iEstates.com

ICANN has just emailed another updated regarding the interruption of the new gTLD Application process availability caused by a security hole in the TLD Application System (TAS). According to the report by Akram Atallah, COO of ICANN, they are still planning to complete the currently ongoing notification of applicants affected by the breach by May 8th, 2012.

Here are the statistics from the email:

• 1,268 registered users in the new TLD Application System (per account up to 50 new TLD applications can be submitted)
• 95,000 file attachments
• 455 file names might have been viewed by other applicants
• System logs are still being reviewed to see which viewings did occur
• Approximately 105 applicants’ file names might have been exposed to other applicants
• Approximately 50 applicants might have viewed the file names of one or more other applicants

See the full updated from Akram Atallah, COO of ICANN after the jump.

TAS Interruption – Update (2 May 2012)

Statement by Akram Atallah, COO

2 May 2012

ICANN is in the process of notifying applicants whether they were affected by the software glitch that caused us to take the TLD Application System, or TAS, offline. As we announced earlier this week, we plan to complete this notification process on or before 8 May.

As we notify applicants, we want to share some data that gives insight into the scope of the problem and the number of applicants affected.

At the time we took the system offline, there were 1268 registered users and some 95,000 file attachments in the system. Of these, there were approximately 455 instances where a file name and the associated user name might have been viewed by another applicant. We are continuing to review system logs and packet-level traffic to confirm how many viewings actually did occur.

Our review has determined that approximately:

• 105 applicants might have had file names and user names viewed by another applicant.
• 50 applicants might have viewed file names and user names from one or more other applicants.

Work continues on enhancing system performance and testing the fix for the glitch.

• We recognize and regret the inconvenience to applicants as they try to plan their schedules and resources in anticipation of TAS reopening. As we have previously announced, we will keep the system open for at least five business days to allow applicants to assure themselves that their applications remain as they intended.

Related posts:

• ICANN Issues additional statement regarding new TLD Application System Bug
• ICANN new TLD Application System may have shown data from other applicants
• ICANN Says new TLD Application System (TAS) Bug is fixed, QA in progress
• Network Solutions Reports Data Security Issue For Some E-Commerce Merchants
• ICANN nixes Expression of Interest for new gTLDs

ICANN’s COO, Akram Atallah, has emailed a new statement today regarding the sercurity issue in the TLD Application System (TAS), which allowed at least some users of the system to view file names from submissions of other applicants. Apparently the problem was first identified by a user on March 19th, 2012 and addressed only after a scheduled maintenance on April 12th, 2012, 24 days after the first report. This information was uncovered during a preliminary review of thousands of customer service inquiries received since the opening of the system.

ICANN goes on to say:

Although we believed the issues identified in the initial and subsequent reports had been addressed, on 12 April we confirmed that there was a continuing unresolved issue and we shut down the system.

[...]

We recognize the importance of reopening the application system as soon as possible. We will announce no later than 23:59 GMT/UTC on Monday, 16 April, whether we will be able to reopen on Tuesday, 17 April 2012.

See the full email after the jump.

TAS Interruption – Update (14 April 2012 06:50 UTC)

Statement by Akram Atallah, COO

14 April 2012

As we have reported, ICANN has learned of a technical issue with the TLD application system software, or TAS, that allowed a limited number of users to view some other users’ file names and user names in certain scenarios. We temporarily shut the system down on 12 April 2012 to protect applicant data, and to look into the technical issue and fix it.

As part of that process, we are sifting through the thousands of customer service inquiries received since the opening of the application submission period. This preliminary review has identified a user report on 19 March that appears to be the first report related to this technical issue.

Although we believed the issues identified in the initial and subsequent reports had been addressed, on 12 April we confirmed that there was a continuing unresolved issue and we shut down the system.

We are still aggressively looking into the issue, and we will publish additional information as soon as it can be confirmed.

We recognize the importance of reopening the application system as soon as possible. We will announce no later than 23:59 GMT/UTC on Monday, 16 April, whether we will be able to reopen on Tuesday, 17 April 2012.

Thank you for your patience as we work to resolve this issue.

Related posts:

• ICANN new TLD Application System may have shown data from other applicants
• Iron Mountain to Provide Additional Audit Services for Registrar Data Deposits to ICANN
• Oversee.net Issues Statement Regarding Mystery Illness
• European Banking Authority (EBA) asks ICANN to stop .fin and .bank
• ICANN Further Delays .XXX Decision

Akram Atallah has been named the new Chief Operating Office (COO) of ICANN today. Atallah, who replaces replaces Doug Brent in this position, has more than two decades of experience in engineering, operations, finance and global business. He has most recently served as the Chief Operating Officer of CoreObjects Software in Los Angeles, California.

“This is a perfect fit, not only because Akram brings to ICANN an amazing understanding of the online and high tech worlds, but because he also brings an intuitive grasp of our unique global role in the Internet ecosystem,” said Rod Beckstrom, ICANN’s President and Chief Executive Officer. “The fact that he is fluent in French and Arabic will add to our ability to reach out more effectively to the international community.”

Prior to joining CoreObjects, Atallah worked for 12 years at Conexant Systems, Inc. in Newport Beach, California, most recently as Vice President and General Manager of the firm’s Broadband Access Business Unit in New Jersey where he managed up to 1000 employees across three continents. Atallah joined Conexant while it was Rockwell Semiconductor Systems. Prior to that, he worked for SyQuest Technology Corporation, Conner Peripherals Corporation and Miniscribe Corporation.

[via Press Release]