From nobody Mon Feb 11 02:28:00 2019 Return-Path: X-Original-To: smart@ietfa.amsl.com Delivered-To: smart@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1A77124C04 for ; Mon, 11 Feb 2019 02:27:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.698 X-Spam-Level: X-Spam-Status: No, score=-1.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FROM_WORDY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=protonmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bNy_R-EZMtym for ; Mon, 11 Feb 2019 02:27:56 -0800 (PST) Received: from mail2.protonmail.ch (mail2.protonmail.ch [185.70.40.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD78B130E86 for ; Mon, 11 Feb 2019 02:27:55 -0800 (PST) Date: Mon, 11 Feb 2019 10:27:49 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=default; t=1549880872; bh=txv2bjZrQCtmeYADXY5M3NpsehMi1ccS+97VnMHnZcw=; h=Date:To:From:Cc:Reply-To:Subject:In-Reply-To:References: Feedback-ID:From; b=GmzZonWgi4ZAOCbh5twtxmLjIO5RPqCqAaa0FzNRGcBqeElBB7PT1twHHKdCo5ddt ud1cO79mJsN81aW9A9/Ks2QAwT1DZVugD+P3XhsxiLtuWLf41sosZHMx854QsF6CuV YIn1AraVB60iFxkzpLP7stbCPhSAp9xXJS6mM5Hk= To: Kirsty P From: "Arnaud.Taddei.IETF" Cc: "smart@irtf.org" , Kathleen Moriarty Reply-To: "Arnaud.Taddei.IETF" Message-ID: In-Reply-To: References: Feedback-ID: kou6vaSHQeY5dgFN9dCIYKo4z6hnnNmKuV4IBJw2wx4vSVPtftyhWUTBigri6zMJ3K1hxYJjI-3RAIGaizMt5g==:Ext:ProtonMail MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1_97b95742ebd21ad54e1c0ab6357d3dcf" Archived-At: Subject: Re: [Smart] SMART BoF - Prague - call for presentations X-BeenThere: smart@irtf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Stopping Malware And Researching Threats List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Feb 2019 10:27:58 -0000 This is a multi-part message in MIME format. --b1_97b95742ebd21ad54e1c0ab6357d3dcf Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 VGhhbmsgeW91IEtpcnN0eSwgd29ya2luZyBvbiBpdAoKQWZ0ZXIgYSB5ZWFyIEkgd2lsbCBiZSBi YWNrIHRvIElFVEYsIGFsbCBteSBsb2dpc3RpY3MgYXJlIGluIG9yZGVyCgpCZXN0CgpTZW50IHdp dGggW1Byb3Rvbk1haWxdKGh0dHBzOi8vcHJvdG9ubWFpbC5jb20pIFNlY3VyZSBFbWFpbC4KCuKA kOKAkOKAkOKAkOKAkOKAkOKAkCBPcmlnaW5hbCBNZXNzYWdlIOKAkOKAkOKAkOKAkOKAkOKAkOKA kApPbiBUaHVyc2RheSAyNCBKYW51YXJ5IDIwMTkgMTg6NDQsIEtpcnN0eSBQIDxLaXJzdHkucD00 MG5jc2MuZ292LnVrQGRtYXJjLmlldGYub3JnPiB3cm90ZToKCj4gU01BUlQgZm9sa3MsCj4KPiBX ZSBhcmUgcGxhbm5pbmcgdG8gbWVldCBhdCBJRVRGIDEwNCBpbiBQcmFndWUhKgo+Cj4gLi4uQW5k IHRoaXMgaXMgYW4gb3BlbiBjYWxsIGZvciByZXNlYXJjaCBwcmVzZW50YXRpb25zLCBzbyB3ZSBj YW4gZmluYWxpc2Ugb3VyIGFnZW5kYS4KPgo+IEJ1dCB3aGF0IHJlc2VhcmNoIGFyZSB3ZSBsb29r aW5nIGZvcj8gV2VsbCwgaXQncyBwcmV0dHkgYnJvYWQgYXMgdGhpcyBpcyBvdXIgZmlyc3QgbWVl dGluZywgYnV0IHdlJ3JlIGludGVyZXN0ZWQgaW4gYW55IG9mIHRoZSBmb2xsb3dpbmc6Cj4KPiAt IGNhc2Ugc3R1ZGllcyBvZiBwcmV2aW91cyBpbmNpZGVudHMgYW5kIGF0dGFja3M6IGhvdyB0aGV5 IHdlcmUgZGV0ZWN0ZWQsIHByZXZlbnRlZCwgbWl0aWdhdGVkIC0gcGFydGljdWxhcmx5IHdoZXJl IHRoZXJlIGFyZSBJRVRGIHByb3RvY29scyBpbnZvbHZlZAo+Cj4gLSBiZXN0IHByYWN0aWNlLCBl LmcuIHVzZSBvZiBETUFSQywgdG8gcHJldmVudCBwaGlzaGluZwo+IC0gbmV3IG1ldGhvZHMgZm9y IGRldGVjdGlvbiBhbmQgbWl0aWdhdGlvbiDigJMgaW5jbHVkaW5nIGF1dG9tYXRpb24KPiAtIHJl cG9ydHMgYW5kIHN0YXRpc3RpY3Mgb24gdGhlIGN1cnJlbnQgdGhyZWF0IGxhbmRzY2FwZQo+IC0g aG93IHRvIHNwb3Qgc2xvdyBhbmQgYnVsayBkYXRhIGV4ZmlsIGZyb20gYSBuZXR3b3JrIHJlbGlh Ymx5Cj4gLSBlbmRwb2ludCBkZXRlY3Rpb24gY2FwYWJpbGl0aWVzIGFuZCBsaW1pdGF0aW9ucwo+ IC0gdGhyZWF0IGRldGVjdGlvbiBvbiBlbmNyeXB0ZWQgdHJhZmZpYwo+IC0gb3IgcmVzZWFyY2gg d2UgYXJlIGNvbXBsZXRlbHkgdW5hd2FyZSBvZiEKPgo+IFBsZWFzZSBlbWFpbCBteXNlbGYgYW5k IEthdGhsZWVuIGlmIHlvdSBoYXZlIHJlc2VhcmNoIHlvdSdkIGxpa2UgdG8gYnJpbmcsIG9yIGFu IGlkZWEgeW91J2QgbGlrZSB0byBkaXNjdXNzLi4KPgo+IEtpcnN0eQo+Cj4gKiBGb3IgdGhvc2Ug bmV3IHRvIElFVEYvSVJURiwgdGhpcyBtZWFucyB3ZSB3aWxsIGhhdmUgYSBtZWV0aW5nIGZvciBh Ym91dCB0d28gaG91cnMgc29tZXRpbWUgaW4gdGhlIHcvYyAyNXRoIE1hcmNoLCBzdWJqZWN0IHRv IGNvbmZpcm1hdGlvbiAtIHRoZSBhZ2VuZGEgaXMgYW5ub3VuY2VkIHRocmVlIHdlZWtzIGJlZm9y ZSwgc28gd2Ugd29uJ3Qga25vdyB3aGljaCBkYXRlIGluIHRoYXQgd2VlayBTTUFSVCB3aWxsIGJl IG9uIHVudGlsIHRoZW4uCj4KPiBUaGlzIGluZm9ybWF0aW9uIGlzIGV4ZW1wdCB1bmRlciB0aGUg RnJlZWRvbSBvZiBJbmZvcm1hdGlvbiBBY3QgMjAwMCAoRk9JQSkgYW5kIG1heSBiZSBleGVtcHQg dW5kZXIgb3RoZXIgVUsgaW5mb3JtYXRpb24gbGVnaXNsYXRpb24uIFJlZmVyIGFueSBGT0lBIHF1 ZXJpZXMgdG8gbmNzY2luZm9sZWdAbmNzYy5nb3YudWs= --b1_97b95742ebd21ad54e1c0ab6357d3dcf Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PGRpdj5UaGFuayB5b3UgS2lyc3R5LCB3b3JraW5nIG9uIGl0PGJyPjwvZGl2PjxkaXY+PGJyPjwv ZGl2PjxkaXY+QWZ0ZXIgYSB5ZWFyIEkgd2lsbCBiZSBiYWNrIHRvIElFVEYsIGFsbCBteSBsb2dp c3RpY3MgYXJlIGluIG9yZGVyPGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+QmVzdDxicj48 L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2IGNsYXNzPSJwcm90b25tYWlsX3NpZ25hdHVyZV9ibG9j ayI+PGRpdiBjbGFzcz0icHJvdG9ubWFpbF9zaWduYXR1cmVfYmxvY2stdXNlciBwcm90b25tYWls X3NpZ25hdHVyZV9ibG9jay1lbXB0eSI+PGJyPjwvZGl2PjxkaXYgY2xhc3M9InByb3Rvbm1haWxf c2lnbmF0dXJlX2Jsb2NrLXByb3RvbiI+U2VudCB3aXRoIDxhIHRhcmdldD0iX2JsYW5rIiBocmVm PSJodHRwczovL3Byb3Rvbm1haWwuY29tIj5Qcm90b25NYWlsPC9hPiBTZWN1cmUgRW1haWwuPGJy PjwvZGl2PjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+4oCQ4oCQ4oCQ4oCQ4oCQ4oCQ4oCQIE9y aWdpbmFsIE1lc3NhZ2Ug4oCQ4oCQ4oCQ4oCQ4oCQ4oCQ4oCQPGJyPjwvZGl2PjxkaXY+IE9uIFRo dXJzZGF5IDI0IEphbnVhcnkgMjAxOSAxODo0NCwgS2lyc3R5IFAgJmx0O0tpcnN0eS5wPTQwbmNz Yy5nb3YudWtAZG1hcmMuaWV0Zi5vcmcmZ3Q7IHdyb3RlOjxicj48L2Rpdj48ZGl2PiA8YnI+PC9k aXY+PGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9InByb3Rvbm1haWxfcXVvdGUiPjxkaXYg ZGlyPSJsdHIiIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWYsIEVtb2ppRm9udCwgJnF1 b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDssICZxdW90O1NlZ29lIFVJIEVtb2ppJnF1b3Q7LCBO b3RvQ29sb3JFbW9qaSwgJnF1b3Q7U2Vnb2UgVUkgU3ltYm9sJnF1b3Q7LCAmcXVvdDtBbmRyb2lk IEVtb2ppJnF1b3Q7LCBFbW9qaVN5bWJvbHM7Ij48cCBzdHlsZT0ibWFyZ2luLXRvcDowOyBtYXJn aW4tYm90dG9tOjAiPlNNQVJUIGZvbGtzLDxicj48L3A+PHAgc3R5bGU9Im1hcmdpbi10b3A6MDsg bWFyZ2luLWJvdHRvbTowIj48YnI+PC9wPjxwIHN0eWxlPSJtYXJnaW4tdG9wOjA7IG1hcmdpbi1i b3R0b206MCI+PGJyPjwvcD48cCBzdHlsZT0ibWFyZ2luLXRvcDowOyBtYXJnaW4tYm90dG9tOjAi PldlIGFyZSZuYnNwO3BsYW5uaW5nIHRvIG1lZXQgYXQgSUVURiZuYnNwOzEwNCZuYnNwO2luIFBy YWd1ZSEqJm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmksIEhlbHZldGljYSwg c2Fucy1zZXJpZiwgRW1vamlGb250LCAmcXVvdDtBcHBsZSBDb2xvciBFbW9qaSZxdW90OywgJnF1 b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssIE5vdG9Db2xvckVtb2ppLCAmcXVvdDtTZWdvZSBVSSBT eW1ib2wmcXVvdDssICZxdW90O0FuZHJvaWQgRW1vamkmcXVvdDssIEVtb2ppU3ltYm9scyI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48L3NwYW4+PC9zcGFuPjxicj48L3A+PHAgc3R5bGU9 Im1hcmdpbi10b3A6MDsgbWFyZ2luLWJvdHRvbTowIj48YnI+PC9wPjxwIHN0eWxlPSJtYXJnaW4t dG9wOjA7IG1hcmdpbi1ib3R0b206MCI+Li4uQW5kIHRoaXMgaXMgYW4gb3BlbiBjYWxsIGZvciBy ZXNlYXJjaCBwcmVzZW50YXRpb25zLCBzbyB3ZSBjYW4gZmluYWxpc2Ugb3VyJm5ic3A7YWdlbmRh Ljxicj48L3A+PHAgc3R5bGU9Im1hcmdpbi10b3A6MDsgbWFyZ2luLWJvdHRvbTowIj48YnI+PC9w PjxwIHN0eWxlPSJtYXJnaW4tdG9wOjA7IG1hcmdpbi1ib3R0b206MCI+QnV0IHdoYXQgcmVzZWFy Y2ggYXJlIHdlIGxvb2tpbmcgZm9yPyBXZWxsLCBpdCdzIHByZXR0eSBicm9hZCBhcyB0aGlzIGlz IG91ciBmaXJzdCBtZWV0aW5nLCBidXQgd2UncmUgaW50ZXJlc3RlZCBpbiBhbnkgb2YgdGhlIGZv bGxvd2luZzo8YnI+PC9wPjxwIHN0eWxlPSJtYXJnaW4tdG9wOjA7IG1hcmdpbi1ib3R0b206MCI+ PGJyPjwvcD48dWwgc3R5bGU9Im1hcmdpbi1ib3R0b206IDBweDsgbWFyZ2luLXRvcDogMHB4OyI+ PGxpPmNhc2Ugc3R1ZGllcyBvZiA8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEycHQiPjwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEycHQiPnByZXZpb3VzIGluY2lkZW50cyBhbmQgYXR0YWNr czwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEycHQiPjogaG93IHRoZXkgd2VyZSBkZXRl Y3RlZCwgcHJldmVudGVkLCBtaXRpZ2F0ZWQgLSBwYXJ0aWN1bGFybHkgd2hlcmUgdGhlcmUgYXJl IElFVEYmbmJzcDtwcm90b2NvbHMgaW52b2x2ZWQ8L3NwYW4+PGJyPjwvbGk+PGxpPmJlc3QgcHJh Y3RpY2UsIGUuZy4gdXNlIG9mIERNQVJDLCB0byBwcmV2ZW50IHBoaXNoaW5nPGJyPjwvbGk+PGxp Pm5ldyBtZXRob2RzIGZvciBkZXRlY3Rpb24gYW5kIG1pdGlnYXRpb24g4oCTIGluY2x1ZGluZyBh dXRvbWF0aW9uPGJyPjwvbGk+PGxpPnJlcG9ydHMgYW5kIHN0YXRpc3RpY3Mgb24gdGhlIGN1cnJl bnQgdGhyZWF0IGxhbmRzY2FwZTxicj48L2xpPjxsaT5ob3cgdG8gc3BvdCBzbG93IGFuZCBidWxr IGRhdGEgZXhmaWwgZnJvbSBhIG5ldHdvcmsgcmVsaWFibHk8YnI+PC9saT48bGk+ZW5kcG9pbnQg ZGV0ZWN0aW9uIGNhcGFiaWxpdGllcyBhbmQgbGltaXRhdGlvbnM8YnI+PC9saT48bGk+dGhyZWF0 IGRldGVjdGlvbiBvbiBlbmNyeXB0ZWQgdHJhZmZpYzxicj48L2xpPjxsaT5vciZuYnNwO3Jlc2Vh cmNoIHdlIGFyZSBjb21wbGV0ZWx5IHVuYXdhcmUgb2YhPGJyPjwvbGk+PC91bD48cD48YnI+PC9w PjxwIHN0eWxlPSJtYXJnaW4tdG9wOjA7IG1hcmdpbi1ib3R0b206MCI+PGJyPjwvcD48cCBzdHls ZT0ibWFyZ2luLXRvcDowOyBtYXJnaW4tYm90dG9tOjAiPlBsZWFzZSBlbWFpbCBteXNlbGYgYW5k IEthdGhsZWVuIGlmIHlvdSBoYXZlIHJlc2VhcmNoIHlvdSdkIGxpa2UgdG8gYnJpbmcsIG9yIGFu IGlkZWEgeW91J2QgbGlrZSB0byBkaXNjdXNzLi48YnI+PC9wPjxwIHN0eWxlPSJtYXJnaW4tdG9w OjA7IG1hcmdpbi1ib3R0b206MCI+PGJyPjwvcD48cCBzdHlsZT0ibWFyZ2luLXRvcDowOyBtYXJn aW4tYm90dG9tOjAiPktpcnN0eTxicj48L3A+PHAgc3R5bGU9Im1hcmdpbi10b3A6MDsgbWFyZ2lu LWJvdHRvbTowIj48YnI+PC9wPjxwIHN0eWxlPSJtYXJnaW4tdG9wOjA7IG1hcmdpbi1ib3R0b206 MCI+PGJyPjwvcD48cCBzdHlsZT0ibWFyZ2luLXRvcDowOyBtYXJnaW4tYm90dG9tOjAiPiombmJz cDs8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlm LCBFbW9qaUZvbnQsICZxdW90O0FwcGxlIENvbG9yIEVtb2ppJnF1b3Q7LCAmcXVvdDtTZWdvZSBV SSBFbW9qaSZxdW90OywgTm90b0NvbG9yRW1vamksICZxdW90O1NlZ29lIFVJIFN5bWJvbCZxdW90 OywgJnF1b3Q7QW5kcm9pZCBFbW9qaSZxdW90OywgRW1vamlTeW1ib2xzIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjE2cHgiPkZvciB0aG9zZSBuZXcgdG8gSUVURi9JUlRGLA0KIHRoaXMgbWVhbnMg d2Ugd2lsbCBoYXZlIGEmbmJzcDttZWV0aW5nIGZvciBhYm91dCB0d28gaG91cnMmbmJzcDs8L3Nw YW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpLCBIZWx2ZXRpY2EsIHNh bnMtc2VyaWYsIEVtb2ppRm9udCwgJnF1b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDssICZxdW90 O1NlZ29lIFVJIEVtb2ppJnF1b3Q7LCBOb3RvQ29sb3JFbW9qaSwgJnF1b3Q7U2Vnb2UgVUkgU3lt Ym9sJnF1b3Q7LCAmcXVvdDtBbmRyb2lkIEVtb2ppJnF1b3Q7LCBFbW9qaVN5bWJvbHMiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTZweCI+c29tZXRpbWUmbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWYsIEVtb2pp Rm9udCwgJnF1b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDssICZxdW90O1NlZ29lIFVJIEVtb2pp JnF1b3Q7LCBOb3RvQ29sb3JFbW9qaSwgJnF1b3Q7U2Vnb2UgVUkgU3ltYm9sJnF1b3Q7LCAmcXVv dDtBbmRyb2lkIEVtb2ppJnF1b3Q7LCBFbW9qaVN5bWJvbHMiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTZweCI+aW4NCiB0aGUgdy9jIDI1dGgmbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTpDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWYsIEVtb2ppRm9udCwg JnF1b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDssICZxdW90O1NlZ29lIFVJIEVtb2ppJnF1b3Q7 LCBOb3RvQ29sb3JFbW9qaSwgJnF1b3Q7U2Vnb2UgVUkgU3ltYm9sJnF1b3Q7LCAmcXVvdDtBbmRy b2lkIEVtb2ppJnF1b3Q7LCBFbW9qaVN5bWJvbHMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZw eCI+TWFyY2gsIHN1YmplY3QgdG8gY29uZmlybWF0aW9uIC0gdGhlIGFnZW5kYQ0KIGlzIGFubm91 bmNlZCZuYnNwO3RocmVlIHdlZWtzIGJlZm9yZSwgc28gd2Ugd29uJ3Qga25vdyB3aGljaCBkYXRl IGluIHRoYXQgd2VlayBTTUFSVCB3aWxsIGJlIG9uIHVudGlsIHRoZW4uPC9zcGFuPjwvc3Bhbj48 YnI+PC9wPjwvZGl2PjxkaXY+VGhpcyBpbmZvcm1hdGlvbiBpcyBleGVtcHQgdW5kZXIgdGhlIEZy ZWVkb20gb2YgSW5mb3JtYXRpb24gQWN0IDIwMDAgKEZPSUEpIGFuZCBtYXkgYmUgZXhlbXB0IHVu ZGVyIG90aGVyIFVLIGluZm9ybWF0aW9uIGxlZ2lzbGF0aW9uLiBSZWZlciBhbnkgRk9JQSBxdWVy aWVzIHRvIG5jc2NpbmZvbGVnQG5jc2MuZ292LnVrPGJyPjwvZGl2PjwvYmxvY2txdW90ZT48ZGl2 Pjxicj48L2Rpdj4= --b1_97b95742ebd21ad54e1c0ab6357d3dcf-- From nobody Thu Feb 14 11:36:35 2019 Return-Path: X-Original-To: smart@ietfa.amsl.com Delivered-To: smart@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44EFD131181 for ; Thu, 14 Feb 2019 11:36:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YB1v9fwxavav for ; Thu, 14 Feb 2019 11:36:31 -0800 (PST) Received: from mail-it1-x133.google.com (mail-it1-x133.google.com [IPv6:2607:f8b0:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8590E13119A for ; Thu, 14 Feb 2019 11:36:31 -0800 (PST) Received: by mail-it1-x133.google.com with SMTP id h6so16029832itl.1 for ; Thu, 14 Feb 2019 11:36:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:message-id:date:to; bh=xySrHB5V7vlqFn2bcjIZgZEXirKGJiMVvhMZSCCOo8Y=; b=dr71SvozOh1hnCSS0IHKUkYVLCN+VYC3lrt9KyqsDIRqGE4j5ernnJlbXd9WoGuhkc M/EivLNWfEB8n+94nlL21juKAFMQW4nUcKxDeZZ8e9uBxcJqVHjwPDUO/3MOrwEKzaQJ UCI/hK8OaV3wf+PBCdlSt0gfax67OIpNbLQtlreHBdME/E3gq0u3Bw8j6/KddIQ1bWze FBZ9atK+XStxCbGUNY3YOX0tvhTcxsRp265Ye2tjJFr98ihBgVsc8YZ86S11T8wjNbYw 8KOBAC4ua9jmxzaqMKRSHvs6IYxscEWZh+dPSKqpToLl6Zr1lRxzXYX/1QmywBltaGuh oEyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:date:to; bh=xySrHB5V7vlqFn2bcjIZgZEXirKGJiMVvhMZSCCOo8Y=; b=r14L0HCv4jQhAPzYPiEjAk/bz0OG5C4AiiyDdSnUd50mX+4mvQMVEFJ+qKleOnN7/3 9Tu7yhtmZpYI62RG+5sqYtCVe9MLL/2XCvblhSGHm+61rQb7AglAXeqrtGy5Q/Fq5TRG Q6/vVUm3vcOERtEpOABgcrPT4aj7jMWLfNNcZwRwNCoa/cMaP/hSdPr4zoTNlj6w4xMD 4CGGWXObWJ2PNVQEGf/f2YHUqUt0IulViQSt9Y13aF/vux+ZYi1Q8ssjXbarKFh0qHuw Cv8sT2jkIPJQCLUUWSFdUsXS6V9i5GZqlk6DpRPZFa9aYQlYIVNPkn0CrEgG6TAu/Q+O 4owA== X-Gm-Message-State: AHQUAuYMpLMN9xCRXi4NKJM8BIVb8weOTRz8o6wJgz4iRmB6FKnvzVpY cujy6mrocCKEgPJTiHQ2UcyqlDXB X-Google-Smtp-Source: AHgI3IZk+6JisEfRwiy0p5R0ErfT9yoMySmm9NWEZTnv6v/JgDrrLoQ18ubOHE/wx6uSCvLWQmQbyQ== X-Received: by 2002:a6b:8f48:: with SMTP id r69mr3281313iod.128.1550172990327; Thu, 14 Feb 2019 11:36:30 -0800 (PST) Received: from ?IPv6:2605:a601:a028:986:a425:51f0:6029:448f? ([2605:a601:a028:986:a425:51f0:6029:448f]) by smtp.gmail.com with ESMTPSA id w186sm1574234itb.15.2019.02.14.11.36.29 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 14 Feb 2019 11:36:29 -0800 (PST) From: Bret Jordan Content-Type: multipart/alternative; boundary="Apple-Mail=_A2D69617-E322-4337-8262-DA279FE8608F" Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) Message-Id: <6CCE6DD8-C8D1-478B-BD9A-ACB07CE511E8@gmail.com> Date: Thu, 14 Feb 2019 12:36:26 -0700 To: smart@irtf.org X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: [Smart] ICS Threat Landscape Report X-BeenThere: smart@irtf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Stopping Malware And Researching Threats List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Feb 2019 19:36:34 -0000 --Apple-Mail=_A2D69617-E322-4337-8262-DA279FE8608F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Just making sure people here have seen and read this. = https://dragos.com/wp-content/uploads/yir-ics-activity-groups-threat-lands= cape-2018.pdf = Thanks, Bret PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that = can not be unscrambled is an egg." --Apple-Mail=_A2D69617-E322-4337-8262-DA279FE8608F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
Just making sure people here have seen and read = this.

https://dragos.com/wp-content/uploads/yir-ics-activity-groups-t= hreat-landscape-2018.pdf




Thanks,
Bret
PGP = Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 = 0050
"Without = cryptography vihv vivc ce xhrnrw, however, the only thing that can not = be unscrambled is an = egg."

= --Apple-Mail=_A2D69617-E322-4337-8262-DA279FE8608F-- From nobody Thu Feb 14 13:07:34 2019 Return-Path: X-Original-To: smart@ietfa.amsl.com Delivered-To: smart@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9926E1311C3 for ; Thu, 14 Feb 2019 13:07:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y1EIP8pDDuWa for ; Thu, 14 Feb 2019 13:07:25 -0800 (PST) Received: from mail-it1-x135.google.com (mail-it1-x135.google.com [IPv6:2607:f8b0:4864:20::135]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BCD31311E3 for ; Thu, 14 Feb 2019 13:07:25 -0800 (PST) Received: by mail-it1-x135.google.com with SMTP id v72so18103074itc.0 for ; Thu, 14 Feb 2019 13:07:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:message-id:date:to; bh=4N87OCOUlJba28/i36U/R0cJfTxYLEKrKkqKCOIXK1I=; b=CwV0D9MVokk9KlqD7JJkoM//4HJw166aKHc80gq43SccZRoTt4uyb7xR5p0KSO3cmT rkg+J+iIbALVfiCqCcNxs/SYqTrmcUXYuRGw3/akGkld8mfoTuK+KaheNAqmZHpJiI8C 4m/VJfydayw6rXEjl4HsrOYRW+8v/FY5gwJcV2t+/TFWd8z7kngEqbTRo1mEXrOf6nZi wwZ9Up035ljkkwcr8/uxD9EQA7Ocq3u5HzTioo9KWwMVEpd+1ZVrks5KcjKDYsU6Tgaz PctrUPCesFF3PRrdLAwku7zj02tzpli9FhXiP8Vn+dY66c81vwOkmEG7lv50xVb7ibJ9 u0sA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:date:to; bh=4N87OCOUlJba28/i36U/R0cJfTxYLEKrKkqKCOIXK1I=; b=BIxrpVpsjTOZP0T2O1X2fGtNuA+DQbTKywcMYCo/lt9yKnSPN+kFDP7gzRaNm6SK5B X+jNeCvAcmwjCl9ow2DN6EorkW803M+SmJfYe/SCLnurBtq4OUpAVOsQ4zsh2Z8MVnPu qvD8kF9szc/p0eXEfl/xLmRUM2OI6p+guSP9q7+HG1tRfjzIi+pTR3KmtSadqi+XG/XX eNxvgWSQky3g81aL0tbRz2U/vQY9A5V4dWQdYpLNEtFKM4lHXQEHtt1sIzNmN7qFgvpB R90OGsjPupsaGvDW81A9MErGr2HQ80Q6DnntLONTXdqqbD1FxM9OMuZSKpxLJI/d/hNc XNIw== X-Gm-Message-State: AHQUAua9F7ljL2PCQ1XWiEMLNcnXxqcDFn9XRbe8W2kBYGnkPs+gV6a3 x6w2CDfahmG0vQpUbcelABe0E/uW X-Google-Smtp-Source: AHgI3IZZCwmO6o6nR7oggaCiTb/Xgo2Qq2PJd1MC5qWqajou5AV5VvBb/OyOJI8S4jDrjAh1gBzXPA== X-Received: by 2002:a24:6c12:: with SMTP id w18mr3806401itb.14.1550178444539; Thu, 14 Feb 2019 13:07:24 -0800 (PST) Received: from ?IPv6:2605:a601:a028:986:a425:51f0:6029:448f? ([2605:a601:a028:986:a425:51f0:6029:448f]) by smtp.gmail.com with ESMTPSA id p20sm1335725ioh.0.2019.02.14.13.07.23 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 14 Feb 2019 13:07:23 -0800 (PST) From: Bret Jordan Content-Type: multipart/alternative; boundary="Apple-Mail=_0F8AF00D-E1FC-4DE9-9654-9CF395257C4C" Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) Message-Id: Date: Thu, 14 Feb 2019 14:07:20 -0700 To: smart@irtf.org X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: [Smart] GreyEnergy APT Writeup X-BeenThere: smart@irtf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Stopping Malware And Researching Threats List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Feb 2019 21:07:32 -0000 --Apple-Mail=_0F8AF00D-E1FC-4DE9-9654-9CF395257C4C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I often assume that everyone in these forums understands and follows = threat actor and intrusion set behavior. But I now know that is not the = case. So here is a good write up on the GreyEnergy APT that people here = should be familiar with. = https://www.nozominetworks.com/2019/02/12/blog/greyenergy-malware-research= -paper-maldoc-to-backdoor/ = Thanks, Bret PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that = can not be unscrambled is an egg." --Apple-Mail=_0F8AF00D-E1FC-4DE9-9654-9CF395257C4C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
I often assume that everyone in these forums understands and = follows threat actor and intrusion set behavior. But I now know that is = not the case.  So here is a good write up on the GreyEnergy APT = that people here should be familiar with.

https://www.nozominetworks.com/2019/02/12/blog/greyenergy-malwa= re-research-paper-maldoc-to-backdoor/


Thanks,
Bret
PGP = Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 = 0050
"Without = cryptography vihv vivc ce xhrnrw, however, the only thing that can not = be unscrambled is an = egg."

= --Apple-Mail=_0F8AF00D-E1FC-4DE9-9654-9CF395257C4C-- From nobody Tue Feb 26 09:56:57 2019 Return-Path: X-Original-To: smart@ietfa.amsl.com Delivered-To: smart@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C5C1129532 for ; Tue, 26 Feb 2019 09:56:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ncsc.gov.uk Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p8G9jGJnGyWQ for ; Tue, 26 Feb 2019 09:56:53 -0800 (PST) Received: from GBR01-LO2-obe.outbound.protection.outlook.com (mail-eopbgr100121.outbound.protection.outlook.com [40.107.10.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E159130E7B for ; Tue, 26 Feb 2019 09:56:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ncsc.gov.uk; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vWYvdFHJ8b39tYdJd/VOcwLfF09cANjhhL750du0FIE=; b=IAo83fUtqti/PAcYZ/4pkJpKtaBGoqHtww7PPp8xLqE8k0WIKayLIJvoQt7PgjH7VUOD3Xv5gYfxbY1UWP3QQHAckXyNY1eau1NjRc78Sj+f0tz7/MBaHQAz4XzzmTkyl3QQSgP9zhHYEly9cA5MTwn+4p7+kQd0bsMcpxTFiGI= Received: from CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM (20.176.62.15) by CWLP123MB1876.GBRP123.PROD.OUTLOOK.COM (20.176.59.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1643.18; Tue, 26 Feb 2019 17:56:50 +0000 Received: from CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM ([fe80::48bf:d5a6:19e1:4ec7]) by CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM ([fe80::48bf:d5a6:19e1:4ec7%3]) with mapi id 15.20.1643.019; Tue, 26 Feb 2019 17:56:50 +0000 From: Kirsty P To: "smart@irtf.org" Thread-Topic: Prague Meeting Date & Time Thread-Index: AQHUzfyZQRT3/tD4jEC0tZ0uUvzfOQ== Date: Tue, 26 Feb 2019 17:56:50 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Kirsty.p@ncsc.gov.uk; x-originating-ip: [51.140.114.144] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e5553bd6-de1a-4629-43c5-08d69c13c8d2 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(7168020)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:CWLP123MB1876; x-ms-traffictypediagnostic: CWLP123MB1876: x-ms-exchange-purlcount: 1 x-microsoft-exchange-diagnostics: =?iso-8859-1?Q?1; CWLP123MB1876; 23:ZLR3AP2YUr4tnLfb9VlwxebqKlSCEp1HbyQuMke?= =?iso-8859-1?Q?kLVESLY33RhsH861C1HlZT1raXlTRAkSuINYlQZa+ArUd9I71Dp9Ly3ttg?= =?iso-8859-1?Q?ViUg7oVtctiKfljVrkZOBGkDlSp2FvCrZ8mq9yy9ukLfCHDo7PsH74ylPE?= =?iso-8859-1?Q?F/g/FnZaijICGoneApKnhi13I3EATd/I+N8VvjXi3y8tAcDsPSu767LyXe?= =?iso-8859-1?Q?5h6e0MdLL1zbJSL60Kc9pphBqZk/SSmB3Pt8tKV11AaYEM3VbJ6I2AtxXd?= =?iso-8859-1?Q?YmMkZO/c/v0H9YUn8X7YzKcjEPBrlAzfRMAJZUqbjSmPF61Wn5tL85kNvy?= =?iso-8859-1?Q?YW/dVWIMupndeRBzCYqftx5IvnW0CtdQyPRQVPJ+uQYE7EUnvbCzf6Ky76?= =?iso-8859-1?Q?CmTQb/6c46nAxHsED8qecWhQmbNoEtSZXmrwmPHRGecYX/ZpkA5HLlrZEF?= =?iso-8859-1?Q?1R2ux+BFWx3IgFcCM9oqmLnS5N3QIaVxMVibu8viYZMIjdpjbbUm/Ow607?= =?iso-8859-1?Q?0CEflajQaSPhYbhb1O9AtYTI8MTCt5EN8Yp3jn/6XPOWgAgkMuv3ewF9jY?= =?iso-8859-1?Q?1o1wV7eeIqBNDzWjDU2aBm2eke+FTs3hyOqAty+gzZoB2YNtuHW7cThPbN?= =?iso-8859-1?Q?SXfJYDWYwebhjsyVGZQaE+YX60E/YGVZyfFpwb9oKNjehTpmJYYmkDBe+4?= =?iso-8859-1?Q?p2g8rhF8brJlCLAo82FtZDlHou0sWgJwbrCYHrvIBD4Jdo1sieM0KgKHUZ?= =?iso-8859-1?Q?4ZSUQJfqBCF5gyP7keGt5+xAhyIx+IOkvU+W8Ib9MSN79omPIysPEKA9R9?= =?iso-8859-1?Q?mEuncCjFpIAS5xpG2hT/AwV64nLaYyiS+IdlVf7P7+TMTlJv9HlGl6eE5S?= =?iso-8859-1?Q?eIkJ6451Bn+SCDnsk77mFz7OELpLAWtt5cIU+yOuJNTfK6Pl2OVLLmFX+a?= =?iso-8859-1?Q?wqhWGKw9AzKSwrdsP7e32lYOmO5LhqBX0qaGUbolgzQ6esUESG7MfoqgMy?= =?iso-8859-1?Q?6h/PqUhahzds77/n/H8GUzAUgS3sh2XftmSVx9f0X/Wcwmx6WLiSBIecw2?= =?iso-8859-1?Q?oEBAMOp/OHsN9gLYbXUNi1JKPhOZD8NawMfrr24kGrjrnKTmJtlFscnzjq?= =?iso-8859-1?Q?ikijobaQ7HmhqUqACYqhWWM70HWXlAlccCosKoP1fhjZNTcj5oCyMr0Hqx?= =?iso-8859-1?Q?bHZqN4RWNoiJm6xina9FL3EmOBfLvTpl91Qjy80MlfQ2eIGd4qhXpW6kk+?= =?iso-8859-1?Q?VmTbeVF0rPa6NvFh4XqL/puwh7dgNnqrtMOMRDjzzGBbYTvDxP7GVRtfH4?= =?iso-8859-1?Q?q0V6w30UtYEBX/MJTe2ZC9tWJgmssTbVoIHQ9j6g5klKmgSaRvCUIbaGzK?= =?iso-8859-1?Q?6KnzMurOe3r45ZbAHvW1vRCQHEZjQoZBX97Smj2l+A6OVolHaDkmg15DkP?= =?iso-8859-1?Q?0iTafglgHQugEyAk+WmglZmBZutX1Mp/7Aa?= x-microsoft-antispam-prvs: x-forefront-prvs: 096029FF66 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(136003)(346002)(396003)(39850400004)(189003)(199004)(19627405001)(2351001)(81156014)(97736004)(4744005)(68736007)(71190400001)(71200400001)(55236004)(186003)(6506007)(66066001)(99286004)(5660300002)(7736002)(86362001)(606006)(74316002)(1730700003)(8676002)(8936002)(81166006)(106356001)(105586002)(478600001)(966005)(72206003)(3846002)(25786009)(1015004)(33656002)(6916009)(486006)(476003)(14454004)(2906002)(5640700003)(102836004)(316002)(7696005)(6606003)(26005)(2501003)(6436002)(74482002)(75922002)(6116002)(236005)(53936002)(6306002)(55016002)(9686003)(54896002)(14444005)(256004); DIR:OUT; SFP:1102; SCL:1; SRVR:CWLP123MB1876; H:CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ncsc.gov.uk does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 1h9otd8QhRgteyoH8QsJld3X1g5cM8FefnPFXsDIOij5K5A+NThc249mOjXXxMKhtho6wS+tzV0tRC+9xPS93H5JcZ3osOFRx6qCm7vWtOLTjIn5aYyK7DVQM+gekjm0hBSlCs2CW2SIWBJ0YeIZFI4pjQClsMXWnWo/CibRhAbFk9CP6yfyauo6UW4CGJ7BW5c9PMvDXqDwdFhENV56008Cam7m84aRqOaii5lvIGIBRAGviDDmqIZjtxZYy8BPqLZBaHXZ8dC2iytSGCySMj4GNXdjC1XBGfO5W09OBwkycCc0j+4tg/QzgJYw1iUZi++ePEGCG+OsEXnm3GZNKTEvBhiA90tf5vVRe5te9YdUHmb0LjOcMZLofZh35+R3Z28uT3c+GZRCemqYj4UEItgbfCn0cGrrpuVUDwxng+E= Content-Type: multipart/alternative; boundary="_000_CWLP123MB2467B3BCBE70EFFD639E03A8D77B0CWLP123MB2467GBRP_" MIME-Version: 1.0 X-OriginatorOrg: ncsc.gov.uk X-MS-Exchange-CrossTenant-Network-Message-Id: e5553bd6-de1a-4629-43c5-08d69c13c8d2 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Feb 2019 17:56:50.5897 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 14aa5744-ece1-474e-a2d7-34f46dda64a1 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP123MB1876 Archived-At: Subject: [Smart] Prague Meeting Date & Time X-BeenThere: smart@irtf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Stopping Malware And Researching Threats List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Feb 2019 17:56:56 -0000 --_000_CWLP123MB2467B3BCBE70EFFD639E03A8D77B0CWLP123MB2467GBRP_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable SMART folks, Just wanted to update you - we have a date and time confirmed for the IETF = 104 meeting in Prague: Monday 25th March, 16:10-18:10. SMART is one of six BOF (Birds of a Feather) sessions in Prague; details on= the other five can be found here: https://www.ietf.org/blog/ietf104-bofs/ ...And for those of you travelling to CARIS2 this week - safe travels! Kirsty This information is exempt under the Freedom of Information Act 2000 (FOIA)= and may be exempt under other UK information legislation. Refer any FOIA q= ueries to ncscinfoleg@ncsc.gov.uk --_000_CWLP123MB2467B3BCBE70EFFD639E03A8D77B0CWLP123MB2467GBRP_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

SMART folks,


Just wanted to update you - = we have a date and time confirmed for the IETF 104 meeting in Prague:&= nbsp;Monday 25th March, 16:10-18:10<= span style=3D"font-size: 12pt;">.


= SMART is one of six BOF (Birds of a Feather) sessions in Prague; details on= the other five can be found here: 

https://www.ietf.org/blog/ietf104-bofs/


...And for those of you travellin= g to CARIS2 this week - safe travels!


Kirsty

This information is exempt under the Freedom of Information Act 2000 (FOIA)= and may be exempt under other UK information legislation. Refer any FOIA q= ueries to ncscinfoleg@ncsc.gov.uk --_000_CWLP123MB2467B3BCBE70EFFD639E03A8D77B0CWLP123MB2467GBRP_-- From nobody Tue Feb 26 10:29:48 2019 Return-Path: X-Original-To: smart@ietfa.amsl.com Delivered-To: smart@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6DDC129524 for ; Tue, 26 Feb 2019 10:29:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=bluepopcorn.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i9PacTLRhyaO for ; Tue, 26 Feb 2019 10:29:45 -0800 (PST) Received: from v2.bluepopcorn.net (v2.bluepopcorn.net [IPv6:2607:f2f8:a994::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 264A41292F1 for ; Tue, 26 Feb 2019 10:29:44 -0800 (PST) Received: from steel.local ([IPv6:2601:647:4300:2290:b094:db24:1b73:9393]) (authenticated bits=0) by v2.bluepopcorn.net (8.14.4/8.14.4/Debian-8+deb8u2) with ESMTP id x1QITgeR020138 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Tue, 26 Feb 2019 10:29:44 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=bluepopcorn.net; s=supersize; t=1551205784; bh=5uz8stZ6UP1myZ22E6gHYricCif07706b7rEEX5DmnE=; h=Subject:To:References:From:Date:In-Reply-To; b=jY4Yccw/41V9doGC1Zk6xSbw2hNKDgdKmPfr7m7324cLw41X4bCJz+Ktl8oMMjGJF wsbR/07X6xwCd88Jq9lqJyXRGkaN6v/qAwgauZTzYlOLmVnpKA2wot0PV0F7BC1dhO Mb5EYWLEcqiF0kYRbVTr35Hj+DNE68VPBTkOsqaU= To: smart@irtf.org References: From: Jim Fenton Openpgp: preference=signencrypt Autocrypt: addr=fenton@bluepopcorn.net; prefer-encrypt=mutual; keydata= mQINBFJNz0MBEADME6UoNSsTvSDJOdzL4yWfH4HTTOOZZPUcM/at38j4joeBb2PdatlwCBtk 9ZjupxFK+Qh5NZC19Oa6CHo0vlqw7V1hx1MUhmSPbzKRcNFhJu0KcQdniI8qmsqoG50IELXN BPI5OEZ3chYHpoXXi2+VCkjXJyeoqRNwNdv6QPGg6O1FMbB+AcIZj3x5U18LnJnXv1i+1vBq CxbMP43VmryPf8BLufcEciXpMEHydHbrEBZb/r7SBkUhdQXjxRNcWOLeYvOVUOOrr1c+jvqm DEbTWUJVRnUro/WpZQBffFnymR0jjkdAa8eOVl/nF2oMLbaBsOMvxCRSSEcGhuqwbEappNVT 1nuBTbkJT/GGcXxc+lEx9uNj86oYC4384VZJMTd1BRI4qPXImNZCIdmpKegK743B6xxN6Qh1 Tg167pn9429JENQE/AFIVX5B/gpsg7Aq+3rmz9H6GbfovPvFV3TBTgsHCHAMC8XU+S4fhcqN PN0lbUeyb7g6wxaE+dYqC7TExx7G3prw4v66y0qS7ow/Cfw8XXOEkaFQ4XwP7nvfILT+9CcU yS8I40vlDFU9Wnt56CbGz0ZVQgHnwyPXL+S9kCcIwRLFx1M79s6T6qwX1TXadfpbi1uIw7XG TiPDT8Pk6i2y22oSSROyYD4D+wOhVkkvO0S8iZ3+LhAYUx86nwARAQABtCNKaW0gRmVudG9u IDxmZW50b25AYmx1ZXBvcGNvcm4ubmV0PokCVQQTAQIAPwIbAwYLCQgHAwIGFQgCCQoLBBYC AwECHgECF4AWIQS1nUkJe2fEXbvBaacbJaiwFdCfvgUCW4RXswUJCxkNcAAKCRAbJaiwFdCf vjdyD/wNUBktyTqGVI5JGE8TJX6+6bmq5HHJ/I+CgGNtyvjriNZdxZJ86L5Z7MIidBeUOXvl /DZK+1zvS/hq8oMe7rPMbSepHHdhMyVTBuWnUG3n48dYOMqQjttBxisauC9GXrejhDJeGP+y WDLRdkMs1h5M48MKpEHf69pvkb+CCewbJeJH3kpPc5Iv9lJEOM/SrGlR72RUsMHeBcc3ykPR CeW0MpXGKAo5QCRw51uvuy7jZdlxOrLMMvMSyqCVanaW2Iz8mXQKufahkDfjff/eBUgXSfxS L1H2ZUN8XeyLttn6iei0Jqs1aSTmU1y0XxMM5k0rgA+3PoZrkgYTSvVBQMhE+sIyeoiB9oat 5h7M7nZBXc4LQTEwMFCamE4GIaSkpLFwBBwZwPa487XKnPbGV6zr7sYEzDaCvkQGJdfw6NqA 5IxLgmAoCAWnp3h26OtUJ0lmgpRy/Vy4yinbVAvkBq1CB1gRlNDYn0Ton06Bz0ltSpBTWTzj m6zvnA2JLzyFrTc30PR22WD/m18/qgua7YCiP1xu88AsnY5HPgxDj88PDiiyuFftYHhSY0Dy nV+iz+NEPal/LaklqVmA1+l8qj/SPAdycbD/s2X6MHjPBamdBmzytuEZnv+LImPTkdswExLD AORVDaH2SYuznhFs7xZ/t1rB5Yo1l5eDGdTQ6KLsDLkCDQRSTc9DARAAwZaXYs3OzGlpqvSH 3HR9GjSzIeP0EmsBCjpfIdZbQBwQ3ZREiMGInNxV+xkdjLDg0ctrWzUCUe3plWe5NJkpjqm+ KMc7GKhyeWJ5MZRtVrh0VpFTqi8UwYPWumAYqE1y/U1me/zHpfG9EDwdSYqMkPF76Fy5W+vh ZP2ILKaY8qWSLyH8TPl5mFGBypfT8Q6UuzlRs2aTbsTtBX/qwH7gztMRJSjQtYo20AqCgBBH IA/0xV5qDH7CVYyKyPQ4tJLQ8/xyTysUS5fewrj8lZo/G9SaNtC3CEvrJYwyA0nvYB6+hJPM qMP/tyRXM/9XY3qO4Vxuc+m5fYbTZa5GYAZNNuB5dvqI1U0sFTWBEbpAeabqCQ40ZnFSj+t1 tBuwfj4ey/oJ78WRyg5+VTvPKRRubOmZcnzj5yfTS3VGxAZb4Nsj1S2f3KLP0Z+Cv4dt893I 2JWTChw7jA1omF0QTQaBq140n084PFndBHudrZ3cz+APC89iie2HQ4jGQldXZXnGySHnHlA+ WUyZ9wgOplW9F4Q/Lps1bnuh5VttPVpNfjX8hiV48al+b+ut4nfzXAripIRWF3TL72/6JqgE KNhRKyRn0S6BidieSyHWzqJR3Roi/YNTvyXyLh6i6jtByb3FbnhYf/9olobDpj0E+kTemLrw owre85gwupSphqlzVSUAEQEAAYkCPAQYAQIAJgIbDBYhBLWdSQl7Z8Rdu8FppxslqLAV0J++ BQJbhFZUBQkLF7qRAAoJEBslqLAV0J++wvgP/jPjfjH3zEGYhdv89B0vFsRIBDDZzJuMxZZL EW/FyqKqswTHt6HD2ScuiGNEsNWebKEZbj2+Y673KqWnBGMFuJovAzlLeNNxQToJq03pzm/9 4A0ePYk9xzrMgtW+DEUemWElvMbSwZYid8Zj4lAx+U/X6Dh7HPSTx8DO4BKRA4cLrASOaUuS /w8/2eTXNEJssqc8Shwq6bNO5cPXrjb/qJgbb/MOLp0Nn1vNIPjoi/88910pyOV9chYJJFRX zOofGwaRjvcO55X57lveBrNEgH453EHa7QAHL4wD2dbCd445YOPkn0mBNJe3Un5JTsi6IQaK NHUMfwTWrVWN8RapFaPv6YXVBEvpA13G88TFkR5UHlz6YEUMATmgJQpmTFRkPYT0DTEbL4/O ywFgqMzmY1ojKV/Z6iWCAHqVnyFr6NtTFmT/qkOtb933YWJZW6Pg/Us2rZHro7uvQ/bf7Uxb vkn4lX+VneDBjsk3RPnHO/6k8lY2xQ343O7QOedSkM6rJpB9IbgXvHJNJfAWV+L89ElZeKJr VNaQqAw/1uXM7s8MVc+qwoT+DN0jsdqkBcuBxnbYeyM/8X6wcZHopV74r7SAbH4TrtjcBft5 nyM0UroVaEXvJxLzL3kQTsHIiDtGVuYwDTHzVl9591fuyEe0cYZVP2WckXcuM7EUn4CPBUYJ Message-ID: Date: Tue, 26 Feb 2019 10:29:37 -0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.5.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------B77EC15CF72442345173FE92" Content-Language: en-US Archived-At: Subject: Re: [Smart] Prague Meeting Date & Time X-BeenThere: smart@irtf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Stopping Malware And Researching Threats List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Feb 2019 18:29:47 -0000 This is a multi-part message in MIME format. --------------B77EC15CF72442345173FE92 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit On 2/26/19 9:56 AM, Kirsty P wrote: > > SMART folks, > > > Just wanted to update you - we have a date and time confirmed for the > IETF 104 meeting in Prague: *Monday 25th March, 16:10-18:10*. > > > SMART is one of six BOF (Birds of a Feather) sessions in Prague; > details on the other five can be found here:  > > https://www.ietf.org/blog/ietf104-bofs/ > > Note that the IETF schedule at this point is still preliminary (unless Kirsty has some independent knowledge that this particular session won't change). -Jim --------------B77EC15CF72442345173FE92 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit


On 2/26/19 9:56 AM, Kirsty P wrote:

SMART folks,


Just wanted to update you - we have a date and time confirmed for the IETF 104 meeting in Prague: Monday 25th March, 16:10-18:10.


SMART is one of six BOF (Birds of a Feather) sessions in Prague; details on the other five can be found here: 

https://www.ietf.org/blog/ietf104-bofs/


Note that the IETF schedule at this point is still preliminary (unless Kirsty has some independent knowledge that this particular session won't change).


-Jim

--------------B77EC15CF72442345173FE92-- From nobody Tue Feb 26 17:52:10 2019 Return-Path: X-Original-To: smart@ietfa.amsl.com Delivered-To: smart@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB77E130D7A for ; Tue, 26 Feb 2019 17:52:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UK_5de--10zR for ; Tue, 26 Feb 2019 17:52:06 -0800 (PST) Received: from mail-io1-xd2d.google.com (mail-io1-xd2d.google.com [IPv6:2607:f8b0:4864:20::d2d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 93E98127598 for ; Tue, 26 Feb 2019 17:52:06 -0800 (PST) Received: by mail-io1-xd2d.google.com with SMTP id x9so12206751iog.12 for ; Tue, 26 Feb 2019 17:52:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=X6Y++lxk2URPG4Y/ApbSXhiR5532EO16WViuFt75y7g=; b=pKl8iRk4hXt8dwOefKifjDTJlCxRiQfbd3uE4cKpwVqRDAhkQppiXMLwLYwo5xSON4 FBVSZEJJjod9TiI6aBHhn9HXFfzQtUnWORfpa/89eUYRgNCrf/wtt1OQGjVYZhHCCUD+ f/FFs1wPig6tjCiYYgETnLg8d4pYiwwjf9YHOXEe9gfBtoM87TFvlwwkX3rQnQF9qAaG t0S2842fZpOLMhVRzegioY4GcaHKTPg0WJDdf8VXuHx1g2pY0L2C7XK2jPZ2g7NmYBYx XSGfVFpViH1B0UEEKSSjgeNYr4kb5keWvDmhFCqLWWUXuUrxeYSQ0SGoijjn2a4Kl73e e+Bg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=X6Y++lxk2URPG4Y/ApbSXhiR5532EO16WViuFt75y7g=; b=mA5L/jYi9Apx3ihRH/JIGDUshOh7vNBYVmWOzj3IU4rt/t3zIL+Y8EQNnbp8hteG7M F0xduUsjCYg4D8bMEDiFSI+n8FR6XO35afKFb/jhP3jHvjVbPfzv1/XWB3YfXGBo+PN5 D5y5FDyBjNvfj8A3TD+OuiSi9gY+TI7iONCG9eDFXEzpVRIMVoE9c360hnmA5IOFxIcC qcUn+bQC/Dt2V3jZLMqrwVrXEJSIQH8s2UPswBcsCR4C5uogkVFZ5eWaY8NKibb6oLo1 qhBB2GQPCgeLE6/8gGXTPQWvguVFR9RidrEtt5/HK0wYq0qSF1ZdUZOjeP9RguItkQQs U+vg== X-Gm-Message-State: APjAAAXhgD1beF1+K04uPIQgnGy/knoc7WqhypOz9lZeRhkOYxCtHulF 32DqwW7FEFKfZxOWTLNYM7WSPJBm X-Google-Smtp-Source: APXvYqyqMABfVWB8zkmCqrzie9mjm+oivdmyVnKN4oDqJ79LkpVqL0F8f7fr7z9fJ+rbojFleWQd/Q== X-Received: by 2002:a6b:b40e:: with SMTP id d14mr677297iof.8.1551232325649; Tue, 26 Feb 2019 17:52:05 -0800 (PST) Received: from ?IPv6:2605:a601:a028:986:9942:d86c:3873:9691? ([2605:a601:a028:986:9942:d86c:3873:9691]) by smtp.gmail.com with ESMTPSA id 136sm508591itu.35.2019.02.26.17.52.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 26 Feb 2019 17:52:04 -0800 (PST) From: Bret Jordan Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_1B605CF1-6164-451D-93C5-A142B5E6EF8C" Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) Date: Tue, 26 Feb 2019 18:52:02 -0700 In-Reply-To: Cc: "smart@irtf.org" To: Kirsty P References: X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: Re: [Smart] Prague Meeting Date & Time X-BeenThere: smart@irtf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Stopping Malware And Researching Threats List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Feb 2019 01:52:09 -0000 --Apple-Mail=_1B605CF1-6164-451D-93C5-A142B5E6EF8C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii This is great news. I will plan on being there. Thanks, Bret PGP Fingerprint: 63B4 FC53 680A 6B7D 1447 F2C0 74F8 ACAE 7415 0050 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that = can not be unscrambled is an egg." > On Feb 26, 2019, at 10:56 AM, Kirsty P = wrote: >=20 > SMART folks, >=20 > Just wanted to update you - we have a date and time confirmed for the = IETF 104 meeting in Prague: Monday 25th March, 16:10-18:10. >=20 > SMART is one of six BOF (Birds of a Feather) sessions in Prague; = details on the other five can be found here:=20 > https://www.ietf.org/blog/ietf104-bofs/ = >=20 > ...And for those of you travelling to CARIS2 this week - safe travels! >=20 > Kirsty >=20 > This information is exempt under the Freedom of Information Act 2000 = (FOIA) and may be exempt under other UK information legislation. Refer = any FOIA queries to ncscinfoleg@ncsc.gov.uk = --=20 > Smart mailing list > Smart@irtf.org > https://www.irtf.org/mailman/listinfo/smart = --Apple-Mail=_1B605CF1-6164-451D-93C5-A142B5E6EF8C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii This = is great news.  I will plan on being there.


Thanks,
Bret
PGP = Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 = 0050
"Without = cryptography vihv vivc ce xhrnrw, however, the only thing that can not = be unscrambled is an = egg."

On Feb 26, 2019, at 10:56 AM, Kirsty P <Kirsty.p=3D40ncsc.gov.uk@dmarc.ietf.org> = wrote:

SMART = folks,

Just wanted to update you - = we have a date and time confirmed for the IETF 104 meeting in = Prague: Monday 25th = March, 16:10-18:10.

SMART is one of six BOF (Birds of a Feather) sessions in = Prague; details on the other five can be found here: 
<= div style=3D"margin-top: 0px; margin-bottom: 0px;" class=3D"">
...And for those of you travelling to CARIS2 this week - = safe travels!

Kirsty

This information is exempt under the Freedom of Information = Act 2000 (FOIA) and may be exempt under other UK information = legislation. Refer any FOIA queries to ncscinfoleg@ncsc.gov.uk -- 
Smart mailing list
Smart@irtf.org
https://www.irtf.org/mailman/listinfo/smart

= --Apple-Mail=_1B605CF1-6164-451D-93C5-A142B5E6EF8C--