Subject: [Newsclips] IETF SYN-ACK Newspack 2022-02-07

From: "David Goldstein" <[email-masked]>
Date: Mon, 7 Feb 2022 10:47:44 +1100

The IETF SYN-ACK Newspack collects IETF-related items from a variety of news outlets and other online publications. They do not represent the views of the IETF and are not checked for factual accuracy.

**********************

IETF IN THE NEWS

**********************

ICANN Launches New Tool to Verify Conformance with RDAP Requirements by Eduardo Alvarez

This week ICANN organization released a tool that enables TLD registry operators and registrars with Registration Data Access Protocol (RDAP) services to ensure conformance with implementation requirements developed by the IETF and, optionally, the gTLD RDAP profile.

< <https://www.icann.org/en/blogs/details/icann-launches-new-tool-to-verify-conformance-with-rdap-requirements-3-2-2022-en> https://www.icann.org/en/blogs/details/icann-launches-new-tool-to-verify-conformance-with-rdap-requirements-3-2-2022-en>

What's an "Address"? by Geoff Huston

I work at APNIC, the Regional Internet Registry that serves the Asia Pacific Region. APNIC provides common infrastructure services for the region that support the unique assignment of IP address blocks to Internet network operators within our region through the operation of an address registry. In short, IP addresses are what we do. So, when there are discussions in technology circles about evolving the Internet's address model in varying ways, it's a topic where we at APNIC have a deep interest! Currently, there are discussions in the IETF's Internet Area on the topic of architectural evolution of the Internet and its implications for the changing role of IP addresses, and I'd like to share some of my thoughts on this topic here.

< <https://www.potaroo.net/ispcol/2022-02/addresses.html> https://www.potaroo.net/ispcol/2022-02/addresses.html>

< <https://blog.apnic.net/2022/02/01/address-semantics/> https://blog.apnic.net/2022/02/01/address-semantics/>

Everything You Need to Know About ORCA Token

... Background on ORCA — HOTP & TOTP: The challenge-response algorithm is an enhanced HOTP, the obvious next step in its evolution. Instead of using a counter as in HOTP, we can use any data (including time, as in TOTP) as an authentication challenge here. Since 2004, HOTP OATH has been developing OTP algorithms. The Hash-based Message Authentication Code OTP method — HOTP — was the first result of their efforts, and it was published as an IETF project in 2005.

< <https://techstory.in/everything-you-need-to-know-about-orca-token/> https://techstory.in/everything-you-need-to-know-about-orca-token/>

Wire implements new Messaging Layer Security protocol [news release]

... Co-initiated by Wire as part of the IETF Working Group which includes members from Cisco, Mozilla, Google, Facebook, Twitter, the University of Oxford and INRIA, MLS is a new protocol designed to bolster the security of enterprise messaging platforms by using end-to-end encryption within group communication.

< <https://www.prnewswire.co.uk/news-releases/wire-implements-new-messaging-layer-security-protocol-868488727.html> https://www.prnewswire.co.uk/news-releases/wire-implements-new-messaging-layer-security-protocol-868488727.html>

Google’ın ‘Topics API’ konseptinin 3 başlıkta sektöre etkisi [The impact of Google's 'Topics API' concept on the industry in 3 headings]

Google, çevrimiçi olarak "daha özel" bir gezinme standartı oluşturmaya çalışarak yakında Chrome'un geliştirici sürümünde yeni bir ‘Topics API' test edecek. Google mühendisleri The IETF 111 etkinliğinde web sitesi konularını temel alan FLoC sisteminin yerini alac...

< <https://rhaajans.com/haber/9260582/googlein-topics-api-konseptinin-3-baslikta-sektore-etkisi> https://rhaajans.com/haber/9260582/googlein-topics-api-konseptinin-3-baslikta-sektore-etkisi>

Update auf Chrome 98 beseitigt 27 Schwachstellen [Update to Chrome 98 fixes 27 vulnerabilities]

... Mit Chrome 98 entfernt Google das Schlüsselaustauschverfahren SDES (Session Description Protocol Security Descriptions) für WebRTC aus dem Browser. Das Verfahren gilt seit Jahren als unsicher, da die auf diesem Wege vereinbarten Sitzungsschlüssel per Javascript ausgelesen werden könnten. Die Standardisierungsorganisation IETF fordert bereits seit 2013, dass SDES nicht mehr verwendet werden dürfe. Auch Mozilla (Firefox) und Apple (Safari) haben SDES bereits entfernt oder werden dies demnächst tun.

< <https://www.pcwelt.de/news/Update-auf-Chrome-98-beseitigt-27-Schwachstellen-11176770.html> https://www.pcwelt.de/news/Update-auf-Chrome-98-beseitigt-27-Schwachstellen-11176770.html>

Cos’è “L’Apocalisse Quantistica” e perchè dobbiamo essere molti vigili a riguardo? [What is "The Quantum Apocalypse" and why do we have to be very vigilant about it?]

... Una delle voci più allarmate in merito è Harri Owen, chief strategy offer di PostQuantum. Si tratta di una società specializzata in software quantum-safe oltre ad aver definito gli standard per la Internet Engineering Taskforce (IETF).

< <https://www.androiditaly.com/2022/01/31/cose-lapocalisse-quantistica-e-perche-dobbiamo-essere-molti-vigili-a-riguardo/> https://www.androiditaly.com/2022/01/31/cose-lapocalisse-quantistica-e-perche-dobbiamo-essere-molti-vigili-a-riguardo/>

中国加紧争夺下一代网络协议IPv6主导权 [China has stepped up its bid for dominance over the next-generation network protocol, IPv6]

... 美国网络科技公司“互通实验室”（InterWorking Labs）的首席技术官卡尔·奥尔巴赫曾任职于负责开发和推广TCP/IP等互联网标准的互联网工程任务组(IETF)，被认为对互联网早期的发展作出了许多重要贡献。

< <https://www.voachinese.com/a/china-ipv6-20220201/6422418.html> https://www.voachinese.com/a/china-ipv6-20220201/6422418.html>

**********************

SECURITY & PRIVACY

**********************

Measuring DNS-over-HTTPS performance around the world

It has been a little over three years since DNS-over-HTTPS (DoH) was first introduced, and industry actors have taken numerous steps since then to roll out DoH support to the masses.

< <https://blog.apnic.net/2022/02/03/measuring-dns-over-https-performance-around-the-world/> https://blog.apnic.net/2022/02/03/measuring-dns-over-https-performance-around-the-world/>

Success of web3 hinges on remedying its security challenges

In both Web 1.0 and Web 2.0, security models changed in tandem with application architectures to help unlock entirely new economies. In Web 1.0, Secure Sockets Layer (SSL) was pioneered by Netscape to provide secure communication between user browsers and those servers. Trusted Web 2.0 intermediaries such as Google, Microsoft, Amazon and certificate authorities played a central role in driving implementation of Transport Layer Security (TLS), the successor to SSL.

< <https://techcrunch.com/2022/01/31/success-of-web3-hinges-on-remedying-its-security-challenges/> https://techcrunch.com/2022/01/31/success-of-web3-hinges-on-remedying-its-security-challenges/>

A Novel Ddos Attack Detection Framework for Software-Defined Iot (Sd-Iot) Networks Using Machine Learning

Abstract: Internet of Things (IoT) is a complex and diverse network equipped with resource-constrained devices/things that can face numerous security threats. Recently, the integration of Software Defined Networking (SDN) with IoT has opened new routes for better security and access control mechanisms. Still, Distributed Denial of Services (DDoS) attacks are carried out in several ways that strike the target continuously through botnet or zombie attacks. Here, machine learning-based security frameworks can be modified to scrutinize the IoT devices' movements and compile a profile that allows for deciding the rightful conduct of the IoT environment. In this paper, we have integrated a machine learning detection module into the SDN-WISE IoT controller and set up a testbed environment used to simulate a scenario for DDoS attack traffic generation. This traffic has been captured by adding a logging mechanism to the SDN-WISE controller, which writes network logs into a log file that has been pre-processed and converted into a dataset. The log files dataset is then used by the machine learning DDoS detection module that is integrated into the SDN-WISE controller for detecting abnormal traffic by using Naive Bayes (NB), decision tree (DT), and support vector machine (SVM) to classify SDN-IoT network packets. Results generated from the machine learning DDoS detection module using different traffic simulation scenarios are compared and discussed. Decision Tree has an accuracy ratio of 98.1%, whereas Naive Bayes and SVM have an accuracy rate of 97.4% and 96.1%, respectively. The proposed framework, on average, achieved an accuracy of 97.2%.

< <https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4022910> https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4022910>

The Cost of Ignoring the Log4j Vulnerability

Ignorance is not bliss when it comes to the Log4j vulnerability. In the past month, organizations have been scrambling to understand their exposure to the most recent major cyber threat, called “Log4j.” Log4J is an open-source software module, available to individuals and organizations at no cost. It's used in a large number of commercial and privately-developed software systems to handle audit logging for software systems written using the popular Java programming language. This module is used widely by almost every major software vendor, as well as custom software developers. As a result, there is a scramble in the industry to identify where Log4J is included in their products and release the patches to mitigate the risks associated with the vulnerability.

< <https://www.cisecurity.org/insights/blog/The-Cost-of-Ignoring-the-Log4j-Vulnerability> https://www.cisecurity.org/insights/blog/The-Cost-of-Ignoring-the-Log4j-Vulnerability>

Cyber Signals: Defending against cyber threats with the latest research, insights, and trends

We’re excited to introduce Cyber Signals, a cyber threat intelligence brief informed by the latest Microsoft threat data and research. This content, which will be released quarterly, offers an expert perspective into the current threat landscape, discussing trending tactics, techniques, and strategies used by the world’s most prolific threat actors. As such, we hope it’s a valuable resource to Chief Information Security Officers, Chief Information Officers, Chief Privacy Officers, and their teams, as they continue to evolve technologies, policies, and processes against the constantly changing threat landscape. At Microsoft, we believe that security is a team sport and that when we share what we’re learning, we can all make the world a safer place.

< <https://www.microsoft.com/security/blog/2022/02/03/cyber-signals-defending-against-cyber-threats-with-the-latest-research-insights-and-trends/> https://www.microsoft.com/security/blog/2022/02/03/cyber-signals-defending-against-cyber-threats-with-the-latest-research-insights-and-trends/>

NSA Releases 2021 Cybersecurity Year in Review

The National Security Agency released the 2021 NSA Cybersecurity Year in Review today to highlight how its cybersecurity mission continues to prevent and eradicate threats to the nation's most critical systems.

< <https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/2921744/nsa-releases-2021-cybersecurity-year-in-review/> https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/2921744/nsa-releases-2021-cybersecurity-year-in-review/>

Rebooting the internet for the cybercrime age

One of the things I most enjoy about what I do now is getting the opportunity to dig deeper into areas that really catch my interest. And the internet is high on the priority list, as some of you will know from previous posts. We’re 30+ years down the line since the World Wide Web came into being, and a lot has changed in that time, to put it mildly. I’ve moved company and country a few times, seen my kids grow up, and lost some hair for a start. Meanwhile, technology has been ramping up faster and faster, and new ways of doing just about everything online have become possible.

< <https://www.linkedin.com/pulse/rebooting-internet-cybercrime-age-olaf-swantee> https://www.linkedin.com/pulse/rebooting-internet-cybercrime-age-olaf-swantee>

Secure Web Browsers Tackle Ransomware, Insider Threat in Enterprises

The humble web browser does more than just serve up websites. With the rise in cloud applications and the shift to a more distributed workplace, enterprises are increasingly relying on the browser to serve up data-heavy applications for both internal users and customers. Unfortunately, it isn't so easy to apply security controls and data leakage protection to browsers to ensure the data is not at risk.

< <https://www.darkreading.com/emerging-tech/secure-web-browsers-tackle-ransomware-insider-threat-in-enterprises> https://www.darkreading.com/emerging-tech/secure-web-browsers-tackle-ransomware-insider-threat-in-enterprises>

Trend Micro Blocks Over 94 Billion Threats in 2021: Detections increased 42% YoY as malicious actors stepped up their attacks

Trend Micro Incorporated announced today that its industry-leading threat intelligence infrastructure, Smart Protection Network™ (SPN), stopped 94.2 billion* cyber-threats heading for consumer, government and business customers in 2021. The volume of detections represents a 42% increase on the number of detections recorded in 2020. It reveals that attacks surged by over 53 billion in the second half of 2021 after Trend Micro blocked 41 billion threats in 1H 2021.

< <https://newsroom.trendmicro.com/2022-01-24-Trend-Micro-Blocks-Over-94-Billion-Threats-in-2021> https://newsroom.trendmicro.com/2022-01-24-Trend-Micro-Blocks-Over-94-Billion-Threats-in-2021>

Emotet Spam Abuses Unconventional IP Address Formats to Spread Malware

We observed Emotet spam campaigns using hexadecimal and octal representations of IP addresses, likely to evade detection via pattern matching. Both routines use social engineering techniques to trick users into enabling document macros and automate malware execution.

< <https://www.trendmicro.com/en_us/research/22/a/emotet-spam-abuses-unconventional-ip-address-formats-spread-malware.html> https://www.trendmicro.com/en_us/research/22/a/emotet-spam-abuses-unconventional-ip-address-formats-spread-malware.html>

**********************

INTERNET OF THINGS

**********************

The Battle for IoT by Doug Dawson

There is an interesting battle going on to be the technology that monetizes the control of Internet of Things devices. Like a lot of tech hype, IoT has developed a lot slower than initially predicted -- but it's now finally becoming a big business. I think back to a decade ago when tech prognosticators said we'd soon be living in a virtual cloud of small monitors that would monitor everything in our life. According to those early predictions, our farm fields should already be fully automated, and we should all be living in the smart home envisioned by the Jetsons.

< <https://circleid.com/posts/20220201-the-battle-for-iot> https://circleid.com/posts/20220201-the-battle-for-iot>

How to Protect All Five Stages of the IoT Security Lifecycle

The dependency on IoT devices to enable business, capture data, and facilitate communication is pervasive and continuing to evolve. While some of the most striking benefits of IoT revolve around business process efficiency, productivity, and cost reduction, an increasing number of enterprises are also recognizing IoT as an extraordinary source of intelligence with the ability to surface patterns or trends within the information collected by these devices. Insights derived from IoT-generated data are proving to be invaluable to business decision-makers.

< <https://www.cyberdefensemagazine.com/how-to-protects-the-iot-security-lifecycle/> https://www.cyberdefensemagazine.com/how-to-protects-the-iot-security-lifecycle/>

Artificial intelligence turbo-charges AI for Good: United Nations tech agency launches AI-powered matchmaking to accelerate sustainable development

​A new community platform powered by artificial intelligence (AI), launched today by the International Telecommunication Union (ITU), aims to step up global collaboration on the use of AI to drive sustainable development.

< <https://www.itu.int/en/mediacentre/Pages/PR-2022-02-01-AI-for-Good.aspx> https://www.itu.int/en/mediacentre/Pages/PR-2022-02-01-AI-for-Good.aspx>

A Novel Ddos Attack Detection Framework for Software-Defined Iot (Sd-Iot) Networks Using Machine Learning

Abstract: Internet of Things (IoT) is a complex and diverse network equipped with resource-constrained devices/things that can face numerous security threats. Recently, the integration of Software Defined Networking (SDN) with IoT has opened new routes for better security and access control mechanisms. Still, Distributed Denial of Services (DDoS) attacks are carried out in several ways that strike the target continuously through botnet or zombie attacks. Here, machine learning-based security frameworks can be modified to scrutinize the IoT devices' movements and compile a profile that allows for deciding the rightful conduct of the IoT environment. In this paper, we have integrated a machine learning detection module into the SDN-WISE IoT controller and set up a testbed environment used to simulate a scenario for DDoS attack traffic generation. This traffic has been captured by adding a logging mechanism to the SDN-WISE controller, which writes network logs into a log file that has been pre-processed and converted into a dataset. The log files dataset is then used by the machine learning DDoS detection module that is integrated into the SDN-WISE controller for detecting abnormal traffic by using Naive Bayes (NB), decision tree (DT), and support vector machine (SVM) to classify SDN-IoT network packets. Results generated from the machine learning DDoS detection module using different traffic simulation scenarios are compared and discussed. Decision Tree has an accuracy ratio of 98.1%, whereas Naive Bayes and SVM have an accuracy rate of 97.4% and 96.1%, respectively. The proposed framework, on average, achieved an accuracy of 97.2%.

< <https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4022910> https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4022910>

Will the rise of AI and the Internet of Things subvert the design of Embedded Systems?

Different from the general-purpose PC architecture, the definition of embedded system is an IT system designed for specific purposes. In recent years, the development of embedded system in specific fields has accelerated. Compared with the past, it has made great progress in both depth and breadth. The main reason is that in addition to the improvement of it technology itself, the application industry continues to expand new functional requirements, especially the application area, With the increasingly fierce market competition, both consumer and non consumer equipment suppliers must make good use of IT technology to strengthen their competitiveness. Therefore, the market demand for embedded systems is increasing day by day. With the mutual promotion of demand and supply, the development of embedded industry has reached a peak in history. Driven by AI and the Internet of things in the next few years, It is expected to continue to grow.

< <https://www.linkedin.com/pulse/rise-ai-internet-things-subvert-design-embedded-systems-ajmeri/> https://www.linkedin.com/pulse/rise-ai-internet-things-subvert-design-embedded-systems-ajmeri/>

5G and IoT technologies to smarten Australia’s waste trucks

An interconnected network of garbage trucks could be the new frontline in repairing local roads, thanks to a collaboration between Brimbank City Council in Victoria and academia.

< <https://www.smartcitiesworld.net/smart-waste/5g-and-iot-technologies-to-smarten-australias-waste-trucks-7384> https://www.smartcitiesworld.net/smart-waste/5g-and-iot-technologies-to-smarten-australias-waste-trucks-7384>

**********************

NEW TRANSPORT PROTOCOLS

**********************

Fastly patches memory leak HTTP/3 vulnerability in H2O HTTP server project

An uninitialized memory leak vulnerability in the H2O HTTP server project has been patched. In a technical write-up published on January 31, independent security researcher Emil Lerner said the bug impacted the Fastly cloud computing service and allowed attackers to steal “random requests and responses from uninitialized memory of its’ nodes”.

< <https://portswigger.net/daily-swig/fastly-patches-memory-leak-http-3-vulnerability-in-h2o-http-server-project> https://portswigger.net/daily-swig/fastly-patches-memory-leak-http-3-vulnerability-in-h2o-http-server-project>

Network security gets a boost in Windows Server 2022

Cyber attacks spring from every conceivable angle in the data center, but multiple improved and new Windows Server 2022 network security features aim to thwart these breach attempts. ... HTTP/3 is currently in development but is already in use by Google and Facebook. HTTP/3 uses the QUIC transport protocol based on the User Datagram Protocol. In addition to better performance, HTTP/3 uses encryption by default to maintain a secure connection.

< <https://www.techtarget.com/searchwindowsserver/tip/Network-security-gets-a-boost-in-Windows-Server-2022> https://www.techtarget.com/searchwindowsserver/tip/Network-security-gets-a-boost-in-Windows-Server-2022>

**********************

OTHERWISE NOTEWORTHY

**********************

EU to outline tech standards plan to counter China influence

The EU will on Wednesday outline a more aggressive approach to setting global standards for cutting-edge and green technologies in a concerted effort to counter the influence of China. Margrethe Vestager, the bloc’s competition chief, told the Financial Times the new strategy was designed to ensure Europe continued to set international benchmarks that guided the development of everything from facial recognition systems, advances in battery power and the next generation of environmental innovations.

< <https://www.ft.com/content/531194f3-feb3-4222-a949-f9f17618b618> https://www.ft.com/content/531194f3-feb3-4222-a949-f9f17618b618>

EU drafts counteroffensive to China, US on technology rules

The EU is taking a "Europe First" approach to technological standardization. The European Commission on Wednesday presented a plan to bolster its influence in creating global technology standards, as the bloc currently risks falling behind in global standardization organizations, where tech giants, government regulators and experts gather to set rules for how emerging technology works — everything from the internet to batteries, connected devices and beyond. Faced with the U.S.' market dominance and China's aggressive attempts to rewrite global rules, the EU wants to raise its game.

< <https://www.politico.eu/article/technology-standards-europe-counteroffensive-china-united-states/> https://www.politico.eu/article/technology-standards-europe-counteroffensive-china-united-states/>

Campaign Aims for Global CAP Adoption

Already in use in most of the developed world, CAP is an international standard for alerting systems that ensures the delivery of accurate, detailed and consistent alerts across all media in emergency situations.

< <https://www.radioworld.com/news-and-business/headlines/campaign-aims-for-global-cap-adoption> https://www.radioworld.com/news-and-business/headlines/campaign-aims-for-global-cap-adoption>

PKI Consortium signs MoU with ETSI

On 26 January PKI Consortium and ETSI signed a Memorandum of Understanding (MoU) to structure and strengthen the relationship between both organizations and foster a closer relationship. The PKI Consortium comprises leading organizations that are committed to improve, create and collaborate on generic, industry or use-case specific policies, procedures, best practices, standards and tools that advance trust in assets and communication for everyone and everything using Public Key Infrastructure (PKI) as well as the security of the internet in general. By engaging with users, regulators, supervisory bodies and other interested or relying parties the consortium can address actual issues.

< <https://www.etsi.org/newsroom/news/2024-2022-02-pki-consortium-signs-mou-with-etsi> https://www.etsi.org/newsroom/news/2024-2022-02-pki-consortium-signs-mou-with-etsi>

Enabling youth engagement and empowerment

The world today is home to around 1.8 billion young people between the ages of 10 and 24, with close to 90 per cent of them living in developing countries. This is the largest generation of youth in history. 

< <https://www.itu.int/hub/2022/02/youth-engagement-digital-development-agenda/> https://www.itu.int/hub/2022/02/youth-engagement-digital-development-agenda/>

Now more than ever, we must amplify youth voices in digital development

Access to affordable, reliable, Internet connectivity and digital literacy is no longer a “nice to have” for nation states. The COVID‑19 pandemic has illustrated the crucial role of high‑quality broadband access in advancing the physical, social, financial and emotional wellbeing of people all around the world.

< <https://www.itu.int/hub/2022/02/youth-digital-development-itu-generation-connect/> https://www.itu.int/hub/2022/02/youth-digital-development-itu-generation-connect/>

Defeating IPv6 prefix rotation privacy

As providers increasingly deploy IPv6 to the edge, often unbeknown to end users, the importance of understanding their deployment strategies and implementation peculiarities grows.

< <https://blog.apnic.net/2022/01/31/defeating-ipv6-prefix-rotation-privacy/> https://blog.apnic.net/2022/01/31/defeating-ipv6-prefix-rotation-privacy/>

Update on China SatNet’s GuoWang Broadband Constellation – Can They Do It?

In 2020, China applied to operate GuoWang, a constellation of 12,992 low-Earth orbit (LEO) broadband Internet satellites, and in 2021, it became clear that it was intended to become China’s global LEO broadband constellation. Can they do it? Maybe, but it will take a long time. China does not have the capacity to launch 12,992 satellites today. I don’t know the mass of their planned satellites, but GuoWang is informally referred to as China’s answer to Starlink. 

< <https://circleid.com/posts/20220203-update-on-china-satnets-guowang-broadband-constellation-can-they-do-it> https://circleid.com/posts/20220203-update-on-china-satnets-guowang-broadband-constellation-can-they-do-it>

What Is a LEO Satellite System—and Can It Help Build a Bigger Internet?

There’s a new space race happening right now and the stakes are just as high as they were half a century ago. Companies such as SpaceX, Amazon, OneWeb, and Telesat are racing to launch large systems of low earth orbit (LEO) satellites to provide Internet access. These LEO “constellations” could help bridge the digital divide, particularly in rural regions. But they could also put Internet access into the hands of a few large companies and introduce new security and privacy concerns.

< <https://www.internetsociety.org/blog/2022/02/what-is-a-leo-satellite-system-and-can-it-help-build-a-bigger-internet/> https://www.internetsociety.org/blog/2022/02/what-is-a-leo-satellite-system-and-can-it-help-build-a-bigger-internet/>

------

David Goldstein

email:  <mailto:[email-masked]> [email-masked]

web:  <http://goldsteinreport.com/> http://goldsteinreport.com/

Twitter:  <https://twitter.com/goldsteinreport> https://twitter.com/goldsteinreport

phone: +61 418 228 605 - mobile; +61 2 9663 3430 - office/home