- KICTANet - KICTANet

SuperMicro-based Servers compromised by China!
by Ngigi Waithaka 04 Oct '18

04 Oct '18

Listers, If you are using Super-Micro based servers in your networks, they're most probably compromised by the Chinese Govt! https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-u… -- *Regards,* *Wait**haka Ngigi* Chief Executive Officer | Alliance Technologies | MCK Nairobi Synod Building T +254 20 525 0750 |Office Mobile: +254 716 201061 | M +254 737 811 000 www.at.co.ke

2 1

The KeNIC we want
by Mwendwa Kivuva 04 Oct '18

04 Oct '18

The debate on revitalising KENIC will seek to tackle the following : 1. Governance Issues 2. Public /Stakeholder Engagements 3. Operational Issues Today Day1, we will seek to address the Governance issues. There is no restriction to debate the other two issues, or any other issue you feel is important, although we will strive to answer the other two issues tomorrow. How is the board currently constituted? KENIC was licensed by CA in 2015 to manage the .ke namespace following gazzettement of new Information and Communication Regulations. Currently. The KENIC board comprises members from Kenya Education Network (KENET), Domain Registrars Association of Kenya (DRAKE), ICT Authority (ICTA), and Technology Service Providers of Kenya (TESPOK). There are associate directors comprising the immediate past Chairman of the board, and some three other organisations (Google, KO Associates, and ICEA Lion). More clarification on the current board is needed since their website is blank on this. The KENIC page on the board was last updated in 2014 http://kenic.or.ke/index.php/en/home/kenic-board-management Questions that come to mind at this point are a) Is a review of the governance structure at KENIC due? How would that structure look like? b) Which Organisations should nominate Directors? Which stakeholder groups should be involved? c) What are the term limits for Directors? d) How should the Chairperson of the board be selected? Additional questions are welcomed, as we get suggestions from the wider community on the best way to manage our .ke registry. Take it away.

5 6

Inside raging battle for the control of key eCitizen system
by Victor Kapiyo 04 Oct '18

04 Oct '18

Puzzling developments given the current row over the management of the eCitizen portal. Even as it unfolds, there is need to start thinking of a better way to manage such an important e-government programme and have it embedded in a specific policy, law and institution. ________________ A court battle between the eCitizen developer, a company that has been collecting funds through the system, and the Treasury has not only revealed several holes in the project implementation, but has also complicated matters. Goldrock Capital, which has been collecting money and remitting to government from the platform, has sued the Treasury for locking it out of the mobile money collection portal. Goldrock has made party to its suit Webmasters Kenya which developed the portal and which contracted it to do the collections. As soon as the Treasury finally wrested control of the digital payments system, it began regularisation of the entire project but the process has sparked a three-way standoff. https://www.nation.co.ke/news/battle-for-control-of-key-eCitizen-system/105… *Victor Kapiyo* Partner | *Lawmark Partners LLP* *Suite No. 8, Centro House, Westlands, Nairobi | **Web: www.lawmark.co.ke <http://www.lawmark.co.ke> * ==================================================== *“Your attitude, not your aptitude, will determine your altitude” Zig Ziglar*

2 1

ICT Fraud (Kenya) vs Efficiency (Singapore)
by S.M. Muraya 03 Oct '18

03 Oct '18

Dear Listers, Just FYI.. Fortunately decent public officials in Kenya are now fighting the culture of insider trading which only promotes trickery/treachery (locking out genuine local solution providers:) https://nairobinews.nation.co.ke/news/city-businessman-loses-sh89m-tender-f… In the other two he was asked to supply 797 laptops to the ICT ministry at > Sh125.9 million and software at Sh28.7 million. > > On his affidavit, Mr Buro said one of the suspects introduced himself as > the acting head of procurement at the ICT ministry. “I would even meet him > at the ministry’s offices on either the 9th or 10th floor,” he said. Now compare with Singapore (population, below 6 million) ..building up local focus, ethics + economy https://en.wikipedia.org/wiki/Misuse_of_Drugs_Act_(Singapore) https://www.techgoondu.com/2017/05/25/singapore-government-call-s2-4-billio… https://www.techgoondu.com/2017/05/25/singapore-government-call-s2-4-billio… Singapore government to give out S$2.4 billion in ICT tenders this year May 25th, 2017 | by Alfred Siew The Singapore government will give out contracts worth S$2.4 billion in the current financial year to boost efforts in smart nation and digitisation efforts in the country. The money will be spent on national projects that include a national digital ID system, cashless payments with the monetary authorities and a smart nation sensor network. Unveiling this yesterday, the government technology agency called GovTech said there would be a tender for data analytics and another for communications infrastructure to link up data centres and IoT (Internet-of-Things) sensors. Robotics will be one area of focus. Temasek Polytechnic, for one, will be looking for an industry partner to build an inventory robot to scan the print collection and navigate in its library. This will help the library carry out more and faster inventory stock-takes to boost productivity and efficiency, as well as provide early detection of missing or wrongly shelved books. At the same time, the government is seeking to shore up defences against cyber attacks. One area it is looking to spend on is the fight against malware infiltrating its computer systems using advanced threat analytics and automation. This year’s government infocomm technology spending is projected to be lower than last year’s, which stood at S$2.8 billion. Speaking to attendees from the industry, GovTech chief executive Jacqueline Poh said it was looking to small and medium enterprises (SMEs) to take on some of the new jobs. “Besides the established companies, we are glad that there is a growing pool of small and medium enterprises (SMEs) that have stepped up and embraced new technologies,” she noted. “Last year, SMEs accounted for about two-thirds of the total number of ICT contracts awarded.” One local technology SME cited by GovTech is DC Frontiers. Since winning a contract last year from the government, it now helps analyse networks of connections between people and companies to give users insights into, among other things, legal ownership, conflicts of interest and possible fraud. Last year, it began working with procurement and internal audit teams in the government to enhance and automate checks for conflict of interest.

2 2

Adequacy status for our data protection framework
by Grace Bomu 02 Oct '18

02 Oct '18

Dear listers, Today the Taskforce on Data Protection/Ministry of ICT held a public participation forum where stakeholders made submissions on the proposed policy and bill. Some golden threads in the discussions: independence of data protection authority ; funding and how the policy will be implemented; cross border transfers/localisation of data; access to personal data by state agencies such as KRA; how public agencies/government controllers and processors will be treated by the law; and how other regulators eg financial services will interact with the framework. On process, policy makers stated that the draft Bill will be published by the National Assembly and merged with the Senate one. Most of these issues have been discussed here in one way or another. One interesting side discussion apart from the above was on how the law, once enacted, could be submitted to Europe for assessment for adequacy status. Under GDPR, adequacy status may be granted by the European Commission to non-EEA countries who provide a level of personal data protection that is "essentially equivalent" to that provided in European law. Morocco is one African country that has been pursuing adequacy status. The public participation forum continues tomorrow from 9am -1pm at the Louis Leakey Auditorium , National Museums of Kenya. -- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F

1 0

The KeNIC we want
by Mwendwa Kivuva 02 Oct '18

02 Oct '18

Over the years, Kenyans have come to rely on the unique .ke domain brand to announce their presence to the world. Recently, there have been board wrangles at KeNIC, affecting the performance and operations of the organisation. There have been preliminary discussion on this list regarding the state of KeNIC. We will have a two day moderated debate starting on Thursday on the KICTANet list for the community to give their views on which way KeNIC should take, and the corporate governance structures that should be put in place to have a professionally run, and efficient Country Code Level domain (ccTLD) for Kenya. Members are welcomed to ask hard questions, and give suggestions, and way forward for KeNIC. Just some background on the ccTLD market around the world, and comparison to the much famed Silicon Savannah. Are we punching below our weight? China population 1.379 billion .cn domains: 21 million domains (one domain for every 65 people) Percentage Domain penetration: 1.5% .cn is the second largest registry after .com and is ran by the CNNIC which is a department of China Ministry of Industry and Information. Germany population 82.67 million .de domains: 16 million domains (one domain for every 5 people) Percentage Domain penetration: 19% .de is the third largest registry in the world and is ran by DENIC which is a non-regulated not-for-profit cooperative owned by registrars. South Africa Population 56 million .za domain: 1.3 million domains (one domain for every 46 people) Percentage Domain penetration: 2.3% .za is the largest ccTLD in Africa, managed and regulated by ZADNA which is an agency of South African government under the Department of Telecommunications and Postal Services. Kenya population 50 million .ke domain: 79,773 domains (one domain for every 627 people) Percentage Domain penetration: 0.16% .ke is managed by KeNIC which is envisioned as a Public Private Partnership (PPP) entity Looking forward to a fruitful debate. See you on Thursday 4th October, 2018 on this list. ______________________ Mwendwa Kivuva, Nairobi, Kenya

1 0

Fwd: Link utilization
by Nelson Kwaje 02 Oct '18

02 Oct '18

Hey folks, Please see the below exchange between me and my ISP. They did not get back to me after my reply and the internet was not interred with since then . Is it legal for ISPs to cut service based on such justifications. Cheere Nelson Dear Mike Please send me a copy of the "fair use policy", I hope it contains a clear definition of the intendned purposes. Because I don't recall signing or consenting to such an agreement. Regards Nelson On Mon, 17 Sep 2018, 16:27 Mike > Hello > > We note that the link is being over utilized hence the course for slow > speeds. Something to note is that our various products are governed by a > fair usage policy that is supposed to ensure that a product is used for its > intended purpose. > > From your today’s usage, we note that you are exhausting the FUP limit for > the subscribed product: Faiba home 50 Mbps. > The system is designed to limit your speed for the remainder of the peak > hours once this threshold is reached. Kindly consider: > > i. Upgrading to a higher subscription > ii. Managing your usage to be within the dimensions of the product. > > Kindly see the attached is your average utilization graph and the most > active protocols showing your usage for the day. > > > > *Regards,* > > *Mike* > > > >

7 10

Registration open for Freedom Online Coalition conference
by Grace Githaiga 01 Oct '18

01 Oct '18

Lisers This might be of interest to some of you. Dear all, In case of interest, please find below information regarding registration for the upcoming annual conference of the Freedom Online Coalition, which will take place from 28-30 November in Berlin, Germany. On the website you can read about the aims of the Conference, [1] browse the Conference Program [2], and view confirmed featured participants. [3] Also available on the website is a registration of interest form [4] which enables you to register your interest in attending. Note, although there is no fee to register or to attend the conference, funding is not available to support attendance. Should you have any questions about the conference, please contact the Freedom Online Coalition Support Unit at supportunit(a)freedomonlinecoalition.com. Co-Convenor Kenya ICT Action Network (KICTANet) Twitter:@ggithaiga Tel: 254722701495 Skype: gracegithaiga Alternate email: ggithaiga(a)hotmail.com Linkedin: https://www.linkedin.com/in/gracegithaiga www.kictanet.or.ke "Change only happens when ordinary people get involved, get engaged and come together to demand it. I am asking you to believe. Not in my ability to bring about change – but in yours"---Barrack Obama. Links: ------ [1] https://freedomonline.de/about/the-2018-freedom-online-conference/ [2] https://freedomonline.de/program/program-overview/ [3] https://freedomonline.de/speakers/ [4] https://pool.regasus.de/online/18FOC_2.do

1 0

Fwd: [Internet Policy] TBL's new gig- web privacy
by Grace Bomu 01 Oct '18

01 Oct '18

Listers, of interest to privavcy by design enthuthiasts ---------- Messaggio inoltrato ---------- Da: *Richard Bennett* <richard(a)bennett.com> Data: sabato 29 settembre 2018 Oggetto: [Internet Policy] TBL's new gig A: ISOC Internet Policy <internetpolicy(a)elists.isoc.org> Just today, Tim Berners-Lee has announced a new venture he’s formed to control access to user data on the web. He’s taking a sabbatical from MIT and stepping back from the W3C to focus on a new business called “inrupt” based on the “Solid” open source project. The announcement come in a Medium post titled "One Small Step for the Web…" Here’s how it begins: "I’ve always believed the web is for everyone. That’s why I and others fight fiercely to protect it. The changes we’ve managed to bring have created a better and more connected world. But for all the good we’ve achieved, the web has evolved into an engine of inequity and division; swayed by powerful forces who use it for their own agendas. Today, I believe we’ve reached a critical tipping point, and that powerful change for the better is possible — and necessary. "This is why I have, over recent years, been working with a few people at MIT and elsewhere to develop Solid, an open-source project to restore the power and agency of individuals on the web. "Solid changes the current model where users have to hand over personal data to digital giants in exchange for perceived value. As we’ve all discovered, this hasn’t been in our best interests. Solid is how we evolve the web in order to restore balance — by giving every one of us complete control over data, personal or not, in a revolutionary way. "Solid is a platform, built using the existing web. It gives every user a choice about where data is stored, which specific people and groups can access select elements, and which apps you use. It allows you, your family and colleagues, to link and share data with anyone. It allows people to look at the same data with different apps at the same time.” https://medium.com/@timberners_lee/one-small-step-for-the-web-87f92217d085 I’m guessing this will be a flop, but we’ll see. RB — Richard Bennett High Tech Forum <http://hightechforum.org> Founder Ethernet & Wi-Fi standards co-creator Internet Policy Consultant -- Grace Mutung'u Skype: gracebomu @Bomu PGP ID : 0x33A3450F

2 1

Fwd: [Internet Policy] TBL's new gig
by Barrack Otieno 01 Oct '18

01 Oct '18

Listers, This is for your information in case you are interested. Regards ---------- Forwarded message --------- From: Richard Bennett <richard(a)bennett.com> Date: Sat, Sep 29, 2018 at 10:13 PM Subject: [Internet Policy] TBL's new gig To: ISOC Internet Policy <internetpolicy(a)elists.isoc.org> Just today, Tim Berners-Lee has announced a new venture he’s formed to control access to user data on the web. He’s taking a sabbatical from MIT and stepping back from the W3C to focus on a new business called “inrupt” based on the “Solid” open source project. The announcement come in a Medium post titled "One Small Step for the Web…" Here’s how it begins: "I’ve always believed the web is for everyone. That’s why I and others fight fiercely to protect it. The changes we’ve managed to bring have created a better and more connected world. But for all the good we’ve achieved, the web has evolved into an engine of inequity and division; swayed by powerful forces who use it for their own agendas. Today, I believe we’ve reached a critical tipping point, and that powerful change for the better is possible — and necessary. "This is why I have, over recent years, been working with a few people at MIT and elsewhere to develop Solid, an open-source project to restore the power and agency of individuals on the web. "Solid changes the current model where users have to hand over personal data to digital giants in exchange for perceived value. As we’ve all discovered, this hasn’t been in our best interests. Solid is how we evolve the web in order to restore balance — by giving every one of us complete control over data, personal or not, in a revolutionary way. "Solid is a platform, built using the existing web. It gives every user a choice about where data is stored, which specific people and groups can access select elements, and which apps you use. It allows you, your family and colleagues, to link and share data with anyone. It allows people to look at the same data with different apps at the same time.” https://medium.com/@timberners_lee/one-small-step-for-the-web-87f92217d085 I’m guessing this will be a flop, but we’ll see. RB — Richard Bennett High Tech Forum <http://hightechforum.org> Founder Ethernet & Wi-Fi standards co-creator Internet Policy Consultant _______________________________________________ To manage your ISOC subscriptions or unsubscribe, please log into the ISOC Member Portal: https://portal.isoc.org/ Then choose Interests & Subscriptions from the My Account menu. -- Barrack O. Otieno +254721325277 +254733206359 Skype: barrack.otieno PGP ID: 0x2611D86A

1 0