<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:-apple-system;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EstiloCorreo19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1267277307;
mso-list-type:hybrid;
mso-list-template-ids:-12826988 1070625048 201981955 201981957 201981953 201981955 201981957 201981953 201981955 201981957;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:20.5pt;
text-indent:-18.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:56.5pt;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:92.5pt;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:128.5pt;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:164.5pt;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:200.5pt;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:236.5pt;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:272.5pt;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:308.5pt;
text-indent:-18.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="ES" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">Hi, <o:p>
</o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">In my personal opinion,
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<ul style="margin-top:0cm" type="disc">
<li class="MsoListParagraph" style="margin-left:-15.5pt;mso-list:l0 level1 lfo1">
<span lang="EN-US" style="mso-fareast-language:EN-US">Make 2FA mandatory for ALL users or include the option to make it mandatory at level of LIR account<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:-15.5pt;mso-list:l0 level1 lfo1">
<span lang="EN-US" style="mso-fareast-language:EN-US">Include the feature (for Admin role) to check if users have 2FA enabled, for example, in the user list.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:-15.5pt;mso-list:l0 level1 lfo1">
<span lang="EN-US" style="mso-fareast-language:EN-US">It would be interesting to have the option of receiving confirmation by email when a user accesses the portal.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:-15.5pt;mso-list:l0 level1 lfo1">
<span lang="EN-US" style="mso-fareast-language:EN-US">Option to set that an email could be sent to Administrators or specific email account when someone accesses.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:-15.5pt;mso-list:l0 level1 lfo1">
<span lang="EN-US" style="mso-fareast-language:EN-US">To add administrators or delete users, it asks you for an additional 2FA.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:-15.5pt;mso-list:l0 level1 lfo1">
<span lang="EN-US" style="mso-fareast-language:EN-US">Include a new "None" role to be able to temporarily disable users without the need to delete them.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:-15.5pt;mso-list:l0 level1 lfo1">
<span lang="EN-US" style="mso-fareast-language:EN-US">Include detection of suspicious accesses: accesses from anonymization IPs, from different devices, etc.<o:p></o:p></span></li></ul>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal">Regards.<o:p></o:p></p>
<p class="MsoNormal">Rodolfo.<o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif;color:#031A34"><o:p> </o:p></span></b></p>
</div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b>De:</b> ripe-list <ripe-list-bounces@ripe.net> <b>En nombre de
</b>Michele Neylon - Blacknight via ripe-list<br>
<b>Enviado el:</b> jueves, 4 de enero de 2024 0:33<br>
<b>Para:</b> Randy Bush <randy@psg.com><br>
<b>CC:</b> RIPE List <ripe-list@ripe.net><br>
<b>Asunto:</b> Re: [ripe-list] account breaking leads to routing mess<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">See also <o:p></o:p></p>
<div>
<div>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="300" style="width:225.0pt;background:#E9E9EB;border-collapse:collapse">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-family:-apple-system;color:black"><img width="301" height="111" style="width:3.1319in;height:1.1527in" id="Imagen_x0020_1" src="cid:image001.jpg@01DA3F11.4CEE71E0"></span><span style="font-family:-apple-system"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="300" style="width:225.0pt;background:#E9E9EB;background-color:rgba(233, 233, 235, 1)">
<tbody>
<tr>
<td style="padding:6.0pt 0cm 6.0pt 0cm;background-color:rgba(233, 233, 235, 1)">
<div style="margin-left:12.0pt;margin-right:12.0pt;max-width:100%;overflow:hidden">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:-apple-system;color:black"><a href="https://doublepulsar.com/how-50-of-telco-orange-spains-traffic-got-hijacked-a-weak-password-d7cde085b0c5"><span style="color:black;text-decoration:none">How
50% of telco Orange Spain’s traffic got hijacked — a weak password</span></a></span></b><b><span style="font-size:9.0pt;font-family:-apple-system"><o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:8.5pt;font-family:-apple-system;color:black"><a href="https://doublepulsar.com/how-50-of-telco-orange-spains-traffic-got-hijacked-a-weak-password-d7cde085b0c5"><span style="color:#A2A2A9;text-decoration:none">doublepulsar.com</span></a></span></b><b><span style="font-size:8.5pt;font-family:-apple-system"><o:p></o:p></span></b></p>
</div>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">2FA should be mandatory or access without it should have lower privileges <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I’d hope the bit about password complexity in the article above is incorrect!<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Regards <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Michele <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Mr Michele Neylon <o:p></o:p></p>
<div>
<p class="MsoNormal">Blacknight Hosting & Domains<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://www.blacknight.com">https://www.blacknight.com</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">@mneylon <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Sent from mobile so typos and brevity are normal <o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-bottom:12.0pt">On 3 Jan 2024, at 21:25, Randy Bush <<a href="mailto:randy@psg.com">randy@psg.com</a>> wrote:<o:p></o:p></p>
</blockquote>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">[EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources.<br>
<br>
<a href="https://benjojo.co.uk/u/benjojo/h/r1zj333N4L6cF7P1xv">https://benjojo.co.uk/u/benjojo/h/r1zj333N4L6cF7P1xv</a><br>
<br>
i would be interested in what lessons are learned about protecting one's<br>
rir accounts<br>
<br>
randy<br>
<br>
--<br>
<br>
To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit:
<a href="https://mailman.ripe.net/">https://mailman.ripe.net/</a><o:p></o:p></p>
</div>
</blockquote>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la
lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.<br>
<br>
The information contained in this transmission is confidential and privileged information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.<br>
<br>
Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a
leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição<br>
</font>
</body>
</html>