- KICTANet - KICTANet

Elections 2022: Kenyans fear hacking during elections
by David Indeje 26 Aug '22

26 Aug '22

[image: image.png] Dear Listers, Some interesting insights around Elections and Technology. Our Convenor Ms Grace Githaiga and Ms Egline Samoei,one of our Tech Observer shared insights on the just concluded August 9, 2022 elections for Quartz Africa. *“Kenyans don’t trust technology to run the electoral process. We are afraid that systems might be hacked. People want to see the votes counted one by one,” Egline Samoei.* *“Tech is seen as neural but it doesn’t run elections on its own. People behind the tech run elections. It is a case of garbage in, garbage out. If we key in the right data on the right verification mechanisms, then we will get verified election results,”Grace Githaiga told Quartz. * Read more of it here https://news.yahoo.com/kenyans-still-dont-trust-technology-114700550.html In addition, stay updated from our series of blogs about the 2022 Kenya Election. https://www.kictanet.or.ke/what-we-do/election-observers/

2 1

Re: [kictanet] KICTANet Digest, Vol 174, Issue 17
by Adrian Teri 23 Aug '22

23 Aug '22

I'm starting to see interesting questions pop up and even statements like every technology is not perfect but .... 1. Can we ascertain & inventory versions & dependencies in the software used in the #KIEMS kits and IEBC's front & back-end servers? Were these pieces of software current/up-to-date? Vulnerable? Have publicly assigned #CVEs and/or exploits in the wild? 2. Are there security features for the configs/databases loaded onto the #KIEMS kits? If yes, have there been analyses for both hardware + software risks? 3. A #KIEMS kit for a polling station is the only device that can transmit(images of the Form34A) and there are limited chances to do so ...Are there tests and security analyses to substantiate authentication(verification) + authorization of these devices? 3.1 What's the process/flow of replacing a failed #KIEMS kit for a polling station ... 4. On transmission ...It is well known that IMSI catchers aka "Fake Cell Towers" are readily and aren't exorbitantly expensive. Considering many polling stations are clustered in a small geographical area this is even more feasible. There is even a 5G version of the device. Were #KIEMS kits' modems and/or cell towers hardened to mitigate well known issues like root-kits/backdoors can be injected into the SIM modules, access storage on a device, read messages and even intercept connections on a VPN!? ...sometimes the modem is given free reign to access the entire system! Read -> *https://replicant.us/freedom-privacy-security-issues.php <https://replicant.us/freedom-privacy-security-issues.php>* and Watch ->* https://www.youtube.com/watch?v=31D94QOo2gY <https://www.youtube.com/watch?v=31D94QOo2gY>* There are too many of these types of questions and rabbit holes to go over ... IEBC kindly open source your entire codebase, infrastructure provisioning + configurations etc. Have days where hobbyists and "hackers"/tinkerers can play & take apart the hardware to be used in the next elections. Start this process now! Yes this will limit companies you can contract with in the future but for the sake of transparency, accountability and potentially identifying, quantifying & thwarting risks do this! Regards, Adrian Teri ---------- Forwarded message ---------- > From: Benson Muite <benson_muite(a)emailplus.org> > To: kictanet(a)lists.kictanet.or.ke > Cc: > Bcc: > Date: Sun, 14 Aug 2022 22:18:43 +0300 > Subject: Re: [kictanet] Invitation to Participate in ' Talk to IEBC' > On 7/14/22 13:30, A Mutheu via KICTANet wrote: > > *SERVERS*: > > Our servers are more than 3 years old and so would need an upgrade as a > > norm. Has such an upgrade been effected? The voter numbers have > > increased and so will the current servers have adequate capacity? If > > they lack capacity then at this eleventh hour when it is too late to > > order in others, then perhaps we need to look for other solutions as a > > matter of urgency for example, taking into account Data Protection > > considerations, IEBC can look into borrowing capacity from other major > > government servers that hold sensitive information as a norm, assuming > > they have extra capacity, like KRA or CBK? > > > It appears that forms.iebc.or.ke is on Amazon S3. Making this data > available increases transparency. The information on these forms seems > to be public, though publishing a hash of the files to confirm integrity > would be useful. Some of the forms have returning officer id numbers. > My expectation would have been that the name, and possibly a telephone > number for the returning officer would be publicly visible, but not the > id number. My hope is that servers holding confidential information are > not in the public cloud. > > > > > *OCR (OPTICAL CHARACTER RECOGNITION) TECHNOLOGY*: > > As far as I am aware IEBC does not have OCR technology or do they? If > > they do not then for aggregation purposes this will have to be done > > manually and human error can arise (both accidental or intentional), as > > this is always a risk where the human factor is a component. If this is > > the status quo then what measures has IEBC put in place to secure this > > process? > This is something that IEBC should invest in more. A paper audit trail > is important, but OCR would allow speed up in tabulation. > https://electionlab.mit.edu/research/voting-technology > Tools such as: > https://github.com/PaddlePaddle/PaddleOCR > https://github.com/tesseract-ocr/tesseract > can help in processing A forms, and non machine readable uploads of B > forms. Those with technical skills and interest in the election process > will have already automated the processing of 34A forms. Nevertheless, > the dataset should prove useful for those interested in computer vision: > http://cs230.stanford.edu/projects_spring_2020/reports/38792124.pdf > > > > > > > *CIVIC EDUCATION AND REGULAR UPDATES EVEN ON THE IEBC WEBSITES*: > > IEBC has not been aggressive in much needed civic education to sensitize > > and update the public on the GE and even their website can be better > > utilized. In all of this accessibility of information to the differently > > abled is an important factor and their democratic right. How has IEBC > > addressed this? Even on election day what steps have been put in place > > to protect the privacy of the differently abled but enable them to > > exercise their democratic right fairly? > The updates for forms other than 34 are slow/non-existent. Media > coverage is incomplete. By making forms 34 available, this has allowed > the general public to do their own tallying, with the understanding that > verification is still needed. This seems to have increased confidence > in the process. Hopefully, the numbers on the other forms will also be > made available. > > > > > > > > IEBC needs to realize that with great power like they have, comes great > > responsibility to uphold the democratic rights of Kenyans to fair and > > free elections, and not allow technological issues that are resolvable > > to curtail this right again. > > > > Stay happy, > > > > *Mutheu Khimulu* > > *LLM. Cybersecurity, Counter Terrorism & Crisis Management* > > *https://www.linkedin.com/in/mutheu-khimulu-law/ > > <https://www.linkedin.com/in/mutheu-khimulu-law/> * > > > > > > > > > > ---------- Forwarded message ---------- > From: A Mutheu <mutheu(a)khimulu.com> > To: "Kenya's premier ICT Policy engagement platform" < > kictanet(a)lists.kictanet.or.ke> > Cc: > Bcc: > Date: Mon, 15 Aug 2022 10:10:10 +0300 > Subject: Re: [kictanet] Invitation to Participate in ' Talk to IEBC' > Dear Benson, > > Your insights are noted with appreciation. > > Stay happy, > > *Mutheu Khimulu.* > *LLM. Cybersecurity, Counter Terrorism & Crisis Management* > *https://www.linkedin.com/in/mutheu-khimulu-law/ > <https://www.linkedin.com/in/mutheu-khimulu-law/>* > > On Sun, Aug 14, 2022 at 10:19 PM Benson Muite via KICTANet < > kictanet(a)lists.kictanet.or.ke> wrote: > >> On 7/14/22 13:30, A Mutheu via KICTANet wrote: >> > *SERVERS*: >> > Our servers are more than 3 years old and so would need an upgrade as a >> > norm. Has such an upgrade been effected? The voter numbers have >> > increased and so will the current servers have adequate capacity? If >> > they lack capacity then at this eleventh hour when it is too late to >> > order in others, then perhaps we need to look for other solutions as a >> > matter of urgency for example, taking into account Data Protection >> > considerations, IEBC can look into borrowing capacity from other major >> > government servers that hold sensitive information as a norm, assuming >> > they have extra capacity, like KRA or CBK? >> > >> It appears that forms.iebc.or.ke is on Amazon S3. Making this data >> available increases transparency. The information on these forms seems >> to be public, though publishing a hash of the files to confirm integrity >> would be useful. Some of the forms have returning officer id numbers. >> My expectation would have been that the name, and possibly a telephone >> number for the returning officer would be publicly visible, but not the >> id number. My hope is that servers holding confidential information are >> not in the public cloud. >> >> > >> > *OCR (OPTICAL CHARACTER RECOGNITION) TECHNOLOGY*: >> > As far as I am aware IEBC does not have OCR technology or do they? If >> > they do not then for aggregation purposes this will have to be done >> > manually and human error can arise (both accidental or intentional), as >> > this is always a risk where the human factor is a component. If this is >> > the status quo then what measures has IEBC put in place to secure this >> > process? >> This is something that IEBC should invest in more. A paper audit trail >> is important, but OCR would allow speed up in tabulation. >> https://electionlab.mit.edu/research/voting-technology >> Tools such as: >> https://github.com/PaddlePaddle/PaddleOCR >> https://github.com/tesseract-ocr/tesseract >> can help in processing A forms, and non machine readable uploads of B >> forms. Those with technical skills and interest in the election process >> will have already automated the processing of 34A forms. Nevertheless, >> the dataset should prove useful for those interested in computer vision: >> http://cs230.stanford.edu/projects_spring_2020/reports/38792124.pdf >> > >> >> > >> > *CIVIC EDUCATION AND REGULAR UPDATES EVEN ON THE IEBC WEBSITES*: >> > IEBC has not been aggressive in much needed civic education to >> sensitize >> > and update the public on the GE and even their website can be better >> > utilized. In all of this accessibility of information to the >> differently >> > abled is an important factor and their democratic right. How has IEBC >> > addressed this? Even on election day what steps have been put in place >> > to protect the privacy of the differently abled but enable them to >> > exercise their democratic right fairly? >> The updates for forms other than 34 are slow/non-existent. Media >> coverage is incomplete. By making forms 34 available, this has allowed >> the general public to do their own tallying, with the understanding that >> verification is still needed. This seems to have increased confidence >> in the process. Hopefully, the numbers on the other forms will also be >> made available. >> > >> > >> > >> > IEBC needs to realize that with great power like they have, comes great >> > responsibility to uphold the democratic rights of Kenyans to fair and >> > free elections, and not allow technological issues that are resolvable >> > to curtail this right again. >> > >> > Stay happy, >> > >> > *Mutheu Khimulu* >> > *LLM. Cybersecurity, Counter Terrorism & Crisis Management* >> > *https://www.linkedin.com/in/mutheu-khimulu-law/ >> > <https://www.linkedin.com/in/mutheu-khimulu-law/> * >> > >> > >> >> _______________________________________________ >> KICTANet mailing list >> KICTANet(a)lists.kictanet.or.ke >> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >> Twitter: http://twitter.com/kictanet >> Facebook: https://www.facebook.com/KICTANet/ >> >> Unsubscribe or change your options at >> https://lists.kictanet.or.ke/mailman/options/kictanet/mutheu%40khimulu.com >> >> >> KICTANet is a multi-stakeholder Think Tank for people and institutions >> interested and involved in ICT policy and regulation. KICTANet is a >> catalyst for reform in the Information and Communication Technology sector. >> Its work is guided by four pillars of Policy Advocacy, Capacity Building, >> Research, and Stakeholder Engagement. >> >> KICTANetiquette : Adhere to the same standards of acceptable behaviors >> online that you follow in real life: respect people's times and bandwidth, >> share knowledge, don't flame or abuse or personalize, respect privacy, do >> not spam, do not market your wares or qualifications. >> >> KICTANet - The Power of Communities, is Kenya's premier ICT policy >> engagement platform. >> > _______________________________________________ > KICTANet mailing list > KICTANet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet >

1 0

Re: [kictanet] Africa Gender Equality Moot Court Competition
by Angela Minayo 20 Aug '22

20 Aug '22

Hi Listers, Equality Now, Solidarity for African Women's Rights and Strathmore Law School are organising a moot court competition themed Women’s Economic and Political Rights in the Digital Space for undergraduate law students from French and English speaking African countries. Listers with relevant subject-matter expertise in human rights law on the digital space who wish to be judges in the moot court competition can email me so that we can nominate them. Angela Minayo Program Officer- KICTANet KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

1 0

NEW: Policy Briefs for Reading and Sharing
by David Indeje 18 Aug '22

18 Aug '22

[image: KPB.png] Dear Listers, This month, we published various policy briefs aimed at enhancing our understanding of the various issues within Kenya's ICT landscape. They include: - Data Protection and Privacy. A Gender Perspective - Data protection and digital identity in Kenya - Policy review towards Citizen Cyber Hygiene in Kenya All are available online via https://bit.ly/3AvPV6D KICTANet appreciates the feedback that comes from this community. Enjoy your reading. -- *Kind Regards,* *David Indeje* *KICTANet Communications *_____________________________________ +254 (0) 711 385 945 | +254 (0) 734 024 856 KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

1 0

Fwd: Request: Sharing GrowUp Incubator program's call for Application with your network
by Bitange Ndemo 17 Aug '22

17 Aug '22

Please share ---------- Forwarded message --------- From: Bramwel Omondi <Bramwel.Omondi(a)yunuseh.com> Date: Tue, Aug 16, 2022 at 6:59 PM Subject: Request: Sharing GrowUp Incubator program's call for Application with your network To: bndemo(a)uonbi.ac.ke <bndemo(a)uonbi.ac.ke>, bndemo(a)bitangendemo.me < bndemo(a)bitangendemo.me> Dear His Excellency Prof. Ndemo, Greetings from Yunus Environment Hub, We are glad to inform you that on 13th July 2022, we opened a call for Applications for the new cohort in our GrowUp Incubator program. Dubbed as *Circular Impact Cohort*, the cohort focuses on supporting and advancing innovative, circular, and impactful solutions that have the potential to create substantial environmental and social impact within sustainable Tourism and mobility sectors in East Africa. During the 6-months program, social business entrepreneurs in these sectors will be equipped with knowledge, skills, and tools in the implementation of Circular solutions and Impact Measurement methodology through: - A series of virtual workshops - On-demand virtual working sessions with YEH Circular Economy and Impact Measurement Experts - Capacity-building Bootcamp - Peer to Peer exchanges and Networking sessions - Master Virtual Classes - Investor Readiness training - Pitching opportunities We would therefore request you kindly share this opportunity with your networks and social business entrepreneurs in sustainable tourism and mobility sectors. For more information about the program and applications, please click the following link <https://yunusenvironmenthub.com/growup-incubator/>, Applications will close on the *28th of August 2022, at 23:59 EAT*. We would be happy to receive applications from your networks. In case of any questions, do not hesitate to contact me – at bramwel.omondi(a)yunuseh.com . Kind Regards Bramwel Otieno Omondi Yunus Environment Hub Regional Program Manager +4915218671324 *bramwel.omondi(a)yunuseh.com <bramwel.omondi(a)yunuseh.com>* *www.yunusenvironmenthub.com* <http://www.yunusenvironmenthub.com> *Download our new Impact Report 2021 <https://yunusenvironmenthub.com/about/#our-impact> to learn more about our work.* [image: cidimage002.jpg(a)01D6C7DE.CDE54470]

1 0

Re: [kictanet] Invitation to Participate in ' Talk to IEBC'
by Barrack Otieno 15 Aug '22

15 Aug '22

Listers, Earlier today, KICTANet held a consultative meeting with IEBC Commissioners led by Chairman Wafula Chebukati and the Secretariat represented by CEO Marjan Hussein and ICT Manager Mr. Michael Ouma. This follows KICTANets participation in the IEBC National Elections Conference yesterday. The need for greater engagement between KICTANets Stakeholders and IEBC featured prominently in the deliberations. As part of the engagement process , KICTANet will be hosting a ''Talk to IEBC'' discussion which will culminate in a Webinar that will address Technology concerns in Kenya's electoral process. We would like to invite listers to contribute to the online discussion that will serve as a precursor to webinar. To contribute we would like to hear from you the following: 1. What issues do you have in so far as Tech and elections is concern in Kenya? 2. What recommendations do you have in so far as the use of Tech and elections is concerned in Kenya? The discussion will take place on Thursday 14th July 2022 and Friday 15th July 2022 Thank you Best Regards -- *Barrack Otieno* *Trustee* *Kenya ICT Action Network (KICTAnet)* *Skype:barrack.otieno* *+254721325277* *https://www.linkedin.com/in/barrack-otieno-2101262b/ <https://www.linkedin.com/in/barrack-otieno-2101262b/>* *www.kictanet.or.ke <http://www.kictanet.or.ke>*

11 24

Kenya National Digital Master Plan 2022 -2032
by Mwendwa Kivuva 11 Aug '22

11 Aug '22

As we reach the crescendo in the election cycle to usher in a new government, the 2017-2022 regime is winding up its work. One important document that has been launched is The Kenya National Digital Master Plan 2022-2032. This is a progression of the 2014-2017 document. This Master Plan has four pillars that are responsible for the provision of digital services to citizens, businesses and other stakeholders: a. Digital Infrastructure: For equitable access to national service through a pervasive and ubiquitous national ICT infrastructure; b. Digital Government Service, Product and Data Management: For provision of e-Government information and services for improved productivity, efficiency, effectiveness and governance in all sectors. It also considers technology related products and services. c. Digital Skills: For the development of a digitally skilled workforce and citizenry that is grounded on ethical practices and social cultural values to implement and operationalize this master plan; and d. Digital Innovation, Enterprise and Digital Business: For enhancing the innovation value chain in order to turn innovative ideas into sustainable businesses and operating models. The pillar also aims to migrate businesses onto the digital platform. The document can be accessed through https://cms.icta.go.ke/sites/default/files/2022-04/Kenya%20Digital%20Master… -- Best Regards, ______________________ Mwendwa Kivuva, Nairobi, Kenya https://www.linkedin.com/in/mwendwa-kivuva

3 2

IEBC Kenya Site
by Adrian Teri 09 Aug '22

09 Aug '22

Good day all, What's going on with IEBC's site? I have been monitoring it since last Thursday when I was trying to get some resources from it. Since then it has only come back for a 5-minute window that was barely registered on Sun 14:46 EAT Time ... Regards, Adrian Teri

4 3

Re: [kictanet] KICTANet Digest, Vol 174, Issue 14
by Adrian Teri 08 Aug '22

08 Aug '22

@awatila Thanks just noted they don't handle/listen to requests without "www" on their main site. However, if you add the "www" for verify.iebc.or.ke it also is NOT handled/listened to? Must be Inconsistencies in configuration for their web servers. Regards, Adrian Teri Regards, Adrian Teri ---------- Forwarded message ---------- > From: <awatila(a)gmail.com> > To: "'Kenya's premier ICT Policy engagement platform'" < > kictanet(a)lists.kictanet.or.ke> > Cc: "'Adrian Teri'" <adriateri(a)gmail.com> > Bcc: > Date: Mon, 8 Aug 2022 17:26:10 +0300 > Subject: Re: [kictanet] IEBC Kenya Site > > Probably too much demand on the website from visitors > > > > Although I have been able to access https://www.iebc.or.ke/ and > https://verify.iebc.or.ke/ without difficulty > > Regards, > > > > > > Consultant > > ICT4D > > *Quality Management Systems > <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b> * > > *Information Security Management Systems > <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b>* > > > > *From:* KICTANet <kictanet-bounces+awatila=gmail.com(a)lists.kictanet.or.ke> > *On Behalf Of *Adrian Teri via KICTANet > *Sent:* Monday, August 8, 2022 5:14 PM > *To:* Alex Watila <awatila(a)gmail.com> > *Cc:* Adrian Teri <adriateri(a)gmail.com> > *Subject:* [kictanet] IEBC Kenya Site > > > > Good day all, > > > > What's going on with IEBC's site? I have been monitoring it since last > Thursday when I was trying to get some resources from it. > > > > Since then it has only come back for a 5-minute window that was barely > registered on Sun 14:46 EAT Time ... > > > > Regards, > > Adrian Teri > > > > ---------- Forwarded message ---------- > From: Muraya Kamau <martin(a)deveint.com> > To: "Kenya's premier ICT Policy engagement platform" < > kictanet(a)lists.kictanet.or.ke> > Cc: awatila(a)gmail.com, Adrian Teri <adriateri(a)gmail.com> > Bcc: > Date: Mon, 8 Aug 2022 18:09:37 +0300 > Subject: Re: [kictanet] IEBC Kenya Site > I have noted with concern that we have issues with certain ISP's accessing > IEBC main website and subdomains. Was wondering if this is a configuration > issue? > > Muraya > > On Mon, Aug 8, 2022, 17:26 Alex Watila via KICTANet < > kictanet(a)lists.kictanet.or.ke> wrote: > >> Probably too much demand on the website from visitors >> >> >> >> Although I have been able to access https://www.iebc.or.ke/ and >> https://verify.iebc.or.ke/ without difficulty >> >> Regards, >> >> >> >> >> >> Consultant >> >> ICT4D >> >> *Quality Management Systems >> <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b> * >> >> *Information Security Management Systems >> <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b>* >> >> >> >> *From:* KICTANet <kictanet-bounces+awatila=gmail.com(a)lists.kictanet.or.ke> >> *On Behalf Of *Adrian Teri via KICTANet >> *Sent:* Monday, August 8, 2022 5:14 PM >> *To:* Alex Watila <awatila(a)gmail.com> >> *Cc:* Adrian Teri <adriateri(a)gmail.com> >> *Subject:* [kictanet] IEBC Kenya Site >> >> >> >> Good day all, >> >> >> >> What's going on with IEBC's site? I have been monitoring it since last >> Thursday when I was trying to get some resources from it. >> >> >> >> Since then it has only come back for a 5-minute window that was barely >> registered on Sun 14:46 EAT Time ... >> >> >> >> Regards, >> >> Adrian Teri >> _______________________________________________ >> KICTANet mailing list >> KICTANet(a)lists.kictanet.or.ke >> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >> Twitter: http://twitter.com/kictanet >> Facebook: https://www.facebook.com/KICTANet/ >> >> Unsubscribe or change your options at >> https://lists.kictanet.or.ke/mailman/options/kictanet/martin%40deveint.com >> >> >> KICTANet is a multi-stakeholder Think Tank for people and institutions >> interested and involved in ICT policy and regulation. KICTANet is a >> catalyst for reform in the Information and Communication Technology sector. >> Its work is guided by four pillars of Policy Advocacy, Capacity Building, >> Research, and Stakeholder Engagement. >> >> KICTANetiquette : Adhere to the same standards of acceptable behaviors >> online that you follow in real life: respect people's times and bandwidth, >> share knowledge, don't flame or abuse or personalize, respect privacy, do >> not spam, do not market your wares or qualifications. >> >> KICTANet - The Power of Communities, is Kenya's premier ICT policy >> engagement platform. >> > > _______________________________________________ > KICTANet mailing list > KICTANet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet >

1 0

Kenya Elections 2022: Pre-election Observations Report
by David Indeje 08 Aug '22

08 Aug '22

[image: image.png] Dear Listers, Ahead of Tuesday's General Elections, we have published our Pre-election Observations Report. The report provides key recommendations to the IEBC and other stakeholders. You too can read it here: https://bit.ly/3zCjDoJ -- *Kind Regards,* *David Indeje* *KICTANet Communications *_____________________________________ +254 (0) 711 385 945 | +254 (0) 734 024 856 KICTANet portals KICTANet.or.ke <https://kictanet.or.ke/> | Twitter <https://twitter.com/kictanet> | LinkedIn <https://www.linkedin.com/company/18428106/admin/> | Facebook <https://www.facebook.com/KICTANet/>

1 0