ICANN Isolates Cause of TAS Security Problem

The security glitch that saw ICANN take offline their TLD application system, or TAS, came about “from a problem in the way the system handled interrupted deletions of file attachments,” Akram Atallah, ICANN’s COO, wrote in a statement on the organisation’s website. “This resulted in some applicants being able to see some other applicants’ file names and user names.”As Atallah wrote in yesterday’s update, ICANN is still “seeking confirmation that the solution we have implemented for this issue is effective” as well as “conducting research to determine which applicants’ file names and user names were potentially viewable, as well as which applicants had the ability to see them.”In response to enquiries as to whether they will proceed with the planned publication of applied-for TLDs on 30 April, Atallah says ICANN “will update the target date for publication as part of our update on the timing of the reopening, no later than Friday, 20 April at 23.59 UTC.”