- KICTANet - KICTANet

Fw: Multimedia University College (formerly KCCT) looking for Lecturers...
by John Walubengo 27 Feb '09

27 Feb '09

Incase you missed to catch the above in the Dailies - plse sambaza (spread) far and wide. walu. NB: Two thousand years ago, He said 'The Harvest was big, but the Laborers were few'. Plse help in getting us the laborers by spreading the message.

1 0

Fellowships to attend AfriNIC-10 Cairo, Egypt]
by alice 26 Feb '09

26 Feb '09

-----Original Message----- From: announce-bounces(a)afrinic.net [mailto:[email protected]] On Behalf Of Lillian O. Sharpley Sent: 26 February 2009 15:53 To: announce(a)afrinic.net; africann(a)afrinic.net Subject: [AfriNIC-announce] Fellowships to attend AfriNIC-10 Cairo, Egypt Dear Colleagues, Please be advised that AfriNIC is offering several fellowships to attend AfriNIC-10 which will take place 10-22 May, 2009, Cairo, Egypt (back-to-back with AfNOG-10). The fellowship is reserved for individuals representing small organizations, universities, and journalists who are activity involved in Internet development in the African Region or ICT Policy in their countries and respective communities, who can positively and actively contribute to IP address management awareness in the AfriNIC region of service. Upon selection of the fellows, AfriNIC will notify the selected fellows directly and allow the fellow 7 days to reply with an acceptance of the fellowship. Public announcement of the fellowship winners will be made after the acceptance by the winners. The fellowship includes: assistance with round-trip airfare to the meeting venue, hotel accommodates for the AfriNIC event, from the night before the beginning of the event to the last day of the event. If you think you meet the criteria above, please complete the online application form at http://meeting.afrinic.net/afrinic-10/fellowship-form1.htm Or, reply to the questions below in a separate email along with your personal detail information to fellowship(a)afrinic.net before (15 March 2009). Personal details: * Name of Participant: * Name of Organisation: * Is your organization an LIR?: * Your position in the Organisation: * Physical Address: * E-mail: * Passport Number: * Country and City of residence: * Cost of ticket from your residence city to Egypt: * How much are you willing to contribute towards the fellowship? General Questions: ** Your answers to the questions bellow will determine you eligibility to the fellowship 1. Which Internet related meetings (inc. AfriNIC meetings) have you attended in the past? Please give details of events and dates. 2. What has been or is your contribution in your Country/Africa in relation to the ICT field? Please give details of events and dates. 3. How are you planning to share with your community what you will learn from the AfriNIC-10 meeting? 4. What has been your contribution to discussions within the AfriNIC community? Other requirements from the fellows: * To attend and participate in events as outlined in the agenda and complete a survey of the meeting events; * To provide a meeting/attendance report within 15 days after the last day of the meeting; * To provide a follow-up report to AfriNIC within four (3) months after the meeting on how he/she is contributing to the community as a result of the AfriNIC participation and how the meeting has benefited the fellow; and, * Ensuring requirements for entry into Egypt are met at least three weeks prior to the first date of the event, such as, obtaining passport and visa. Please direct questions to fellowship(a)afrinic.net. Sincerely, Lillian Sharpley Communications Area Manager AfriNIC www.afrinic.net

1 0

[Fwd: [AfrICANN-discuss] Research and Markets: Web Domain Registration Markets 2009-2011]
by alice 23 Feb '09

23 Feb '09

http://www.marketwatch.com/news/story/research-markets-web-domain-registrat… Research and Markets: Web Domain Registration Markets 2009-2011 Last update: 7:03 a.m. EST Feb. 23, 2009 DUBLIN, Ireland, Feb 23, 2009 (BUSINESS WIRE) -- Research and Markets ( http://www.researchandmarkets.com/research/a0525d/map_research_forec) has announced the addition of the "MAP Research Forecasts: Domain Registration Markets 2009-2011" report to their offering. The world's first report on the size, state and future of the global domain registration industry. Research results show that by the end of 2008, the overall industry will have a market value of $3.6 billion (all figures in $US), forecast to increase to $5.3 billion by 2011. According to the report, whilst the overall market size of the global domain industry is expected to increase over the next three years, growth will be at a slower rate than previous years and a drop in average revenue per domain is forecast. And although growth in global top-level domains (ie .com and .net) will slow, growth in country code top-level domains (ie .au and .uk) is expected to increase in developing countries such as Brazil, Russia, India and China ("BRIC nations"). The research also predicts trends in the domain industry such as consolidation to gain market share; a growing emphasis on bundling services; growth in demand for 'domain parking'; growth of mobile internet and .mobi; and a new internet provider platform, IPv6, dramatically increasing the number of available domain names. Domain registrars are now becoming 'one-stop-shop' service providers, offering their customers variety of services such as domain registration, domain management, web hosting and domain resale. With the contractions of the top-level market, many of the global domain registrars are diversifying their revenue base by providing a number of related value added services to the provision of domain registration. These additional services are increasingly being bundled with domain registration and include web hosting, domain parking, pay-per-click advertising and selling domain portfolios. As part of the research, a number of the top 20 global domain registrars were interviewed. Key points from the Global Domain Industry Report: Registered domains total 185 million, a growth of 20.8% over 2008, expected to reach nearly 297 million by 2011. Overall size of the industry is $3.6 billion (all figures in $US), expected to reach $5.3 billion by 2011. The generic top level domain (gTLD) market has grown 15.1% over 2008 to a value of $1.83 billion. Domain registrars are diversifying into value added services such as web hosting and domain management. Country code top level domains (ccTLDs) will grow by 21% to a value of $1.81 billion in 2008, driven largely by stronger demand in the BRIC nations and Eastern Europe. MAP Research forecasts stronger demand in BRIC nations following increasing internet penetration rate, growing economies and also increasing online advertising market. GoDaddy is ranked number one in the world, with a market share of 27.9% in the gTLD market. Companies Mentioned: GoDaddy eNom Tucows Network Solutions Melbourne IT 1&1 Interent Moniker Online Register.com Directl Key-Systems For more information visit http://www.researchandmarkets.com/research/a0525d/map_research_fore SOURCE: Research and Markets Laura Wood Senior Manager press(a)researchandmarkets.com Fax from USA: 646-607-1907 Fax from rest of the world: +353-1-481-1716 _______________________________________________ AfrICANN mailing list AfrICANN(a)afrinic.net https://lists.afrinic.net/mailman/listinfo.cgi/africann

1 0

ICT & Media
by Wainaina Mungai 23 Feb '09

23 Feb '09

Dear All, Made in Kenya Network is in a position to offer consultancy and training on the use of ICT in Media/Journalism. Kindly contact me for details. Regards Wainaina

1 0

E-waste in Africa- findings
by Rebecca Wanjiku 23 Feb '09

23 Feb '09

just in case you are wondering what happened to the e-waste research findings, the report was released in Barcelona last week http://computerworld.co.ke/articles/2009/02/20/hp-and-partners-tackle-afric… Tel. 254 720 318 925 blog:http://beckyit.blogspot.com/

1 0

invited to waste time online, and pay for it...
by Alex Gakuru 23 Feb '09

23 Feb '09

Hello, I am amazed at the increasing numbers of strangers inviting me to waste my time at online with their other "e-friends" at social networks sites, chats, (now including dating services...Mungu one) etc. Its not exciting to have all those intrusive pop-ups messages, when one must still find time to earn money to pay for their monthly bandwidth consumption. Amazing! Anyway, and as policy, I accept none if care not to bother wasting your invites? If have something constructive, write me a direct email. No hard feelings? It's just policy. Sincerely, Alex

2 1

Adobe Reader, Acrobat Vulnerable To Attack
by Evans Kahuthu 21 Feb '09

21 Feb '09

FYI: Security companies are warning of a vulnerability in two Adobe programs that could allow hackers to compromise your PC. Attackers are actively exploiting the flaw, although security researchers say the onslaught isn't yet widespread. Versions 9 and 8.x of Adobe Reader and Acrobat are affected. According to Adobe, this vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system. Adobe categorizes this as a critical issue and recommends that users update their virus definitions and exercise caution when opening files from untrusted sources. "Adobe is planning to release updates to Adobe Reader and Acrobat to resolve the relevant security issue. Adobe expects to make available an update for Adobe Reader 9 and Acrobat 9 by March 11th, 2009," Adobe said in its security advisory. "Updates for Adobe Reader 8 and Acrobat 8 will follow soon after, with Adobe Reader 7 and Acrobat 7 updates to follow." Several Attack Variations In the meantime, Adobe said it is in contact with antivirus vendors, including McAfee and Symantec. According to the Shadowserver Foundation, there are several different variations of the attack, and it's only a matter of time before the vulnerability ends up in every exploit pack on the Internet. Zero-day attacks are the preferred choice of cybercriminals because victims are less able to defend against them. "At the turn of 2009, malicious PDF documents were discovered to be exploiting a zero-day vulnerability affecting Adobe Reader 8.x and 9.x. In parsing a specially crafted embedded object, a bug in the reader allowed the attacker to overwrite memory at an arbitrary location," said McAfee's Geok Meng Ong. "The attacks, found in the field, use the infamous 'HeapSpray' method via JavaScript to achieve control of code execution." When successful, the attack installs a backdoor for remote control and monitoring of infected systems. While the distribution of this exploit so far appears to be targeted, new variants are expected as more information is made public, Ong said. As with the Conficker experience, Ong noted the lack of good patch management is a very worrying trend that deserves more attention from IT security practitioners. A JavaScript Payload Symantec says it has received several PDF files that actively exploit a vulnerability in Adobe Reader. Symantec said the vulnerability is caused by an error in parsing particular structures within the PDF format. Once the malicious document is opened, it will trigger the vulnerability. The JavaScript payload then sprays the heap with malicious code in an attempt to increase the chances of a successful exploit. If the exploit is successful, a malicious binary will be dropped and executed on the victim's system. "We are continuing to remain in contact with Adobe on this vulnerability in order to ensure the security of our mutual customers," said Kevin Haley, director of Symantec Security Response. "This exploit is currently detected heuristically as Bloodhound.PDF.6 by our products. We have noticed an increase in submissions of similar PDFs using this exploit. So far, these attacks appear to be targeted and not widespread. Symantec is continuing to monitor the vulnerability's use in the wild." Evans Kahuthu

1 0

KICC LAN PROJECT SUCCESFULLY COMPLETED
by Lucy Odhiambo 20 Feb '09

20 Feb '09

Dear All, We are pleased to inform you that Kenya ICT Board and the E- Government directorate initiative has successfully completed installation of the much anticipated connectivity project at the Kenyatta International Conference Center. Sponsored and implemented by the two key stakeholders, the project has seen the set up of a secure Local Area Network; with infrastructure laid across the entire KICC premises. The network will be centrally managed and maintained on an inclusive IT system with connectivity to both the internet and the Government Common Core Network (GCCN). It is supported on a fiber optic backbone that was rolled out as part of the project and completed under the guidance of a team comprising experts from the Board among other stakeholder organizations. KICC has for a long time stood out as a key government owned building that does not have its own local area network and access to the Government WAN (wide area network.) This project is a milestone achievement as it realizes connectivity of all government offices to an overall network (comprising all other ministries and selected departments) allowing seamless and secure communication and file sharing. The project will be commissioned next week and we will keep you informed on the details. We congratulate the team that made this project a success - lead by Victor Kyalo and George Otieno from the board and the late Dr. Juma Oketch , Elijah Liech and the E-Government Directorate team. I have attached the project charter to give you some background on the project. Lucy Gachui Odhiambo Communications Manager Kenya ICT Board 12th Floor Telposta Towers Koinange Lane PO Box 27150 - 00100 Nairobi, Kenya Cell 0737- 839047 Tel: 254-020-2093040 <http://www.ict.go.ke> www.ict.go.ke

2 2

AfriNIC Vacancy: Technical Operations Area Manager
by Brian Munyao Longwe 20 Feb '09

20 Feb '09

AfriNIC: Technical Operations Area Manager AfriNIC is a non-governmental, not-for-profit, membership based organization, based in Mauritius to serve African Internet Community. We are the Regional Registry for Internet Number Resources for Africa and the Indian Ocean region. *Job Description* ------------------------------ Job Title: *Technical Operations Area Manager* Reports To: Chief Executive Officer Supervises: Technical Project team/ Technical Staff/ Internet Number Resources Management Team Ref: afjob-toam200902 ------------------------------ Download the PDF version of this vacancy here<http://www.afrinic.net/job/jobs2009/afjob-toam200902.pdf> ------------------------------ AfriNIC is currently seeking a dynamic and motivated professional to fill the position of Technical Operations Area Manager. In this role, you will be expected to provide company-wide direction in the areas of technology policy and services, and ensure that AfriNIC has an effective and efficient infrastructure for current operations and future development. The functionality of the Technical Operations Area Manager also includes Internet Number Resources Service and its tools, Infrastructure security and management, Software Engineering and development, and future functions that may be requested for the technical service growth at AfriNIC. The Technical Operations Area Manager reports to the Chief Executive Officer *Primary responsibilities and duties * - Plan and monitor the Technical Operation Area, staffing, development and organization. - Develop and maintain department budget and exercise fiduciary control and responsibility for the department. - Direct the design, development and maintenance of systems, programs and software to meet management and company's needs. - Present to management the best long-term direction for the department. Keep management abreast with progress of all projects. - Develop and maintain company Disaster Recovery Plan. - Provide technical training and support for internal staff. Provide external training and support to members as requested in coordination with the Training Unit of the Communication Area. - Maintain knowledge of developments throughout AfriNIC and incorporate new developments into the future systems of the company. - Assist in the monitoring and participation in public forums, such as standards-setting bodies and technical matters that have an impact on the mission of AfriNIC. * Background/Skills Required* - Minimum four years university degree in an information systems or computer science related discipline or equivalent work experience. Masters in information systems or computer science related discipline is preferred. - 8-10 years of job-related experience in system life cycle development. - Experience in managing one or more information processing functions (operations, development). - Skills in programming and hardware installation and maintenance. - A minimum of five years of supervisory experience in a Technical Department. Demonstrated ability to lead people and get results through others. - Proven ability to think ahead and plan over a 1-2 year time span. - Ability to travel to various locations to attend industry related conferences in order to maintain the level of familiarity with the subject matter. - Good interpersonal skills. - Available and able to travel internationally - Strong verbal and written skills. *Benefits * AfriNIC is a progressive employer offering competitive benefits, including: International exposure; Medical; Life/Travel Insurance; paid vacation, sick, holiday and personal days; Pension Scheme; and, Expatriate benefits (Housing, car and relocation allowances, and airfare back to original country for vacation every two years). *Dates * Application Deadline:7 March 2009 *Applications* If you wish to apply for this position please send a Letter of Motivation with your salary requirements and availability, accompanied by your CV, both in English, to jobs[at]afrinic.net . To facilitate a timely handling of your application, please quote the relevant Vacancy Reference Number and your name in the subject line of your email and Letter of Application. For additional information, please visit http://www.afrinic.net/job/ AfriNIC is committed to creating a diverse environment and is proud to be an equal opportunity employer. AfriNIC reserves the right to call only the best qualified candidates for an interview and not to make an appointment following this advertisement -- Brian Munyao Longwe e-mail: blongwe(a)gmail.com cell: + 254 722 518 744 blog : http://zinjlog.blogspot.com meta-blog: http://mashilingi.blogspot.com

1 0

Fwd: Register for GPPS 2009 Bermuda Before February 28 and Save 40%
by waudo siganga 19 Feb '09

19 Feb '09

Dear KICTANet Colleagues - FYI On Wed, 18 Feb 2009 18:10:15 -0500, "Anders Halvorsen" <ahalvorsen@witsa. org> said: February 18, 2009 TO: Members of the World Information Technology and Services Alliance FR: Dr. James Poisant, Secretary General RE: Register for GPPS 2009 Bermuda Before February 28 and Save 40% ______________________________________________________________ Dear Colleagues, On behalf of the Global Public Policy Summit 2009 Bermuda team, I am pleased to provide you with a postcard as a reminder notice of our November 1-3, 2009 Summit. I strongly encourage you to take advantage of the early bird registration. Register before February 28^th in order to receive your discount: [1]http://www.gpps2009.com/Registration.aspx. We would also greatly appreciate if you could forward the postcard to your membership. In that regard, I have included a brief overview of the event below the following postcard, which you may use in part or in full while communicating with your members. If you wish to view the postcard in PDF, go to: [2]http://www.witsa.org/gpps2009/GPPS_postcard.pdf If you wish to view the postcard in JPG, go to: [3]http://www.witsa.org/gpps2009/GPPS_postcard.jpg Sincerely, Jim GPPS postcard.jpg Information for your member companies: GPPS Bermuda 2009 As you schedule your activities for 2009, plan on attending the November 1-3, Global Public Policy Summit (GPPS 2009); ref. [4]http://www.gpps2009.bm/. This will be a unique and important event. Please see a special delegate invitation letter at [5]http://www.witsa.org/gpps2009/Delegate_Letter.pdf. The event program will feature several thought provoking sessions, including: - Business Technology: An Enabler in your Economy? - Can Enlightened ICT Policy Enable Your Economy and an Economic Recovery? - Do Policies that Promote Technology Infrastructures that Are Resilient and Secure, and that Protect the Privacy of Personal Data Conflict with Policies that Encourage Economic Expansion? - Will Proposed Internet Governance Policies on the Stability, Security and Private Sector Leadership of the Internet Dampen Economic Recovery and Expansion? - Do Environmental Policies Hamper Growth and Can Enlightened ICT Policies and Involvement Bridge the Gap? - Is There Evidence that Institutions Can Play a Positive Role In Promoting ICT and Expanding Economies or Are They Simply Relics of the Past? - Are There Potential Business Technology Developments on the Horizon That Will Enhance Business Growth? In addition, there will be a Pre-Summit Workshop entitled Incubators as a Catalyst to Developing a Strong ICT Sector on October 31. Deadlines for early bird registrations are: before February 28 (USD 550) that is nearly a 40% discount! - and before April 30 (USD 700). From April 30, the regular price (USD 900) applies. Business Technology: An Enabler in your Economy. The Global Public Policy Summit (GPPS) is a flagship event of the World Information Technology and Services Alliance ([6]WITSA) - a consortium of over 67 information technology (IT) industry associations from economies around the world. This international summit focuses on global policies affecting the ICT industry and is attended by over 500 senior executives, government officials and policy makers. One of the principal reasons for participating is that ICT companies gain an excellent opportunity to target their products and services at policy makers and business leaders. Taking place once every two years and commencing in 1999, the summit is hosted in a different country each time, with the leading ICT association of that country organizing the event. In November 2009, GPPS will be coming to Bermuda with the Bermuda Chamber of Commerces Business Technology Division as the organizer in partnership with the Ministry of Energy, Telecommunications and E-Commerce. Be sure to check out the Summit events page at [7]https://www.gpps2009.bm/Events.aspx for a schedule of the spouse program, as well as additional information about golf, shopping, boating and other activities. References 1. http://www.gpps2009.com/Registration.aspx 2. http://www.witsa.org/gpps2009/GPPS_postcard.pdf 3. http://www.witsa.org/gpps2009/GPPS_postcard.jpg 4. http://www.gpps2009.bm/ 5. http://www.witsa.org/gpps2009/Delegate_Letter.pdf 6. http://www.witsa.org/ 7. https://www.gpps2009.bm/Events.aspx Change will not come if we wait for some other person or some other time. We are the ones we have been been waiting for. - Kenyan-American Barack Obama

1 0

Re: [kictanet] Orange/Telkom slash internet costs by 40pc - how do rural folk stand to benefit?
by Victor Gathara 17 Feb '09

17 Feb '09

One concern I have is how all this is playing out in the rural/marginalised areas. Does Telkom have in their service provision a requirement to ensure Quality of Service in places other than Nairobi and Mombasa? Price wars are good news for us in town and I guess the arrival of the sub-marine fibre will make it even more interesting. But how do the rural population stand to benefit? On a related issue, I am doing a preliminary research on behalf of DFID on the potential impact of the arrival of the sub-marine fibre on development and would welcome some ideas from the group. It seems to me that many are eagerly awaiting the cable (even calling it a revolution) but there doesn't seem to be much to suggest that the country really stands to gain immensely save for having a larger presence on Facebook:-) Victor (DFID) -----Original Message----- From: kictanet-bounces+v-gathara=dfid.gov.uk(a)lists.kictanet.or.ke [mailto:[email protected]] On Behalf Of kictanet-request(a)lists.kictanet.or.ke Sent: 17 February 2009 12:00 To: Victor Gathara Subject: kictanet Digest, Vol 21, Issue 33 Send kictanet mailing list submissions to kictanet(a)lists.kictanet.or.ke To subscribe or unsubscribe via the World Wide Web, visit http://lists.kictanet.or.ke/mailman/listinfo/kictanet or, via email, send a message with subject or body 'help' to kictanet-request(a)lists.kictanet.or.ke You can reach the person managing the list at kictanet-owner(a)lists.kictanet.or.ke When replying, please edit your Subject line so it is more specific than "Re: Contents of kictanet digest..." Today's Topics: 1. Re: Orange/Telkom slash internet costs by 40pc (Judy Okite) ---------------------------------------------------------------------- Message: 1 Date: Mon, 16 Feb 2009 13:40:02 +0300 From: Judy Okite <judyokite(a)gmail.com> Subject: Re: [kictanet] Orange/Telkom slash internet costs by 40pc To: jwalu(a)yahoo.com Cc: KICTAnet KICTAnet <kictanet(a)lists.kictanet.or.ke> Message-ID: <45098e8f0902160240o35021145g84c5395cb48fa86e(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 As we celebrate this,WE as consumers need to tread very carefully, lets not forget that cheap can be very expensive....with Telkom's...per minute billing...their speed...is 126Kbps....how much will it cost you to download 100MB? Lets watch the games unfold :-), and be wise. Kind Regards, On 2/13/09, John Walubengo <jwalu(a)yahoo.com> wrote: > > I am indeed watching the Orange space with their new internet tariff > offerings. Whereas Safcom&Zain are charging per downloaded MB > (data-centric charges), Orange_TKL throws in a totally new dimension > i.e. non-data based tariff which time-based. That is per minute > billing irrespective of your data volumes. > > I think things are going to start heating up even before the fiber > lands...reminds me of the original mobile tariff battles that were > between the 'per minute' visa viz 'per second' billing models. > > I can only say - let the games begin and may the best team win. > > walu. > > > --- On Fri, 2/13/09, Alex Gakuru <gakuru(a)gmail.com> wrote: > >> From: Alex Gakuru <gakuru(a)gmail.com> >> Subject: [ke-internetusers] Orange/Telkom slash internet costs by >> 40pc >> To: "ke-users" <ke-internetusers(a)bdix.net> >> Date: Friday, February 13, 2009, 10:50 AM A thank you to >> Orange/Telkom for solving three problems, while making money:- >> >> 1) lowering communications costs for consumers( ICT Consumer >> Association of Kenya opposes all tariffs increases, welcomes all >> reductions) >> >> 2) addressing longstanding "office-hours-only" >> internet problem >> (attached Kenya Internet Exchange Point "graph 3" >> proves it). >> >> 3) Universal Access-all of Kenya's internet is/has been 80 per cent >> only used in "affluent" Nairobi (CCK Internet Market Study) >> >> Alex >> ------excerpt-- >> [Daily Nation] >> Orange slashes its internet access fees EVANS NYABIAGE February 12 >> 2009 >> >> It will now be cheaper to use the internet after Telkom Kenya slashed >> its access fees through the Orange network by 40 per cent. >> >> The new rates mean that one can browse for Sh1 per minute. >> >> "With equipment cost of Sh3,500 for the plug-and-play modem and >> browsing charges for Sh1 per minute during off peak hours (7pm-7am), >> universally affordable internet access for Kenyans in rural and urban >> areas is now a reality," said Telkom Kenya head of marketing and >> strategy Jean-Michel Chanut. >> >> The revamped internet service is a pay-as-you-go one that comes with >> a modem, a data-enabled RUIM card (Removable User Identity Module), >> Sh50 bonus airtime on activation and a step-by-step set-up guide. >> >> Subscribers will be able to top-up upon purchase of Telkom prepaid >> and VoIP top up cards. >> >> A government move in the 2008/2009 budget to scrap import tax on >> telecom equipment such as mobile phones and those required for >> putting up base stations, has resulted in cut-throat competition in >> the industry. >> >> <http://www.nation.co.ke/business/news/-/1006/529474/-/j2b57fz/-/> >> _______________________________________________ >> ke-internetusers mailing list >> ke-internetusers(a)bdix.net >> http://www.bdix.net/mailman/listinfo/ke-internetusers > > > > > _______________________________________________ > kictanet mailing list > kictanet(a)lists.kictanet.or.ke > http://lists.kictanet.or.ke/mailman/listinfo/kictanet > > This message was sent to: judyokite(a)gmail.com Unsubscribe or change > your options at > http://lists.kictanet.or.ke/mailman/options/kictanet/judyokite%40gmail > .com > -- "Each of us is great insofar as we perceive and act on the infinite possibilities which lie undiscovered and unrecognized about us." James Harvey Robinson ------------------------------ _______________________________________________ kictanet mailing list kictanet(a)lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet End of kictanet Digest, Vol 21, Issue 33 **************************************** ________________________________________________________________________ This e-mail has been scanned for all viruses by Star. The service is powered by MessageLabs. For more information on a proactive anti-virus service working around the clock, around the globe, visit: http://www.star.net.uk ________________________________________________________________________ DFID, the Department for International Development: leading the British Government's fight against world poverty. Find out more about the major global poverty challenges and get the facts on what DFID is doing to fight them: http://www.dfid.gov.uk/aboutdfid/howwefightpoverty.asp. Subscribe to our e-bulletin: http://www.dfid.gov.uk/feedback ______________________________________________________________________ This e-mail has been scanned for all viruses by Peapod. The service is powered by MessageLabs. For more information on a proactive anti-virus service working around the clock, around the globe, visit: http://www.peapod.co.uk/cleanmail

1 0

Re: [kictanet] Orange/Telkom slash internet costs by 40pc
by John Walubengo 16 Feb '09

16 Feb '09

I am indeed watching the Orange space with their new internet tariff offerings. Whereas Safcom&Zain are charging per downloaded MB (data-centric charges), Orange_TKL throws in a totally new dimension i.e. non-data based tariff which time-based. That is per minute billing irrespective of your data volumes. I think things are going to start heating up even before the fiber lands...reminds me of the original mobile tariff battles that were between the 'per minute' visa viz 'per second' billing models. I can only say - let the games begin and may the best team win. walu. --- On Fri, 2/13/09, Alex Gakuru <gakuru(a)gmail.com> wrote: > From: Alex Gakuru <gakuru(a)gmail.com> > Subject: [ke-internetusers] Orange/Telkom slash internet costs by 40pc > To: "ke-users" <ke-internetusers(a)bdix.net> > Date: Friday, February 13, 2009, 10:50 AM > A thank you to Orange/Telkom for solving three problems, > while making money:- > > 1) lowering communications costs for consumers( ICT > Consumer > Association of Kenya opposes all tariffs increases, > welcomes all > reductions) > > 2) addressing longstanding "office-hours-only" > internet problem > (attached Kenya Internet Exchange Point "graph 3" > proves it). > > 3) Universal Access-all of Kenya's internet is/has been > 80 per cent > only used in "affluent" Nairobi (CCK Internet > Market Study) > > Alex > ------excerpt-- > [Daily Nation] > Orange slashes its internet access fees > EVANS NYABIAGE > February 12 2009 > > It will now be cheaper to use the internet after Telkom > Kenya slashed > its access fees through the Orange network by 40 per cent. > > The new rates mean that one can browse for Sh1 per minute. > > "With equipment cost of Sh3,500 for the plug-and-play > modem and > browsing charges for Sh1 per minute during off peak hours > (7pm-7am), > universally affordable internet access for Kenyans in rural > and urban > areas is now a reality," said Telkom Kenya head of > marketing and > strategy Jean-Michel Chanut. > > The revamped internet service is a pay-as-you-go one that > comes with a > modem, a data-enabled RUIM card (Removable User Identity > Module), Sh50 > bonus airtime on activation and a step-by-step set-up > guide. > > Subscribers will be able to top-up upon purchase of Telkom > prepaid and > VoIP top up cards. > > A government move in the 2008/2009 budget to scrap import > tax on > telecom equipment such as mobile phones and those required > for putting > up base stations, has resulted in cut-throat competition in > the > industry. > > <http://www.nation.co.ke/business/news/-/1006/529474/-/j2b57fz/-/> > _______________________________________________ > ke-internetusers mailing list > ke-internetusers(a)bdix.net > http://www.bdix.net/mailman/listinfo/ke-internetusers

2 1

Microsoft Collaborates With Industry to Disrupt Conficker Worm
by alice 13 Feb '09

13 Feb '09

http://www.icann.org/en/announcements/announcement-2-12feb09-en.htm ------------------------------------------------------------------------ Microsoft Collaborates With Industry to Disrupt Conficker Worm 12 February 2009 Today, Microsoft announced a partnership with technology industry leaders and academia to implement a coordinated, global response to the Conficker (aka Downadup) worm. Together with security researchers, the Internet Corporation for Assigned Names and Numbers (ICANN), and operators within the Domain Name System, Microsoft coordinated a response designed to disable domains targeted by Conficker. Microsoft also announced a $250,000 reward for information that results in the arrest and conviction of those responsible for illegally launching the Conficker malicious code on the Internet. "As part of Microsoft's ongoing security efforts, we constantly look for ways to use a diverse set of tools and develop methodologies to protect our customers," said George Stathakopoulos, general manager of the Trustworthy Computing Group at Microsoft. "By combining our expertise with that of the broader community we can expand the boundaries of defense to better protect people worldwide." As cyberthreats have rapidly evolved, a greater level of industry coordination and new tactics for communication and threat mitigation are required. To optimize the multiple initiatives being employed across the security industry and within academia, Microsoft helped unify these broad efforts to implement a community-based defense to disrupt the spread of Conficker. Along with Microsoft, organizations involved in this collaborative effort include ICANN, NeuStar, VeriSign, CNNIC, Afilias, Public Internet Registry, Global Domains International Inc., M1D Global, AOL, Symantec, F-Secure, ISC, researchers from Georgia Tech, the Shadowserver Foundation, Arbor Networks and Support Intelligence. "The best way to defeat potential botnets like Conficker/Downadup is by the security and Domain Name System communities working together," said Greg Rattray, chief Internet security advisor at ICANN. "ICANN represents a community that's all about coordinating those kinds of efforts to keep the Internet globally secure and stable." "Microsoft's approach combines technology innovation and effective cross-sector partnerships to help protect people from cybercriminals," Stathakopoulos said. "We hope these efforts help to contain the threat posed by Conficker, as well as hold those who illegally launch malware accountable." More information about how to protect yourself from Conficker can be found at http://www.microsoft.com/conficker. Customers interested in learning more about staying safe online can visit http://www.microsoft.com/protect. Microsoft's reward offer stems from the company's recognition that the Conficker worm is a criminal attack. Microsoft wants to help the authorities catch the criminals responsible for it. Residents of any country are eligible for the reward, according to the laws of that country, because Internet viruses affect the Internet community worldwide. Individuals with information about the Conficker worm should contact their international law enforcement agencies. *About ICANN: * ICANN is responsible for the global coordination of the Internet's system of unique identifiers like domain names (like .org, .museum and country codes like .uk) and the addresses used in a variety of Internet protocols that help computers reach each other over the Internet. Careful management of these resources is vital to the Internet's operation, so ICANN's global stakeholders meet regularly to develop policies that ensure the Internet's ongoing security and stability. ICANN is an internationally organized, public benefit non-profit company. For more information please visit: www.icann.org <http://www.icann.org/>. *Media Contacts: * ICANN: press(a)icann.org <mailto:[email protected]> International: Andrew Robertson Edelman (London) Phone: +44 7921 588 770 Email: andrew.robertson(a)edelman.com <mailto:[email protected]> _______________________________________________ AfrICANN mailing list AfrICANN(a)afrinic.net https://lists.afrinic.net/mailman/listinfo.cgi/africann

1 0

New Health-Related Blogging Campaign Starts February 14th: Please Join Us!
by Janet Feldman 13 Feb '09

13 Feb '09

Dear All, I'm posting this info here (below) because we have a number of Kenyan and African project partners in Global Voices and Rising Voices, including the youth development nonprofit REPACTED (www.repacted.org) and our chat moderators, Serina Kalande and Daudi Were. We have found some highly valuable Kenyan blogs about HIV/AIDS, and would love to find more such blogs and bloggers in Kenya and Africa. Please be in touch with any information or interest in this project! Thanks and best blogging wishes, Janet Dear Friends, This Valentine's Day (February 14), Global Voices--a leading participatory media news room for voices from the developing world--will be launching a campaign called "Teach Someone You Love to Blog or Micro-Blog." Please participate in this exciting project by following the simple steps on this post: http://globalvoicesonline.org/2009/02/11/on-valentines-teach-someone-you-lo… Global Voices and its outreach arm, Rising Voices, are at the forefront of citizen-journalism activities related to issues such as health, development, and ICTs. This "teach-in" marks the start of a series of health-related activities specifically focusing on HIV/AIDS. A "Blogging Positively Guide," now in the works, will provide valuable advice on how to blog to address HIV/AIDS issues. We are looking for help to create the Guide and/or to give feedback, so those interested in or already blogging about the pandemic are encouraged to participate. People living with or affected by HIV/AIDS are especially encouraged to become involved. A global interactive map--with entries about HIV/AIDS-related blogs and bloggers who write on that theme--is being created, and we hope you will send information to add to our growing list! A "Blogging Positively" chat, intended as an ongoing discussion about blogging to address HIV/AIDS, is scheduled for February 27, 2009 at the following times: 9 a.m. New York, 2 p.m. London, 5 p.m. Nairobi. This chat will build on the insights shared during the highly successful World AIDS Day chat, held on December 3, 2008. The chat will be held at www.worknets.org/chat. There may be several chatrooms available for different languages. Login using your name and elect the room you want to join by clicking "enter." Once in the room, select a font color on the left side of the screen, then join the chat. For more information, visit the Rising Voices website and join the Blogging Positively forum. To contact someone involved in the Blogging Positively project, email Janet Feldman (Blogging Positively Guide Coordinator), Juhie Bhatia (Global Voices Public Health Editor), Solana Larsen (Global Voices Managing Editor). To contact the chat moderators, write to Serina Kalande (serina.kalande(a)gmail.com) and/or Daudi Were (daudi.were(a)gmail.com)

1 0

Recruitment for ICANN Leadership Positions: 2009 Nominating Committee]
by alice 13 Feb '09

13 Feb '09

http://www.icann.org/en/announcements/announcement-12feb09-en.htm ------------------------------------------------------------------------ Recruitment for ICANN Leadership Positions: 2009 Nominating Committee 12 February 2009 The 2009 Nominating Committee began its work in November 2008 following the ICANN Annual Meeting in Cairo, Egypt, and is actively seeking qualified candidates for the following key positions within ICANN: * Three members of the ICANN Board of Directors * Three members of the At Large Advisory Committee (for the African, Asia/Australia/Pacific, and Latin American regions) * Two members of the Council of the Generic Names Supporting Organization (GNSO) * One member of the Council of the Country-Code Names Supporting Organization (ccNSO) * Those selected by the Nom Com will take their seats at the end of the 2009 ICANN Annual Meeting, 30 October 2009 in Seoul, Korea. * The Nom Com will be conducting a workshop and other outreach activities during the At Large Summit and the ICANN meeting in Mexico City (28 February - 6 March 2009), see http://mex.icann.org/ for more information. The people selected by the Nominating Committee will have a unique opportunity to work with accomplished colleagues from around the globe, address intriguing technical coordination problems and related policy development challenges with diverse functional, cultural, and geographic dimensions, and gain valuable insights and experience from working across these boundaries of knowledge, responsibility and perspective. Information on applying is available at http://nomcom.icann.org/. Prospective candidates are invited to submit their Statements of Interest to the Nominating Committee by 15 April 2009 23:59 UTC. ------------------------------------------------------------------------ *Sign up for ICANN's Monthly Magazine <http://www.icann.org/magazine/>* _______________________________________________ AfrICANN mailing list AfrICANN(a)afrinic.net https://lists.afrinic.net/mailman/listinfo.cgi/africann

1 0

Re: [kictanet] [PubSoft] Obama, free software and open standards
by Gakuru Alex 13 Feb '09

13 Feb '09

What of GoK? Alex > ---------- Forwarded message ---------- > From: S. Kritikos > Date: Fri, Feb 13, 2009 at 12:08 AM > Subject: [PubSoft] Obama, free software and open standards > To: PubSoft Mailing List <pubsoft(a)elists.isoc.org> > > > > Folks, a couple of short articles: > > Calls for open source government > http://news.bbc.co.uk/2/hi/technology/7841486.stm > > Short article on Linux Mag - Jan 21: "Co-founder and former CEO of > SunMicrosystems, Scott McNealy revealed to the BBC this week that > he had been tapped by the Obama administration to write a paper > on the benefits to the government of using open source." > > Additional links on the new admin: > > President Obama: Good for Open Source? > http://www.linux-mag.com/cache/7232/1.html > > sk > > _______________________________________________ > PubSoft(a)elists.isoc.org > http://elists.isoc.org/mailman/listinfo/pubsoft >

1 0

Fwd: Press Release ::: WSYA ::: Final Call for Registration
by Gakiria 12 Feb '09

12 Feb '09

Dear All, Kindly circulate to your networks. Regards Andrew Gakiria KeLC ---------- Forwarded message ---------- From: Angelika Spraider <spraider(a)icnm.net> Date: Wed, Feb 11, 2009 at 4:14 PM Subject: Press Release ::: WSYA ::: Final Call for Registration To: undisclosed-recipients Dear Friends of the WSA Youth Award, The World Summit Youth Award's deadline for entries, February 28th, 2009, is approaching. Web and mobile pioneers addressing the UN Millennium Development Goals are invited to participate in the global competition. So far there 450 projects have been submitted - let's make it at least a 500! Therefore, I would like to ask you to distribute information within your network and to your local media as soon as possible. Thank you very much for your help in this matter. Best regards, Angelika & the WSYA Team -- Angelika Spraider World Summit Award ICNM - International Center for New Media Moosstrasse 43a 5020 Salzburg Austria Tel: +43 662 63 04 08-32 Fax: +43 662 63 04 08-22 www.icnm.net * www.wsis-award.org * www.youthaward.org ----------------------------------------------------------- ZVR-Zahl 361 985 748 Please consider the environment before printing this email! -- Gakiria Andrew Coordinator Kenya eLearning Centre Nairobi, KENYA

1 0

Re: [kictanet] Hacked password list offers security insights
by James Kagwe 11 Feb '09

11 Feb '09

When you consider the way these passwords are usually stored (sometimes on simple MSAcces databases or other databases without encrypting the password field) by the website designers on some of these websites. I agree it is very wise not to put serious passwords on such websites as they do not serve their purpose anyway. I personally use very weak passwords on such websites too. Let them hack an e-banking website then rewrite the story. The statistics will make more sense then. ________________________________ From: kictanet-bounces+jkagwe=kippra.or.ke(a)lists.kictanet.or.ke [mailto:[email protected]] On Behalf Of Odhiambo Washington Sent: Tuesday, February 10, 2009 8:19 AM To: James Kagwe Cc: KICTAnet ICT Policy Discussions Subject: Re: [kictanet] Hacked password list offers security insights On Tue, Feb 10, 2009 at 1:27 AM, Evans Kahuthu <ekahuthu(a)comtechltd.co.ke> wrote: Recently a niche programming-oriented website called phpbb.com had its user database hacked into and the passwords for 20,000 members stolen. The hacker who broke in then posted the account info and passwords online for the world to see. And while this is really bad news for those 20,000 unlucky souls, it offers an instructive lesson on password security <http://www.darkreading.com/blog/archives/2009/02/phpbb_password.html> for the rest of us. InformationWeek analyzed the hacked password list and found a number of interesting trends in the data, primarily revolving around the fact that most people do exactly what they've been told not to do since passwords were first invented. Author/analyst Robert Graham has tons of analysis on offer. I'm ordering my favorite/most enlightening data points from the piece here, starting with the most interesting. On thing to remember: These passwords are from a group of people interested in computer programming, so if anyone should know better, it's these guys. > The most popular password (3.03% of the 20,000) was "123456." It's also generally considered the most common password used today <http://www.whatsmypass.com/?p=415> . > 4 percent used some variant of the word "password." Seriously, people, there's no excuse for this one. "password" was the 2nd most popular password used, also in keeping with historical trends. > 16 percent of passwords were a person's first name. No word on if it was their first name, but someone's. Joshua is the most commonly used first-name password, a likely reference to the movie WarGames. > Patterns abound. In addition to "123456," other pattens like "12345, "qwerty," and "abc123" were common, comprising 14 percent of the passwords used. > 35 percent of passwords were six characters long. 0.34 percent were only one character long. > For reasons no one can explain, "dragon," "master," and "killer" all crack the top 20 passwords. (On the top 500 password list linked above, "dragon" is #7.) > One thing Graham doesn't discuss is that phpbb.com is really just a message board, and many users may simply have not cared about the security of their passwords here (unlike, say, with a bank account). In other words, they may very well have intentionally chosen something simplistic here to avoid re-using a password they save for an important login, just in case this site got hacked. Which, it turns out, it did. I could go on, but Graham's post has way more detail than I can digest here and it's easy-reading too. Worth a close look for any citizen of the web. Personally, I believe noone really cares about the strength (or lack of) the passwords they use on community sites. To start with, there is a stage in the registration process into such sites (or Bulletin Boards if you may call them) which warns you NOT TO USE any of your sensitive passwords that you use elsewhere. Given that noone really stores any sensitive material on such sites it's not uncommon to simply use 123456 (because the registration system insists on your password having at least six characters) or something like "letmein". I don't believe it was "really bad news for the 20,000 unlucky souls" at all. Rather, the lesson to be learn here, IMHO, is by those souls deploying systems that are accessible to the hostile Internet to take seriously security considerations for those systems. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "The only time a woman really succeeds in changing a man is when he is a baby." - Natalie Wood

1 0

Church service Late Dr Juma
by Andrew Limo 11 Feb '09

11 Feb '09

Dear all, There will be a funeral service 10am tommorow Thurs 12th at St Paul Chapel, Nairobi, for our late brother Dr Juma Okech (ICT Secretary, Directorate of e-Government). Thank you all for your prayers and support. Andrew

1 0

BungeSMS com added you as a connection on Plaxo
by BungeSMS com 10 Feb '09

10 Feb '09

Hi Policy, BungeSMS com wants to add you as a connection on Plaxo. To accept this connection request, go to: http://www.plaxo.com/invite?i=59901184&k=1839213572&l=en&src=email&et=1&est… Thanks! The Plaxo team More than 20 million people use Plaxo to keep in touch with the people they care about. Don't want to receive emails from Plaxo any more? Go to: http://www.plaxo.com/stop?src=email&et=1&est=nolevels&etv=nnic1b2&el=en&ema…

1 0

Obama and Cybersecurity
by alice 10 Feb '09

10 Feb '09

FYI http://www.washingtonpost.com/wp-dyn/content/article/2009/02/09/AR200902090… best alice

1 0

Capital Mobile Radio Drive Winners
by Patrick Mburu 10 Feb '09

10 Feb '09

Congratulations to the Capital Mobile Morning Drive winners so Far! There's a lot of prizes to be won! Listen in on Capital FM Radio: 98.4 or listen on the web: www.capitalfm.co.ke in between 7am and 9am and participate in a chance to win: - 2 nights for 2 Flying package Holiday in the Mara Intrepid (Courtesy: Heritage Hotel's and Safari Link) - 2 nights for 2 at the Leopard Beach Resort (Courtesy: Leopard Beach Resort & Uzuri Spa and Fitness Forest!) - Free breakfasts and lunches at exclusive restaurants in Nairobi And Much Much More....! www.capitalmobile.co.ke/mobile Want a chance to win.. listen in the morning for a get your prize 98.4 Capital FM

1 0

[Fwd: [IGP Announce] Internet Governance Project Headlines]
by lillian＠cipesa.org 10 Feb '09

10 Feb '09

Apologies for cross posting! -------------------------------------------------------------------------- February 09, 2009 A Field Guide to the ICANN Reforms EU posts online consultation results on "Internet of Things" Cyber-security for people? Or nations? Shareholder groups push ISPs for transparency on DPI use Search Internet Governance Project Headlines ________________________________________________________ * A Field Guide to the ICANN Reforms - http://feedblitz.com/r.asp?l=38133930&f=175425&u=11399282 Important changes are taking place in ICANNâs representational structures. They are the most sweeping changes in ICANN since the so-called âevolution and reformâ process of 2001-2. The new changes will directly affect opportunities for people to participate in ICANN â hopefully in a more positive way. Indeed, there are some (potentially) good things about the planned reforms, such as a more balanced representation of commercial and noncommercial users and more flexible working group structures. But there are also serious problems and dangers in this effort. That is why the Internet Governance Project is initiating a series of blogs explaining and analyzing the structural changes underway in ICANN. If you think reading about this topic is about as appealing as getting a tetanus shot, we sympathize, and promise to make it as lively and interesting as possible. At the very least, we guarantee that reading this unfolding report will be more pleasurable than reading the 23 different ICANN staff reports, 5-6 Board resolutions, months of Council minutes and multiple email lists you would have to monitor to piece it all together for yourself. Email to a friend Article Search - http://www.feedblitz.com/f/f.fbz?Search=175425;9995717;Main Page;A Field Guide to the ICANN Reforms;1047081 * EU posts online consultation results on "Internet of Things" - http://feedblitz.com/r.asp?l=38108085&f=175425&u=11399282 Europe is very interested in the Internet of the future, having ceded to the United States so much of the standards and governance of the Internet of the past. A September 29, 2008 European Union staff working paper, âEarly Challenges to the Internet of Things,â shot some policy concerns across the bow. How should the IoT be regulated? EU seemed especially concerned about the apparent linkage between the Object Naming System (ONS) used by EPC Global (contracting with VeriSign) and the U.S.-controlled DNS root. Comment upon and responses to this staff paper are now posted online. If you are interested in the evolution of thinking about IoT a look through these comments might be rewarding. Email to a friend Article Search - http://www.feedblitz.com/f/f.fbz?Search=175425;9995717;Main Page;EU posts online consultation results on "Internet of Things";1047081 * Cyber-security for people? Or nations? - http://feedblitz.com/r.asp?l=38066197&f=175425&u=11399282 The Internet is organized around âautonomous systemsâ -- independently managed networks most of which are privately owned or, if public, managed at the agency or department level. The current institutional structure for public governance, on the other hand, is organized around nation-states. That disjunction encourages some actors to construct Internet security as a national security issue. Political claims that invoke ânational securityâ can inflate budgets and provide for more effective political mobilization within bureaucracies and the political class. A recent report from a "Commission on Cyberspace Security for the 44th Presidency" assembled by the Center for Strategic and International Studies (CSIS), a Washington DC-based think tank with longstanding roots in Cold War dialogue, exemplifies this problem. Written late in 2008, it urged the incoming President to proclaim that âcyberspace is a vital asset for the nation andâ¦the United States will protect it using all instruments of national power.â This is a fundamentally misguided approach; this post explains why. Email to a friend Article Search - http://www.feedblitz.com/f/f.fbz?Search=175425;9995717;Main Page;Cyber-security for people? Or nations?;1047081 * Shareholder groups push ISPs for transparency on DPI use - http://feedblitz.com/r.asp?l=38031216&f=175425&u=11399282 A coalition of investors have filed shareholder resolutions with 10 major U.S. Internet service providers, urging their corporate boards to report on the impact of the companiesâ use of deep packet inspection for Internet network management on the freedom of expression and privacy of their customers. The effort was organized by the Open Media and Information Companies initiative (OpenMIC). A spokesperson for one of the investor groups, Farnum Brown of Trillium Asset Management, said: "These companies have responded to the challenges of managing the Internet in a patchwork, ad hoc fashion. In so doing they've failed to notice the profound social policy issues they've unwittingly engaged. Americans are concerned about how their use of the Internet is monitored. They're concerned about whether their privacy and freedom of expression are respected by the companies that manage the Internet. We as shareholders believe it is in these companies' best business interests to respond to those concerns." Email to a friend Article Search - http://www.feedblitz.com/f/f.fbz?Search=175425;9995717;Main Page;Shareholder groups push ISPs for transparency on DPI use;1047081 ________________________________________________________ Unsubscribe from all current and future newsletters powered by FeedBlitz - http://www.feedblitz.com/f/f.fbz?EmailRemove=_MTEzOTkyODJ8fGxpbGxpYW5AY2lwZ…

1 0

Re: [kictanet] SPAM-LOW: Re: Hacked password list offers security insights
by Evans Kahuthu 10 Feb '09

10 Feb '09

Washington, I completely agree with you on users not caring about their passwords on community websites. Unfortunately, when it comes to social networking web sites, people tell all -- who they are, what they like to do and what's happening at that exact moment. Consequently, with this weak passwords, hackers "hijack" their profiles and go after internet contacts. This is one of the newest scams to hit the internet. Hackers somehow take over users pages and pose as them online. Case in point, "Facebook user Bryan Rutberg of Seattle, Wash., had his profile hacked into by someone who changed his status to: "Bryan Rutberg NEEDS HELP URGENTLY!" Many friends immediately responded to the status change wanting to know what had happened to him. One friend, Beny Rubenstein, got a direct message from Rutberg saying he had been robbed at gunpoint while in England and was in desperate need of cash in order to get home. Being a good (but dumb) person, he wired his thought-to-be troubled friend $1,143 in two installments, only to find out Rutberg was sitting home safely in Seattle. Rubenstein told CNN that he misses the money he lost, but feels worse about being tricked by someone impersonating his friend on the Web site." Evans Kahuthu ---------------------------------------- From: Odhiambo Washington <odhiambo(a)gmail.com> Sent: Tuesday, February 10, 2009 8:26 AM To: ekahuthu(a)comtechltd.co.ke Subject: SPAM-LOW: Re: [kictanet] Hacked password list offers security insights On Tue, Feb 10, 2009 at 1:27 AM, Evans Kahuthu <ekahuthu(a)comtechltd.co.ke> wrote: Recently a niche programming-oriented website called phpbb.com had its user database hacked into and the passwords for 20,000 members stolen. The hacker who broke in then posted the account info and passwords online for the world to see. And while this is really bad news for those 20,000 unlucky souls, it offers an instructive lesson on password security for the rest of us. InformationWeek analyzed the hacked password list and found a number of interesting trends in the data, primarily revolving around the fact that most people do exactly what they've been told not to do since passwords were first invented. Author/analyst Robert Graham has tons of analysis on offer. I'm ordering my favorite/most enlightening data points from the piece here, starting with the most interesting. On thing to remember: These passwords are from a group of people interested in computer programming, so if anyone should know better, it's these guys. > The most popular password (3.03% of the 20,000) was "123456." It's also generally considered the most common password used today . > 4 percent used some variant of the word "password." Seriously, people, there's no excuse for this one. "password" was the 2nd most popular password used, also in keeping with historical trends. > 16 percent of passwords were a person's first name. No word on if it was their first name, but someone's. Joshua is the most commonly used first-name password, a likely reference to the movie WarGames. > Patterns abound. In addition to "123456," other pattens like "12345, "qwerty," and "abc123" were common, comprising 14 percent of the passwords used. > 35 percent of passwords were six characters long. 0.34 percent were only one character long. > For reasons no one can explain, "dragon," "master," and "killer" all crack the top 20 passwords. (On the top 500 password list linked above, "dragon" is #7.) > One thing Graham doesn't discuss is that phpbb.com is really just a message board, and many users may simply have not cared about the security of their passwords here (unlike, say, with a bank account). In other words, they may very well have intentionally chosen something simplistic here to avoid re-using a password they save for an important login, just in case this site got hacked. Which, it turns out, it did. I could go on, but Graham's post has way more detail than I can digest here and it's easy-reading too. Worth a close look for any citizen of the web. Personally, I believe noone really cares about the strength (or lack of) the passwords they use on community sites. To start with, there is a stage in the registration process into such sites (or Bulletin Boards if you may call them) which warns you NOT TO USE any of your sensitive passwords that you use elsewhere. Given that noone really stores any sensitive material on such sites it's not uncommon to simply use 123456 (because the registration system insists on your password having at least six characters) or something like "letmein". I don't believe it was "really bad news for the 20,000 unlucky souls" at all. Rather, the lesson to be learn here, IMHO, is by those souls deploying systems that are accessible to the hostile Internet to take seriously security considerations for those systems. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "The only time a woman really succeeds in changing a man is when he is a baby." - Natalie Wood

1 0

Hacked password list offers security insights
by Evans Kahuthu 10 Feb '09

10 Feb '09

Recently a niche programming-oriented website called phpbb.com had its user database hacked into and the passwords for 20,000 members stolen. The hacker who broke in then posted the account info and passwords online for the world to see. And while this is really bad news for those 20,000 unlucky souls, it offers an instructive lesson on password security for the rest of us. InformationWeek analyzed the hacked password list and found a number of interesting trends in the data, primarily revolving around the fact that most people do exactly what they've been told not to do since passwords were first invented. Author/analyst Robert Graham has tons of analysis on offer. I'm ordering my favorite/most enlightening data points from the piece here, starting with the most interesting. On thing to remember: These passwords are from a group of people interested in computer programming, so if anyone should know better, it's these guys. > The most popular password (3.03% of the 20,000) was "123456." It's also generally considered the most common password used today . > 4 percent used some variant of the word "password." Seriously, people, there's no excuse for this one. "password" was the 2nd most popular password used, also in keeping with historical trends. > 16 percent of passwords were a person's first name. No word on if it was their first name, but someone's. Joshua is the most commonly used first-name password, a likely reference to the movie WarGames. > Patterns abound. In addition to "123456," other pattens like "12345, "qwerty," and "abc123" were common, comprising 14 percent of the passwords used. > 35 percent of passwords were six characters long. 0.34 percent were only one character long. > For reasons no one can explain, "dragon," "master," and "killer" all crack the top 20 passwords. (On the top 500 password list linked above, "dragon" is #7.) > One thing Graham doesn't discuss is that phpbb.com is really just a message board, and many users may simply have not cared about the security of their passwords here (unlike, say, with a bank account). In other words, they may very well have intentionally chosen something simplistic here to avoid re-using a password they save for an important login, just in case this site got hacked. Which, it turns out, it did. I could go on, but Graham's post has way more detail than I can digest here and it's easy-reading too. Worth a close look for any citizen of the web. Evans Kahuthu

2 1