April 2019 - KICTANet

Re: [kictanet] New Cabinet - Wish List ?
by Barrack Otieno 18 Jul '24

18 Jul '24

Listers, This is indeed good news. We have a lot of hope in Mucheru and Victor Kyalo industry veterans who have indeed worked their way through the trenches. Most importantly we hope to see the return of a multi stakeholder form of engagement in the sector which we have been yearning for in a while. I think as a sector we might need to prepare a wish list for our new leaders and most importantly commit to work with them towards achieving their mandate. The reshuffle is timely still it comes at the end of the year and will allow us to start 2016 on a new slate. Thank you Best Regards On 11/24/15, GG via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: > +1 Grace. > > Sending them positive energy! And glad that the two were among the KICTANet > founders. > Rgds. > > --- Original Message --- > > From: "Grace Mutung'u (Bomu) via kictanet" <kictanet(a)lists.kictanet.or.ke> > Sent: 24 November 2015 22:35 > To: ggithaiga(a)hotmail.com > Cc: "Grace Mutung'u (Bomu)" <nmutungu(a)gmail.com> > Subject: Re: [kictanet] New Cabinet > > One of the issues (I think issue no.3) in the President's speech was > accessibility of leaders to wananchi. With Joe and Kyalo I think we shall > have better ears. > > Congratulations! > > May they pass the vetting. > > Regards, > On 24 Nov 2015 21:29, "Evans Ikua via kictanet" < > kictanet(a)lists.kictanet.or.ke> wrote: > >> @Ngigi you are right. But in the current dispensation, a CS is still >> expected to be a technocrat, as opposed to the days of yore when minister >> was politician. So they will both be at home in their respective >> positions. >> Especially Victor as the accounting officer with his many years in >> government. That's the right position. >> >> Evans >> On Nov 24, 2015 9:17 PM, "Waithaka Ngigi" <ngigi(a)at.co.ke> wrote: >> >>> Evans, >>> >>> Joe Mucheru & Victor Kyalo are old hands in. KE ICT. Both have been >>> entrepreneurs and then at some point moved on to various ventures. So we >>> shouldn't go wrong ‎with either. >>> >>> However, what's the better fit? Mucheru at CS, Victor at PS or the other >>> way round? Victor CS, Mucheru PS? >>> >>> Waithaka Ngigi >>> >>> Alliance Technologies >>> www.at.co.ke >>> *From: *Evans Ikua via kictanet >>> *Sent: *Tuesday, November 24, 2015 8:50 PM >>> *To: *Ngigi Waithaka >>> *Reply To: *KICTAnet ICT Policy Discussions >>> *Cc: *Evans Ikua >>> *Subject: *Re: [kictanet] New Cabinet >>> >>> Congrats Hon Joe! That's a great choice for the ICT industry. Well out >>> H.E. >>> >>> Ikua >>> On Nov 24, 2015 8:45 PM, "waudo siganga via kictanet" < >>> kictanet(a)lists.kictanet.or.ke> wrote: >>> >>>> Congratulations to Joe Mucheru! >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> >>>> Unsubscribe or change your options at >>>> https://lists.kictanet.or.ke/mailman/options/kictanet/ikua.evans%40gmail.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and >>>> development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and >>>> bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, >>>> do >>>> not spam, do not market your wares or qualifications. >>>> >>> >>> >> _______________________________________________ >> kictanet mailing list >> kictanet(a)lists.kictanet.or.ke >> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >> >> Unsubscribe or change your options at >> https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com >> >> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >> for people and institutions interested and involved in ICT policy and >> regulation. The network aims to act as a catalyst for reform in the ICT >> sector in support of the national aim of ICT enabled growth and >> development. >> >> KICTANetiquette : Adhere to the same standards of acceptable behaviors >> online that you follow in real life: respect people's times and >> bandwidth, >> share knowledge, don't flame or abuse or personalize, respect privacy, do >> not spam, do not market your wares or qualifications. >> > -- Barrack O. Otieno +254721325277 +254-20-2498789 Skype: barrack.otieno http://www.otienobarrack.me.ke/

3 3

KICTANet Preliminary Observations on Technology Deployment in Kenya’s General Election 2017
by Grace Githaiga 17 Sep '20

17 Sep '20

Listers Greetings. Please find attached an interim report on KICTANet's observation on the technology deployment of the electoral process from a user end perspective. We are working an elaborate report and will share in due course. We thank all our observers and all members who contributed to all the discussions on the topic of technology use in the elections. Best regards Githaiga, Grace Co-Convenor Kenya ICT Action Network (KICTANet) Twitter:@ggithaiga Tel: 254722701495 Skype: gracegithaiga Alternate email: ggithaiga(a)hotmail.com<mailto:ggithaiga@hotmail.com> Linkedin: https://www.linkedin.com/in/gracegithaiga www.kictanet.or.ke "Change only happens when ordinary people get involved, get engaged and come together to demand it. I am asking you to believe. Not in my ability to bring about change – but in yours"---Barrack Obama. ---------------------------------------------------------------------------------- Grace Githaiga Twitter: @ggithaiga Skype: gracegithaiga Linkedin: https://www.linkedin.com/in/gracegithaiga ...the most important office in a democracy is the citizen. So, you see, that’s what our democracy demands. It needs you!----Barrack Obama.

4 3

Mesh Networks in South Africa
by Joash Moitui 17 Sep '19

17 Sep '19

Dear all, Innovative mesh networks in South Africa are connecting the connected for less than $2 a month. https://www.bbc.com/news/av/world-africa-47723967/internet-access-in-africa… Could this be the solution for connecting thousands in rural Kenya? Best, Joash Moitui ~Sent from mobile device. Apologies for brevity and typos ~

8 8

[strategic inefficiency is what creates a large number jobs] Jobs fall to 6 year low despite GDP "boom".
by Patrick A. M. Maina 07 Jul '19

07 Jul '19

Dear listers, In order to create jobs, the government should move away from policies that focus on increasing efficiency to those that are strategically inefficient. Examples: 1. SMEs, e. g. cottage industries, are inefficient - compared to larger factories, but they can create exponentially more jobs with less tax breaks. Most SMEs also spend all their revenues in Kenya, while promoting other dependent MSMEs.. unlike large corporations which tend to move funds abroad for different reasons (tax, asset protection, hedging, dividends etc). 2. We always see donors (especially, I believe, WB & IMF if I recall correctly) always pushing govt to redirect expenditure from recurrent/wages to "development"/infrastructure (clearly in their own interest as assets can be securitized for their own peace of mind, and more debt can be incurred in dev projects). So they push developing countries to reduce manpower in critical strategic sectors of the economy (less teachers, doctors etc) or to pay below-market wages. What is the impact of such financial efficiency measures? Do they not care that the employees they keep asking to be retrenched are real people with families? Do they not care that manpower reduction means our children get the worst teacher:pupil or doctor:patient or police:civillian ratios? Such recommendations lead to massive hidden costs downstream that cannot be attributed (e.g. low quality education, poor healthcare, increased insecurity due to overloaded+underpaid workers). It just looks like we have endless problems of incompetence but it is not by accident... we follow "weaponised advice", designed to keeps us poor. Efficiency efforts should be limited to enabling high impact service delivery (optimized processes) not financial efficiency. Government should find ways/tactical excuses to ignore callous and unethical requests/pressures for cold blooded fiscal efficiency. Public sector Performance Contract targets need to be linked to a basket of grassroots metrics that reflect the general quality of life for the ordinary population (besides GDP, Inflation, NSE Index & exchange rate). This can be presented in dashboard format on eCitizen so that wanjiku can see what is happening, hold officials to account for not delivering and be motivated to support such initiatives (but the data must be *real* to avoid risk of future backlash). Our "missing middle" problem (i.e. a tiny middleclass) needs to be addressdd. It exists because government incentives for business have focused mainly on Micro enterprises which are too inefficient to be sustainable, and large corporations that are too efficient to fill the jobs gap (and too demanding - always asking for endless concessions just to maintain status quo). If you track current incentives given to large corporations and account for all outflows and hidden costs (many of these corporations are the architects of grand corruption in the country) - you will see a MASSIVE NET LOSS / WEALTH EXTRACTION directly attributable to corporate activities (e.g. encouraging harphazard spending, lobbying for bad laws or poor incentives).. despite the appearance of "gains" on simplistic paper reports that ignore the full impact. A thriving middle class (people who are not rich and not poor - with ability to buy a car, spend regularly on mid-level leisure and even save for luxury spending) is what ends poverty and drives a strong economy. Small and Medium-sized Enterprises SME are the key to a thriving middle class and rapid, large scale jobs creation. They tend to lean towards formality, will often have more educated founders, are inefficient because of scale - but not overly so as to be unsustainable like Micro enterprises, and a few will have potential to grow into mega corporations. De-risked MSEs are what attracts high quality FDI in the form of venture capital. So rather than pitch tax breaks to global investors, the government should pitch de-risked high potential small enterprises (the way Israel and some EU countries are doing) whose business model has been proven in order to attract capital to scale up the businesses. The reality of Tax incentives to big corporations is that they only cannibalize the treasury - and these same corporations will do everything they can to minimize local expenditure (even furniture is imported yet we have skilled carpenters), and extract wealth in all manner of ways (e.g. transfer pricing). Most jobs offered by large factories are low level, while skilled jobs (r&d, conceptualization, design, development) will be outsourced with the (false) excuse that Kenyans are not competent. In reality they just want to prevent HIGH VALUE KNOWLEDGE TRANSFER so that locals don't build indigenous alternatives. I know some of the things I write are not supposed to be said because it will spoil some lucrative plunder parties.. but I alsonknow many of you know what I am saying is TRUE because you have seen it being done, heard about it or (God forbid) participated in it . This habit of taming monsters by feeding them with our kids is becoming too much and has to be called out for what it is. The youth are our children. It is our duty to create an enabling ecosystem framework that attracts opportunities and truly rewards them for innovation. We need a Kenyan Steve Jobs or Bill Gates who own their own companies - rather than have them and their ideas gobbled up by monopolistic dinosaur corporations that want to suppress their enterpreneurial dreams supressed in order to delay, the next wave of disruptive innovations. We need hundreds of winning case studies - not tens of mostly foreign owned startups (not that it's a bad thing to have foreign ownership, the key thing is that, given our history of suppressed esteem, our youth desperately need role models they can relate to so that they can start BELIEVING in themselves). We can't just tell youth to be job creators.. that's like telling a starving person to go find food. If they knew how - or where, they would not be starving. The REAL reason we tell the youth to employ themselves - yet we have not created an enabling framework - is because they have caught us napping and we want to deflect responsibility. "We" means anyone over 35 years old whether in privage sector or Government. Our parents didn't give us a gift to keep (the opportunities we enjoyed), they gave us a BATON to pass on in a long term RELAY RACE. Did you drop your baton (I did too)? Pick it up. Ignore the naysayers. Start running. Link: https://www.businessdailyafrica.com/news/Formal-jobs-fall-to-6-year-low-des… Warmest regards,Patrick. Patrick A. M. Maina[Cross-domain Innovator | Public Policy Analyst - Indigenous Innovations]

5 16

In America’s indictment of Huawei some conversations...
by Ali Hussein 02 Jul '19

02 Jul '19

Listers As an ICT Policy practitioner and avid follower of #GeoPolitics the #HuaweiDebacle has great interest to me. Recently our CS ICT, Joseph Mucheru tasked ATU to probe alleged security risks on Huawei and ZTE Equipment. In America’s indictment of Huawei Technologies some interesting conversations:- 1. The Global Cop routine is sort of wearing thin and portraying it not as a force for good but as a bully. 2. Are Chinese companies so dependent on America that a ban by America can kill them? The case of the almost collapse of ZTE Corporation is instructive.. Only a surprise last minute reprieve from #TheDonald saved it from total collapse. 3. Could Huawei Technologies survive a ban by America? Intel Corporation, Seagate Technology and Qualcomm are major suppliers to Huawei Technologies. How will this affect their ability to deliver cutting edge technology to their customers? This last point brings me to wonder how much of the Chinese Technology renaissance is dependent on America? Read on and follow the conversation on LinkedIn. https://www.linkedin.com/feed/update/urn:li:activity:6496196045268090880 Ali Hussein Principal AHK & Associates +254 0713 601113 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim "We are what we repeatedly do. Excellence, therefore, is not an act but a habit." ~ Aristotle Sent from my iPad

2 1

Save the Date: the Kenya Internet Governance Forum 2018 (July 19, 2018)
by Grace Githaiga 25 Jun '19

25 Jun '19

Listers Greetings! This is to let you know that the Kenya Internet Governance Forum 2018 is planned to take place on Thursday July 19, 2018. I will send a call shortly to invite volunteers to help in organizing the forum. The organising committee lead by Victor Kapiyo (he will Chair for the 2nd term) will share further details on venue, topics, speakers with us as the process evolves. Looking forward to seeing as many of you on that day. Best regards Githaiga, Grace Co-Convenor Kenya ICT Action Network (KICTANet) Twitter:@ggithaiga Tel: 254722701495 Skype: gracegithaiga Alternate email: ggithaiga(a)hotmail.com Linkedin: https://www.linkedin.com/in/gracegithaiga www.kictanet.or.ke "Change only happens when ordinary people get involved, get engaged and come together to demand it. I am asking you to believe. Not in my ability to bring about change – but in yours"---Barrack Obama.

16 19

Vodafone denies Huawei Italy security risk
by Adam Lane 03 May '19

03 May '19

Dear Patrick Please note that Vodafone have responded to the inaccurate report from Bloomberg. The report is https://www.bbc.com/news/business-48103430 and copied below. You may also be interested in reading this report: https://www.zdnet.com/article/cisco-removed-its-seventh-backdoor-account-th… explaining that Cisco has already found seven “backdoors” into its equipment just this year alone. This is not a Huawei issue, or an espionage issue. It is a global ICT security issue that all companies are constantly struggling with. As you can read (or ask a technical expert), there are many bugs in many products (your apps on your phone are probably being updated on a weekly basis…) due to the nature of software development which are constantly being found and addressed; companies like Cisco and Huawei (along with customers like Vodafone) to the tests and find these (usually) before going to market (though sometimes afterwards) and address them urgently. I am not sure how this issue of bugs in software relates to multinationals illegally collecting and selling business insights. I am sure the local companies have just as many bugs in their software too, and all of us need to collaborate to address them, improve software development standards, and raise the bar. This is not a policy issue, it is a technical issue. You are certainly right that trust is good for business; unfortunately poor journalism such as that by Bloomberg which published before getting the “other side of the story” from Vodafone itself is not helping. I appreciate that you understand this, as you also referenced the ZDnet article which is much better reporting than Bloomberg, including Instead, Huawei says it was "technical flaws in equipment" which were fixed. "These were technical mistakes in our equipment, which were identified and corrected," the spokesperson said. 'The accepted definition of' backdoors' is deliberately built-in vulnerabilities that can be exploited -- these were not such. They were mistakes which were put right." Regards Adam https://www.bbc.com/news/business-48103430 Vodafone denies Huawei Italy security risk Vodafone has denied a report saying issues found in equipment supplied to it by Huawei in Italy in 2011 and 2012 could have allowed unauthorised access to its fixed-line network there. A Bloomberg report said that Vodafone spotted security flaws in software<https://www.bloomberg.com/news/articles/2019-04-30/vodafone-found-hidden-ba…> that could have given Huawei unauthorised access to Italian homes and businesses. The US refuses to use Huawei equipment for security reasons. However, reports suggest the UK may let the firm help build its 5G network. This is despite the US wanting the UK and its other allies in the "Five Eyes" intelligence grouping - Canada, Australia and New Zealand - to exclude the company. Australia and New Zealand have already blocked telecoms companies from using Huawei equipment in 5G networks, while Canada is reviewing its relationship with the Chinese telecoms firm. In a statement, Vodafone said: "The issues in Italy identified in the Bloomberg story were all resolved and date back to 2011 and 2012. "The 'backdoor' that Bloomberg refers to is Telnet, which is a protocol that is commonly used by many vendors in the industry for performing diagnostic functions. It would not have been accessible from the internet. "Bloomberg is incorrect in saying that this 'could have given Huawei unauthorised access to the carrier's fixed-line network in Italy'. "In addition, we have no evidence of any unauthorised access. This was nothing more than a failure to remove a diagnostic function after development. "The issues were identified by independent security testing, initiated by Vodafone as part of our routine security measures, and fixed at the time by Huawei." A Huawei spokesperson said: 'We were made aware of historical vulnerabilities in 2011 and 2012 and they were addressed at the time. "Software vulnerabilities are an industry-wide challenge. Like every ICT [information and communications technology] vendor, we have a well-established public notification and patching process, and when a vulnerability is identified, we work closely with our partners to take the appropriate corrective action." Several European telecoms operators are considering removing Huawei's equipment from their networks. But the firm's cyber-security chief, John Suffolk, has described the firm as "the most open [and] transparent company in the world". In January, Vodafone "paused" the deployment of Huawei equipment in its core networks in Europe until Western governments resolved their security concerns about the company. Huawei has been accused of being a potential security risk and of being controlled by the Chinese government - allegations it has always firmly denied. With the introduction of the 5G network in the UK approaching, telecoms operators say the way it would work, in a highly integrated system alongside 4G, means that excluding Huawei is not realistic without significant cost and delay, That would include potentially removing existing hardware, leading to the UK falling behind other countries. The company is the world's third-largest supplier of mobile phones, behind Samsung and Apple. Senior Director, Public Affairs Huawei Southern Africa Mobile: +254-7909-85886 Read Huawei Kenya’s First Ever Sustainability Report here<https://www.huawei.com/minisite/explore-kenya/pdf/huawei_kenya_csd_report.p…> From: kictanet [mailto:kictanet-bounces+adam.lane=huawei.com@lists.kictanet.or.ke] On Behalf Of Patrick A. M. Maina via kictanet Sent: Tuesday, April 30, 2019 8:59 PM To: Adam Lane <adam.lane(a)huawei.com> Cc: Patrick A. M. Maina <pmaina2000(a)yahoo.com> Subject: [kictanet] [Economic Espionage Risks] Vodafone has 'acknowledged' that it Found Hidden Backdoors in Huawei Equipment (but says the issues were resolved). Dear Listers, These kinds of global reports should concern Kenyan business CEOs and Boards in all sectors (as well as economic / technology policymakers) - unless Kenya has little or no interest in competing regionally or internationally to generate new streams of foreign exchange; and even then, are we able to protect our local "home turf" competitive advantage, should multinational actors decide to illegally collect and sell (or leverage) unfairly acquired local business insights, in order to give affiliated new entrants unfair advantage over local enterprises? These are legitimate and global policy concerns. If such things are happening in advanced, tech-savvy economies, what about here in Africa? Is the world having a party at our expense? Trust is good for business - but its is not wise to trust blindly. If we refuse to learn from others, or from history, it will be difficult for us to hand over to our children/youth a future that proves that we played our part responsibly as present-day custodians. We need to start thinking of our existence in less selfish terms: as a relay race, where it is our duty to ensure that we pass on a better future to our children/youth. Let's wake each other up. We must start BELIEVING in ourselves and LOVING ourselves so that our children can believe in, and love themselves as well. Excerpts below: ------------------------------- Reported by Bloomberg today (30th April 2019): "[Vodafone] identified hidden backdoors in the software that could have given Huawei unauthorized access to the carrier’s fixed-line network in Italy, a system that provides internet service to millions of homes and businesses, according to Vodafone’s security briefing documents from 2009 and 2011 seen by Bloomberg, as well as people involved in the situation. Vodafone asked Huawei to remove backdoors in home internet routers in 2011 and received assurances from the supplier that the issues were fixed, but further testing revealed that the security vulnerabilities remained, the documents show. Vodafone said Huawei then refused to fully remove the backdoor, citing a manufacturing requirement. The April 2011 document was authored by its Chief Information Security Officer at the time, Bryan Littlefair. 'What is of most concern here is that actions of Huawei in agreeing to remove the code, then trying to hide it, and now refusing to remove it as they need it to remain for ‘quality’ purposes,' Littlefair wrote. 'There’s no specific way to tell that something is a backdoor and most backdoors would be designed to look like a mistake,' said Stefano Zanero, an Associate Professor of Computer Security at Politecnico di Milano University. 'That said, the vulnerabilities described in the Vodafone reports from 2009 and 2011 have all the characteristics of backdoors: deniability, access and a tendency to be placed again in subsequent versions of the code,' he said. Vodafone also identified backdoors in parts of its fixed-access network known as optical service nodes, which are responsible for transporting internet traffic over optical fibers, and other parts called broadband network gateways, which handle subscriber authentication and access to the internet... In Vodafone’s case, the risks included possible third-party access to a customer's personal computer and home network, according to the internal documents. However, Vodafone’s account of the issue was contested by people involved in the security discussions between the companies. [who allege that] Vulnerabilities in both the routers and the fixed access network remained beyond 2012 and were also present in Vodafone’s businesses in the U.K., Germany, Spain and Portugal. Vodafone stuck with Huawei because the services were competitively priced, they said." Links: 1. Vodafone found Hidden Backdoors in Huawei Equipment https://www.bloomberg.com/news/articles/2019-04-30/vodafone-found-hidden-ba… 2. Huawei denies existence of ‘backdoors’ in Vodafone networking equipment https://www.zdnet.com/article/huawei-denies-existence-of-backdoors-in-vodaf… Best regards, Patrick. Patrick A. M. Maina [Cross-domain Innovator | Public Policy Analyst - Indigenous Innovations]

5 6

Re: [kictanet] ict practitioners bill is back
by Ali Hussein 02 May '19

02 May '19

Dear Bwana CS KICTANet NEVER asked KEPSA to handle engagements on our behalf. We engaged KEPSA to work as a team. Period. Never, did we abdicate our responsibilities to KEPSA because we are not KEPSA members. If KEPSA gave you that belief then I'm afraid that you were misled. And KEPSA should apologise for misleading you. *Ali Hussein* *Principal* *Hussein & Associates* Tel: +254 713 601113 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim <http://ke.linkedin.com/in/alihkassim> 13th Floor , Delta Towers, Oracle Wing, Chiromo Road, Westlands, Nairobi, Kenya. Any information of a personal nature expressed in this email are purely mine and do not necessarily reflect the official positions of the organizations that I work with. On Sun, Dec 17, 2017 at 4:53 PM, Joseph Mucheru via kictanet < kictanet(a)lists.kictanet.or.ke> wrote: > Ali Hussein, > > This is the reason I keep off this list. You are calling me a liar and yet > your team asked KEPSA to handle the engagements in this matter. > > With all respect going forward let's follow the agreed engagements between > government and private sector. > > Ahsante Sana! > > JM > > > On 17 Dec 2017 11:17, "Ali Hussein via kictanet" < > kictanet(a)lists.kictanet.or.ke> wrote: > > Bwana CS > > With all due respect. You are a senior government official and shouldn’t > peddle untruths. > > KICTANet HAS NEVER BEEN PART OF KEPSA. > > We have collaborated only once on the ICT BIll. Most of us don’t believe > KEPSA is representative of the wider ICT Industry. > > We welcome dialogue with your ministry and KEPSA on this. We are happy to > be included in the conversation. We however CANNOT endorse a dialogue and > discussions we are not party to. > > *Ali Hussein* > *Principal* > *Hussein & Associates* > +254 0713 601113 <+254%20713%20601113> > > Twitter: @AliHKassim > > Skype: abu-jomo > > LinkedIn: http://ke.linkedin.com/in/alihkassim > > "We are what we repeatedly do. Excellence, therefore, is not an act but a > habit." ~ Aristotle > > > Sent from my iPad > > On 17 Dec 2017, at 9:04 AM, Julius Njiraini via kictanet < > kictanet(a)lists.kictanet.or.ke> wrote: > > Digital forensic expert is involved in investigation of fraud, abuse, > embezzlement, larceny, conversion of any digital device, records and > process. The report is supposed to be presented in courtroom and testify as > expert witness. He is also supposed to corroborate evidence with other > segment of crime scene using relevant laws including evidence act, criminal > procedures code and cyber crime laws as best international laws in other > countries > On Dec 17, 2017 8:32 AM, "Julius Njiraini" <njiraini2001(a)gmail.com> wrote: > >> Thanks for your enlightenment. Am just concerned about new emerging >> fields like information security and forensics which is mainly concerned >> with digital cyber crime and evidence presentation in courtroom. These is >> especially concerns for computer security and forensics professionals >> On Dec 17, 2017 6:12 AM, "Joseph Mucheru via kictanet" < >> kictanet(a)lists.kictanet.or.ke> wrote: >> >>> The absence of dialogue and relying on media reports is a recipe for >>> discord. The current views, sentiments and concerns raised in the group are >>> justified only because there is no dialogue. Kicktanet is part of KEPSA >>> <https://kepsa.or.ke> who we are in constant dialogue even on this >>> topic. Going forward, the need to dialogue through the agreed channels is >>> key; >>> >>> So let me try and give a position on where we are; >>> >>> - I did state that we will need a Practitioners Bill and even >>> clarified to media it would not be the current one >>> - There is currently NO Bill in parliament. The last one lapsed and >>> we would need to start afresh >>> - The bill identified a need/gap in our sector that requires some >>> action, especially since ICT is at the heart of the Governments development >>> agenda >>> - The Industry was opposed with the method/solutions proposed by the >>> Bill but not the fact there is a gap >>> - Other Industries have self regulating bodies and if our sector is >>> to grow, we need to get organised and set this up. Why should government >>> have to do it? >>> - We are exporting our skills regionally and internationally and a >>> need to standardise and demonstrate our skills is key. This is because we >>> are not working in isolation, we are competing with other countries and >>> Kenya must be able to demonstrate consistent and quality skills -- today we >>> are blacklisted on various online jobs platforms because of a few bad >>> apples, while we know we have some of the best talents, we are also losing >>> tenders and business because we have not conformed to specific >>> international standards and so the rating of our products/services falls >>> short. (KBS is working on the standards) >>> >>> And for the accusations... >>> >>> - It was a private members bill and not sponsored by Government (We >>> opposed it in its current form - you know that, otherwise google it). >>> - Responding to questions from the sector does not amount to a >>> "roadside decision", considering the level of engagement we have had on >>> this issue >>> - The Government is there to serve the people of Kenya and not just >>> the sector in isolation >>> - Skills Rating systems used by platforms such as Kuhastle.com, >>> upwork.com., cloudfactory.com, monster.com..etc are examples of ways >>> people are able to build and demonstrate skills both technical and otherwise >>> - I have had engagements on this topic with KEPSA (ICT Sector >>> Committee <https://kepsa.or.ke/sector-comittees/>) - Mike Macharia >>> being the Chair >>> - I saw in social media many of you opposed to ICTAK >>> <http://www.ictak.or.ke/> being enjoined in the supreme court >>> presidential petition, but none came out (Kicktanet included) to >>> support/represent the sector, which was at the heart of the dispute. At the >>> very least ICTAK <http://www.ictak.or.ke/> was willing to come >>> forward. >>> - Similar to the Law Society, The Supreme Court should have chosen >>> the ICT experts from the ICT Industry body? >>> >>> My advice would be for the sector to take the lead and suggest how this >>> need/gap of* "SKILLS RATING" standards etc.. *can be addressed. We are >>> on the same side. If industry does not take the lead, then Government will >>> step in. As it stands, industry has various bodies and you need to agree on >>> how to engage amongst yourselves. We are going to be successful and so let >>> us push in the same direction. >>> >>> Finally, today the official engagement between government and the ICT >>> sector is through KEPSA <https://kepsa.or.ke/> . (KICTAnet, TESPOK, >>> KITOS etc.. are members and even when we engaged on the ICT Practitioners >>> bill, the sector was represented by KEPSA, when we met MPs). >>> >>> The last discussion on Tuesday 14th December 2017 between KEPSA and the >>> Ministry covered the following topics; >>> >>> 1. ICT Policy >>> 2. Kick-off Industry meetings >>> 3. Bills / Opinions - ICT Practitioners Bill >>> 4. PDTP <http://icta.go.ke/digitalent/> + Ajira Digital >>> <http://ajiradigital.go.ke/> (Jobs) >>> 5. Flagship Projects >>> 6. Constituency Development Hubs >>> <http://www.ict.go.ke/constituency-to-get-an-innovation-hub/> >>> 7. ICTA Engagement with Counties >>> 8. Enterprise Kenya >>> 9. Blockchain >>> >>> Thank you! >>> >>> On Sun, Dec 17, 2017 at 3:07 AM, Andrew Alston via kictanet < >>> kictanet(a)lists.kictanet.or.ke> wrote: >>> >>>> Hi All, >>>> >>>> >>>> >>>> So – having seen an article in the standardmedia in which elements of >>>> what I stated below were quoted – and to which there seem to have been >>>> responses – I now need to comment further: >>>> >>>> >>>> >>>> (Article found at: https://www.standardmedia.co.k >>>> e/business/article/2001263257/techies-oppose-move-to-introdu >>>> ce-new-ict-watchdog) >>>> >>>> >>>> >>>> >>>> >>>> *Mucheru, however, denies that the Bill will lock out experts without >>>> formal training insisting the reverse will be the case. “This Bill will >>>> benefit the people who have been working in technical capacity for years >>>> but have not acquired certificates,” he explained. “If they can demonstrate >>>> their proficiency to the Institute then they can get certified and widen >>>> the scope of jobs they can bid or apply for.” * >>>> >>>> So – I have a question – What will be the method of demonstrating >>>> proficiency and how will this be tested – and what will it cost – and how >>>> long will it take. >>>> >>>> >>>> >>>> Now – let me break the questions down a bit >>>> >>>> >>>> >>>> 1. The ICT field is vast – are you going to test proficiency in >>>> programming? In networking? In security? In database administration? In >>>> desktop support? In Linux? Freebsd? Microsoft? Solaris? AIX? What is the >>>> test going to be – and who is going to administer these tests >>>> 2. What makes an industry body more capable of testing proficiency >>>> than Cisco, Juniper, Huawei or any of the other vendors – the bill does * >>>> *NOT** cater for industry standard certification outside of formal >>>> education – it simply is not in there – and if you are not going to accept >>>> these and are going to have this industry body determine proficiency – we >>>> need to know how this will be done and how the people testing proficiency >>>> will be qualified to do it – and in what fields they are qualified to test >>>> proficiency. >>>> 3. What is the cost of this testing of proficiency – does an >>>> individual who has certified as a CCIE at the cost of thousands – and in >>>> some cases tens of thousands – of dollars suddenly need to pay more to >>>> demonstrate something that he has clearly already demonstrated? Who will it >>>> be paid for? How will the money be utilized? Will this be included in the >>>> license fee for the first year? Or will this suddenly cost extra so >>>> someone can make some money? >>>> 4. How does does it take to “demonstrate proficiency” – and if I >>>> bring in someone from outside to train my staff in a new field of >>>> technology – is he going to be made to sit some kind of exam? Or pay some >>>> kind of fee before he can upskill Kenyans? Because – lets be real – that is >>>> not going to happen – it will be the death of bringing in people to impart >>>> knowledge. >>>> >>>> >>>> >>>> Let me be blunt – more than half the authors of the RFC’s within the >>>> IETF would not qualify under the bill as it stands – this means they would >>>> have to “demonstrate” their proficiency – despite the fact that they have >>>> their names on Internet standards – and if people expect these individuals >>>> to sit exams or prove to people that they know what they are doing – >>>> despite the knowledge having been clearly demonstrated (which is why they >>>> are being flown in in the first place, to train Kenyans in skills that are >>>> not available in the country so that those Kenyans can continue to further >>>> upskill and lift up the industry) – you can kiss goodbye to having cutting >>>> edge people coming into this country – it simply won’t happen – and it will >>>> be Kenya that loses out. >>>> >>>> >>>> >>>> Then to comment on this: >>>> >>>> >>>> >>>> >>>> >>>> *Mucheru adds that the Government has held several engagements with >>>> practitioners in the sector on the provisions of the Bill. * >>>> >>>> Correct – there was massive engagement – and the bill was largely >>>> defeated after the industry said it was broken – after people on this list >>>> said it was broken – after it was slammed left right and centre – so yes – >>>> there was engagement – but the article is wrong about the fact that the >>>> engagement agreed that this bill in its current form was a good idea or >>>> represented the correct solution. >>>> >>>> >>>> >>>> >>>> >>>> *“There was consensus that we need to establish a professional body to >>>> regulate the industry,” he said. * >>>> >>>> I have no problem with the concept of a professional body – I have >>>> major problems with forcing a situation where people who have potentially >>>> decades of experience have to suddenly “prove” their skills via some >>>> entirely undefined means at some undefined cost to a bunch of people who >>>> may or may not have anywhere close to the experience or knowledge of the >>>> person being tested. If we said that we had a professional body that people >>>> could register to – and they needed to be registered – and in the event of >>>> *substantiated* complaints the individual could be deregistered and >>>> blacklisted – I would have no problem. It is the arbitrary and >>>> unsubstantiated and undefined criteria for registration that I take >>>> exception to – and that I believe could result in expensive legal >>>> challenges. >>>> >>>> >>>> >>>> Please – do not get me wrong – I do not begrudge anyone who has a >>>> desire to genuinely root out the bad apples and clean up the industry and >>>> remove scam artists and fraudsters. I think that is a noble and pure >>>> objective that should be pursued. I however dispute the fact that this >>>> bill is the right way to go about it – and I dispute the fact that >>>> university degrees have anything to do with competence in this industry – >>>> particularly with the rate that technology evolves – because an individual >>>> doing a 3 year degree who is learning specific technologies in his first >>>> year – by the time he graduates – those technologies are history – and when >>>> he walks into the industry – he is having to self study it all again >>>> ANYWAY. Let me give you examples of technologies that did not exist a year >>>> ago in any real form: >>>> >>>> >>>> >>>> 1. Segment routing – the foundation of network routing going >>>> forward and the replacement to MPLS – how do I know this – because I’ve had >>>> my hands in crafting the specifications and doing a lot of the beta testing >>>> for it – so who is going to test proficiency here – it changes the game – >>>> and the only people qualified to teach it – or gauge the proficiency in it >>>> – do not themselves qualify under this bill to be registered. >>>> 2. Network telemetry processing – first introduced in limited form >>>> in Q3 2015 – and only now becoming main stream – but within a year of it >>>> being main stream – it will replace standard network monitoring entirely – >>>> who is going to teach that with a university degree? >>>> 3. Which university degree teaches BGP? BGP-LU? ISIS? Network >>>> segmentation? IPv6 addressing? >>>> >>>> >>>> >>>> The list is endless – these are things that cannot be learnt through a >>>> degree – they are learnt through industry standard certification or >>>> self-skilling by reading documentation. >>>> >>>> >>>> >>>> So, Mr Mucheru – please – do not read me wrong – I have tremendous >>>> respect for the regulator in this country – and it is testament to how well >>>> the Kenyan industry and the regulatory environment here works that today – >>>> Kenya has higher average mobile broadband speeds than either the US or >>>> South Africa or a lot of other places. It is testament to the regulatory >>>> environment here that we have the high-speed networks we do – and that the >>>> pricing is as low as it is – because the industry is competitive and open >>>> and innovative. This list of things the regulator has gotten right in this >>>> country is long - I do however plead with you, the bill as it stands would >>>> break the industry that all of us – yourself – myself – and so many others >>>> have worked so hard to build. I am NOT against a professional body – I am >>>> NOT against formalizing things – but I beg you – do not walk down the road >>>> of this current bill in its current form – it will be death to this >>>> industry in this country. >>>> >>>> >>>> >>>> Andrew Alston >>>> >>>> >>>> >>>> >>>> >>>> *From: *Andrew Alston <Andrew.Alston(a)liquidtelecom.com> >>>> *Date: *Monday, 4 December 2017 at 01:24 >>>> *To: *KICTAnet ICT Policy Discussions <kictanet(a)lists.kictanet.or.ke> >>>> *Cc: *Liz Wanjiru <lizwanjiru(a)gmail.com> >>>> *Subject: *RE: [kictanet] ict practitioners bill is back >>>> >>>> >>>> >>>> I have to say – personally I cannot think of a worse piece of >>>> legislation that I have seen in recent history. >>>> >>>> >>>> >>>> Let us look at the net effects of this and the problems with it: >>>> >>>> >>>> >>>> 1. Large companies bring in consultants or external people where >>>> necessary to supplement capacity, to train and upskill Kenyan staff etc, >>>> while those guys are here, even for a week or two, they are compensated, >>>> and my reading of this bill is – this would be illegal – because you’d have >>>> to get every consultant you bring in accredited and licensed first – which >>>> is impractical in the extreme >>>> 2. The list of highly skilled people with 20+ years experience who >>>> would not qualify for accreditation under this bill is extensive, globally >>>> and within Kenya – this bill completely stops any form of knowledge >>>> transfer from those individuals and in fact will force a situation where >>>> Kenyan’s who wish to learn from some of the biggest names in the industry >>>> would be forced to go internationally to get that knowledge, rather than >>>> bringing those people in to train locally >>>> 3. It forces Kenyans who have spent years learning and honing their >>>> skills without university qualifications out of work and could well result >>>> in large scale job losses looking at the number of highly skilled >>>> individuals I know of who are working without qualifications >>>> 4. It prevents private companies from making what are normal >>>> business decisions – who they hire and who they pay. That is problematic >>>> in the extreme – in any normal situation if a private company hires staff >>>> that don’t perform – those staff either get fired or the market rejects the >>>> company and the company disappears – standard market dynamics – in this >>>> case – if a company finds extremely talented people they may be forced into >>>> a position where they have to hire less skilled people because someone >>>> can’t meet some accreditation requirement. >>>> 5. The bill has no recognition of prior experience – no recognition >>>> of those who have published papers and are world recognized experts – does >>>> not specify what the “recognized” universities are – does not take into >>>> account industry standard certification (CISSP/CCNA/CCIE/CCDP/JNCIE/JNCIP/JNCIA, >>>> the list is endless) >>>> 6. May well end up in the constitutional court when it deprives a >>>> host of people who have spent their lives working in this industry and have >>>> no other options for a career of the ability to earn a living >>>> >>>> >>>> >>>> The bill relies on the belief that a university qualification some how >>>> makes you better than those without – it’s reasoning that has been >>>> disproved globally for years and years and years – and it flies in the face >>>> of the global industry and the way the ICT industry has worked since the >>>> day it began. It is damaging to the industry in Kenya – it is damaging to >>>> the growth prospects of the economy as a result – it is damaging to the >>>> people of Kenya – and it will destroy the position that Kenya is in as one >>>> of the leaders of the ICT industry on the continent (Kenya already has the >>>> highest average broadband speeds on the continent and significantly better >>>> ICT infrastructure than you will find even in South Africa – it is doing so >>>> well – why break a system that is proving functional?) >>>> >>>> >>>> >>>> I really hope this does not pass – and if it does – will be curious to >>>> see the court challenges and how they play out – but I think this is >>>> madness personally – and in the name of stopping a few bad individuals – >>>> penalizes the entire country and will destroy an industry that employs >>>> thousands. >>>> >>>> >>>> >>>> Andrew >>>> >>>> >>>> >>>> >>>> >>>> *From:* kictanet [mailto:kictanet-bounces+andrew.alston= >>>> liquidtelecom.com(a)lists.kictanet.or.ke] *On Behalf Of *Liz Wanjiru via >>>> kictanet >>>> *Sent:* 04 December 2017 06:43 >>>> *To:* Andrew Alston <Andrew.Alston(a)liquidtelecom.com> >>>> *Cc:* Liz Wanjiru <lizwanjiru(a)gmail.com> >>>> *Subject:* Re: [kictanet] ict practitioners bill is back >>>> >>>> >>>> >>>> Hi, >>>> >>>> >>>> >>>> While trying to push such laws shouldn't they be looking at >>>> credentialing people without formal ICT schooling but have the experience, >>>> knowledge and skills to back them? These people have talent and positively >>>> contribute in the industry. Some countries have learning institutions >>>> credentialing professionals based on their body of work and so long as they >>>> can demonstrate this they are awarded the degrees or other government >>>> approved certifications. Here is an example of such >>>> >>>> >>>> >>>> Link >>>> <http://www.ara.ac.nz/study-options/centre-for-assessment-of-prior-learning-…> >>>> >>>> >>>> >>>> >>>> >>>> Liz >>>> >>>> >>>> >>>> On Mon, Dec 4, 2017 at 3:18 PM, Ahmed Mohamed Maawy via kictanet < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> I wonder how some of the ground breaking technology companies - such as >>>> for instance Google Kenya, can operate if this bill is passed. >>>> >>>> >>>> >>>> On Sun, Dec 3, 2017 at 4:57 PM, Watila Alex via kictanet < >>>> kictanet(a)lists.kictanet.or.ke> wrote: >>>> >>>> EricKigada: Kenya’s controversial ICT Practitioners Bill 2016 to be tabled in parliament again >>>> >>>> techmoran.com/kenyas-controv… >>>> >>>> https://twitter.com/EricKigada/status/937309893954031616 >>>> >>>> >>>> >>>> Sent from Yahoo Mail on Android >>>> <https://overview.mail.yahoo.com/mobile/?.src=Android> >>>> >>>> >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> Twitter: http://twitter.com/kictanet >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> >>>> Unsubscribe or change your options at https://lists.kictanet.or.ke/m >>>> ailman/options/kictanet/ultimateprogramer%40gmail.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, do >>>> not spam, do not market your wares or qualifications. >>>> >>>> >>>> >>>> >>>> >>>> -- >>>> >>>> *Ahmed Maawy* >>>> Head of Corporate Products - Al Jazeera Media Network >>>> Skype: ultimateprogramer >>>> >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> Twitter: http://twitter.com/kictanet >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> >>>> Unsubscribe or change your options at https://lists.kictanet.or.ke/m >>>> ailman/options/kictanet/lizwanjiru%40gmail.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, do >>>> not spam, do not market your wares or qualifications. >>>> >>>> >>>> >>>> >>>> >>>> -- >>>> >>>> >>>> >>>> Kind Regards >>>> >>>> Liz Wanjiru >>>> >>>> >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> Twitter: http://twitter.com/kictanet >>>> Facebook: https://www.facebook.com/KICTANet/ >>>> >>>> Unsubscribe or change your options at https://lists.kictanet.or.ke/m >>>> ailman/options/kictanet/joe%40mucheru.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, do >>>> not spam, do not market your wares or qualifications. >>>> >>>> >>> >>> >>> -- >>> Joseph Mucheru E.G.H >>> *Cabinet Secretary* >>> Ministry of Information Communications & Technology (ICT) >>> >>> >>> _______________________________________________ >>> kictanet mailing list >>> kictanet(a)lists.kictanet.or.ke >>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>> Twitter: http://twitter.com/kictanet >>> Facebook: https://www.facebook.com/KICTANet/ >>> >>> Unsubscribe or change your options at https://lists.kictanet.or.ke/m >>> ailman/options/kictanet/njiraini2001%40gmail.com >>> >>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>> for people and institutions interested and involved in ICT policy and >>> regulation. The network aims to act as a catalyst for reform in the ICT >>> sector in support of the national aim of ICT enabled growth and development. >>> >>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>> online that you follow in real life: respect people's times and bandwidth, >>> share knowledge, don't flame or abuse or personalize, respect privacy, do >>> not spam, do not market your wares or qualifications. >>> >>> _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > > Unsubscribe or change your options at https://lists.kictanet.or.ke/m > ailman/options/kictanet/info%40campusciti.com > > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > > Unsubscribe or change your options at https://lists.kictanet.or.ke/m > ailman/options/kictanet/joe%40mucheru.com > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > > > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > Twitter: http://twitter.com/kictanet > Facebook: https://www.facebook.com/KICTANet/ > > Unsubscribe or change your options at https://lists.kictanet.or.ke/ > mailman/options/kictanet/info%40alyhussein.com > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > >

19 37

[Economic Espionage Risks] Vodafone has 'acknowledged' that it Found Hidden Backdoors in Huawei Equipment (but says the issues were resolved).
by Patrick A. M. Maina 30 Apr '19

30 Apr '19

Dear Listers, These kinds of global reports should concern Kenyan business CEOs and Boards in all sectors (as well as economic / technology policymakers) - unless Kenya has little or no interest in competing regionally or internationally to generate new streams of foreign exchange; and even then, are we able to protect our local "home turf" competitive advantage, should multinational actors decide to illegally collect and sell (or leverage) unfairly acquired local business insights, in order to give affiliated new entrants unfair advantage over local enterprises? These are legitimate and global policy concerns. If such things are happening in advanced, tech-savvy economies, what about here in Africa? Is the world having a party at our expense? Trust is good for business - but its is not wise to trust blindly. If we refuse to learn from others, or from history, it will be difficult for us to hand over to our children/youth a future that proves that we played our part responsibly as present-day custodians. We need to start thinking of our existence in less selfish terms: as a relay race, where it is our duty to ensure that we pass on a better future to our children/youth. Let's wake each other up. We must start BELIEVING in ourselves and LOVING ourselves so that our children can believe in, and love themselves as well. Excerpts below: ------------------------------- Reported by Bloomberg today (30th April 2019): "[Vodafone] identified hidden backdoors in the software that could have given Huawei unauthorized access to the carrier’s fixed-line network in Italy, a system that provides internet service to millions of homes and businesses, according to Vodafone’s security briefing documents from 2009 and 2011 seen by Bloomberg, as well as people involved in the situation. Vodafone asked Huawei to remove backdoors in home internet routers in 2011 and received assurances from the supplier that the issues were fixed, but further testing revealed that the security vulnerabilities remained, the documents show. Vodafone said Huawei then refused to fully remove the backdoor, citing a manufacturing requirement. The April 2011 document was authored by its Chief Information Security Officer at the time, Bryan Littlefair. 'What is of most concern here is that actions of Huawei in agreeing to remove the code, then trying to hide it, and now refusing to remove it as they need it to remain for ‘quality’ purposes,' Littlefair wrote. 'There’s no specific way to tell that something is a backdoor and most backdoors would be designed to look like a mistake,' said Stefano Zanero, an Associate Professor of Computer Security at Politecnico di Milano University. 'That said, the vulnerabilities described in the Vodafone reports from 2009 and 2011 have all the characteristics of backdoors: deniability, access and a tendency to be placed again in subsequent versions of the code,' he said. Vodafone also identified backdoors in parts of its fixed-access network known as optical service nodes, which are responsible for transporting internet traffic over optical fibers, and other parts called broadband network gateways, which handle subscriber authentication and access to the internet... In Vodafone’s case, the risks included possible third-party access to a customer's personal computer and home network, according to the internal documents. However, Vodafone’s account of the issue was contested by people involved in the security discussions between the companies. [who allege that] Vulnerabilities in both the routers and the fixed access network remained beyond 2012 and were also present in Vodafone’s businesses in the U.K., Germany, Spain and Portugal. Vodafone stuck with Huawei because the services were competitively priced, they said." Links: 1. Vodafone found Hidden Backdoors in Huawei Equipmenthttps://www.bloomberg.com/news/articles/2019-04-30/vodafone-found-… 2. Huawei denies existence of ‘backdoors’ in Vodafone networking equipment https://www.zdnet.com/article/huawei-denies-existence-of-backdoors-in-vodaf… Best regards,Patrick. Patrick A. M. Maina [Cross-domain Innovator | Public Policy Analyst - Indigenous Innovations]

1 0

Online discussion on State of Broadband - Policy day
by Mwendwa Kivuva 30 Apr '19

30 Apr '19

Thank you Listers, we have had a great debate so far. There are so many issues that have remained hanging on the first thread. I hope we can continue debate on those issues, and tie the loose ends. We will move on to broadband policies. Here is a brief background. Kenya enacted a National Broadband Strategy in 2013. This was updated to the Draft National Broadband Strategy 2023 <https://ca.go.ke/public-consultation-on-the-national-broadband-strategy-for…> that takes into account recent technological, industry trends and market realities. The Draft strategy went through public participation in March 2019. It covers; Infrastructure and connectivity, Content services and applications, Policy - regulations and Legislation, Capacity building and innovations, Broadband devices, Finance and investment, Privacy and Security, Role of stakeholders in expanding broadband penetration, Governance and delivery framework. The outcome of the public participation has not been released to the public by the National Broadband Strategy Steering Committee. We hope to get an update on that. We also have the ICT Policy 2006, and the yet to be ratified Draft ICT policy 2016. The ICT policy should be the overarching policy on which the other policies in the sector branch from. Probably we will get an explanation on how new ICT related strategies are being drafted without an updated ICT policy. This leads to the following questions: 1. How is the sector regulated and what complimentary policies are in place? 2. What complimentary laws and regulations are in place that either stifle, or promote broadband? 3. How is the business environment for those who want to venture into provision of broadband services? 4. What policy interventions can be put in place to promote broadband uptake? Looking forward to a great policy day. Sincerely, ______________________ Mwendwa Kivuva

4 7

Online discussion on State of Broadband in Kenya
by Mwendwa Kivuva 29 Apr '19

29 Apr '19

Dear Listers, As notified last week, we are conducting an assessment on the state of play and impact of broadband in Kenya, broadly looking at the socio-economic impact on consumers, businesses and various sectors like agriculture, education, healthcare, finance and government. We are looking at real life examples of impact of broadband, challenges we face in increasing impact of broadband and recommendations on interventions needed to address the challenges identified. For this discussion, we define broadband as any fast internet. Fast enough to serve your intended purpose. We can have an extended definition through the discussion. Some of the questions we should answer are: 1. What is the current state of broadband in Kenya? What is the current coverage of broadband in Kenya? Do you have broadband internet in your area? How affordable is the available broadband? 2. What barriers are there in increasing impact of broadband in Kenya? 3. What recommendations can counter the barriers identified in increasing impact of broadband? Looking forward to a grrat debate. Sincerely, ______________________ Mwendwa Kivuva

18 26

[fyi] Mozilla's 2019 Internet Health Report is out. A "must read" source of context and ideas for all ICT stakeholders.
by Patrick A. M. Maina 28 Apr '19

28 Apr '19

Dear Listers, Mozilla's Internet Health Report (2019) presents a human-centric perspective on the current state of the internet. It also offers excellent recommendations on how to make the internet work positively for all stakeholders i.e. private sector, Government and the general public. The report is a "must read" source of context and ideas for all stakeholders interested in having a holistic perspective of emerging 21st Century public-interest issues. Here are some excerpts from the executive summary (published on Mozilla's blog): "The digital environment is a complex ecosystem, just like the planet we live on... The internet has the potential both to uplift and connect us. But it also has the potential to harm and tear us apart... we need to step up and do something if we want the digital world to net out as a positive for humanity rather than a negative... The good news is that more and more people are dedicating their lives to creating a healthier, more humane digital world. This Report is designed to be both a reflection and resource for this kind of work. It is meant to offer technologists and designers inspiration about what they might build; to give policymakers context and ideas for the laws they need to write; and, most of all, to provide citizens and activists with a picture of where others are pushing for a better internet, in the hope that more and more people around the world will push for change themselves. Ultimately, it is by more and more of us doing something in our work and our lives that we will create an internet that is open, human and humane." Please read, engage and share widely within your networks. Thank you! Links: 1. Executive Summary: https://blog.mozilla.org/blog/2019/04/23/its-complicated-mozillas-2019-inte… 2. Mobile Friendly Sitehttps://internethealthreport.org/2019/ 3. The 2019 Internet Health Report (Short Version) https://d20x8vt12bnfa2.cloudfront.net/2019/2019InternetHealthReport_shortve… Brgds,Patrick. Patrick A. M. Maina[Cross-domain Innovator | Independent Public Policy Analyst - Indigenous Innovations]

1 0

Tanzania to limit SIM cards to one per network
by Victor Kapiyo 27 Apr '19

27 Apr '19

Interesting developments in Tanzania. Looks like biometric registration programmes have now become vogue for any initiative from government that calls for registration, and it's not just happening in Kenya with our Huduma Number. _____ Tanzania plans to limit the number of mobile phone numbers an individual can own to a single line per network, in its bid to boost security and tame cybercrime. This will involve a fresh biometric registration of all SIM card holders from May 1 to September. Subscribers have to present their national identification card or its number for registration. According to the sector regulator, the current system is not secure enough and lacks important subscriber details that are vital for the national identity card registration initiated two years ago. https://www.theeastafrican.co.ke/business/Tanzania-to-limit-SIM-cards-to-on…

1 0

Smart Cities Books - Free Downloads
by Bitange Ndemo 26 Apr '19

26 Apr '19

Here are two books from UNESCO on Smart Cities - Very good reads and available for free. https://netexplo.com/notebooks/ Ndemo.

3 2

Huduma Namba Questions
by Grace Bomu 25 Apr '19

25 Apr '19

Listers, There are reports that huduma number data in Machakos County has gone missing. See http://dailyactive.info/2019/04/22/huduma-namba-data-go-missing-in-machakos/ and subsequent reports of arrests and investigations on the matter https://www.kahawatungu.com/2019/04/23/machakos-huduma-namba-registration-a… On asking around, it appears that huduma namba kits use micro SD cards which when full are taken to the Assistant or County Commissioners Office for copying (onto NIIMS?). Got me wondering whether use of SD cards is the practice across the country and the implications for data security and integrity with this method. Other questions I still have from observing the exercise is what the real objective of data collection is. It appears that most adults (with ID cards) may already have had their data in different registries related. I am assuming that this is how eCitizen and IPRS works. And then the question of integrity/accuracy of data when a person gives data about other people eg spouses. Will there be opportunity to know what data is held about me? Would be great to have this explained. Regards, -- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F

3 2

Christchurch Call
by Alex Comninos 25 Apr '19

25 Apr '19

Dear All I am wondering lister thoughts on the "Christchurch Call” Where does Africa and the South stand in these processes, how will it affect us? What principles would we like to see in such a call? (If we would like to see it at all) This is happening in the midst of so many other global events, many tragic, as well as legislative and regulatory processes/calls on/for social media platform moderation and regulation. [article pasted below] its worth following the link to watch the video too. The devil will be in the detail of the 'Christchurch Call’ By Tom Pullar, Stuff New Zealand https://www.stuff.co.nz/business/112230966/the-devil-will-be-in-the-detail-… ANALYSIS: World leaders and technology companies will probably reach some sort of accord on social media and online extremism when they meet in Paris next month. But the devil will be in the detail of the agreement they reach, suggests Colin Gavaghan, director of the Centre for Law and Policy in Emerging Technologies at Otago University. Normally, when politicians attend international summits, the text of the agreements they sign is agreed beforehand and then ratified at the meeting, rather than actually being negotiated there. The summit in Paris on May 15 hosted by Prime Minister Jacinda Ardern and French President Emmanuel Macron will be a little different from most, in that representatives from many the world's biggest technology companies, Google, Microsoft, Facebook and Twitter will be among the participants. There are clues as to what it will contain. A spokesman for Ardern said the Government wanted the text to set out "parameters or actions where countries and companies agree to take action". He also said the Government wanted the agreement to be "reasonably specific rather than too high level". But Ardern cautioned that the Christchurch Call would not amount to a "draft set of regulations" that social media companies would need to follow. She also suggested that the focus would be on trying to prevent footage from terrorist attacks being shared online, rather than on the distribution of extremist content more generally. "This is not about freedom of expression. This is about preventing violence and extremism and terrorism online," she explained. "I don't think anyone would argue the terrorist on March 15 had a right to live stream the murder of 50 people. That is what this call is very specifically focused on." Agreeing concrete steps to achieve even that narrow goal would be incredibly hard. Technology experts appear in agreement that the technology does yet not exist that could have automatically identified the live stream of Christchurch shootings as a terrorist atrocity while it was taking place and being streamed live online. There is also no need to use a large social media service, or even live-streaming at all, to distribute a video. While Facebook, YouTube and Twitter have used video and audio-matching technology to gradually rid their websites of copies of the Christchurch video, it was also being distributed by people who simply posted links to it – hosted on nefarious websites – in their social media posts. Just so long as people can set up websites and post content to the internet anonymously, it is hard to see how that could be prevented. Gavaghan cautions the more people that are brought to the table, the more "general and vague" international agreements tend to be. The risk, he argues, is you can end up with texts that are pitched at such a level that "no-one could disagree with them" but which don't tend to mean anything in practice. The role, if any, of the United States in the summit will be something to watch for, he says. "They take their First Amendment considerations very seriously indeed, and that has been a real bone of contention between the EU and US-based companies." But Ardern said the fact that the problem was "extremely difficult" was not a reason not try to find a solution and many would agree with that. Sensibly, she has also made it clear upfront that she believes the summit should be the start of a conversation rather than the end of one. The fact that it appears representatives from Google, Facebook, Microsoft and Twitter will attend the summit is also encouraging. That may be partly because they want to shift responsibility for solving the Christchurch-shooting problem from their businesses to governments and regulators. But they do appear to have recognised that the game has changed. The sheer novelty of the summit hosted by the two young politicians should save it from any risk of obscurity. If they do look at the broader issue of social media platforms being used to propagate extremist views more generally, then the practical challenges are likely to multiply. Material promoted by terrorist organisations would already be illegal in most countries, Gavaghan says. "They are quite an easy target to identify and get shot of." But the boundary between less extremist content and legitimate political views would inevitably be hard to define, he argues. "A lot of the casual everyday normalisation of racism and extremist views comes in at a level probably far below anyone's hate speech laws. "The daily output from the Daily Mail and the Express and the Sun probably does a lot more to normalise racism and anti-immigrant views than some of the really extremist stuff, but what can you do? It is not plausible to ban that.” That doesn't mean the landscape facing social media isn't, or should change, he believes. "The days when the likes of YouTube and Facebook could take the view that they are simply a neutral platform for other's people content and not a publisher – that has gone. "But the question is, what is it reasonable to expect them to do?" Stuff -- Alex Comninos

4 10

Fwd: [afnog] Application for fellowship- 2019 Hackathon@AIS
by Barrack Otieno 25 Apr '19

25 Apr '19

Listers, Might be of interest. Regards ---------- Forwarded message --------- From: Betel Hailu <hailu(a)isoc.org> Date: Tue, Apr 23, 2019 at 9:50 AM Subject: [afnog] Application for fellowship- 2019 Hackathon@AIS To: afnog(a)afnog.org <afnog(a)afnog.org> ============ FRANCAIS PLUS BAS ============ Hello everyone, The Hackathon@AIS is an event aimed at exposing engineers from the African region to Open Internet Standards development and is co-organized by the Internet Society and AFRINIC. This will be the third event in the series following successful events held in Nairobi (2017) and Dakar (2018). Please look at https://bit.ly/2Gp8uMa to see the topics that will be covered this year. Network/System engineers, software developers, and or computer science students are encouraged to apply as engagement in open Internet standards development can help further their careers. *The event will be held on the 19th and 20th of June 2019 in Kampala, Uganda*. If you are interested in participating AND can commit to being available over the 2 days, please fill the application form. Space is limited and successful applicants will be notified and then be enrolled in various online training sessions in the build up of the event. Fellowships will be awarded to strong applicants where possible. Click here to apply: https://internetsociety.wufoo.com/forms/sspq7xj1p17m0n/ *Applications close on the 19th of May 2019.* ====================================================== Bonjour à tous, Le Hackathon@AIS est un événement visant à exposer les ingénieurs de la région africaine au développement des standards Internet ouverts et est co-organisé par Internet Society et AFRINIC. Ce sera le troisième événement du genre après les événements réussis de Nairobi (2017) et de Dakar (2018). Veuillez regardez https://bit.ly/2Gp8uMa afin de voir les sujets qui seront couverts cette année. Ingénieurs Systèmes / Réseaux, développeur d'applications, et ou étudiants en informatique sont encouragés à postuler étant donné que l'engagement dans le développement des standards ouvert de l'Internet peut aider au futur de leur carrière. *L'événement aura lieu le 19 et 20 juin 2019 à Kampala, Uganda*. Si vous êtes intéressé à participer ET que vous pouvez vous engager à être disponible pendant les 2 jours, veuillez remplir le formulaire. Les places sont limité et les candidats retenus seront informés et seront ensuite inscrits à diverses sessions de formation en ligne en vue de l'événement. Des bourses de participations seront accordées aux meilleurs candidats dans la mesure du possible. *Important : Les documents et travaux de l’IETF étant exclusivement en anglais, une bonne compréhension de la langue est essentielle. * Cliquez ici pour postuler: https://internetsociety.wufoo.com/forms/sspq7xj1p17m0n/ *La date limite pour les candidatures est le 19 mai 2019.* Thank you, *Betel Hailu *| *Communications Coordinator – Africa Regional Bureau *|* Internet Society* skype: betty.hailu | www.InternetSociety.org | *Follow Us * [image: iption: Macintosh HD:Users:betelhailu:Desktop:facebook.png] <https://www.facebook.com/ISOCAfrica>[image: iption: Macintosh HD:Users:betelhailu:Desktop:twitter.png] <https://twitter.com/ISOC_Africa> _______________________________________________ afnog mailing list https://www.afnog.org/mailman/listinfo/afnog -- Barrack O. Otieno +254721325277 +254733206359 Skype: barrack.otieno PGP ID: 0x2611D86A

1 0

What ALA's “The Young Entrepreneurs Fund” means for African entrepreneurship
by Eric M K Osiakwan 24 Apr '19

24 Apr '19

https://digestafrica.com/young-entrepreneurs-fund-african Eric here Sent from my iPad

1 0

Online discussion on social-economic impact of broadband in Kenya
by Mwendwa Kivuva 18 Apr '19

18 Apr '19

Dear Listers, IDC is conducting an assessment on the state of play and impact of broadband in Kenya, broadly looking at the socio-economic impact on consumers, businesses and various sectors like agriculture, education, healthcare, finance and government. This assessment has been commissioned by Huawei in collaboration with Ministry of ICT and the Communications Authority. It has the overarching objective of supporting the policy making process to develop broadband services and infrastructure throughout Kenya and achieve substantial economic impact in the economy. Other partners in the study include the ICT Authority and the National Communications Secretariat. The assessment will involve a review of the current state of play in the sector as well as gaining insights from a wide range of stakeholders on the barriers and recommendations to increasing the impact of broadband. Among the key stakeholders identified include KICTANET, from whose members IDC will seek to gain civil society and other stakeholder perspectives including real life examples of impact of broadband, challenges we face in increasing impact of broadband and recommendations on interventions needed to address the challenges identified. This will be conducted as an online debate facilitated and moderated by KICTANET from 23rd to 26th April 2019. Through the online discussion, we will also seek to understand the current state of play of broadband in Kenya, including: 1. What barriers are there in increasing impact of broadband? 2. What recommendations can counter the barriers in increasing impact of broadband? 3. How is the sector regulated and what policies are in place? How is the business environment for those who want to venture into provision of broadband services? 4. How do we create the skills and demand and use cases for broadband? 5. What local content is there and is it having an impact or not? What type of local content are we lacking? 6. How are users and businesses benefiting from broadband? 7. Any other issues. Please note that lister may add any other issue on broadband that come to mind. After the discussion, a summary report will be developed by KICTANET which will subsequently be validated during a face to face meeting. IDC will incorporate relevant findings into the broadband market assessment. Sincerely, ______________________ Mwendwa Kivuva.

6 9

Invitation to Ai Kenya Show and tell event : Building Secure Voice Biometrics with Ryan Roberts
by alfred＠kenya.ai 18 Apr '19

18 Apr '19

Dear Kictanet members! On Behalf of the Ai Kenya Events team, I would like to invite you for the following event happening on Saturday 27th April from 9.30 am to 12.30pm: "My Voice is my password" is a term that you might be familiar with. Voice biometrics adoption is experiencing strong growth, driven by the need for foolproof security methods for technology-driven systems and the popularity of voice assistants such as Alexa, Google Assistant, and Siri. In the second Ai Kenya Show and tell event, we will be hosting Ryan Roberts, Principal Software Engineer at <https://www.cirrus.com/> Cirrus Logic, who will provide insight into the approach used to systematically train and test voice biometrics, one of the forms of Narrow AI(Artificial Intelligence). Join is for a session of discovery, demos and Q&A. Is your company offering services powered by Voice Biometrics? Are you curious to find out more on how voice biometrics algorithms work? Book your free ticket and check the full event details on <http://bit.ly/voiceAIK> http://bit.ly/voiceAIK About Ai Kenya Ai Kenya is a community of enthusiasts and practitioners in the field of machine learning and data science. We invite you to come to some of our events and see the work that we are doing. To understand us better, please have a look at this <https://drive.google.com/open?id=1BvGr3dSsshV50YxCZbnDwXUpD1s9y-Io> introduction deck that details our origin, objectives and previous work. We are fully open to any collaborative efforts that can help us achieve our goal of democratizing artificial intelligence in the East African Ecosystem. Looking forward to seeing you at at the event! Kind regards, Alfred Ongere +254705882004 Team lead, Founder www.kenya.ai <http://bit.ly/AIKPODYTB> Watch Ai Kenya Podcast <https://t.sidekickopen75.com/s1t/o/5/f18dQhb0S7kC8dDMPbW2n0x6l2B9gXrN7sKj6v 46g14W56Dx2l7fcxHKW16gGz793K_hD101?si=8000000000133214&pi=f0ec6675-7afc-4d37 -9def-1e621c6c596e>

1 0

Dialogue on Digital Cooperation in Africa Dialogue Series
by Bob Ochieng 17 Apr '19

17 Apr '19

Dear All, As part of its global engagement process, the UN Secretary-General’s High-level Panel on Digital Cooperation, will work with partners to hold a series of in-person and online dialogues aimed at addressing African priorities in digital cooperation in the Spring of 2019. The public dialogues will be conducted through a multi-stakeholder collaboration of organizations including the African Union Commission, the UN Economic Commission for Africa, the International Telecommunication Union (ITU), the Internet Governance Forum, the Internet Corporation for Assigned Names and Numbers (ICANN), the Association for Progressive Communication (APC), and Diplo Foundation. https://digitalcooperation.org/regionaldialogues/ [digitalcooperation.org] <https://urldefense.proofpoint.com/v2/url?u=https-3A__digitalcooperation.org…> The dialogue series includes: an in-person session with members of the Policy and Regulation Initiative for Digital Africa (PRIDA) on March 29th, an in-person session at the World Summit on the Information Society (WSIS) Forum on April 10th, and two online sessions on April 18th and April 25th. Please register for the online sessions via the following links: Thursday 18 April [intgovforum.webex.com] <https://urldefense.proofpoint.com/v2/url?u=https-3A__intgovforum.webex.com_…> (14-15:30h West Africa, GMT+01:00) Thursday 25 April [intgovforum.webex.com] <https://urldefense.proofpoint.com/v2/url?u=https-3A__intgovforum.webex.com_…> (14-15:30h West Africa, GMT+01:00) Thanks and regards B.

1 0

Vodacom, Tala bosses charged with economic sabotage in Dar
by Barrack Otieno 15 Apr '19

15 Apr '19

Listers, seems as a region we still have a long way to go doing Tech business across the borders. I hope the Kenyan High Commissioner in Tanzania who is a techie intervenes since i can see one of our home grown techies in the thick of things. Let us not wait for a repeat of what happened in Ethiopia. https://www.theeastafrican.co.ke/business/Vodacom-tanzania-tala-bosses-char… In summary - The companies and their staff face 10 charges of contravening the Economic and Organised Crime Control Act, 2002. - They were remanded, as the crimes they are accused of are not bailable. Best Regards -- Barrack O. Otieno +254721325277 +254733206359 Skype: barrack.otieno PGP ID: 0x2611D86A

3 3

UN IGF Best Practice Forum on IoT, Big Data and AI - Virtual Meeting Today 15 April 12:00 UTC
by Alex Comninos 15 Apr '19

15 Apr '19

Dear All, I would like to urge you all to take part in the Internet Governance Forum IoT, Big Data, and AI Virtual Meeting (webinar) today the 15th of April at 12:00 UTC. The Virtual Meeting link is here: https://intgovforum.webex.com/intgovforum/j.php?MTID=m8018d13f801dfcb5ef0ce… We would love to multistakeholderise participation from diverse communities outside of the traditional IGF community. If you have no ideas what a BPF is or what the IGF is - thats completely understandable, and we aim to rectify that! More info can be found here https://www.intgovforum.org/multilingual/content/bpf-internet-of-things-iot… The 2019 edition of the Best Practice Forum on IoT, Big Data and AI will focus on trust in these concepts and their utilization for addressing identified societal challenges. Within the IGF’s remit, the BPF intends to continue to limit its scope to the growing area where IoT, Big Data and AI meet in an Internet context. Building on this BPF’s 2018 work as a starting point, the BPF proposes for 2019 to: * Challenge and review the identified best practices and complete the report with concrete and practical examples. (e.g. in the field of healthcare, environmental protection, e-commerce, public safety, cybersecurity, and infrastructure; * Identify existing and new ways to enhance trust in IoT, Big Data, AI applications and technologies in an Internet context; * Identify how AI can affect outcomes both in terms of social justice and in terms of the allocation of societal resources; * Identify how AI can complement or pose challenges to privacy and data protection as well as transparency and good governance; * Identify how IoT, Big Data, AI can contribute to achieving the UN SDGs and * Identify the impact on policies and regulations, including policy making processes of the application of IoT, Big Data, AI applications. The Virtual Meeting will require WebEX software which can be downloaded at https://www.webex.com/downloads.html. It should work on all Desktops (Mac, Windows, and Linux with some luck) as well as on mobile phones. One should also be able to phone into the meeting with a phone and the info provided here: https://intgovforum.webex.com/intgovforum/j.php?MTID=m8018d13f801dfcb5ef0ce…. If any of you have any questions about what the IGF is, what BPFs are, or how to use WebEx, please do not hesitate to contact me. Best, Alex -- Alex Comninos http://alex.africa -- Alex Comninos http://alex.africa I am transitioning to a new email address: hello(a)alex.africa -- Alex Comninos http://alex.africa I am transitioning to a new email address: hello(a)alex.africa

3 2

Fwd: [Internet Policy] Evangelical view on artificial intelligence
by Barrack Otieno 15 Apr '19

15 Apr '19

Listers, Might be of interest to some. Regards ---------- Forwarded message --------- From: Ayden Férdeline <ayden(a)ferdeline.com> Date: Sat, Apr 13, 2019 at 10:56 PM Subject: [Internet Policy] Evangelical view on artificial intelligence To: ISOC INTERNETPOLICY <internetpolicy(a)elists.isoc.org> The Southern Baptist Convention has released a policy paper and a statement of principles on the ethics of Artificial Intelligence. I found it an interesting read, which, of course, is not to say I agree with all of it ;-) But as many of us are grappling with what AI is and how it will change our world, I found it fascinating to see how a religious organization is trying to proactively address some of these concerns before AI has an even broader social impact. I am not sure if other religions are engaging on this topic too, but if so, I would be curious to read their thoughts as well. You can read their statement here: https://erlc.com/resource-library/statements/artificial-intelligence-an-eva… Ayden Férdeline _______________________________________________ To manage your Internet Society subscriptions or unsubscribe, log into the Member Portal at https://admin.internetsociety.org/622619/User/Login and go to the Interests tab within your profile. -- Barrack O. Otieno +254721325277 +254733206359 Skype: barrack.otieno PGP ID: 0x2611D86A

1 0

Re: [kictanet] [SST whitelist considerations] It will be hard to access Government services without a Huduma Namba, Matiang'i says
by Patrick A. M. Maina 11 Apr '19

11 Apr '19

Huduma number is a great idea that can unlock many benefits for Kenyans. I would really wish for it to succeed. However I fear that the current state of runaway corruption puts the entire project at risk. A Single Source of Truth (SST) acts as a citizen whitelist which can help speed up service delivery and make things more efficient (e.g. by removing the need for ID cross-checks). This strength is also a weakness, unfortunately. Anyone with an SST ID (and "valid fingerprint") is presumed to be a bona fide citizen - but such a conclusion can only be sensibly relied on in an environment with negligible/immaterial levels of corruption. National scale SST whitelist systems are heavily reliant on human factors (e.g. human integrity, personal values, and patriotism) at their points of highest vulnerability. So hackers will likely target the weakest link i.e. gov employees (e.g. via huge bribes or blackmail or workforce infiltration via recruitment process) in order to get to the system. Researchers (link below) have shown that fingerprints can be easily stolen by tech-savvy criminals to facilitate illegal access e.g. via affordable 3D printing technology. Fake fingerprints (and fingers) can also be manufactured to create fictitious persons (e.g. ghost workers or organized criminals). Case in point is India's Aadhaar... just prior to the attack that almost triggered a war with Pakistan, there had been media reports of terrorists being caught in posession of Aadhaar cards. How did they get the cards? Did the "whitelist effect" of Aaadhaar facilitate their movements or planning? The possibility cannot be discounted. Human flaws are the weakest link in any technology solution. What about laws? Surely strict / harsh laws will "protect" the data by deterring illegal activity? 1. Local laws do not deal with or deter international (or state sponsored) perpetrators with high budgets, sophisticated hacking technology and ability to evade acountability (geopolitical powers). 2. Attribution challenges (hackers often leave spoofed breadcrumbs (fake trails) to mislead investigators... so innocent people or even countries can be framed for things they did not do, triggering unjust arrests/convictions or costly and potentially destabilising geopolitical hostilities). Sometimes backdoors are disguised as innocent acts of user or supplier incompetence (e.g. via deliberate insecure design). Sometimes they are a result of genuinely innocent incompetence or accidental oversight. How will Government know which is which? 3. Reactive laws (as opposed to strategic or tactical laws which consider the holistic contextualized picture) only increase compliance costs for law abiding citizens but do not guarantee deterrence for criminals who don't care about laws. Cybercrime laws don't stop or deter sophisticated cybercriminals (e.g. due to atrribution & jurisdictional challenges). 4. Unlike property theft, data can be stolen without the owner's knowledge. By the time the loss is detected (e.g. via numerous incidents of actual unlawful use) it is too late to do anything. It is often impossible to establish the extent by which a honeypot system has been compromised, how the breach happened, who did it and for how long it has been compromised. 5. Massive resources will have to be expended to perform an impossible task of protecting Kenya's most sensitive (and most valuable) data. As security experts keep reminding us, it is not a question of whether a system, any system, can be hacked, it's a question of when - and what will be the consequences. 6. Once biometric data has been stolen, the loss is permanent and irreversible. You cannot issue new fingerprints. So what happens next? 7. As soon as the credibility of the data is in material doubt, we will have to revert to the old system of manual cross checking and all the envisaged benefits will dissapear (as well as the 6B investment). Whether the perpetrators are caught / jailed or not, does not make a difference. To help put things in context, consider this: Government has been unable to secure IFMIS (which was supposed to help eliminate corruption - but became an enabler), TIMS (we still have fake number plates and vehicle duty evasion), SIMBA (we still have massive levels of duty evasion at ports), the IEBC Election System (we had to do two costly elections - leading to a massive waste of funds and an increase of perceived political risks, which also hit the economy very hard adding billions in hidden costs).. even eCitizen has reportedly not been spared, going by media reports. These challenges point to a pattern where we fail to deliberately contextualize solutions and come up with holistic approaches. We put too much trust in silo solutions and reactive laws but we have repeatedly ignored the HUMAN ASPECTS leading to repeated failure to realize envisaged benefits. Any system implemented within a corrupt culture will, more likely than not, end up facilitating (and worsening the cost and scale of) corruption. Guaranteed. This is our reality. Can corruption be solved in Kenya in a sustainable way (without risking stability)? Perhaps government can run a global competition for innovative ideas on how to solve corruption in Kenya. The public can watch high profile debates by local and foreign experts, as part of sensitization/education, and then vote on the top five ideas in every major economic sector, which would then be piloted at designated institutions or counties. Prize for the winning idea in every sector (say USD 1Million) can be linked to results, say after 10-15 years, once the idea is fully implemented and proven to have significantly met the ToR targets in an independently verifiable way (and backed by public perceptions). Good evening. Brgds, Patrick. Patrick A. M. Maina[Cross-domain Innovator | Independent Public Policy Analyst - Indigenous Innovations] On Thursday, April 11, 2019, 2:25:32 PM GMT+3, Eshuchi Richard via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: Just to put CS's full remarks into context and an illustration on why accessing services would be harder in comparison, Ministry of Interior posted the audio through: Facebook: https://www.facebook.com/662150267181777/posts/2305403209523133?sfns=mo Twitter: https://twitter.com/InteriorKE/status/1116221458966044673?s=19 On Thu, Apr 11, 2019, 13:10 Wamathai (HapaKenya) via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: Interior Cabinet Secretary Dr. Fred Matiang’i has said that it will be very hard for those who will not have registered for the Huduma Namba to access Government services. https://hapakenya.com/2019/04/11/it-will-hard-to-access-government-services… _______________________________________________ kictanet mailing list kictanet(a)lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/eshuchi.richard%40gma… The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. _______________________________________________ kictanet mailing list kictanet(a)lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet Twitter: http://twitter.com/kictanet Facebook: https://www.facebook.com/KICTANet/ Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/pmaina2000%40yahoo.com The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

2 1