- KICTANet - KICTANet

Re: [kictanet] [isoc_ke] #KeIGF Online Discussions Day 6: Openess
by cdohnio 27 Jul '15

27 Jul '15

To wiegh in on a couple of the questions asked: Should Internet service provider (ISP) be allowed to speed up, slow down or block lawful Web traffic from getting to where you, the customer, want it to go? No, though we have to allow for ISPs to optimize their networks. How we would measure violations is a trickier question. As already mentioned, most of the public isn't aware about these issues and those aware mostly don't care. We have to find a way to make these issues real to them and the regulator. Should ISPs like Orange or Safaricom demand payment from content providers like Facebook or Google because these content providers reap huge profit from the infrastructure provided by ISPs? To answer the question, no. It's disingenuous to add this phrase "*because these content providers reap huge profit* *from the infrastructure provided by ISPs*" to the question. It doesn't matter how much profit they're ripping. Nothing, I repeat again, nothing is preventing, or has ever prevented, ISP's from building their own social networks, search engines and video hosting websites. Their failure to imagine uses of their infrastructure beyond the initial use case is their own fault and they can't turn around and beginning charging those who have. Finally I already pay ISPs for the data I use. They'll effectively be charging twice on the same data if they're allowed to charge. All the best, princelySid *Twitter:* @princelySid | *Website: *cdohnio.blogspot.com

1 0

AfricaHackOn Conference 2015
by christian kisutsa 27 Jul '15

27 Jul '15

Greetings, I trust you are well. I would like to cordially invite you to the 2nd Annual AfricaHackOn conference. The Cyber Security conference will be hosted at iHUB on 31st July 2015. Updates on the conference speakers can be obtained on our official website: http://africahackon.com/africa/conference A limited number of the tickets to the conference are available on ticketsasa via the following link: https://www.ticketsasa.com/events/eventdetail/view/1629/africahackon_2015#t… Please find attached to this mail, additional details on what to expect during the event. We look forward to your attendance in support of growing the Cyber Security community in Kenya. Regards.

1 0

Re: [kictanet] [Security Forum] #KeIGF15 Online Discussions Day Three: Internet Economy
by Mwendwa Kivuva 24 Jul '15

24 Jul '15

> > I would say that we don't have a strong enough legal framework the governs some of these new frontiers. However, there must be a healthy tension between the need to protect consumers from unscrupulous business people while encouraging innovative uses of technology. Thanks Josiah. You have captured the point right from my thoughts. We need to find a balance between regulation and over regulation. Innovations like Mpesa thrived because the environment was ripe and there were no stifling policies (barriers to entry) Consumer protection: Article 46 of our Constitution on Consumer Protection mandate Parliament to "...enact legislation to provide for consumer protection and for fair, honest and decent advertising." The firth schedule envisioned this enactment to happen four years after the promulgation, which I believe is expired. But that not withstanding, any court of competed jurisdiction should be able to rule and set precedence on consumer protection issues. Therefore there is NO vacuum at all. Bill of Rights: Consumer rights. 46. (1) Consumers have the right— (a) to goods and services of reasonable quality; (b) to the information necessary for them to gain full benefit from goods and services; (c) to the protection of their health, safety, and economic interests; and (d) to compensation for loss or injury arising from defects in goods or services.

2 2

Re: [kictanet] [isoc_ke] #KeIGF15 Online Discussions Day Four: Management of Critical Internet Resources
by Barrack Otieno 24 Jul '15

24 Jul '15

Hi Daniel, This is the document i shared. Thank you regards. Best Regards On Jul 24, 2015 11:11 AM, "Daniel Otieno Omondi" <dottocomp(a)yahoo.com> wrote: > Hi barrack, > On your question on the national broadband strategy here are some links to > clarify ..... > http://ca.go.ke/images//downloads/PUBLICATIONS/NATIONAL%20BROADBAND%20STRAT… > Thanks > > Daniel > -------------------------------------------- > On Fri, 7/24/15, Barrack Otieno via isoc <isoc(a)lists.my.co.ke> wrote: > > Subject: Re: [isoc_ke] #KeIGF15 Online Discussions Day Four: Management > of Critical Internet Resources > To: "ISOC Kenya Chapter" <isoc(a)lists.my.co.ke> > Cc: "Skunkworks Mailing List" <skunkworks(a)lists.my.co.ke>, "KICTAnet ICT > Policy Discussions" <kictanet(a)lists.kictanet.or.ke>, "Security List" < > security(a)lists.my.co.ke> > Date: Friday, July 24, 2015, 6:37 AM > > Listers, > > The thread on Management of > Critical Internet Resources is still open > as > we move forwad, feel free to contribute to the discussion > as we > move along. > In the > mean time , i would like to know the current state of > service > access gaps. The last map i saw on > the National Broadband Strategy > document > published in 2013 showed that close to 50 % of the Kenyan > landmass lacked any service, it appeared as if > most Critical Internet > Resources were > concentrated around the key towns and Cities, Nairobi, > Mombasa , Nakuru and Kisumu. I wonder if this > has changed. Was > implementation of this > Strategy Document taken over by the ICT > Authority or is it water under the bridge. > > On 7/23/15, Barrack Otieno > <otieno.barrack(a)gmail.com> > wrote: > > Listers, > > > > Feel free to continue with the discussions > on the previous days > > threads. Today , > we focus on management of critical internet resources > > in our country. > > > > Questions: > > > > 1. Is there an over arching national > policy to guide infrastructure > > > deployments within the country? > > 2. What > is the current state of fiber optic cable across the > country? > > Is there any redundancy on the > cables laid across the country? > > 3. Are > there policies in place for infrastructure sharing to > avoid > > each operator laying their own > cable thus passing the cost to the end > > > user? > > 4. What is the state of IXPs in > Kenya? are we in retaining more > > > traffic locally compared to say 2 years ago? > > 5. Communications Authority requires all > .ke registrars and the > > registry to be > licensed by it before they commence business. Why is > > the registry being licensed? What would > happen if CA withdrew the > > license for > the registry? Why are registrars licensed twice, first by > > KENIC, then CA? Will over regulation hurt > the industry? > > 6. With the eminent > depletion of IPv4 addresses around the world, what > > is the state of uptake of IPv6 addresses > in Kenya? > > 7. What is being done to > ensure there is more uptake of IPv6? Then > > there is the exhaustion of IPv4 in some > regions of the world like ARIN > > forcing > them to go full V6 without dual-stacking, what impact > does > > that have to our country where > most networks and content is on v4? > > > 8.Do you have any other views regarding best practice in > the > > management of critical internet > resources? > > > > The > floor is open. > > > > > > > > Thank you > > > > Best Regards > > > > > -- > Barrack O. Otieno > +254721325277 > +254-20-2498789 > Skype: > barrack.otieno > http://www.otienobarrack.me.ke/ > > _______________________________________________ > isoc mailing list > isoc(a)lists.my.co.ke > http://lists.my.co.ke/cgi-bin/mailman/listinfo/isoc >

1 0

Re: [kictanet] #KeIGF15 Online Discussions Day Five: Emerging Issues
by Barrack Otieno 24 Jul '15

24 Jul '15

Listers, This topic attempts to provide the space to discuss a variety of emerging issues in the Internet space. Question 1. The mandate of WSIS, a meeting of the UN that took place in 2005 in Tunis is coming to an end. The WSIS process gave birth to the Internet Governance Forum (IGF) which is up for renewal at end of this year. >From IGF discussions, there are no concrete proposals to form a permanent UN body for Internet governance. However, the discussions have borne many policies or “soft laws” that have guided relationships various stakeholders. Should the mandate of WSIS be extended for a further 10 years? 2. Should the government of Kenya support a renewal of WSIS? 3. Are there any other emerging issues that the Kenyan Internet Community should pay attention to? The floor is open

1 0

Re: [kictanet] #KeIGF15 Online Discussions Day Three: Internet Economy
by meshack 23 Jul '15

23 Jul '15

We have to admit that the principles and policies of the past have been changed by a revolution (digital revolution) middle men in markets are slowly being thrown to the rare as a end consumer. Time aa a factor in distribution and product delivery, processing has been reduced and the once necesary documentations required in commerce are mostly eliminated. All these as cool as it is has been intergrated into a world were financial services are more founded and targeted to a particular spcial class and tjerefore a sense of security that is much needed to a uninformed consumer is limited to those who are educated or in other words the socially politically and economically aware population. Yes we cannot blame anyone, just the market forces aligning to a most favourable conditions that guarantees success and competitiveness rather than having the services as a social development utility. Sent from Samsung Mobile -------- Original message -------- From: Gideon via kictanet <kictanet(a)lists.kictanet.or.ke> Date: 22/07/2015 12:03 (GMT+03:00) To: memakunat(a)yahoo.com Cc: Gideon <gideonrop(a)gmail.com> Subject: [kictanet] #KeIGF15 Online Discussions Day Three: Internet Economy Listers, First it will be good to know if the government has enough data on the eCommerce environment in Kenya. Thereafter such a study, it will be possible to create a better revenue analysis model that will allow the taxman to benefit at the same time enabling the govt to create a conducive environment to encourage and catalyze the Internet economy. Regards Gideon Rop Hi Barrack, Thank you for the the questions. @ Fred on the issue of taxation for the Internet economy.... I was listening to a representative from Jumia the other day on radio. By her presentation, the volume of merchandise moved per day is quite high and this business is really catching on in Kenya. If I remember they had an increase of 900%in turnover in Africa. While they warn that the high sales have not yet translated into profit, the whole business model is interesting and at some point the government will want a share of the profits. The same will happen to the cloud economy and other Internet businesses, if what happened in Chicago is anything to go by. However, more needs to be done on consumer education and protection. For example, when one buys a phone online and it is faulty, should the online company collect, repair or replace the phone or should the consumer take the phone to the service centre? Consumer protection can either be done through self regulation where the online companies make very good policies on dealing with consumer complaints. Otherwise , the companies cannot be responsive, then the law/its enforcement must be strengthened. Regards, 2015-07-22 7:42 GMT+03:00 Barrack Otieno via kictanet < kictanet(a)lists.kictanet.or.ke>: > Listers, > > The rise of the Internet economy in Kenya has been defined by > different strokes. On one hand there are small entrepreneurs doing > their side hustles from offices, small shops and car boots. They > advertise their merchandise and services on social media and in a > rudimentary form, some deliver merchandise in backpacks from door to > door. > Enter the bigger players who have large websites from where goods and > services are purchased. Their business models differ. We have > companies like OLX, Cheki that provide a platform for users to > interact. They make their money from advertising. Others such as Rupu > and Jumia offer services and merchandise at reduced prices. > > Questions > > 1. Does an adequate legal framework exist to protect consumers from > fraud, deficient goods and services and to assure consumer rights in > the budding Internet economy? > 2. Since the bigger players in the sector are doing well, is time ripe > for the local Internet economy to be taxed to raise money for > government services? > 3. Should other services in the Internet economy such as cloud > services, international online purchases etc be taxed? > 4. As a stakeholder , what are your recommendations on how the > Internet economy can be improved? > > The floor is open, feel free to continue contributing to the > discussions of the previous days. > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > https://lists.kictanet.or.ke/mailman/listinfo/kictanet > > Unsubscribe or change your options at > https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com > > The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform > for people and institutions interested and involved in ICT policy and > regulation. The network aims to act as a catalyst for reform in the ICT > sector in support of the national aim of ICT enabled growth and development. > > KICTANetiquette : Adhere to the same standards of acceptable behaviors > online that you follow in real life: respect people's times and bandwidth, > share knowledge, don't flame or abuse or personalize, respect privacy, do > not spam, do not market your wares or qualifications. > -- Grace L.N. Mutung'u Nairobi Kenya Skype: gracebomu Twitter: @Bomu <http://www.diplointernetgovernance.org/profile/GraceMutungu>

1 0

Publication Review
by ANGEL A 23 Jul '15

23 Jul '15

Dear Listers, I wish to express my appreciation to all the members who participated in my online survey for my Masters Thesis in June 2014 through the Survey Monkey tool. When l was seeking for your participation, l promised to share the results of my findings which l already did. Today, l share an article l co-authored with my supervisors that was based on very Masters Thesis and which has been accepted for publication by an online journal, ProCon Ltd. I have attached the link herewith for your review and would be grateful to read your comments on the issues raised.Thank you. Cybersecurity Strategy’s Role in Raising Kenyan Awareness of Mobile Internet Threats | Procon Ltd. Information & Security: An International Journal | | | | | | | | | | | Cybersecurity Strategy’s Role in Raising Kenyan Awarenes...Publication Type: Journal article preview Authors: Angela Okuku; Karen Renaud; Brandon Valeriano Source: Information & Security: An International Journal, Volu... | | | | View on procon.bg | Preview by Yahoo | | | | | Best regards,Angela. Chevening Alumni. Sent By Mia Ang

1 0

Russia passes law to promote their local software iindustry
by ICT Researcher 23 Jul '15

23 Jul '15

In support of Russian software developers when executingpublic (state or municipal) procurement, the Federal Law N 188-FZ"On Amendments to the Federal Law 'On Information,Information Technologies and Protection of Information'"and Article 14 of the Federal Law "On the contract system inthe sphere of procurement of goods, works and services for stateand municipal needs" was adopted on June 29, 2015 (hereinafter- the "Law"). The Law will come into force on January 1,2016. The Law provides for the creation of a unified register ofRussian computer programs and databases (hereinafter - the"Register of Russian software"). read more: Software Import Substitution: Recent News - Media, Telecoms, IT, Entertainment - Russian Federation | | | | | | | | | | | Software Import Substitution: Recent News - Media, Telec...The Law provides for the creation of a unified register of Russian computer programs and databases (hereinafter - the Register of Russian software). Russian Federat... | | | | View on www.mondaq.com | Preview by Yahoo | | | | |

1 0

Re: [kictanet] [Security Forum] #KeIGF15 Online Discussions Day Three: Internet Economy
by Barrack Otieno 23 Jul '15

23 Jul '15

Many thanks Josiah, First congratulations for the 5th edition of Pivot East Africa and for the good work you are doing, just following the discussion on the Global Entrepreneurship Summit i feel proud of how far the local tech sector has come and the role communities such as skunkworks of which you are among the founder members and the i-hub have done. Back to the discussion your intervention is timely, there is need for a Consumer Protection act and i am aware COFEK has been working on a draft bill, they are on this list and we hope they will be able to provide highlights on the stage at which the bill is in. Best Regards On 7/23/15, Josiah Mugambi <jmugambi(a)gmail.com> wrote: > Wading in one day late on this particular discussion topic, but for good > reason. > > Yesterday we held the 5th edition of Pivot East <http://www.pivoteast.com>, > a regional pitching competition for digital startup companies from East > Africa. Digital entrepreneurs as one might imagine are those that run > mobile and web based or enabled businesses, and are a core part of the > internet economy. Not surprisingly, on average, the most accomplished > companies were in the financial sector. This is a sector where policy tends > to lag behind innovation (think MPESA, crypto currencies and the burgeoning > young companies beginning to play in that space across Africa). One key > question that was asked multiple times by the judges, majority of whom were > investors, was related to consumer protection and legislation for some of > these services. > > I would say that we don't have a strong enough legal framework the governs > some of these new frontiers. However, there must be a healthy tension > between the need to protect consumers from unscrupulous business people > while encouraging innovative uses of technology. With regards to taxing the > internet economy, don't we have corporate taxes that apply across the > board? I don't think it is big enough either especially as many of these > bigger players are already paying taxes as it stands. On stuff like cloud > services, we need to be wary of double taxation as many services > particularly from the US are already taxed. > > > > > -- > Josiah Mugambi > > On Wed, Jul 22, 2015 at 3:55 PM, fredrick Wahome via Security < > security(a)lists.my.co.ke> wrote: > >> Unfortunately those in the leadership will just draft something when it >> deems appropriate time for them without involving the stakeholders n end >> users. >> >> The document will just sit at CA shelves and life goes on. For now am >> concentrating on educating users how to be safe. >> On Jul 22, 2015 11:46 AM, "Grace Mutung'u (Bomu) via Security" < >> security(a)lists.my.co.ke> wrote: >> >>> Hi Barrack, >>> Thank you for the the questions. >>> @ Fred on the issue of taxation for the Internet economy.... >>> >>> I was listening to a representative from Jumia the other day on radio. >>> By >>> her presentation, the volume of merchandise moved per day is quite high >>> and >>> this business is really catching on in Kenya. If I remember they had an >>> increase of 900%in turnover in Africa. While they warn that the high >>> sales >>> have not yet translated into profit, the whole business model is >>> interesting and at some point the government will want a share of the >>> profits. The same will happen to the cloud economy and other Internet >>> businesses, if what happened in Chicago is anything to go by. >>> >>> However, more needs to be done on consumer education and protection. For >>> example, when one buys a phone online and it is faulty, should the >>> online >>> company collect, repair or replace the phone or should the consumer take >>> the phone to the service centre? >>> Consumer protection can either be done through self regulation where the >>> online companies make very good policies on dealing with consumer >>> complaints. Otherwise , the companies cannot be responsive, then the >>> law/its enforcement must be strengthened. >>> >>> Regards, >>> >>> >>> 2015-07-22 7:42 GMT+03:00 Barrack Otieno via kictanet < >>> kictanet(a)lists.kictanet.or.ke>: >>> >>>> Listers, >>>> >>>> The rise of the Internet economy in Kenya has been defined by >>>> different strokes. On one hand there are small entrepreneurs doing >>>> their side hustles from offices, small shops and car boots. They >>>> advertise their merchandise and services on social media and in a >>>> rudimentary form, some deliver merchandise in backpacks from door to >>>> door. >>>> Enter the bigger players who have large websites from where goods and >>>> services are purchased. Their business models differ. We have >>>> companies like OLX, Cheki that provide a platform for users to >>>> interact. They make their money from advertising. Others such as Rupu >>>> and Jumia offer services and merchandise at reduced prices. >>>> >>>> Questions >>>> >>>> 1. Does an adequate legal framework exist to protect consumers from >>>> fraud, deficient goods and services and to assure consumer rights in >>>> the budding Internet economy? >>>> 2. Since the bigger players in the sector are doing well, is time ripe >>>> for the local Internet economy to be taxed to raise money for >>>> government services? >>>> 3. Should other services in the Internet economy such as cloud >>>> services, international online purchases etc be taxed? >>>> 4. As a stakeholder , what are your recommendations on how the >>>> Internet economy can be improved? >>>> >>>> The floor is open, feel free to continue contributing to the >>>> discussions of the previous days. >>>> >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> >>>> Unsubscribe or change your options at >>>> https://lists.kictanet.or.ke/mailman/options/kictanet/nmutungu%40gmail.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform >>>> for people and institutions interested and involved in ICT policy and >>>> regulation. The network aims to act as a catalyst for reform in the ICT >>>> sector in support of the national aim of ICT enabled growth and >>>> development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors >>>> online that you follow in real life: respect people's times and >>>> bandwidth, >>>> share knowledge, don't flame or abuse or personalize, respect privacy, >>>> do >>>> not spam, do not market your wares or qualifications. >>>> >>> >>> >>> >>> -- >>> Grace L.N. Mutung'u >>> Nairobi Kenya >>> Skype: gracebomu >>> Twitter: @Bomu >>> >>> <http://www.diplointernetgovernance.org/profile/GraceMutungu> >>> >>> >>> _______________________________________________ >>> Security mailing list >>> Security(a)lists.my.co.ke >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/security >>> >> >> _______________________________________________ >> Security mailing list >> Security(a)lists.my.co.ke >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/security >> > -- Barrack O. Otieno +254721325277 +254-20-2498789 Skype: barrack.otieno http://www.otienobarrack.me.ke/

1 0

Re: [kictanet] [Security Forum] [Skunkworks] #KeIGF15 Online Discussions Day Two: Cyber Security and Trust
by Grace Mutung'u (Bomu) 23 Jul '15

23 Jul '15

Thank you everyone for the enriching contributions.Without cybersecurity, users cannot be assured when transacting online. A special mention to the security experts who have interesting and practical views to the cybersecurity issues. We may need to seek more information from those in bodies such as ICTA, from experts who helped to set up the systems as well as from private sector. Would be interesting to hear how banks achieve security, especially with Internet and mobile banking. The issue of mobile money payments will be part of our discussion tomorrow as we tackle "the Internet Economy". The discussions on all the topics remain open so please continue on. We shall pick all the recommendations and suggestions and present them to stakeholders during the IGF. Hopefully, some of them will find their way into policy and use in our institutions. Once again thank you. Regards, Grace 2015-07-21 18:11 GMT+03:00 Lesley Leposo via Security < security(a)lists.my.co.ke>: > @fredrick > Good point. > I can see why they would use open source software, other than it being > free. > But, my point of view only makes sense if the GOK, businesses and > universities also fostered/sponsored some (moderately) experienced COMODO > tinkerers/hackers. > > On Jul 21, 2015, at 5:55 PM, fredrick Wahome via Security < > security(a)lists.my.co.ke> wrote: > > This far we can say they have tried but one thing I don't understand with > government system is the implementation. Is it that hard or their is some > laxity. With PKI in place most departments are still using FREE systems > like COMODO. But again as a loyal citizen I stopped complaining and just > doing the bit I can even if its sharing information.. > On Jul 21, 2015 5:29 PM, "Mwendwa Kivuva via Security" < > security(a)lists.my.co.ke> wrote: > >> Sorry, here is the website for the Certifying Authority for Kenya's PKI >> http://www.govca.go.ke/# >> >> ______________________ >> Mwendwa Kivuva, Nairobi, Kenya >> >> "There are some men who lift the age they inhabit, till all men walk on >> higher ground in that lifetime." - Maxwell Anderson >> >> >> On 21 July 2015 at 16:56, Mwendwa Kivuva <Kivuva(a)transworldafrica.com> >> wrote: >> >>> Hosea Kandie and Fredick Wahome have raised very important points of >>> institutional frameworks. I just wanted to share the National PKI website >>> which has a tonne of information on what Kenya has done in that regard. >>> http://www.ke-cirt.go.ke/index.php/services/national-pki/ >>> >>> Here is a copy paste from the home page: >>> >>> Kenya’s National Public Key Infrastructure (NPKI) >>> >>> The National Public Key Infrastructure (NPKI) project is coordinated by >>> the Ministry of ICT in collaboration with the Communications Authority of >>> Kenya (CA) and the ICT Authority (ICTA). >>> >>> A Public Key Infrastructure (PKI) refers to a system for the creation, >>> storage and distribution of digital certificates which are used to verify >>> that a particular public key (online identity) belongs to a certain entity. >>> A PKI is a technical infrastructure that comprises of a Root Certification >>> Authority (RCA) and a Certification Authority (CA), referred to as an >>> Electronic Certification Service Provider (E-CSP) in Kenya’s legal and >>> regulatory framework. The PKI creates a framework for protecting >>> communications and stored information from unauthorized access and >>> disclosure by addressing the fundamentals of cyber security – >>> confidentiality, integrity, authentication and non-repudiation. A PKI is >>> key to the rollout of e-transaction services. >>> >>> The Kenya Information and Communications Act, 1998, mandates the >>> Communications Authority of Kenya (CA) to issue a license to a person >>> operating an Electronic Certification Service. In this regard, the >>> Communications Authority of Kenya (CA) has developed a licensing framework >>> for Electronic Certification Service Providers (E-CSPs). >>> >>> Kenya’s National PKI comprises of a Root Certification Authority (RCA), >>> which is managed by the Communication Authority of Kenya (CA) as a >>> regulatory function, and the Government Certification Authority (GCA), an >>> E-CSP which is managed by the ICTA. The NPKI is instrumental towards the >>> effectiveness of the licensing of Electronic Certification Service >>> Providers (E-CSPs) by the Communications Authority since a licensed E-CSP >>> must be accredited by the RCA for its digital certificates to be globally >>> recognized and trusted. >>> >>> The ICT Authority (ICTA), which is the body responsible for the >>> management of the mainstream government ICT services, operates the GCA. >>> Other interested stakeholders who may be issued with an E-CSP license on >>> application include the banking Sector and the Academia. >>> >>> The benefits of a National PKI include: >>> i. Locally available and cheaper digital certificates/signatures; and >>> ii. Operations and services that are within Kenyan law >>> (jurisdiction), among others. >>> >>> ______________________ >>> Mwendwa Kivuva, Nairobi, Kenya >>> >>> "There are some men who lift the age they inhabit, till all men walk on >>> higher ground in that lifetime." - Maxwell Anderson >>> >>> >>> On 21 July 2015 at 11:02, fredrick Wahome via Security < >>> security(a)lists.my.co.ke> wrote: >>> >>>> The fact that there is high internet penetration in Africa / Kenya >>>> where an average of one user for every five has access to affordable >>>> internet has created enabling environment for cyber-criminals. >>>> >>>> By the nature of cyberspace where the perpetrators of cyber-crime >>>> remain ubiquitous. This necessitated a need for legislation to control >>>> crime, and to provide confidence and security in African cyberspace, >>>> leading to the drafting of the Africa Union Convention on Cybersecurity >>>> (AUCC). But some groups like CIPIT and civil society opposed the convention >>>> on the ground that it was prepared without their inputs. Their main >>>> argument is that the convention did not make enough provisions to protect >>>> privacy and freedom of speech. >>>> >>>> Member States have to undertake necessary measures to encourage >>>> the establishment of institutions that exchange information on cyber >>>> threats and the evaluation of vulnerabilities such as Computer >>>> Emergency Response Team (CERT). Kenya has at least done something on this >>>> by establishing KE-CIRT at CA. There is also a masterplan and PKI in place >>>> thou there has been implementation challenges. We will note that most >>>> governments departments have not yet established cybersecurity departments >>>> and this leads to low / lack of budgetary allocation. >>>> >>>> In summary Government bodies, policy networks, scholars, the media, >>>> technology experts and the people need to engage in a global conversation >>>> that will help demystify Cyber-crime and define what it constitutes of and >>>> how Cyber-criminals should be dealt with. >>>> >>>> The role of the media (television, blogs, online news outlets and more) >>>> is critical in the process of educating the public and engaging in a >>>> conversation, as they will be the mediators and curators of information and >>>> discourse on the issue. Thus, a concise and sensible approach, devoid of >>>> fear-mongering and shock practices, should be followed. We all remember >>>> recently how media has mishandled cyber crime news without a very somber >>>> deep analysis >>>> >>>> Since this is an international issue, governments and policy networks >>>> across the world have to come together and discuss openly on what is better >>>> for their citizens. Something like AUCC is a positive move by African states >>>> >>>> Scholars and academics can provide valuable expertise on technological, >>>> psychological, ethical and other issues, while highlighting any misgivings >>>> by those involved in the process. At least Strathmore has tried on this >>>> >>>> The people in their local communities, families and social networks >>>> should help and train each other to increase their peers’ level of Internet >>>> literacy and highlight the advantages of the web. A higher Internet >>>> literacy level can help people protect themselves even better by taking >>>> simple security measures, such as using anti-virus software and identifying >>>> potential risks or scams in their online financial transactions. More is >>>> needed from the technology community to provide awareness to end users even >>>> if through probono program. >>>> >>>> The technology community needs a unity of purpose. Looking at >>>> programmers / developers, DBA, network admins, infosec there has been lack >>>> of proper coordination. Developers are working hard to prove that their >>>> products cant be broken. Infosec on the other hand are working so hard to >>>> prove to blue team / developers that they can break their products. At the >>>> end no one benefit from such a contest. Many technical conferences / >>>> seminars should be encouraged to enable sharing of information / knowledge >>>> in the local technology community. >>>> >>>> Great day comrades. >>>> >>>> >>>> >>>> >>>> >>>> >>>> On Tue, Jul 21, 2015 at 9:28 AM, Stephen Munguti via Security < >>>> security(a)lists.my.co.ke> wrote: >>>> >>>>> Hello all, >>>>> >>>>> I think most of our security concerns stem from internal users and >>>>> this is the reason many banks and telecos refuse to part with this >>>>> information, i could be wrong though >>>>> >>>>> On Tue, Jul 21, 2015 at 8:58 AM, Grace Mutung'u (Bomu) via skunkworks >>>>> <skunkworks(a)lists.my.co.ke> wrote: >>>>> >>>>>> Dear Listers, >>>>>> >>>>>> >>>>>> Kenya has had its fair share of high profile cyber threats, hacking >>>>>> etc, the latest being the alleged compromise of the IFMIS system at >>>>>> NYS/Ministry of Devolution. The country and Africa at large is making >>>>>> efforts to assure cyber-security. These include among others her >>>>>> involvement in the Africa Union Convention on Cybercrime and a proposal for >>>>>> a Cybercrime law, an initiative led by the Office of the Director of Public >>>>>> Prosecutions. Significant financial resources have also been earmarked by >>>>>> government for security and cyber security in particular. There are also >>>>>> partnerships between government and private sector in deploying >>>>>> cybersecurity centres. >>>>>> >>>>>> The private sector has employed practical measures to protect their >>>>>> businesses. However, businesses such as mobile money providers and banks >>>>>> have been shy to divulge their cyber security concerns to protect their >>>>>> interests. >>>>>> >>>>>> Civil society on the other hand has raised concern about the line >>>>>> between protecting the cyber space and creating a facilitative environment >>>>>> for innovators as well as protecting the rights of users. >>>>>> >>>>>> >>>>>> Are our efforts at deterring cyber-crime the correct way to assure >>>>>> cyber security? Are fears about a partnership between government and >>>>>> private sector and the general fears about stifling innovation and human >>>>>> rights in the name of cybersecurity legitimate? Are there other practical >>>>>> approaches that different stakeholders can take to enhance cyber security? >>>>>> >>>>>> >>>>>> Over to you. >>>>>> >>>>>> -- >>>>>> Grace L.N. Mutung'u >>>>>> Nairobi Kenya >>>>>> Skype: gracebomu >>>>>> Twitter: @Bomu >>>>>> >>>>>> <http://www.diplointernetgovernance.org/profile/GraceMutungu> >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> skunkworks mailing list >>>>>> skunkworks(a)lists.my.co.ke >>>>>> ------------ >>>>>> List info, subscribe/unsubscribe >>>>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>>>> ------------ >>>>>> >>>>>> Skunkworks Rules >>>>>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>>>>> ------------ >>>>>> Other services @ http://my.co.ke >>>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> Best Regards, >>>>> Stephen Munguti. >>>>> >>>>> +254720425104 >>>>> >>>>> _______________________________________________ >>>>> Security mailing list >>>>> Security(a)lists.my.co.ke >>>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/security >>>>> >>>> >>>> >>>> >>>> -- >>>> >>>> >>>> >>>> >>>> *-------------------------------------* >>>> *Kind Regards**;* >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> *Fredrick Wahome Ndung'uTeam LeaderSecunets Technologies LtdWebsite: >>>> www.secunets.com <http://www.secunets.com/>Cell: +254725264890 >>>> <%2B254725264890>Email: fred(a)secunets.com <fred(a)secunets.com>**Facebook: >>>> secunetstech* >>>> *Twitter: @secunets* >>>> >>>> *Skype: secunets.technologiesExperts in: *Domain Registration, Web >>>> Hosting, Open Source Solutions, Information Security & Training, Digital >>>> Forensic Investigations, Web 2.0 Applications & I.C.T Consultancy. >>>> >>>> *"Secure Business Technology"* >>>> >>>> >>>> >>>> ------------------------------------------------------------------------------------------------------------------------------------------------ >>>> *SECUNETS TECHNOLOGIES DISCLAIMER:* >>>> >>>> This email message and any file(s) transmitted with it is intended >>>> solely for the individual or entity to whom it is addressed and may contain >>>> confidential and/or legally privileged information which confidentiality >>>> and/or privilege is not lost or waived by reason of mistaken transmission. >>>> If you have received this message by error you are not authorized to view >>>> disseminate distribute or copy the message without the written consent of >>>> Secunets Technologies and are requested to contact the sender by telephone >>>> or e-mail and destroy the original. Although Secunets Technologies takes >>>> all reasonable precautions to ensure that this message and any file >>>> transmitted with it is virus free, Secunets Technologies accepts no >>>> liability for any damage that may be caused by any virus transmitted by >>>> this email. >>>> >>>> >>>> _______________________________________________ >>>> Security mailing list >>>> Security(a)lists.my.co.ke >>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/security >>>> >>> >>> >> >> _______________________________________________ >> Security mailing list >> Security(a)lists.my.co.ke >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/security >> > _______________________________________________ > Security mailing list > Security(a)lists.my.co.ke > http://lists.my.co.ke/cgi-bin/mailman/listinfo/security > > > > _______________________________________________ > Security mailing list > Security(a)lists.my.co.ke > http://lists.my.co.ke/cgi-bin/mailman/listinfo/security > -- Grace L.N. Mutung'u Nairobi Kenya Skype: gracebomu Twitter: @Bomu <http://www.diplointernetgovernance.org/profile/GraceMutungu>

4 3