqTDbLxFZWrmTMt09Hldqs9KQbB7-Kg-pZFjJw0ink&e=>)
>>> the Adobe Connect room facilities will no longer be available to ICANN61
>>> participants. In order to minimize disruption, we have the following steps
>>> we encourage you to follow:
>>>
>>>
>>>
>>>    1. *TO JOIN THE AUDIO*
>>>
>>>
>>>    - Audio streaming will be available for all open, public meetings.
>>>    Links can be find on the ICANN61 schedule meeting pages:
>>>    https://61.schedule.icann.org/[61.schedule.icann.org]
>>>    <https://urldefense.proofpoint.com/v2/url?u=https-3A__61.schedule.icann.org_&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=PDd_FX3f4MVgkEIi9GHvVoUhbecsvLhgsyXrxgtbL10DTBs0i1jYiBM_uTSDzgqG&m=ndIT3GmFwqmeG5cx64xzGWgdvnfRWYsLm8IqBHj9Grc&s=6oD9Ac3U3eSiAnAxr-yTYgmbB93l6K6gtKkMfqMPebQ&e=>
>>>    - The audio bridge is available for those who would like to ask
>>>    questions or comment over the telephone. Dial in details for open GNSO
>>>    sessions can be found here: https://community.icann.
>>>    org/x/3wC8B[community.icann.org]
>>>    <https://urldefense.proofpoint.com/v2/url?u=https-3A__community.icann.org_x_3wC8B&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=PDd_FX3f4MVgkEIi9GHvVoUhbecsvLhgsyXrxgtbL10DTBs0i1jYiBM_uTSDzgqG&m=ndIT3GmFwqmeG5cx64xzGWgdvnfRWYsLm8IqBHj9Grc&s=PC5aoCh4ImOHZL1gF1TO9goYyCpCn6nLXKgmqsgqvtA&e=>
>>>
>>>
>>>
>>>    1. *TO ACCESS THE PRESENTATIONS*
>>>
>>>
>>>    - All presentations and documents which were to be shown in the AC
>>>    room will be uploaded to the corresponding page on the ICANN61 schedule
>>>    meeting pages: https://61.schedule.icann.org/[61.schedule.icann.org]
>>>    <https://urldefense.proofpoint.com/v2/url?u=https-3A__61.schedule.icann.org_&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=PDd_FX3f4MVgkEIi9GHvVoUhbecsvLhgsyXrxgtbL10DTBs0i1jYiBM_uTSDzgqG&m=ndIT3GmFwqmeG5cx64xzGWgdvnfRWYsLm8IqBHj9Grc&s=6oD9Ac3U3eSiAnAxr-yTYgmbB93l6K6gtKkMfqMPebQ&e=>
>>>    - Presentations and documents will also be circulated via email on
>>>    demand
>>>
>>>
>>>
>>>    1. *ASKING QUESTIONS AND COMMENTING IN WRITTEN FORMAT*
>>>
>>>
>>>    - These will be handed via live management of email comments and
>>>    questions by the Remote Participation Manager. Please see list of meeting
>>>    room email addresses here: https://61.schedule.ican
>>>    n.org/pages/2350[61.schedule.icann.org]
>>>    <https://urldefense.proofpoint.com/v2/url?u=https-3A__61.schedule.icann.org_pages_2350&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=PDd_FX3f4MVgkEIi9GHvVoUhbecsvLhgsyXrxgtbL10DTBs0i1jYiBM_uTSDzgqG&m=fxijpUJu6LmmroHN9tH8OL-ro_yRzrp5RcsF-DsRnHY&s=Ky1zFCPTH21jhKzzP-Al-gyU5sjrdama6xXGc_nqq18&e=>
>>>
>>>
>>>
>>> We apologize for the inconvenience caused. We encourage participants who
>>> have not already done so to download the ICANN61 mobile app by
>>> searching for “ICANN61” in your app stores. Please do not hesitate to email
>>> us at gnso-secs at icann.org if you need a dial out specifying which
>>> meeting you would like to join and your preferred contact number.
>>>
>>>
>>>
>>>
>>>
>>> --
>>>
>>> Many thanks,
>>>
>>>
>>>
>>> *Maryam Bakoshi | *SO/AC Collaboration Services Sr. Coordinator
>>>
>>> *ICANN* | Internet Corporation for Assigned Names and Numbers
>>>
>>> *S*: Maryam.bakoshi.icann | *T*: +44 7737698036 <+44%207737%20698036>
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> ttf mailing list
>>> ttf at atlarge-lists.icann.org
>>> https://mm.icann.org/mailman/listinfo/ttf
>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/ttf/attachments/20180314/c99dacc4/attachment-0001.html>