June 2017 - KICTANet

Fwd: [afnog] What’s Your #1 IPv6 Deployment Challenge?
by Barrack Otieno 07 Jun '17

07 Jun '17

---------- Forwarded message ---------- From: Mukom Akong T. <mukom.tamon(a)gmail.com> Date: Wed, Jun 7, 2017 at 10:59 AM Subject: [afnog] What’s Your #1 IPv6 Deployment Challenge? To: afnog <afnog(a)afnog.org> AFRINIC Ltd is setting up a Deployment Support unit to help drive implementation of IPv6. We need your help to structure our activities and together change the story of IPv6 deployment in Africa. Please take 10 minutes to tell us how we can help you shine at work and in the community by deploying IPv6, click here <http://bit.ly/2qoxKgF> http://bit.ly/2qoxKgF and tell us your #1 challenge. Warm regards -- Mukom Akong T. LinkedIn:Mukom <https://www.linkedin.com/in/mukom> | twitter: @perfexcellent ------------------------------------------------------------ ------------------------------------------------------------ ------------------ “When you work, you are the FLUTE through whose lungs the whispering of the hours turns to MUSIC" - Kahlil Gibran ------------------------------------------------------------ ------------------------------------------------------------ ------------------- _______________________________________________ afnog mailing list https://www.afnog.org/mailman/listinfo/afnog -- Barrack O. Otieno +254721325277 +254733206359 Skype: barrack.otieno PGP ID: 0x2611D86A

1 0

Malware-as-a-service (MaaS)
by Admin CampusCiti 07 Jun '17

07 Jun '17

From SaaS to PaaS to MaaS.. In May 2017, a new form of ransomware called WannaCry affected more than 230,000 personal and business computers in over 150 countries. The ransomware affected organizations, such as Deutsche Bahn AG (a German railway company), NHS Scotland (the publicly funded healthcare system in Scotland), National Health Service of England, Saudi Telecom Company, and FedEx (an international courier delivery services company). The ransomware attack is now estimated to be one of the largest global security incidents in the history of the Web. WannaCry is based on the security exploit EternalBlue developed by the U.S. National Security Agency. WannaCry was released by the hacker group The Shadow Brokers. The Shadow Brokers announced that they provide cybercriminals with the opportunity to purchase paid subscription services allowing them to access various exploits and data stolen from important organizations. The hacking group claims to have data from Russian, North Korean, Iranian, and Chinese nuclear weapons, as well as data from the Swift banking network. Thus, shortly, we may witness the increasing popularity of a new Web-based service, namely, malware-as-a-service. The purpose of this article is to examine the history of malware-as-a-service (Section 2), the ecosystem of malware-as-a-service (Section 3), and the state of the art and the future of malware-as-a-service (Section 4). Finally, we draw a conclusion (Section 5). Read on:- http://resources.infosecinstitute.com/malware-as-a-service/?utm_source=feed… Ali Hussein Hussein & Associates +254 0713 601113 / 0770906375 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim Blog: www.alyhussein.com "Discovery consists in seeing what everyone else has seen and thinking what no one else has thought". ~ Albert Szent-Györgyi Sent from my iPad

6 5

Register now for the UNSSC Leveraging Big Data for SDG training from 27-29 June 2017
by Alvin Gachie 06 Jun '17

06 Jun '17

To: Date: 06-06-2017 02:25 PM Subject: Register now for the UNSSC Leveraging Big Data for SDG training from 27-29 June 2017 Sent by: ------------------------------ Dear Colleagues, The UN System Staff college is running the course attached in the flyer from 27-29 June in our beautiful UN compound in Nairobi. Please contact *u.caruso(a)unssc.org* <u.caruso(a)unssc.org> for information and registration. Best Regards, The information contained in or accompanying this email and any attachment thereto, is intended solely for the use of the stated recipient(s) and may contain information that is confidential and/or legally privileged. Any disclosure, dissemination, distribution or copying of this email and any attachment by anyone who is not a stated recipient is strictly prohibited. If you receive this message in error, please notify the sender immediately and permanently delete the message and any attachment from your system without retaining a copy.

1 0

<O.T.> Masters' Degree Scholarships...
by Michael Bullut 06 Jun '17

06 Jun '17

Greetings Team, Does anyone know of any program that offers Masters' degree scholarships to potential students especially in the tourism sector? Warm regards, Michael Bullut. --- *Cell:* *+254 723 393 114.**Skype Name:* *Michael Bullut.* *Twitter:* * @Kipsang <http://twitter.com/Kipsang/>* *Blog: http://www.kipsang.com/ <http://www.kipsang.com/>* *E-mail:* *main(a)kipsang.com <main(a)kipsang.com>* *---*

1 0

Call to participate: The 2nd Edition of Kenya School of Internet Governance (KeSIG)
by Grace Githaiga 06 Jun '17

06 Jun '17

Dear Listers KICTANet in partnership with Facebook is pleased to announce an open call for participants interested in taking part in the second Kenya School of Internet Governance (KeSIG). We are interested in getting citizens from all sectors: government, academia, tech community, civil society, bloggers and journalists who are new to Internet Governance issues. KeSIG is an introductory course covering technical, economic, legal and contemporary social issues brought about by the Internet. The main topics to be covered include: a. Introduction to Internet Governance b. Main issues in Internet Governance in Kenya c. Kenya’s Internet Governance policy /legal framework(s) d. Internet Governance processes and how to engage in them. The training will use a participatory approach and will have faculty sourced from all stakeholder groups. It will take place at Laico Regency from 3-5 July, 2017. Those who will be selected will also be invited to participate in the Kenya IGF scheduled for July 6, 2017 at the same venue. Please apply here. [1] If you have any questions, do not hesitate to get in touch with Liz Orembo lizorembo(a)kictanet.or.ke Best regards Githaiga, Grace Co-Convenor Kenya ICT Action Network (KICTANet) Twitter:@ggithaiga Tel: 254722701495 Skype: gracegithaiga Alternate email: ggithaiga(a)hotmail.com Linkedin: https://www.linkedin.com/in/gracegithaiga www.kictanet.or.ke "Change only happens when ordinary people get involved, get engaged and come together to demand it. I am asking you to believe. Not in my ability to bring about change – but in yours"---Barrack Obama. Links: ------ [1] https://docs.google.com/forms/d/e/1FAIpQLSc49n-Rgcg74oyQRbDALpJb7Z0aYd0R0Hu…

1 0

PHOENIX SIEM at 4th Africahackon Conference
by BRIGHT GAMELI 06 Jun '17

06 Jun '17

We all need visibility in our networks and organizations. Tracking down incidences LIVE and knowing what actions to take to mitigate threats is a lacking skill and knowledge in most organizations. This is due to the fact that some most people do not know what type of appliance to get for their network or how to utilize it to maximum capability. A hacker can infiltrate your network and stay for years without you noticing. Worse case be ex-filtrating data in slow packets not to trigger alarms. Come see how the PHOENIX Security Incident and Event Management Tool helps you to have Visibility and stop attacks real time at the 4th Annual AfricaHackon Conference. Tickets and other program line up on the website. www.africahackon.com ~ze3D~

1 0

Public advisory on provision of ICT services from licensed and compliant entities only.pdf
by Wambua, Christopher 06 Jun '17

06 Jun '17

Listers, Further to the commitment made last week, attached is the revised public advisory on provision of ICT services from licensed and compliant entities. On behalf of the Authority, I wish to thank the community for the feedback on the initial public notice, which led to the revision of the public notice for the sole purpose of ensuring clarity. The revised public notice will be published in tomorrow’s edition of My Gov. Regards, Christopher Wambua Ag. Director/Consumer and Public Affairs | Consumer and Public Affairs [cid:B600E33D-2591-428A-B032-48FA10AD542B] Tel: +254 20 4242000/209 Mobile: +254 703 042209/ +254 730172209 P.O. Box 14448 Nairobi 00800 [cid:F207BD04-1375-4FF1-827E-613846131A66]wambua@ca.go.ke<mailto:wambua@ca.go.ke> [cid:FCA81DD9-0723-4033-8B5F-490689221588] Communications Authority of Kenya<https://www.facebook.com/CAOKenya?ref=hl> [cid:0068AD87-FA66-49D4-90ED-FBD1A3565A9C] ca_kenya <https://twitter.com/CA_Kenya> [cid:53D396FD-3301-4144-8BC4-870010CC0122] www.ca.go.ke <http://www.ca.go.ke/> [cid:22EF7D3B-AB8B-4149-AB3B-B68FE5533DE5] Disclaimer: This email and any files transmitted with it are confidential and intended solely for the use by the individual(s) or entity to whom it is addressed to. If you are not the intended recipient, you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. Additionally, if you have received this email in error please notify the sender immediately by a reply e-mail. [cid:EBB9BF21-4147-4682-B7AC-E862A0C78F33]

7 7

Fw: [Internet Policy] Berlin court rules parents have no right to dead child's Facebook account
by WANGARI KABIRU 06 Jun '17

06 Jun '17

Warm greetings! The last time I heard on child online safety locally the message was "Parents, get to know what your child is doing online". Does this apply only when alive.....or even while resting in piece? Overall, legacy issues here - email accounts and other online (digital) avenues. Be blessed. Regards/Wangari --- Pray God Bless. 2013Wangari circa - "Being of the Light, We are Restored Through Faith in Mind, Body and Spirit; We Manifest The Kingdom of God on Earth". On Tuesday, 6 June 2017, 6:30, Olévié Kouami <olivierkouami(a)gmail.com> wrote: Hi everyone. Just to share with you the following lines read on the FB Wall of a closed friend if me. I totalité concur.'As a parent of a soon-to-become-teenager, I know that I should be involved in and educating their digital life. I don't mean to be intrusive, but present. I need to know and be aware of online dangers and things like cyber-bullying, cyber-stalking, or abusive/dangerous/suspicious messages. I need to educate my kids about these dangers, and even advocate for such education/training in their schools. At home, ofcourse it helps to create an environment of trust and dialogue where my children will feel comfortable telling me about their challenges.' Warm regardsOlévié Le 4 juin 2017 22:17, "Botzko, Stephen" <Stephen.Botzko(a)polycom.com> a écrit : Facebook's approach to privacy protection in these cases looks simple to me - designated legacy contacts have full access, anyone else needs a court order to see anything private. If a court decides that the estate executor (or anyone else) is entitled to access, then the court provides the order, and Facebook complies. This should provide the best legal protection for Facebook, as they never make the decision on when to provide access. That's only done by the original account owner, or by a court. And Facebook never needs to get into the complexity of figuring out who owns the digital assets after death. Memorialization is distinct from legacy contact BTW - and the legacy contact. >>> I am not sure how to frame the entire question: when you write a long, important post on FB, who owns it? You or FB? FB doesn't claim to own your post - their terms of service give them a transferrable right to use it, but not ownership. As far as I can see from the terms of service, that right to use continues after your death. It lasts until two conditions are met: (a) your account is deleted AND (b) no one else on FB is sharing your content. The way I read their terms, they also stop short of saying that you own the post. That makes sense to me, as far as they know you might be plagiarizing someone else. Stephen -----Original Message----- From: InternetPolicy [mailto:internetpolicy- bounces(a)elists.isoc.org] On Behalf Of mario chiari Sent: Sunday, June 04, 2017 4:34 PM To: James Gannon <james(a)cyberinvasion.net>; Richard Hill <rhill(a)hill-a.ch> Cc: 'ISOC Policy' <internetpolicy(a)elists.isoc. org> Subject: Re: [Internet Policy] Berlin court rules parents have no right to dead child's Facebook account Hi James, On Sun, 2017-06-04 at 09:02 +0000, James Gannon wrote: > Can I ask that people when wanting to talk about a topic at least go > and read the topics in question: > > From Facebook, https://www.facebook.com/help/ 1506822589577997/ > > What will happen to my Facebook account if I pass away? > You can tell us in advance whether you’d like to have your account > memorialized or permanently deleted from Facebook. > No one can log into a memorialized account > > Why can't I log into a memorialized account on Facebook? > If Facebook is made aware that a person has passed away, it's our > policy to memorialize the account. > Please keep in mind that it's always against the Facebook Terms to > log into another person's account. We'll only be able to give you access to > an account if we can verify that it’s your own > account. Besides whether or not those guidelines are in accordance with law of the different country where FB operates, even they (which by the way do not seem to be included in the contractual terms of use, I do not see them implied by https: //www.facebook.com/legal/terms ) are somehow stating that a "executor of the account holder" may ask to delete the account - apparently including "data stored in backup systems" - of the deceased, see section "How do I request the removal of a deceased family member's Facebook account?". So, it does seem that FB recognizes that an 'executor'(heir) may ask to delete, but not to download!, data stored in backup systems related to the deceased user. By a quick browsing, it is not clear to me how FB intends to marry that with its own talk about to let a user to choose to memorialize an account, 'legacy contacts' (see https://www.facebook.com/help/ 1568013990080948?helpref= search&sr =1&query=Legacy%20Contacts) and similar. I am not sure how to frame the entire question: when you write a long, important post on FB, who owns it? You or FB? > > As to my safety deposit box situation yes that is what is in my > contract that unless I state otherwise in my will my box is not to be > shared with anyone including my heirs. Frankly, I do not understand: are you saying that the content of that box, in the unfortunate case in 1000 years, will be seized by your safety box provider? Is that by default under USA law, unless you state otherwise in your will? Thanks for your replies cheers mario > > -JG > > -----Original Message----- > From: mario chiari [mailto:posta@mariochiari.net] > Sent: 04 June 2017 09:48 > To: James Gannon <james(a)cyberinvasion.net>; Richard Hill <rhill(a)hill-a.ch> > Cc: 'ISOC Policy' <internetpolicy(a)elists.isoc. org> > Subject: Re: [Internet Policy] Berlin court rules parents have no right to > dead child's Facebook account > > Hi James, > > On Sat, 2017-06-03 at 14:51 +0000, James Gannon wrote: > > > > No my express wishes may be enshrined in the contract I sign with the > > vendor at any point, that construct is not only allowed through my will. > You wrote about "a express provision in the contract [you] have [with your] > safe deposit box [providers] such [you] expect them to keep [your] personal > effects private". In your real case, is that so that it will shield those > providers from your heirs, even in the case of your passing away? > > I have a safety box at my bank office too, my understanding is that by default > (under contractual terms for safety box most common in Italy) it will be > accessible to my heirs. > > > > > Your position of relegation of rights on death is frankly strange, > > just because a person is dead does not mean they lose all of the > > rights of contracts they have signed during their life. > I am not claiming a so general proposition (about all of the rights), but I do > not see how that German underage could have signed anything such to keep > her/his FB account unaccessible from her/his parents, even in case of her/his > passing away. I doubt anything similar is even remotely implied by her/his > undersigning FB's terms of use. Do you think otherwise? > > thanks, best wishes > mario > > ..... > > > > > > > > > > > > > On Sat, 2017-06-03 at 11:05 +0000, James Gannon wrote: > > > > > > > > > > > > > > > > Unless I express otherwise in my will or in the contact with the > > > > PO box company I would of course expect them to keep my personal > > > > effects private, this is an express provision in many contracts > > > > that are expected to last until death, for example I know there is > > > > such a provision in the contract I have in my safe deposit box. > > > > > > > > -J > ....

1 0

Je NTSA Kenya?: Trump admin revising driverless car guidelines
by WANGARI KABIRU 06 Jun '17

06 Jun '17

http://thehill.com/policy/transportation/336462-trump-admin-revising-driver… Blessed Tuesday! While curious on Kenya's NTSA guide on autonomous vehicles in Kenya (East Africa), I find the below to be extendable for coexistence and shared prosperity as the statement of the century across evolving technologies for Kenya's Silicon Savannah; "But Chao said Silicon Valley needs to “step up” and be more forthcoming with information about self-driving cars in an effort to better educate both the government and public about the emerging technology. “A lot of the technology comes from Silicon Valley,” Chao said, according to Bloomberg. “They have a responsibility to educate the rest of the American public on the technologies they’re thinking about, technologies which are miles and miles ahead of most people’s understanding.” Be blessed. Regards/Wanngari --- Pray God Bless. 2013Wangari circa - "Being of the Light, We are Restored Through Faith in Mind, Body and Spirit; We Manifest The Kingdom of God on Earth". Trump admin revising driverless car guidelines | | | | | | | | | | | Trump admin revising driverless car guidelines By Melanie Zanona Updated guidance on the emerging technology is expected to be released in the next few months, said Transportati... | | | | Trump admin revising driverless car guidelines By Melanie Zanona - 06/05/17 08:21 PM EDT 3 0 © Getty The Trump administration is reportedly revising Obama-era guidelines for driverless vehicles. Updated guidance on the emerging technology is expected to be released in the next few months, said Transportation Secretary Elaine Chao, according to multiple reports. "The pressure is mounting for the federal government to do something," Chao said during a conference in Detroit on Monday, according to Reuters. The new guidance will focus on spurring industry innovation and encouraging "new entrants and ideas that deliver safer vehicles,” Chao added. But she also emphasized that the agency would not rush to draft binding regulations on self-driving cars. “Too quick of movement toward rules may not be sustainable in the long term,” Chao said, according to Bloomberg. “We don’t want to have rules that may impede future advances.”ADVERTISEMENTThe administration has been re-evaluating the flexible, voluntary guidelines for autonomous vehicles that were released last fall. The framework includes a 15-point safety assessment for automakers that is meant to be subjected to the formal rulemaking process. The guidelines also include model policy for states in an effort to avoid a messy patchwork of regulations across the country. The industry has searched for clues about how Trump will approach autonomous vehicle regulations, with some expecting his administration to have a lighter touch. Most industry representatives have called the driverless car guidelines a good first step, but think some improvements could be made. Driverless car developers have raised concern that states are trying to make the voluntary safety checklist mandatory, while others have taken issue with being asked to share significant data about their technology. The industry has also urged policymakers to ease certain safety standards that don’t apply to traditional automobiles, which they say could hamper innovation and testing. But Chao said Silicon Valley needs to “step up” and be more forthcoming with information about self-driving cars in an effort to better educate both the government and public about the emerging technology. “A lot of the technology comes from Silicon Valley,” Chao said, according to Bloomberg. “They have a responsibility to educate the rest of the American public on the technologies they’re thinking about, technologies which are miles and miles ahead of most people’s understanding.”

1 0

CA's cyber threat reports
by Andrew Alston 05 Jun '17

05 Jun '17

Hi All, This morning I got an interesting email from cirt(a)ca.go.ke<mailto:cirt@ca.go.ke> as regards open RDP ports on the network. Now, I've got a few questions about this - a.) Has anyone else had similar reports b.) Ports can be open for many reasons - and they sit on private companies machines and companies have the right to firewall or not firewall dependent on a multitude of reasons - why are these being put out as an incident report c.) Under what premise does anyone - be they cert or otherwise - have the authority to run scans against private networks and systems - I was under the impression that port scanning private systems was not allowed? I'm kinda concerned here when a report shows up that clearly indicates that targeted scans have been made - particularly since some of the IP addresses in that report are not even inside Kenya and sit on IP addresses belonging to clients who have in no way authorized security scans against themselves. Anyone got any thoughts or comments? Andrew

4 4