January 2012 - KICTANet

Access to the internet and human rights
by Grace Githaiga 30 Jan '12

30 Jan '12

Listers APC's response to Vint Cerf's article on internet and human rights. http://www.apc.org/en/news/access-internet-and-human-rights-thanks-vint RgdsGG ----------------------------------------------------------------------------------- If you have the strength to survive, you have the power to succeed. Life is all about choices we make depending upon the situation we are in. Go forth and rule the World!

1 0

Google-Mocality: All's well that ends well?
by James Richu 30 Jan '12

30 Jan '12

As promised, Google has acted on the Mocality fiasco, with Nelson Mattos, Google's Vice-President for Product and Engineering, Europe and Emerging Markets issuing the following statement on Friday evening: "We've concluded our investigation into the serious allegations about our use of data from Mocality's website in Kenya. We're very sorry this happened. We've taken appropriate action with the people involved and made changes in our operations to ensure this doesn't occur again." Vague as the above statement might be, Nairobitech blog reports that Google has fired Olga-Arara Kimani, its country Director for Kenya<http://nairobitech.blogspot.com/2012/01/olga-arara-out-in-google-mocality-s…> . Meanwhile, *CIO East Africa* has requested and is still waiting for as statement from Mocality CEO, Stefan Magdalinski on the matter. * * * ------------------------ Jim Comptech Systems. Tel: 254 20 2503637, 254 716 852202, 254 735 195969 Occidental Plaza, 4th Flr., Muthithi Rd. Westlands. P.O.Box 73639 - 00200, Nairobi, Kenya.** http://www.jimcomptech.com* * * * * On Sun, Jan 29, 2012 at 12:00 PM, <kictanet-request(a)lists.kictanet.or.ke>wrote: > Send kictanet mailing list submissions to > kictanet(a)lists.kictanet.or.ke > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.kictanet.or.ke/mailman/listinfo/kictanet > or, via email, send a message with subject or body 'help' to > kictanet-request(a)lists.kictanet.or.ke > > You can reach the person managing the list at > kictanet-owner(a)lists.kictanet.or.ke > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of kictanet digest..." > > > Today's Topics: > > 1. Re: E-Voting | Information Security (Edwin Onchari) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 28 Jan 2012 23:31:44 +0300 > From: "Edwin Onchari" <eonchari(a)lynxbits.com> > To: "'Walubengo J'" <jwalu(a)yahoo.com> > Cc: 'KICTAnet ICT Policy Discussions' <kictanet(a)lists.kictanet.or.ke> > Subject: Re: [kictanet] E-Voting | Information Security > Message-ID: <000901ccddfb$dcc639d0$9652ad70$@com> > Content-Type: text/plain; charset="iso-8859-1" > > Walu, > > > > I concur??.Spread the risk?have a backing up and an air-tight verification > process for the transmitted data/info. A rigorous authentication > protocol?just like a commander in chief in a first world would when > authorizing a ?nuclear warhead? deployment?because the ramifications of > doing it with error are indeed grave to say the least > > > > Edwin > > From: kictanet-bounces+eonchari=lynxbits.com(a)lists.kictanet.or.ke > [mailto:kictanet-bounces+eonchari=lynxbits.com@lists.kictanet.or.ke] On > Behalf Of Walubengo J > Sent: Saturday, January 28, 2012 7:42 PM > To: Edwin > Cc: KICTAnet ICT Policy Discussions > Subject: Re: [kictanet] E-Voting | Information Security > > > > > Waudo, > > yes, we dont want hackers topping up candidate votes - whether > electronically or physically. So I hope the Election Commission will be > quite keen on this. It might be comforting that the IT Director at the > commission is an ISACA member with the CISM/CISA credentials and this means > he perhaps knows a thing or two about security.;-) > > Muraya. > Yes, there is never anything like 100% security. One simply has to work on > minimising the risk. > > walu. > > --- On Sat, 1/28/12, S.M. Muraya <murigi.muraya(a)gmail.com> wrote: > > > From: S.M. Muraya <murigi.muraya(a)gmail.com> > Subject: [kictanet] E-Voting | Information Security > To: jwalu(a)yahoo.com > Cc: "KICTAnet ICT Policy Discussions" <kictanet(a)lists.kictanet.or.ke> > Date: Saturday, January 28, 2012, 12:39 PM > > Loopholes are never fully sealed... thus continual software patches / > upgrades. > > http://www.wired.com/threatlevel/2012/01/symantec-source-code-hack/ > > We need to follow audit trails enabled in network | storage systems, > involving the OS (file & identification systems), application severs, > clients (packages)... > > > > > > On Fri, Jan 27, 2012 at 6:31 PM, waudo siganga <emailsignet(a)mailcan.com> > wrote: > > Hi Walu - I hope the loopholes that led to the Govt site hackings will have > been resolved else I would not like to imagine the servers of the electoral > commission being hacked as the results are being tallied. No more riots > please! > > > > > > On Fri, Jan 27, 2012, at 07:15 AM, Walubengo J wrote: > > > Now that Kenya might go e-Voting this year (http://tinyurl.com/7dbctnl) > why > not support the researcher below as she figures out it it will work or not. > > walu. > > --- On Fri, 1/27/12, Maina Olembo <maina.olembo(a)cased.de> wrote: > > > From: Maina Olembo <maina.olembo(a)cased.de> > Subject: RE: Survey on Internet Voting and Polling Station Voting in Kenya > To: jwalu(a)yahoo.com > Date: Friday, January 27, 2012, 3:04 PM > > Hallo, > > I would like to ask for a few minutes of your time. > > I am carrying out a study as part of doctoral research on Internet voting > and polling station voting in Kenya. The goal of this study is to gain > insight on perceptions of polling station voting and Internet voting. > > If you would like to participate, please click on the link below: > > > Fill out questionnaire > < > https://www.soscisurvey.de/InternetVoting/index.php?q=SurveyIVotingKE&l=eng > > > > > > The password is internet. > > Thank you in advance for your time and interest. > > Your input is invaluable. > > -- > Maina M. Olembo > Doctoral Researcher > SecUSo - IT Security, Usability and Society > > Center for Advanced Security Research Darmstadt > TU Darmstadt > Department of Computer Science > Building S2|02 > Hochschulstra?e 10 > D-64289 Darmstadt > > Phone: +49(0) 6151 16 64292 > Fax: +49(0) 6151 16 4825 > Email: maina.olembo(a)cased.de > Web: www.secuso.cased.de > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > http://lists.kictanet.or.ke/mailman/listinfo/kictanet > > Unsubscribe or change your options at > > http://lists.kictanet.or.ke/mailman/options/kictanet/emailsignet%40mailcan.c > om > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for > people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and > development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > > > > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > http://lists.kictanet.or.ke/mailman/listinfo/kictanet > > Unsubscribe or change your options at > > http://lists.kictanet.or.ke/mailman/options/kictanet/murigi.muraya%40gmail.c > om > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for > people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and > development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > > > > > -----Inline Attachment Follows----- > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > http://lists.kictanet.or.ke/mailman/listinfo/kictanet > > Unsubscribe or change your options at > http://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for > people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and > development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > > _____ > > No virus found in this message. > Checked by AVG - www.avg.com > Version: 2012.0.1901 / Virus Database: 2109/4771 - Release Date: 01/27/12 > >

1 0

Re: [kictanet] E-Voting | Information Security
by Matunda Nyanchama 30 Jan '12

30 Jan '12

Friends Very good comments on the above subject. There is substantially reliable (none is foolproof) technology for e-voting, provided there is integrity in the registration process and maintenance of the voter register. Affordable authentication methods exist for assuring that the person claiming to vote is indeed the voter. With the recent court ruling on the next election date, the commission should have sufficient time to put such technology solution in place. And this need not just be for those in the Diaspora but in the end can be extended to all Kenyans. I can see a future where one doesn't have to rush "home" to go and vote but could do so from the comfort of their home, holiday, office or some other such place. Technology, as much as it presents risks of its own, can address issues of integrity in the voting process. Just see how it has reduced the chance for rigging as demonstrated in recent by elections. It is interesting that the disgraced Kivuitu EC had the technology but failed to implement it the way it is done today. A simple tweaking that allows polling stations to send results simultaneously to the national tallying and media centres has substantially cut the potential for tampering that happened at the counting halls whose purpose now is to collate results and confirm what has come from polling stations. Baadaye. ---------------------------------------------------------------------------------------------- Matunda Nyanchama, PhD, CISSP; mnyanchama(a)aganoconsulting.com Agano Consulting Inc.; www.aganoconsulting.com; Twitter: nmatunda; Skype: okiambe ---------------------------------------------------------------------------------------------- Be prepared to face ICT Security failures & know how to respond when they happen! Call: +1-888-587-1150 or info(a)aganoconsulting.com ---------------------------------------------------------------------------------------------- "A bus station is where a bus stops. A train station is where a train stops. On my desk I have a workstation…" - Anonymous ----------------------------------------------------------------------------------------------- This e-mail, including attachments, may be privileged and may contain confidential or proprietary information intended only for the addressee(s). Any other distribution, copying, use, or disclosure is unauthorized and strictly prohibited. If you have received this message in error, please notify the sender immediately by reply e-mail and permanently delete the message, including any attachments, without making a copy. Thank you.

1 0

Dead in the water
by robert yawe 29 Jan '12

29 Jan '12

Hi, A reason why we shall keep trading water unless we get off our tush http://vimeo.com/27543096. Regards Robert Yawe KAY System Technologies Ltd Phoenix House, 6th Floor P O Box 55806 Nairobi, 00200 Kenya Tel: +254722511225, +254202010696

1 0

E-Voting | Information Security
by S.M. Muraya 28 Jan '12

28 Jan '12

Loopholes are never fully sealed... thus continual software patches / upgrades. http://www.wired.com/threatlevel/2012/01/symantec-source-code-hack/ We need to follow audit trails enabled in network | storage systems, involving the OS (file & identification systems), application severs, clients (packages)... On Fri, Jan 27, 2012 at 6:31 PM, waudo siganga <emailsignet(a)mailcan.com>wrote: > Hi Walu - I hope the loopholes that led to the Govt site hackings will > have been resolved else I would not like to imagine the servers of the > electoral commission being hacked as the results are being tallied. No more > riots please! > > > On Fri, Jan 27, 2012, at 07:15 AM, Walubengo J wrote: > > Now that Kenya might go e-Voting this year (http://tinyurl.com/7dbctnl) > why not support the researcher below as she figures out it it will work or > not. > > walu. > > --- On Fri, 1/27/12, Maina Olembo <maina.olembo(a)cased.de> wrote: > > > From: Maina Olembo <maina.olembo(a)cased.de> > Subject: RE: Survey on Internet Voting and Polling Station Voting in Kenya > To: jwalu(a)yahoo.com > Date: Friday, January 27, 2012, 3:04 PM > > Hallo, > > I would like to ask for a few minutes of your time. > > I am carrying out a study as part of doctoral research on Internet voting > and polling station voting in Kenya. The goal of this study is to gain > insight on perceptions of polling station voting and Internet voting. > > If you would like to participate, please click on the link below: > > Fill out questionnaire<https://www.soscisurvey.de/InternetVoting/index.php?q=SurveyIVotingKE&l=eng> > The password is internet. > > Thank you in advance for your time and interest. > > Your input is invaluable. > > -- > Maina M. Olembo > Doctoral Researcher > SecUSo - IT Security, Usability and Society > > Center for Advanced Security Research Darmstadt > TU Darmstadt > Department of Computer Science > Building S2|02 > Hochschulstraße 10 > D-64289 Darmstadt > > Phone: +49(0) 6151 16 64292 > Fax: +49(0) 6151 16 4825 > Email: maina.olembo(a)cased.de > Web: www.secuso.cased.de > > _______________________________________________ > kictanet mailing listkictanet@lists.kictanet.or.kehttp://lists.kictanet.or.ke/mailman/listinfo/kictanet > > Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/emailsignet%40mailcan.… > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. > > > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > http://lists.kictanet.or.ke/mailman/listinfo/kictanet > > Unsubscribe or change your options at > http://lists.kictanet.or.ke/mailman/options/kictanet/murigi.muraya%40gmail.… > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. >

3 2

Re: [kictanet] Interesting Piece ...
by Matunda Nyanchama 28 Jan '12

28 Jan '12

Friends Here are my off the cuff remarks on the provocative piece. My suggestion: let's not be too defensive; truth can be bitter. On innovation: take the example of the automobile and semiconductor industries. A lot of countries started with fabricating parts; soon they did sub-assemblies as their precision engineering developed and soon they were making whole cars/computers/etc/. The Nyayo Car project was on the right cause if only it has realized capacity in the fabrication of parts and needed engineering and manufacturing processes. I recently saw news of a mechanic that used to service shock absorbers but now fabricates them; and people find these last longer that original ones not suited to our rough roads! He is on the right path and should, in fact, be encouraged with incentives and (possibly) injection of capital. In the west, investors would be hovering around to offer the person either a buyout or equity investment in order to expand the business which has huge regional potential as few people are in the business. Where is old money when it is needed here?? Regards. ---------------------------------------------------------------------------------------------- Matunda Nyanchama, PhD, CISSP; mnyanchama(a)aganoconsulting.com Agano Consulting Inc.; www.aganoconsulting.com; Twitter: nmatunda; Skype: okiambe ---------------------------------------------------------------------------------------------- Be prepared to face ICT Security failures & know how to respond when they happen! Call: +1-888-587-1150 or info(a)aganoconsulting.com ---------------------------------------------------------------------------------------------- "A bus station is where a bus stops. A train station is where a train stops. On my desk I have a workstation…" - Anonymous ----------------------------------------------------------------------------------------------- This e-mail, including attachments, may be privileged and may contain confidential or proprietary information intended only for the addressee(s). Any other distribution, copying, use, or disclosure is unauthorized and strictly prohibited. If you have received this message in error, please notify the sender immediately by reply e-mail and permanently delete the message, including any attachments, without making a copy. Thank you.

4 3

Fw: RE: Survey on Internet Voting and Polling Station Voting in Kenya
by Walubengo J 27 Jan '12

27 Jan '12

Now that Kenya might go e-Voting this year (http://tinyurl.com/7dbctnl) why not support the researcher below as she figures out it it will work or not. walu. --- On Fri, 1/27/12, Maina Olembo <maina.olembo(a)cased.de> wrote: From: Maina Olembo <maina.olembo(a)cased.de> Subject: RE: Survey on Internet Voting and Polling Station Voting in Kenya To: jwalu(a)yahoo.com Date: Friday, January 27, 2012, 3:04 PM Hallo, I would like to ask for a few minutes of your time. I am carrying out a study as part of doctoral research on Internet voting and polling station voting in Kenya. The goal of this study is to gain insight on perceptions of polling station voting and Internet voting. If you would like to participate, please click on the link below: Fill out questionnaire The password is internet. Thank you in advance for your time and interest. Your input is invaluable. -- Maina M. Olembo Doctoral Researcher SecUSo - IT Security, Usability and Society Center for Advanced Security Research Darmstadt TU Darmstadt Department of Computer Science Building S2|02 Hochschulstraße 10 D-64289 Darmstadt Phone: +49(0) 6151 16 64292 Fax: +49(0) 6151 16 4825 Email: maina.olembo(a)cased.de Web: www.secuso.cased.de

2 1

TCO & Cloud
by robert yawe 27 Jan '12

27 Jan '12

Hi Listers, I came across a news item about how KREP Bank is to "invest" US 600,000/- (Kes 52,000,000 aka 52 Million) for a new banking software. The system, Temenos T24, is a monster of an application also being under used by Kenya Commercial Bank in addition the Kenya Bankers SACCO barely uses it in a single site. We keep bragging about how we are a technology savvy nation and developing a knowledge economy yet we are the most under-utilisers of technology. Which is a clear explanation why Vodafone cannot understand our obsession with wanting the MPesa servers installed in Kenya yet I am sure we currently utilise less than 1% of the capacity of the servers in Germany and 5% for 2 days in a month. Temenos can handle over 3,000 transactions per second and handle over 25 million accounts across 2,000 branches http://sqlcat.com/sqlcat/b/technicalnotes/archive/2011/04/26/lessons-learne…. Temenos can handle the needs of all the banks in Kenya (approximately 6 million unique accounts) and still not break a sweat while consuming less energy and resources than a mobile base station. Please let no one raise the issue of lost IT jobs because last time I checked a server was not a charcoal "jiko" that needs fanning. KREP has less than 200,000 accounts & 35 branches http://www.k-repbank.com/branches.html, with Temenos they can run a transaction for each one of their clients every 58 seconds so what does the application do the rest of the time? Kenya Bankers SACCO is an even more telling story with 1 branch and less than 20,000 members also uses Temenos that is internally installed. If Equity was to use the same software it will take 21 minutes to run a transaction for each of its 4.3 million clients so why do we complain when MPesa takes 5 minutes (over 14 million accounts) to handle a transaction on the 15th and 30th of the month? I am sure many of you in the banking sector are wreathing in anger because I am refusing to acknowledge that the data needs to be kept secure that is why you must look the servers in your individual server rooms. So why doesnt the same arise when you open up your applications to KenSwitch for shared ATMs, to the mobile providers for mobile banking and to the ISPs for online banking.a Here is my solution, Safaricom (I am using them as an example as they are less likely to sue me) buys off all the licenses of Temenos that all those small banks, DTMFIs, MFIs and SACCOs have bought and then install Temenos in their 2 billion cloud. Buy all those Sun and HP servers that have been running those core banking systems and donate them to universities around the country, they can recover the costs by writing them off next year as obsolete therefore passing on the cost to the taxman. Then they can offer a complete package to the banks for using the cloud services without a nimbus and stratus pricing structure. Safaricom, being experts at per second billing, can offer a similar solution to the financial institutions for use of the system. To the financial institutions the use of the cloud will be treated as an expense therefore reducing their tax obligations. What about the staff you say, the only ones who are likely to loose are service providers like myself who have actually become over glorified cleaners more because we charge more than really the service we render. We have all been throwing profanities at the Walter of the Lazy African article fame yet we continue to prove him right every single day, yes, you, him, her and I. Have a lazy day. Regards Robert Yawe KAY System Technologies Ltd Phoenix House, 6th Floor P O Box 55806 Nairobi, 00200 Kenya Tel: +254722511225, +254202010696

2 4

joseph chacha nyamohanga invites you to use Boxbe
by joseph chacha nyamohanga 27 Jan '12

27 Jan '12

I'm inviting you to join Boxbe. Here's the link: https://www.boxbe.com/register?tc=10548296082_99399748 -joseph This message was sent at the request of jn.chacha(a)gmail.com. If you want to opt-out of invitations from Boxbe members, use this link: https://www.boxbe.com/unsubscribe?email=kictanet@lists.kictanet.or.ke&tc=10… Boxbe, Inc. | 2390 Chestnut Street #201 | San Francisco, CA 94123

1 0

Interesting Piece ...
by Agosta Liko 27 Jan '12

27 Jan '12

http://mindofmalaka.wordpress.com/2012/01/18/you-lazy-intellectual-african-…

14 21