April 2019 - KICTANet

Re: [kictanet] New Cabinet - Wish List ?
by Barrack Otieno 18 Jul '24

18 Jul '24

Listers, This is indeed good news. We have a lot of hope in Mucheru and Victor Kyalo industry veterans who have indeed worked their way through the trenches. Most importantly we hope to see the return of a multi stakeholder form of engagement in the sector which we have been yearning for in a while. I think as a sector we might need to prepare a wish list for our new leaders and most importantly commit to work with them towards achieving their mandate. The reshuffle is timely still it comes at the end of the year and will allow us to start 2016 on a new slate. Thank you Best Regards On 11/24/15, GG via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: > +1 Grace. > > Sending them positive energy! And glad that the two were among the KICTANet > founders. > Rgds. > > --- Original Message --- > > From: "Grace Mutung'u (Bomu) via kictanet" <kictanet(a)lists.kictanet.or.ke> > Sent: 24 November 2015 22:35 > To: ggithaiga(a)hotmail.com > Cc: "Grace Mutung'u (Bomu)" <nmutungu(a)gmail.com> > Subject: Re: [kictanet] New Cabinet > > One of the issues (I think issue no.3) in the President's speech was > accessibility of leaders to wananchi. With Joe and Kyalo I think we shall > have better ears. > > Congratulations! > > May they pass the vetting. > > Regards, > On 24 Nov 2015 21:29, "Evans Ikua via kictanet" < > kictanet(a)lists.kictanet.or.ke> wrote: > >> @Ngigi you are right. But in the current dispensation, a CS is still >> expected to be a technocrat, as opposed to the days of yore when minister >> was politician. So they will both be at home in their respective >> positions. >> Especially Victor as the accounting officer with his many years in >> government. That's the right position. >> >> Evans >> On Nov 24, 2015 9:17 PM, "Waithaka Ngigi" <ngigi(a)at.co.ke> wrote: >> >>> Evans, >>> >>> Joe Mucheru & Victor Kyalo are old hands in. KE ICT. Both have been >>> entrepreneurs and then at some point moved on to various ventures. So we >>> shouldn't go wrong ‎with either. >>> >>> However, what's the better fit? Mucheru at CS, Victor at PS or the other >>> way round? Victor CS, Mucheru PS? >>> >>> Waithaka Ngigi >>> >>> Alliance Technologies >>> www.at.co.ke >>> *From: *Evans Ikua via kictanet >>> *Sent: *Tuesday, November 24, 2015 8:50 PM >>> *To: *Ngigi Waithaka >>> *Reply To: *KICTAnet ICT Policy Discussions >>> *Cc: *Evans Ikua >>> *Subject: *Re: [kictanet] New Cabinet >>> >>> Congrats Hon Joe! That's a great choice for the ICT industry. Well out >>> H.E. >>> >>> Ikua >>> On Nov 24, 2015 8:45 PM, "waudo siganga via kictanet" < >>> kictanet(a)lists.kictanet.or.ke> wrote: >>> >>>> Congratulations to Joe Mucheru! >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> >>>> Unsubscribe or change your options at >>>> https://lists.kictanet.or.ke/mailman/options/kictanet/ikua.evans%40gmail.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and >>>> development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and >>>> bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, >>>> do >>>> not spam, do not market your wares or qualifications. >>>> >>> >>> >> _______________________________________________ >> kictanet mailing list >> kictanet(a)lists.kictanet.or.ke >> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >> >> Unsubscribe or change your options at >> https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com >> >> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >> for people and institutions interested and involved in ICT policy and >> regulation. The network aims to act as a catalyst for reform in the ICT >> sector in support of the national aim of ICT enabled growth and >> development. >> >> KICTANetiquette : Adhere to the same standards of acceptable behaviors >> online that you follow in real life: respect people's times and >> bandwidth, >> share knowledge, don't flame or abuse or personalize, respect privacy, do >> not spam, do not market your wares or qualifications. >> > -- Barrack O. Otieno +254721325277 +254-20-2498789 Skype: barrack.otieno http://www.otienobarrack.me.ke/

3 3

KICTANet Preliminary Observations on Technology Deployment in Kenya’s General Election 2017
by Grace Githaiga 17 Sep '20

17 Sep '20

Listers Greetings. Please find attached an interim report on KICTANet's observation on the technology deployment of the electoral process from a user end perspective. We are working an elaborate report and will share in due course. We thank all our observers and all members who contributed to all the discussions on the topic of technology use in the elections. Best regards Githaiga, Grace Co-Convenor Kenya ICT Action Network (KICTANet) Twitter:@ggithaiga Tel: 254722701495 Skype: gracegithaiga Alternate email: ggithaiga(a)hotmail.com<mailto:ggithaiga@hotmail.com> Linkedin: https://www.linkedin.com/in/gracegithaiga www.kictanet.or.ke "Change only happens when ordinary people get involved, get engaged and come together to demand it. I am asking you to believe. Not in my ability to bring about change – but in yours"---Barrack Obama. ---------------------------------------------------------------------------------- Grace Githaiga Twitter: @ggithaiga Skype: gracegithaiga Linkedin: https://www.linkedin.com/in/gracegithaiga ...the most important office in a democracy is the citizen. So, you see, that’s what our democracy demands. It needs you!----Barrack Obama.

4 3

Mesh Networks in South Africa
by Joash Moitui 17 Sep '19

17 Sep '19

Dear all, Innovative mesh networks in South Africa are connecting the connected for less than $2 a month. https://www.bbc.com/news/av/world-africa-47723967/internet-access-in-africa… Could this be the solution for connecting thousands in rural Kenya? Best, Joash Moitui ~Sent from mobile device. Apologies for brevity and typos ~

8 8

[strategic inefficiency is what creates a large number jobs] Jobs fall to 6 year low despite GDP "boom".
by Patrick A. M. Maina 07 Jul '19

07 Jul '19

Dear listers, In order to create jobs, the government should move away from policies that focus on increasing efficiency to those that are strategically inefficient. Examples: 1. SMEs, e. g. cottage industries, are inefficient - compared to larger factories, but they can create exponentially more jobs with less tax breaks. Most SMEs also spend all their revenues in Kenya, while promoting other dependent MSMEs.. unlike large corporations which tend to move funds abroad for different reasons (tax, asset protection, hedging, dividends etc). 2. We always see donors (especially, I believe, WB & IMF if I recall correctly) always pushing govt to redirect expenditure from recurrent/wages to "development"/infrastructure (clearly in their own interest as assets can be securitized for their own peace of mind, and more debt can be incurred in dev projects). So they push developing countries to reduce manpower in critical strategic sectors of the economy (less teachers, doctors etc) or to pay below-market wages. What is the impact of such financial efficiency measures? Do they not care that the employees they keep asking to be retrenched are real people with families? Do they not care that manpower reduction means our children get the worst teacher:pupil or doctor:patient or police:civillian ratios? Such recommendations lead to massive hidden costs downstream that cannot be attributed (e.g. low quality education, poor healthcare, increased insecurity due to overloaded+underpaid workers). It just looks like we have endless problems of incompetence but it is not by accident... we follow "weaponised advice", designed to keeps us poor. Efficiency efforts should be limited to enabling high impact service delivery (optimized processes) not financial efficiency. Government should find ways/tactical excuses to ignore callous and unethical requests/pressures for cold blooded fiscal efficiency. Public sector Performance Contract targets need to be linked to a basket of grassroots metrics that reflect the general quality of life for the ordinary population (besides GDP, Inflation, NSE Index & exchange rate). This can be presented in dashboard format on eCitizen so that wanjiku can see what is happening, hold officials to account for not delivering and be motivated to support such initiatives (but the data must be *real* to avoid risk of future backlash). Our "missing middle" problem (i.e. a tiny middleclass) needs to be addressdd. It exists because government incentives for business have focused mainly on Micro enterprises which are too inefficient to be sustainable, and large corporations that are too efficient to fill the jobs gap (and too demanding - always asking for endless concessions just to maintain status quo). If you track current incentives given to large corporations and account for all outflows and hidden costs (many of these corporations are the architects of grand corruption in the country) - you will see a MASSIVE NET LOSS / WEALTH EXTRACTION directly attributable to corporate activities (e.g. encouraging harphazard spending, lobbying for bad laws or poor incentives).. despite the appearance of "gains" on simplistic paper reports that ignore the full impact. A thriving middle class (people who are not rich and not poor - with ability to buy a car, spend regularly on mid-level leisure and even save for luxury spending) is what ends poverty and drives a strong economy. Small and Medium-sized Enterprises SME are the key to a thriving middle class and rapid, large scale jobs creation. They tend to lean towards formality, will often have more educated founders, are inefficient because of scale - but not overly so as to be unsustainable like Micro enterprises, and a few will have potential to grow into mega corporations. De-risked MSEs are what attracts high quality FDI in the form of venture capital. So rather than pitch tax breaks to global investors, the government should pitch de-risked high potential small enterprises (the way Israel and some EU countries are doing) whose business model has been proven in order to attract capital to scale up the businesses. The reality of Tax incentives to big corporations is that they only cannibalize the treasury - and these same corporations will do everything they can to minimize local expenditure (even furniture is imported yet we have skilled carpenters), and extract wealth in all manner of ways (e.g. transfer pricing). Most jobs offered by large factories are low level, while skilled jobs (r&d, conceptualization, design, development) will be outsourced with the (false) excuse that Kenyans are not competent. In reality they just want to prevent HIGH VALUE KNOWLEDGE TRANSFER so that locals don't build indigenous alternatives. I know some of the things I write are not supposed to be said because it will spoil some lucrative plunder parties.. but I alsonknow many of you know what I am saying is TRUE because you have seen it being done, heard about it or (God forbid) participated in it . This habit of taming monsters by feeding them with our kids is becoming too much and has to be called out for what it is. The youth are our children. It is our duty to create an enabling ecosystem framework that attracts opportunities and truly rewards them for innovation. We need a Kenyan Steve Jobs or Bill Gates who own their own companies - rather than have them and their ideas gobbled up by monopolistic dinosaur corporations that want to suppress their enterpreneurial dreams supressed in order to delay, the next wave of disruptive innovations. We need hundreds of winning case studies - not tens of mostly foreign owned startups (not that it's a bad thing to have foreign ownership, the key thing is that, given our history of suppressed esteem, our youth desperately need role models they can relate to so that they can start BELIEVING in themselves). We can't just tell youth to be job creators.. that's like telling a starving person to go find food. If they knew how - or where, they would not be starving. The REAL reason we tell the youth to employ themselves - yet we have not created an enabling framework - is because they have caught us napping and we want to deflect responsibility. "We" means anyone over 35 years old whether in privage sector or Government. Our parents didn't give us a gift to keep (the opportunities we enjoyed), they gave us a BATON to pass on in a long term RELAY RACE. Did you drop your baton (I did too)? Pick it up. Ignore the naysayers. Start running. Link: https://www.businessdailyafrica.com/news/Formal-jobs-fall-to-6-year-low-des… Warmest regards,Patrick. Patrick A. M. Maina[Cross-domain Innovator | Public Policy Analyst - Indigenous Innovations]

5 16

In America’s indictment of Huawei some conversations...
by Ali Hussein 02 Jul '19

02 Jul '19

Listers As an ICT Policy practitioner and avid follower of #GeoPolitics the #HuaweiDebacle has great interest to me. Recently our CS ICT, Joseph Mucheru tasked ATU to probe alleged security risks on Huawei and ZTE Equipment. In America’s indictment of Huawei Technologies some interesting conversations:- 1. The Global Cop routine is sort of wearing thin and portraying it not as a force for good but as a bully. 2. Are Chinese companies so dependent on America that a ban by America can kill them? The case of the almost collapse of ZTE Corporation is instructive.. Only a surprise last minute reprieve from #TheDonald saved it from total collapse. 3. Could Huawei Technologies survive a ban by America? Intel Corporation, Seagate Technology and Qualcomm are major suppliers to Huawei Technologies. How will this affect their ability to deliver cutting edge technology to their customers? This last point brings me to wonder how much of the Chinese Technology renaissance is dependent on America? Read on and follow the conversation on LinkedIn. https://www.linkedin.com/feed/update/urn:li:activity:6496196045268090880 Ali Hussein Principal AHK & Associates +254 0713 601113 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim "We are what we repeatedly do. Excellence, therefore, is not an act but a habit." ~ Aristotle Sent from my iPad

2 1

Save the Date: the Kenya Internet Governance Forum 2018 (July 19, 2018)
by Grace Githaiga 25 Jun '19

25 Jun '19

Listers Greetings! This is to let you know that the Kenya Internet Governance Forum 2018 is planned to take place on Thursday July 19, 2018. I will send a call shortly to invite volunteers to help in organizing the forum. The organising committee lead by Victor Kapiyo (he will Chair for the 2nd term) will share further details on venue, topics, speakers with us as the process evolves. Looking forward to seeing as many of you on that day. Best regards Githaiga, Grace Co-Convenor Kenya ICT Action Network (KICTANet) Twitter:@ggithaiga Tel: 254722701495 Skype: gracegithaiga Alternate email: ggithaiga(a)hotmail.com Linkedin: https://www.linkedin.com/in/gracegithaiga www.kictanet.or.ke "Change only happens when ordinary people get involved, get engaged and come together to demand it. I am asking you to believe. Not in my ability to bring about change – but in yours"---Barrack Obama.

16 19

Vodafone denies Huawei Italy security risk
by Adam Lane 03 May '19

03 May '19

Dear Patrick Please note that Vodafone have responded to the inaccurate report from Bloomberg. The report is https://www.bbc.com/news/business-48103430 and copied below. You may also be interested in reading this report: https://www.zdnet.com/article/cisco-removed-its-seventh-backdoor-account-th… explaining that Cisco has already found seven “backdoors” into its equipment just this year alone. This is not a Huawei issue, or an espionage issue. It is a global ICT security issue that all companies are constantly struggling with. As you can read (or ask a technical expert), there are many bugs in many products (your apps on your phone are probably being updated on a weekly basis…) due to the nature of software development which are constantly being found and addressed; companies like Cisco and Huawei (along with customers like Vodafone) to the tests and find these (usually) before going to market (though sometimes afterwards) and address them urgently. I am not sure how this issue of bugs in software relates to multinationals illegally collecting and selling business insights. I am sure the local companies have just as many bugs in their software too, and all of us need to collaborate to address them, improve software development standards, and raise the bar. This is not a policy issue, it is a technical issue. You are certainly right that trust is good for business; unfortunately poor journalism such as that by Bloomberg which published before getting the “other side of the story” from Vodafone itself is not helping. I appreciate that you understand this, as you also referenced the ZDnet article which is much better reporting than Bloomberg, including Instead, Huawei says it was "technical flaws in equipment" which were fixed. "These were technical mistakes in our equipment, which were identified and corrected," the spokesperson said. 'The accepted definition of' backdoors' is deliberately built-in vulnerabilities that can be exploited -- these were not such. They were mistakes which were put right." Regards Adam https://www.bbc.com/news/business-48103430 Vodafone denies Huawei Italy security risk Vodafone has denied a report saying issues found in equipment supplied to it by Huawei in Italy in 2011 and 2012 could have allowed unauthorised access to its fixed-line network there. A Bloomberg report said that Vodafone spotted security flaws in software<https://www.bloomberg.com/news/articles/2019-04-30/vodafone-found-hidden-ba…> that could have given Huawei unauthorised access to Italian homes and businesses. The US refuses to use Huawei equipment for security reasons. However, reports suggest the UK may let the firm help build its 5G network. This is despite the US wanting the UK and its other allies in the "Five Eyes" intelligence grouping - Canada, Australia and New Zealand - to exclude the company. Australia and New Zealand have already blocked telecoms companies from using Huawei equipment in 5G networks, while Canada is reviewing its relationship with the Chinese telecoms firm. In a statement, Vodafone said: "The issues in Italy identified in the Bloomberg story were all resolved and date back to 2011 and 2012. "The 'backdoor' that Bloomberg refers to is Telnet, which is a protocol that is commonly used by many vendors in the industry for performing diagnostic functions. It would not have been accessible from the internet. "Bloomberg is incorrect in saying that this 'could have given Huawei unauthorised access to the carrier's fixed-line network in Italy'. "In addition, we have no evidence of any unauthorised access. This was nothing more than a failure to remove a diagnostic function after development. "The issues were identified by independent security testing, initiated by Vodafone as part of our routine security measures, and fixed at the time by Huawei." A Huawei spokesperson said: 'We were made aware of historical vulnerabilities in 2011 and 2012 and they were addressed at the time. "Software vulnerabilities are an industry-wide challenge. Like every ICT [information and communications technology] vendor, we have a well-established public notification and patching process, and when a vulnerability is identified, we work closely with our partners to take the appropriate corrective action." Several European telecoms operators are considering removing Huawei's equipment from their networks. But the firm's cyber-security chief, John Suffolk, has described the firm as "the most open [and] transparent company in the world". In January, Vodafone "paused" the deployment of Huawei equipment in its core networks in Europe until Western governments resolved their security concerns about the company. Huawei has been accused of being a potential security risk and of being controlled by the Chinese government - allegations it has always firmly denied. With the introduction of the 5G network in the UK approaching, telecoms operators say the way it would work, in a highly integrated system alongside 4G, means that excluding Huawei is not realistic without significant cost and delay, That would include potentially removing existing hardware, leading to the UK falling behind other countries. The company is the world's third-largest supplier of mobile phones, behind Samsung and Apple. Senior Director, Public Affairs Huawei Southern Africa Mobile: +254-7909-85886 Read Huawei Kenya’s First Ever Sustainability Report here<https://www.huawei.com/minisite/explore-kenya/pdf/huawei_kenya_csd_report.p…> From: kictanet [mailto:kictanet-bounces+adam.lane=huawei.com@lists.kictanet.or.ke] On Behalf Of Patrick A. M. Maina via kictanet Sent: Tuesday, April 30, 2019 8:59 PM To: Adam Lane <adam.lane(a)huawei.com> Cc: Patrick A. M. Maina <pmaina2000(a)yahoo.com> Subject: [kictanet] [Economic Espionage Risks] Vodafone has 'acknowledged' that it Found Hidden Backdoors in Huawei Equipment (but says the issues were resolved). Dear Listers, These kinds of global reports should concern Kenyan business CEOs and Boards in all sectors (as well as economic / technology policymakers) - unless Kenya has little or no interest in competing regionally or internationally to generate new streams of foreign exchange; and even then, are we able to protect our local "home turf" competitive advantage, should multinational actors decide to illegally collect and sell (or leverage) unfairly acquired local business insights, in order to give affiliated new entrants unfair advantage over local enterprises? These are legitimate and global policy concerns. If such things are happening in advanced, tech-savvy economies, what about here in Africa? Is the world having a party at our expense? Trust is good for business - but its is not wise to trust blindly. If we refuse to learn from others, or from history, it will be difficult for us to hand over to our children/youth a future that proves that we played our part responsibly as present-day custodians. We need to start thinking of our existence in less selfish terms: as a relay race, where it is our duty to ensure that we pass on a better future to our children/youth. Let's wake each other up. We must start BELIEVING in ourselves and LOVING ourselves so that our children can believe in, and love themselves as well. Excerpts below: ------------------------------- Reported by Bloomberg today (30th April 2019): "[Vodafone] identified hidden backdoors in the software that could have given Huawei unauthorized access to the carrier’s fixed-line network in Italy, a system that provides internet service to millions of homes and businesses, according to Vodafone’s security briefing documents from 2009 and 2011 seen by Bloomberg, as well as people involved in the situation. Vodafone asked Huawei to remove backdoors in home internet routers in 2011 and received assurances from the supplier that the issues were fixed, but further testing revealed that the security vulnerabilities remained, the documents show. Vodafone said Huawei then refused to fully remove the backdoor, citing a manufacturing requirement. The April 2011 document was authored by its Chief Information Security Officer at the time, Bryan Littlefair. 'What is of most concern here is that actions of Huawei in agreeing to remove the code, then trying to hide it, and now refusing to remove it as they need it to remain for ‘quality’ purposes,' Littlefair wrote. 'There’s no specific way to tell that something is a backdoor and most backdoors would be designed to look like a mistake,' said Stefano Zanero, an Associate Professor of Computer Security at Politecnico di Milano University. 'That said, the vulnerabilities described in the Vodafone reports from 2009 and 2011 have all the characteristics of backdoors: deniability, access and a tendency to be placed again in subsequent versions of the code,' he said. Vodafone also identified backdoors in parts of its fixed-access network known as optical service nodes, which are responsible for transporting internet traffic over optical fibers, and other parts called broadband network gateways, which handle subscriber authentication and access to the internet... In Vodafone’s case, the risks included possible third-party access to a customer's personal computer and home network, according to the internal documents. However, Vodafone’s account of the issue was contested by people involved in the security discussions between the companies. [who allege that] Vulnerabilities in both the routers and the fixed access network remained beyond 2012 and were also present in Vodafone’s businesses in the U.K., Germany, Spain and Portugal. Vodafone stuck with Huawei because the services were competitively priced, they said." Links: 1. Vodafone found Hidden Backdoors in Huawei Equipment https://www.bloomberg.com/news/articles/2019-04-30/vodafone-found-hidden-ba… 2. Huawei denies existence of ‘backdoors’ in Vodafone networking equipment https://www.zdnet.com/article/huawei-denies-existence-of-backdoors-in-vodaf… Best regards, Patrick. Patrick A. M. Maina [Cross-domain Innovator | Public Policy Analyst - Indigenous Innovations]

5 6

Re: [kictanet] ict practitioners bill is back
by Ali Hussein 02 May '19

02 May '19

Dear Bwana CS KICTANet NEVER asked KEPSA to handle engagements on our behalf. We engaged KEPSA to work as a team. Period. Never, did we abdicate our responsibilities to KEPSA because we are not KEPSA members. If KEPSA gave you that belief then I'm afraid that you were misled. And KEPSA should apologise for misleading you. *Ali Hussein* *Principal* *Hussein & Associates* Tel: +254 713 601113 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim <http://ke.linkedin.com/in/alihkassim> 13th Floor , Delta Towers, Oracle Wing, Chiromo Road, Westlands, Nairobi, Kenya. Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with. On Sun, Dec 17, 2017 at 4:53 PM, Joseph Mucheru via kictanet < kictanet(a)lists.kictanet.or.ke> wrote: > Ali Hussein, > > This is the reason I keep off this list. You are calling me a liar and yet > your team asked KEPSA to handle the engagements in this matter. > > With all respect going forward let's follow the agreed engagements between > government and private sector. > > Ahsante Sana! > > JM > > > On 17 Dec 2017 11:17, "Ali Hussein via kictanet" < > kictanet(a)lists.kictanet.or.ke> wrote: > > Bwana CS > > With all due respect. You are a senior government official and shouldn’t > peddle untruths. > > KICTANet HAS NEVER BEEN PART OF KEPSA. > > We have collaborated only once on the ICT BIll. Most of us don’t believe > KEPSA is representative of the wider ICT Industry. > > We welcome dialogue with your ministry and KEPSA on this. We are happy to > be included in the conversation. We however CANNOT endorse a dialogue and > discussions we are not party to. > > *Ali Hussein* > *Principal* > *Hussein & Associates* > +254 0713 601113 <+254%20713%20601113> > > Twitter: @AliHKassim > > Skype: abu-jomo > > LinkedIn: http://ke.linkedin.com/in/alihkassim > > "We are what we repeatedly do. Excellence, therefore, is not an act but a > habit." ~ Aristotle > > > Sent from my iPad > > On 17 Dec 2017, at 9:04 AM, Julius Njiraini via kictanet < > kictanet(a)lists.kictanet.or.ke> wrote: > > Digital forensic expert is involved in investigation of fraud, abuse, > embezzlement, larceny, conversion of any digital device, records and > process. The report is supposed to be presented in courtroom and testify as > expert witness. He is also supposed to corroborate evidence with other > segment of crime scene using relevant laws including evidence act, criminal > procedures code and cyber crime laws as best international laws in other > countries > On Dec 17, 2017 8:32 AM, "Julius Njiraini" <njiraini2001(a)gmail.com> wrote: > >> Thanks for your enlightenment. Am just concerned about new emerging >> fields like information security and forensics which is mainly concerned >> with digital cyber crime and evidence presentation in courtroom. These is >> especially concerns for computer security and forensics professionals >> On Dec 17, 2017 6:12 AM, "Joseph Mucheru via kictanet" < >> kictanet(a)lists.kictanet.or.ke> wrote: >> >>> The absence of dialogue and relying on media reports is a recipe for >>> discord. The current views, sentiments and concerns raised in the group are >>> justified only because there is no dialogue. Kicktanet is part of KEPSA >>> <https://kepsa.or.ke> who we are in constant dialogue even on this >>> topic. Going forward, the need to dialogue through the agreed channels is >>> key; >>> >>> So let me try and give a position on where we are; >>> >>> - I did state that we will need a Practitioners Bill and even >>> clarified to media it would not be the current one >>> - There is currently NO Bill in parliament. The last one lapsed and >>> we would need to start afresh >>> - The bill identified a need/gap in our sector that requires some >>> action, especially since ICT is at the heart of the Governments development >>> agenda >>> - The Industry was opposed with the method/solutions proposed by the >>> Bill but not the fact there is a gap >>> - Other Industries have self regulating bodies and if our sector is >>> to grow, we need to get organised and set this up. Why should government >>> have to do it? >>> - We are exporting our skills regionally and internationally and a >>> need to standardise and demonstrate our skills is key. This is because we >>> are not working in isolation, we are competing with other countries and >>> Kenya must be able to demonstrate consistent and quality skills -- today we >>> are blacklisted on various online jobs platforms because of a few bad >>> apples, while we know we have some of the best talents, we are also losing >>> tenders and business because we have not conformed to specific >>> international standards and so the rating of our products/services falls >>> short. (KBS is working on the standards) >>> >>> And for the accusations... >>> >>> - It was a private members bill and not sponsored by Government (We >>> opposed it in its current form - you know that, otherwise google it). >>> - Responding to questions from the sector does not amount to a >>> "roadside decision", considering the level of engagement we have had on >>> this issue >>> - The Government is there to serve the people of Kenya and not just >>> the sector in isolation >>> - Skills Rating systems used by platforms such as Kuhastle.com, >>> upwork.com., cloudfactory.com, monster.com..etc are examples of ways >>> people are able to build and demonstrate skills both technical and otherwise >>> - I have had engagements on this topic with KEPSA (ICT Sector >>> Committee <https://kepsa.or.ke/sector-comittees/>) - Mike Macharia >>> being the Chair >>> - I saw in social media many of you opposed to ICTAK >>> <http://www.ictak.or.ke/> being enjoined in the supreme court >>> presidential petition, but none came out (Kicktanet included) to >>> support/represent the sector, which was at the heart of the dispute. At the >>> very least ICTAK <http://www.ictak.or.ke/> was willing to come >>> forward. >>> - Similar to the Law Society, The Supreme Court should have chosen >>> the ICT experts from the ICT Industry body? >>> >>> My advice would be for the sector to take the lead and suggest how this >>> need/gap of* "SKILLS RATING" standards etc.. *can be addressed. We are >>> on the same side. If industry does not take the lead, then Government will >>> step in. As it stands, industry has various bodies and you need to agree on >>> how to engage amongst yourselves. We are going to be successful and so let >>> us push in the same direction. >>> >>> Finally, today the official engagement between government and the ICT >>> sector is through KEPSA <https://kepsa.or.ke/> . (KICTAnet, TESPOK, >>> KITOS etc.. are members and even when we engaged on the ICT Practitioners >>> bill, the sector was represented by KEPSA, when we met MPs). >>> >>> The last discussion on Tuesday 14th December 2017 between KEPSA and the >>> Ministry covered the following topics; >>> >>> 1. ICT Policy >>> 2. Kick-off Industry meetings >>> 3. Bills / Opinions - ICT Practitioners Bill >>> 4. PDTP <http://icta.go.ke/digitalent/> + Ajira Digital >>> <http://ajiradigital.go.ke/> (Jobs) >>> 5. Flagship Projects >>> 6. Constituency Development Hubs >>> <http://www.ict.go.ke/constituency-to-get-an-innovation-hub/> >>> 7. ICTA Engagement with Counties >>> 8. Enterprise Kenya >>> 9. Blockchain >>> >>> Thank you! >>> >>> On Sun, Dec 17, 2017 at 3:07 AM, Andrew Alston via kictanet < >>> kictanet(a)lists.kictanet.or.ke> wrote: >>> >>>> Hi All, >>>> >>>> >>>> >>>> So – having seen an article in the standardmedia in which elements of >>>> what I stated below were quoted – and to which there seem to have been >>>> responses – I now need to comment further: >>>> >>>> >>>> >>>> (Article found at: https://www.standardmedia.co.k >>>> e/business/article/2001263257/techies-oppose-move-to-introdu >>>> ce-new-ict-watchdog) >>>> >>>> >>>> >>>> >>>> >>>> *Mucheru, however, denies that the Bill will lock out experts without >>>> formal training insisting the reverse will be the case. “This Bill will >>>> benefit the people who have been working in technical capacity for years >>>> but have not acquired certificates,” he explained. “If they can demonstrate >>>> their proficiency to the Institute then they can get certified and widen >>>> the scope of jobs they can bid or apply for.” * >>>> >>>> So – I have a question – What will be the method of demonstrating >>>> proficiency and how will this be tested – and what will it cost – and how >>>> long will it take. >>>> >>>> >>>> >>>> Now – let me break the questions down a bit >>>> >>>> >>>> >>>> 1. The ICT field is vast – are you going to test proficiency in >>>> programming? In networking? In security? In database administration? In >>>> desktop support? In Linux? Freebsd? Microsoft? Solaris? AIX? What is the >>>> test going to be – and who is going to administer these tests >>>> 2. What makes an industry body more capable of testing proficiency >>>> than Cisco, Juniper, Huawei or any of the other vendors – the bill does * >>>> *NOT** cater for industry standard certification outside of formal >>>> education – it simply is not in there – and if you are not going to accept >>>> these and are going to have this industry body determine proficiency – we >>>> need to know how this will be done and how the people testing proficiency >>>> will be qualified to do it – and in what fields they are qualified to test >>>> proficiency. >>>> 3. What is the cost of this testing of proficiency – does an >>>> individual who has certified as a CCIE at the cost of thousands – and in >>>> some cases tens of thousands – of dollars suddenly need to pay more to >>>> demonstrate something that he has clearly already demonstrated? Who will it >>>> be paid for? How will the money be utilized? Will this be included in the >>>> license fee for the first year? Or will this suddenly cost extra so >>>> someone can make some money? >>>> 4. How does does it take to “demonstrate proficiency” – and if I >>>> bring in someone from outside to train my staff in a new field of >>>> technology – is he going to be made to sit some kind of exam? Or pay some >>>> kind of fee before he can upskill Kenyans? Because – lets be real – that is >>>> not going to happen – it will be the death of bringing in people to impart >>>> knowledge. >>>> >>>> >>>> >>>> Let me be blunt – more than half the authors of the RFC’s within the >>>> IETF would not qualify under the bill as it stands – this means they would >>>> have to “demonstrate” their proficiency – despite the fact that they have >>>> their names on Internet standards – and if people expect these individuals >>>> to sit exams or prove to people that they know what they are doing – >>>> despite the knowledge having been clearly demonstrated (which is why they >>>> are being flown in in the first place, to train Kenyans in skills that are >>>> not available in the country so that those Kenyans can continue to further >>>> upskill and lift up the industry) – you can kiss goodbye to having cutting >>>> edge people coming into this country – it simply won’t happen – and it will >>>> be Kenya that loses out. >>>> >>>> >>>> >>>> Then to comment on this: >>>> >>>> >>>> >>>> >>>> >>>> *Mucheru adds that the Government has held several engagements with >>>> practitioners in the sector on the provisions of the Bill. * >>>> >>>> Correct – there was massive engagement – and the bill was largely >>>> defeated after the industry said it was broken – after people on this list >>>> said it was broken – after it was slammed left right and centre – so yes – >>>> there was engagement – but the article is wrong about the fact that the >>>> engagement agreed that this bill in its current form was a good idea or >>>> represented the correct solution. >>>> >>>> >>>> >>>> >>>> >>>> *“There was consensus that we need to establish a professional body to >>>> regulate the industry,” he said. * >>>> >>>> I have no problem with the concept of a professional body – I have >>>> major problems with forcing a situation where people who have potentially >>>> decades of experience have to suddenly “prove” their skills via some >>>> entirely undefined means at some undefined cost to a bunch of people who >>>> may or may not have anywhere close to the experience or knowledge of the >>>> person being tested. If we said that we had a professional body that people >>>> could register to – and they needed to be registered – and in the event of >>>> *substantiated* complaints the individual could be deregistered and >>>> blacklisted – I would have no problem. It is the arbitrary and >>>> unsubstantiated and undefined criteria for registration that I take >>>> exception to – and that I believe could result in expensive legal >>>> challenges. >>>> >>>> >>>> >>>> Please – do not get me wrong – I do not begrudge anyone who has a >>>> desire to genuinely root out the bad apples and clean up the industry and >>>> remove scam artists and fraudsters. I think that is a noble and pure >>>> objective that should be pursued. I however dispute the fact that this >>>> bill is the right way to go about it – and I dispute the fact that >>>> university degrees have anything to do with competence in this industry – >>>> particularly with the rate that technology evolves – because an individual >>>> doing a 3 year degree who is learning specific technologies in his first >>>> year – by the time he graduates – those technologies are history – and when >>>> he walks into the industry – he is having to self study it all again >>>> ANYWAY. Let me give you examples of technologies that did not exist a year >>>> ago in any real form: >>>> >>>> >>>> >>>> 1. Segment routing – the foundation of network routing going >>>> forward and the replacement to MPLS – how do I know this – because I’ve had >>>> my hands in crafting the specifications and doing a lot of the beta testing >>>> for it – so who is going to test proficiency here – it changes the game – >>>> and the only people qualified to teach it – or gauge the proficiency in it >>>> – do not themselves qualify under this bill to be registered. >>>> 2. Network telemetry processing – first introduced in limited form >>>> in Q3 2015 – and only now becoming main stream – but within a year of it >>>> being main stream – it will replace standard network monitoring entirely – >>>> who is going to teach that with a university degree? >>>> 3. Which university degree teaches BGP? BGP-LU? ISIS? Network >>>> segmentation? IPv6 addressing? >>>> >>>> >>>> >>>> The list is endless – these are things that cannot be learnt through a >>>> degree – they are learnt through industry standard certification or >>>> self-skilling by reading documentation. >>>> >>>> >>>> >>>> So, Mr Mucheru – please – do not read me wrong – I have tremendous >>>> respect for the regulator in this country – and it is testament to how well >>>> the Kenyan industry and the regulatory environment here works that today – >>>> Kenya has higher average mobile broadband speeds than either the US or >>>> South Africa or a lot of other places. It is testament to the regulatory >>>> environment here that we have the high-speed networks we do – and that the >>>> pricing is as low as it is – because the industry is competitive and open >>>> and innovative. This list of things the regulator has gotten right in this >>>> country is long - I do however plead with you, the bill as it stands would >>>> break the industry that all of us – yourself – myself – and so many others >>>> have worked so hard to build. I am NOT against a professional body – I am >>>> NOT against formalizing things – but I beg you – do not walk down the road >>>> of this current bill in its current form – it will be death to this >>>> industry in this country. >>>> >>>> >>>> >>>> Andrew Alston >>>> >>>> >>>> >>>> >>>> >>>> *From: *Andrew Alston <Andrew.Alston(a)liquidtelecom.com> >>>> *Date: *Monday, 4 December 2017 at 01:24 >>>> *To: *KICTAnet ICT Policy Discussions <kictanet(a)lists.kictanet.or.ke> >>>> *Cc: *Liz Wanjiru <lizwanjiru(a)gmail.com> >>>> *Subject: *RE: [kictanet] ict practitioners bill is back >>>> >>>> >>>> >>>> I have to say – personally I cannot think of a worse piece of >>>> legislation that I have seen in recent history. >>>> >>>> >>>> >>>> Let us look at the net effects of this and the problems with it: >>>> >>>> >>>> >>>> 1. Large companies bring in consultants or external people where >>>> necessary to supplement capacity, to train and upskill Kenyan staff etc, >>>> while those guys are here, even for a week or two, they are compensated, >>>> and my reading of this bill is – this would be illegal – because you’d have >>>> to get every consultant you bring in accredited and licensed first – which >>>> is impractical in the extreme >>>> 2. The list of highly skilled people with 20+ years experience who >>>> would not qualify for accreditation under this bill is extensive, globally >>>> and within Kenya – this bill completely stops any form of knowledge >>>> transfer from those individuals and in fact will force a situation where >>>> Kenyan’s who wish to learn from some of the biggest names in the industry >>>> would be forced to go internationally to get that knowledge, rather than >>>> bringing those people in to train locally >>>> 3. It forces Kenyans who have spent years learning and honing their >>>> skills without university qualifications out of work and could well result >>>> in large scale job losses looking at the number of highly skilled >>>> individuals I know of who are working without qualifications >>>> 4. It prevents private companies from making what are normal >>>> business decisions – who they hire and who they pay. That is problematic >>>> in the extreme – in any normal situation if a private company hires staff >>>> that don’t perform – those staff either get fired or the market rejects the >>>> company and the company disappears – standard market dynamics – in this >>>> case – if a company finds extremely talented people they may be forced into >>>> a position where they have to hire less skilled people because someone >>>> can’t meet some accreditation requirement. >>>> 5. The bill has no recognition of prior experience – no recognition >>>> of those who have published papers and are world recognized experts – does >>>> not specify what the “recognized” universities are – does not take into >>>> account industry standard certification (CISSP/CCNA/CCIE/CCDP/JNCIE/JNCIP/JNCIA, >>>> the list is endless) >>>> 6. May well end up in the constitutional court when it deprives a >>>> host of people who have spent their lives working in this industry and have >>>> no other options for a career of the ability to earn a living >>>> >>>> >>>> >>>> The bill relies on the belief that a university qualification some how >>>> makes you better than those without – it’s reasoning that has been >>>> disproved globally for years and years and years – and it flies in the face >>>> of the global industry and the way the ICT industry has worked since the >>>> day it began. It is damaging to the industry in Kenya – it is damaging to >>>> the growth prospects of the economy as a result – it is damaging to the >>>> people of Kenya – and it will destroy the position that Kenya is in as one >>>> of the leaders of the ICT industry on the continent (Kenya already has the >>>> highest average broadband speeds on the continent and significantly better >>>> ICT infrastructure than you will find even in South Africa – it is doing so >>>> well – why break a system that is proving functional?) >>>> >>>> >>>> >>>> I really hope this does not pass – and if it does – will be curious to >>>> see the court challenges and how they play out – but I think this is >>>> madness personally – and in the name of stopping a few bad individuals – >>>> penalizes the entire country and will destroy an industry that employs >>>> thousands. >>>> >>>> >>>> >>>> Andrew >>>> >>>> >>>> >>>> >>>> >>>> *From:* kictanet [mailto:kictanet-bounces+andrew.alston= >>>> liquidtelecom.com(a)lists.kictanet.or.ke] *On Behalf Of *Liz Wanjiru via >>>> kictanet >>>> *Sent:* 04 December 2017 06:43 >>>> *To:* Andrew Alston <Andrew.Alston(a)liquidtelecom.com> >>>> *Cc:* Liz Wanjiru <lizwanjiru(a)gmail.com> >>>> *Subject:* Re: [kictanet] ict practitioners bill is back >>>> >>>> >>>> >>>> Hi, >>>> >>>> >>>> >>>> While trying to push such laws shouldn't they be looking at >>>> credentialing people without formal ICT schooling but have the experience, >>>> knowledge and skills to back them? These people have talent and positively >>>> contribute in the industry. Some countries have learning institutions >>>> credentialing professionals based on their body of work and so long as they >>>> can demonstrate this they are awarded the degrees or other government >>>> approved certifications. Here is an example of such >>>> >>>> >>>> >>>> Link >>>> <http://www.ara.ac.nz/study-options/centre-for-assessment-of-prior-learning-…> >>>> >>>> >>>> >>>> >>>> >>>> Liz >>>> >>>> >>>> >>>> On Mon, Dec 4, 2017 at 3:18 PM, Ahmed Mohamed Maawy via kictanet < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> I wonder how some of the ground breaking technology companies - such as >>>> for instance Google Kenya, can operate if this bill is passed. >>>> >>>> >>>> >>>> On Sun, Dec 3, 2017 at 4:57 PM, Watila Alex via kictanet < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> EricKigada: Kenya’s controversial ICT Practitioners Bill 2016 to be tabled in parliament again >>>> >>>> techmoran.com/kenyas-controv… >>>> >>>> https://twitter.com/EricKigada/status/937309893954031616 >>>> >>>> >>>> >>>> Sent from Yahoo Mail on Android >>>> <https://overview.mail.yahoo.com/mobile/?.src=Android> >>>> >>>> >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> Twitter: http://twitter.com/kictanet >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> >>>> Unsubscribe or change your options at https://lists.kictanet.or.ke/m >>>> ailman/options/kictanet/ultimateprogramer%40gmail.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, do >>>> not spam, do not market your wares or qualifications. >>>> >>>> >>>> >>>> >>>> >>>> -- >>>> >>>> *Ahmed Maawy* >>>> Head of Corporate Products - Al Jazeera Media Network >>>> Skype: ultimateprogramer >>>> >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> Twitter: http://twitter.com/kictanet >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> >>>> Unsubscribe or change your options at https://lists.kictanet.or.ke/m >>>> ailman/options/kictanet/lizwanjiru%40gmail.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, do >>>> not spam, do not market your wares or qualifications. >>>> >>>> >>>> >>>> >>>> >>>> -- >>>> >>>> >>>> >>>> Kind Regards >>>> >>>> Liz Wanjiru >>>> >>>> >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> Twitter: http://twitter.com/kictanet >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> >>>> Unsubscribe or change your options at https://lists.kictanet.or.ke/m >>>> ailman/options/kictanet/joe%40mucheru.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, do >>>> not spam, do not market your wares or qualifications. >>>> >>>> >>> >>> >>> -- >>> Joseph Mucheru E.G.H >>> *Cabinet Secretary* >>> Ministry of Information Communications & Technology (ICT) >>> >>> >>> _______________________________________________ >>> kictanet mailing list >>> kictanet(a)lists.kictanet.or.ke >>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>> Twitter: http://twitter.com/kictanet >>> Facebook: https://www.facebook.com/KICTANet/ >>> >>> Unsubscribe or change your options at https://lists.kictanet.or.ke/m >>> ailman/options/kictanet/njiraini2001%40gmail.com >>> >>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>> for people and institutions interested and involved in ICT policy and >>> regulation. The network aims to act as a catalyst for reform in the ICT >>> sector in support of the national aim of ICT enabled growth and development. >>> >>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>> online that you follow in real life: respect people's times and bandwidth, >>> share knowledge, don't flame or abuse or personalize, respect privacy, do >>> not spam, do not market your wares or qualifications. >>> >>> _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > > Unsubscribe or change your options at https://lists.kictanet.or.ke/m > ailman/options/kictanet/info%40campusciti.com > > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > > Unsubscribe or change your options at https://lists.kictanet.or.ke/m > ailman/options/kictanet/joe%40mucheru.com > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > > > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > > Unsubscribe or change your options at https://lists.kictanet.or.ke/ > mailman/options/kictanet/info%40alyhussein.com > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > >

19 37

[Economic Espionage Risks] Vodafone has 'acknowledged' that it Found Hidden Backdoors in Huawei Equipment (but says the issues were resolved).
by Patrick A. M. Maina 30 Apr '19

30 Apr '19

Dear Listers, These kinds of global reports should concern Kenyan business CEOs and Boards in all sectors (as well as economic / technology policymakers) - unless Kenya has little or no interest in competing regionally or internationally to generate new streams of foreign exchange; and even then, are we able to protect our local "home turf" competitive advantage, should multinational actors decide to illegally collect and sell (or leverage) unfairly acquired local business insights, in order to give affiliated new entrants unfair advantage over local enterprises? These are legitimate and global policy concerns. If such things are happening in advanced, tech-savvy economies, what about here in Africa? Is the world having a party at our expense? Trust is good for business - but its is not wise to trust blindly. If we refuse to learn from others, or from history, it will be difficult for us to hand over to our children/youth a future that proves that we played our part responsibly as present-day custodians. We need to start thinking of our existence in less selfish terms: as a relay race, where it is our duty to ensure that we pass on a better future to our children/youth. Let's wake each other up. We must start BELIEVING in ourselves and LOVING ourselves so that our children can believe in, and love themselves as well. Excerpts below: ------------------------------- Reported by Bloomberg today (30th April 2019): "[Vodafone] identified hidden backdoors in the software that could have given Huawei unauthorized access to the carrier’s fixed-line network in Italy, a system that provides internet service to millions of homes and businesses, according to Vodafone’s security briefing documents from 2009 and 2011 seen by Bloomberg, as well as people involved in the situation. Vodafone asked Huawei to remove backdoors in home internet routers in 2011 and received assurances from the supplier that the issues were fixed, but further testing revealed that the security vulnerabilities remained, the documents show. Vodafone said Huawei then refused to fully remove the backdoor, citing a manufacturing requirement. The April 2011 document was authored by its Chief Information Security Officer at the time, Bryan Littlefair. 'What is of most concern here is that actions of Huawei in agreeing to remove the code, then trying to hide it, and now refusing to remove it as they need it to remain for ‘quality’ purposes,' Littlefair wrote. 'There’s no specific way to tell that something is a backdoor and most backdoors would be designed to look like a mistake,' said Stefano Zanero, an Associate Professor of Computer Security at Politecnico di Milano University. 'That said, the vulnerabilities described in the Vodafone reports from 2009 and 2011 have all the characteristics of backdoors: deniability, access and a tendency to be placed again in subsequent versions of the code,' he said. Vodafone also identified backdoors in parts of its fixed-access network known as optical service nodes, which are responsible for transporting internet traffic over optical fibers, and other parts called broadband network gateways, which handle subscriber authentication and access to the internet... In Vodafone’s case, the risks included possible third-party access to a customer's personal computer and home network, according to the internal documents. However, Vodafone’s account of the issue was contested by people involved in the security discussions between the companies. [who allege that] Vulnerabilities in both the routers and the fixed access network remained beyond 2012 and were also present in Vodafone’s businesses in the U.K., Germany, Spain and Portugal. Vodafone stuck with Huawei because the services were competitively priced, they said." Links: 1. Vodafone found Hidden Backdoors in Huawei Equipmenthttps://www.bloomberg.com/news/articles/2019-04-30/vodafone-found-… 2. Huawei denies existence of ‘backdoors’ in Vodafone networking equipment https://www.zdnet.com/article/huawei-denies-existence-of-backdoors-in-vodaf… Best regards,Patrick. Patrick A. M. Maina [Cross-domain Innovator | Public Policy Analyst - Indigenous Innovations]

1 0

Online discussion on State of Broadband - Policy day
by Mwendwa Kivuva 30 Apr '19

30 Apr '19

Thank you Listers, we have had a great debate so far. There are so many issues that have remained hanging on the first thread. I hope we can continue debate on those issues, and tie the loose ends. We will move on to broadband policies. Here is a brief background. Kenya enacted a National Broadband Strategy in 2013. This was updated to the Draft National Broadband Strategy 2023 <https://ca.go.ke/public-consultation-on-the-national-broadband-strategy-for…> that takes into account recent technological, industry trends and market realities. The Draft strategy went through public participation in March 2019. It covers; Infrastructure and connectivity, Content services and applications, Policy - regulations and Legislation, Capacity building and innovations, Broadband devices, Finance and investment, Privacy and Security, Role of stakeholders in expanding broadband penetration, Governance and delivery framework. The outcome of the public participation has not been released to the public by the National Broadband Strategy Steering Committee. We hope to get an update on that. We also have the ICT Policy 2006, and the yet to be ratified Draft ICT policy 2016. The ICT policy should be the overarching policy on which the other policies in the sector branch from. Probably we will get an explanation on how new ICT related strategies are being drafted without an updated ICT policy. This leads to the following questions: 1. How is the sector regulated and what complimentary policies are in place? 2. What complimentary laws and regulations are in place that either stifle, or promote broadband? 3. How is the business environment for those who want to venture into provision of broadband services? 4. What policy interventions can be put in place to promote broadband uptake? Looking forward to a great policy day. Sincerely, ______________________ Mwendwa Kivuva

4 7