Man Faces Five Years in Prison for Snooping Through Wife's E-Mails

Happy 2011 to everyone. -------------------- Here's an interesting case that could end up setting new boundaries in the area of privacy. And it confirms that in most cases marriages do belong to the government:-) best Alice Man Faces Five Years in Prison for Snooping Through Wife's E-Mails http://abcnews.go.com/Technology/email-snooping-wife-brings-michigan-man-fel... Could someone face prison time for snooping through a spouse's e-mails? <http://abcnews.go.com/Technology/facebook-infidelity-cheating-spouses-online/story?id=12272421> For Leon Walker of Michigan, the answer was yes. Suspecting that his wife was involved with another man, and worried that it was affecting their daughter, Walker logged into Clara Walker's Gmail account last summer. Walker, 33, said it was easy for him to log in because his wife kept the password in a book next to the computer. "I definitely felt it was OK to confirm [the affair] by reading her e-mail in our home," said Walker. While Walker believed it was OK, Oakland County prosecutors did not and have charged Walker with felony misuse of a computer. If convicted, he could face up to five years in prison. This is Michigan's first criminal prosecution for snooping through a spouse's e-mails. So far, two Michigan judges have refused to toss out the charges in the potentially precedent-setting case. "It's outrageous. It's insane," Walker, who is now divorced, told ABC News. Prosecutors contend that Walker -- who is a computer technician -- illegally hacked into his wife's computer after she had filed for divorce, but Walker's lawyer calls the prosecution's claim an overzealous application of a law meant to protect trade secrets and credit card data. "People who live under the same roof, be they married or not, and who share a computer -- as in this instance -- they may have some personal privacy lines that they adhere to. And if they don't, that's between the two individuals," defense attorney Leon Weiss said. "The word 'e-mail' does not appear in this statute. This is an anti-hacking statute," Weiss said. "It does not, in any way, shape or form encompass reading somebody's e-mail." Prosecutors scoff at defense claims that Walker is a victim. "Apparently, they are trying the case in the media, because they are not doing so well in the courts," Oakland County prosecutor Jessica Cooper said in a statement. While Walker's case is a first for Michigan, it is not the first time the privacy between a husband and wife has become a matter for the courts. Federal privacy laws state that even with a shared computer, password protected e-mail accounts are private, unless one of the parties allows access. "The law is a simple unauthorized access law: It prohibits unauthorized viewing of someone else's password-protected files," said Orin Kerr, an Internet legal expert. "The legal issue here would be whether the wife gave the man permission to view her account. If she did not, this is a pretty straightforward." And experts say the same law would apply to other forms of communication, including a letter addressed to your spouse. "If you give them permission, you can do anything you want to. But if you don't, it might be a crime," said Perry Aftab, a privacy lawyer. Walker will face trial Feb. 7 in a case that could set bold new boundaries in the murky area of privacy between a husband and a wife. <http://abcnews.go.com/Technology/facebook-infidelity-cheating-spouses-online/story?id=12272421>

Suppose, in the process of this impropriety, Mr. Walker ended up discovering impropriety on the part of the wife as far as their marriage is concerned, there is likelihood of a divorce case being upheld, based on proof from the e-mails. I wonder if in such a case the "government" will still shy off looking at the evidence just because it was dug under circumstances that it considers felonious. I think this is a case of the govt meddling in a marriage. However, this is the US where marriages are a strange contract, short term in most cases so it doesn't come out as a surprise to me that the govt looks at marriage this way, for the govt is the people, representing the people. Happy 2011. On Mon, Jan 3, 2011 at 11:38 PM, Alice Munyua <alice@apc.org> wrote:
Happy 2011 to everyone.
--------------------
Here's an interesting case that could end up setting new boundaries in the area of privacy. And it confirms that in most cases marriages do belong to the government :-)
best
Alice
Man Faces Five Years in Prison for Snooping Through Wife's E-Mails
http://abcnews.go.com/Technology/email-snooping-wife-brings-michigan-man-fel...
Could someone face prison time for snooping through a spouse's e-mails?<http://abcnews.go.com/Technology/facebook-infidelity-cheating-spouses-online/story?id=12272421>For Leon Walker of Michigan, the answer was yes.
Suspecting that his wife was involved with another man, and worried that it was affecting their daughter, Walker logged into Clara Walker's Gmail account last summer.
Walker, 33, said it was easy for him to log in because his wife kept the password in a book next to the computer.
"I definitely felt it was OK to confirm [the affair] by reading her e-mail in our home," said Walker.
While Walker believed it was OK, Oakland County prosecutors did not and have charged Walker with felony misuse of a computer. If convicted, he could face up to five years in prison.
This is Michigan's first criminal prosecution for snooping through a spouse's e-mails. So far, two Michigan judges have refused to toss out the charges in the potentially precedent-setting case.
"It's outrageous. It's insane," Walker, who is now divorced, told ABC News.
Prosecutors contend that Walker -- who is a computer technician -- illegally hacked into his wife's computer after she had filed for divorce, but Walker's lawyer calls the prosecution's claim an overzealous application of a law meant to protect trade secrets and credit card data.
"People who live under the same roof, be they married or not, and who share a computer -- as in this instance -- they may have some personal privacy lines that they adhere to. And if they don't, that's between the two individuals," defense attorney Leon Weiss said.
"The word 'e-mail' does not appear in this statute. This is an anti-hacking statute," Weiss said. "It does not, in any way, shape or form encompass reading somebody's e-mail."
Prosecutors scoff at defense claims that Walker is a victim.
"Apparently, they are trying the case in the media, because they are not doing so well in the courts," Oakland County prosecutor Jessica Cooper said in a statement.
While Walker's case is a first for Michigan, it is not the first time the privacy between a husband and wife has become a matter for the courts. Federal privacy laws state that even with a shared computer, password protected e-mail accounts are private, unless one of the parties allows access.
"The law is a simple unauthorized access law: It prohibits unauthorized viewing of someone else's password-protected files," said Orin Kerr, an Internet legal expert. "The legal issue here would be whether the wife gave the man permission to view her account. If she did not, this is a pretty straightforward."
And experts say the same law would apply to other forms of communication, including a letter addressed to your spouse.
"If you give them permission, you can do anything you want to. But if you don't, it might be a crime," said Perry Aftab, a privacy lawyer.
Walker will face trial Feb. 7 in a case that could set bold new boundaries in the murky area of privacy between a husband and a wife.
<http://abcnews.go.com/Technology/facebook-infidelity-cheating-spouses-online/story?id=12272421>
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: odhiambo@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/odhiambo%40gmail.com
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

The fundamental issue is whether evidence obtained unlawfully is admissible in court of law. Sent from my BlackBerry® -----Original Message----- From: Odhiambo Washington <odhiambo@gmail.com> Sender: kictanet-bounces+ngethe.kariuki2007=yahoo.co.uk@lists.kictanet.or.ke Date: Tue, 4 Jan 2011 09:06:56 To: <ngethe.kariuki2007@yahoo.co.uk> Cc: KICTAnet ICT Policy Discussions<kictanet@lists.kictanet.or.ke> Subject: Re: [kictanet] Man Faces Five Years in Prison for Snooping Through Wife's E-Mails _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet This message was sent to: ngethe.kariuki2007@yahoo.co.uk Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/ngethe.kariuki2007%40ya...

Dear All Has Kenya Police Website been Hacked? When you go to the website you get "Fedora Test Page" More hacking could be going on we need professionals to get more trainings on latest trends on hacking in order to secure our websites. I organize courses in the region to help manage the manage the manace. Appropriate courses coming up are detailed below:-. K-Ninety East Africa Ltd. Courses January 2011 to September 2011 (The courses can also be organized in-house . Contact us for more details) JANUARY 201124th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS 27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS FEBRUARY 2011 31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council) 7th – 11th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council) 7th – 11th Nairobi INFORMATION SECURITY GOVERNANCE & IS AUDIT 14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS 14th – 15th Nairobi ENTERPRISE WIDE RISK MANAGEMENT 21st – 25th Nairobi SANS SEC401-SECURITY ESSENTIALS BOOTCAMP STYLE 28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS ESSENTIALS MARCH 2011 28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI accredited) APRIL 2011 11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM 13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM 25th – 29th Nairobi ISO 27001 LEAD AUDITOR + EXAMS (RABQSA or IRCA) MAY 2011 9th – 12th Nairobi IS AUDIT RISK & SECURITY COURSE 16th – 18th Nairobi ACTION CENTERED INTERNAL AUDIT MANAGEMENT 16th –20th Nairobi CISSP CBK COURSE (ISC) 28th Nairobi CISSP EXAMINATION (ISC)2 JUNE 2011 6th – 10th Nairobi CERTIFIED BUSINESS CONTINUITY MANAGER (BCI Accredited) 13th - 17th Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council) 20th – 24th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council) JULY 2011 25th – 27th Kisumu INFORMATION SECURITY MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS AUGUST 2011 1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS 4th – 5th Nairobi PRINCE2 PRACTITIONER + EXAMS 22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP SEPTEMBER 2011 21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS 26th – 29th Nairobi PROJECT MANAGEMENT PROFESSIONAL (PMI accredited) For more details contact: Preston K-Ninety East Africa Ltd. P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 Cell +254 722 77 14 78 Email podera@k90ea.com

Not 100% sure of the facts but the original site was apparently running on a windows based web server, it got defaced. Possibly the fedora apache test page is a sign that some background web development work on a new site is ongoing. -- Josiah Mugambi 2011/1/5 Preston Odera <podera_2002@yahoo.com>
Dear All
Has Kenya Police Website been Hacked? When you go to the website you get "Fedora Test Page"
More hacking could be going on we need professionals to get more trainings on latest trends on hacking in order to secure our websites.
I organize courses in the region to help manage the manage the manace.
Appropriate courses coming up are detailed below:-.
* K-Ninety East Africa Ltd.*
Courses January 2011 to September 2011
(The courses can also be organized in-house . Contact us for more details)
JANUARY 2011 24th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS
27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS
FEBRUARY 2011
31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
7th – 11th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
7th – 11th Nairobi INFORMATION SECURITY GOVERNANCE & IS AUDIT
14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
14th – 15th Nairobi ENTERPRISE WIDE RISK MANAGEMENT
21st – 25th Nairobi SANS SEC401-SECURITY ESSENTIALS BOOTCAMP STYLE
28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS ESSENTIALS
MARCH 2011
28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
APRIL 2011
11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM
13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM
25th – 29th Nairobi ISO 27001 LEAD AUDITOR + EXAMS (RABQSA or IRCA)
MAY 2011
9th – 12th Nairobi IS AUDIT RISK & SECURITY COURSE
16th – 18th Nairobi ACTION CENTERED INTERNAL AUDIT MANAGEMENT
16th –20th Nairobi CISSP CBK COURSE (ISC)
28th Nairobi CISSP EXAMINATION (ISC)2 * *
JUNE 2011
6th – 10th Nairobi CERTIFIED BUSINESS CONTINUITY MANAGER (BCI Accredited)
13th - 17th Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
20th – 24th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
* *
JULY 2011
25th – 27th Kisumu INFORMATION SECURITY MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS
AUGUST 2011
1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS
4th – 5th Nairobi PRINCE2 PRACTITIONER + EXAMS
22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP
SEPTEMBER 2011
21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
26th – 29th Nairobi PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
* *
* For more details contact:*
* *
* Preston *
K-Ninety East Africa Ltd.
P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 Cell +254 722 77 14 78
Email* podera@k90ea.com <training@k-90ea.com>***
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jmugambi@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jmugambi%40gmail.com

It's been hacked and defaced again -- Josiah Mugambi 2011/1/5 Josiah Mugambi <jmugambi@gmail.com>
Not 100% sure of the facts but the original site was apparently running on a windows based web server, it got defaced. Possibly the fedora apache test page is a sign that some background web development work on a new site is ongoing.
-- Josiah Mugambi
2011/1/5 Preston Odera <podera_2002@yahoo.com>
Dear All
Has Kenya Police Website been Hacked? When you go to the website you get "Fedora Test Page"
More hacking could be going on we need professionals to get more trainings on latest trends on hacking in order to secure our websites.
I organize courses in the region to help manage the manage the manace.
Appropriate courses coming up are detailed below:-.
* K-Ninety East Africa Ltd.*
Courses January 2011 to September 2011
(The courses can also be organized in-house . Contact us for more details)
JANUARY 2011 24th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS
27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS
FEBRUARY 2011
31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
7th – 11th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
7th – 11th Nairobi INFORMATION SECURITY GOVERNANCE & IS AUDIT
14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
14th – 15th Nairobi ENTERPRISE WIDE RISK MANAGEMENT
21st – 25th Nairobi SANS SEC401-SECURITY ESSENTIALS BOOTCAMP STYLE
28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS ESSENTIALS
MARCH 2011
28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
APRIL 2011
11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM
13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM
25th – 29th Nairobi ISO 27001 LEAD AUDITOR + EXAMS (RABQSA or IRCA)
MAY 2011
9th – 12th Nairobi IS AUDIT RISK & SECURITY COURSE
16th – 18th Nairobi ACTION CENTERED INTERNAL AUDIT MANAGEMENT
16th –20th Nairobi CISSP CBK COURSE (ISC)
28th Nairobi CISSP EXAMINATION (ISC)2 * *
JUNE 2011
6th – 10th Nairobi CERTIFIED BUSINESS CONTINUITY MANAGER (BCI Accredited)
13th - 17th Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
20th – 24th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
* *
JULY 2011
25th – 27th Kisumu INFORMATION SECURITY MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS
AUGUST 2011
1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS
4th – 5th Nairobi PRINCE2 PRACTITIONER + EXAMS
22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP
SEPTEMBER 2011
21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
26th – 29th Nairobi PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
* *
* For more details contact:*
* *
* Preston *
K-Ninety East Africa Ltd.
P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 Cell +254 722 77 14 78
Email* podera@k90ea.com <training@k-90ea.com>***
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jmugambi@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jmugambi%40gmail.com

A kenic search gives the info below about kenyapolice.go.ke. What seems sinister is the name servers - *puck.nether.net* WM Domain InformationQuery:kenyapolice.go.keStatus:ActiveCreated:18 Jun 2004 Modified:27 Dec 2009Expires:18 Jun 2013Name Servers:hazina.treasury.go.ke puck.nether.net Registrar InformationRegistrar Name:Government Information Technology Services Registrant:International Name:Kenya Police HeadquartersInternational Address:Vigilance House P.O. Box 30083 NAIROBI 00100 KE Phone Number:+254 20 335142 Admin Contact:International Name:Government Information TechnologyInternational Organisation:Ministry of FinanceInternational Address:Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address:gits@TREASURY.GO.KEPhone Number:+254-20-2252299 Technical Contact:International Name:Government Information TechnologyInternational Organisation:Ministry of FinanceInternational Address:Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address:gits@TREASURY.GO.KEPhone Number:+254-20-2252299 Billing Contact:International Name:Commissioner of PoliceInternational Address:Vigilance House, Harambee Avenue P.O. Box 30083 NAIROBI 00100 KE Email Address:kenyapolice@TREASURY.GO.KEPhone Number:+254 20 333641 On Wed, Jan 5, 2011 at 7:51 PM, Josiah Mugambi <jmugambi@gmail.com> wrote:
It's been hacked and defaced again -- Josiah Mugambi
2011/1/5 Josiah Mugambi <jmugambi@gmail.com>
Not 100% sure of the facts but the original site was apparently running on
a windows based web server, it got defaced. Possibly the fedora apache test page is a sign that some background web development work on a new site is ongoing.
-- Josiah Mugambi
2011/1/5 Preston Odera <podera_2002@yahoo.com>
Dear All
Has Kenya Police Website been Hacked? When you go to the website you get "Fedora Test Page"
More hacking could be going on we need professionals to get more trainings on latest trends on hacking in order to secure our websites.
I organize courses in the region to help manage the manage the manace.
Appropriate courses coming up are detailed below:-.
* K-Ninety East Africa Ltd.*
Courses January 2011 to September 2011
(The courses can also be organized in-house . Contact us for more details)
JANUARY 2011 24th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS
27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS
FEBRUARY 2011
31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
7th – 11th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
7th – 11th Nairobi INFORMATION SECURITY GOVERNANCE & IS AUDIT
14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
14th – 15th Nairobi ENTERPRISE WIDE RISK MANAGEMENT
21st – 25th Nairobi SANS SEC401-SECURITY ESSENTIALS BOOTCAMP STYLE
28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS ESSENTIALS
MARCH 2011
28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
APRIL 2011
11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM
13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM
25th – 29th Nairobi ISO 27001 LEAD AUDITOR + EXAMS (RABQSA or IRCA)
MAY 2011
9th – 12th Nairobi IS AUDIT RISK & SECURITY COURSE
16th – 18th Nairobi ACTION CENTERED INTERNAL AUDIT MANAGEMENT
16th –20th Nairobi CISSP CBK COURSE (ISC)
28th Nairobi CISSP EXAMINATION (ISC)2 * *
JUNE 2011
6th – 10th Nairobi CERTIFIED BUSINESS CONTINUITY MANAGER (BCI Accredited)
13th - 17th Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
20th – 24th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
* *
JULY 2011
25th – 27th Kisumu INFORMATION SECURITY MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS
AUGUST 2011
1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS
4th – 5th Nairobi PRINCE2 PRACTITIONER + EXAMS
22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP
SEPTEMBER 2011
21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
26th – 29th Nairobi PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
* *
* For more details contact:*
* *
* Preston *
K-Ninety East Africa Ltd.
P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 Cell +254 722 77 14 78
Email* podera@k90ea.com <training@k-90ea.com>***
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jmugambi@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jmugambi%40gmail.com
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: wainaina.mungai@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/wainaina.mungai%40gmail...

What about puck.nether.net's registrar, DeathStar.org! [shiver] Kind regards, *Muchiri* Nyaggah Director @muchiri +254 722 506400 Semacraft.com On Wed, Jan 5, 2011 at 9:52 PM, Wainaina Mungai <wainaina.mungai@gmail.com>wrote:
A kenic search gives the info below about kenyapolice.go.ke. What seems sinister is the name servers - *puck.nether.net*
WM
Domain Information Query: kenyapolice.go.keStatus: ActiveCreated: 18 Jun 2004Modified: 27 Dec 2009Expires: 18 Jun 2013Name Servers: hazina.treasury.go.ke puck.nether.net Registrar Information Registrar Name: Government Information Technology Services Registrant: International Name: Kenya Police HeadquartersInternational Address: Vigilance House P.O. Box 30083 NAIROBI 00100 KE Phone Number: +254 20 335142 Admin Contact:International Name: Government Information TechnologyInternational Organisation: Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Technical Contact:International Name: Government Information TechnologyInternational Organisation:Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Billing Contact:International Name: Commissioner of PoliceInternational Address:Vigilance House, Harambee Avenue P.O. Box 30083 NAIROBI 00100 KE Email Address: kenyapolice@TREASURY.GO.KEPhone Number: +254 20 333641 On Wed, Jan 5, 2011 at 7:51 PM, Josiah Mugambi <jmugambi@gmail.com> wrote:
It's been hacked and defaced again -- Josiah Mugambi
2011/1/5 Josiah Mugambi <jmugambi@gmail.com>
Not 100% sure of the facts but the original site was apparently running on
a windows based web server, it got defaced. Possibly the fedora apache test page is a sign that some background web development work on a new site is ongoing.
-- Josiah Mugambi
2011/1/5 Preston Odera <podera_2002@yahoo.com>
Dear All
Has Kenya Police Website been Hacked? When you go to the website you get
"Fedora Test Page"
More hacking could be going on we need professionals to get more trainings on latest trends on hacking in order to secure our websites.
I organize courses in the region to help manage the manage the manace.
Appropriate courses coming up are detailed below:-.
* K-Ninety East Africa Ltd.*
Courses January 2011 to September 2011
(The courses can also be organized in-house . Contact us for more details)
JANUARY 2011 24th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS
27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS
FEBRUARY 2011
31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
7th – 11th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
7th – 11th Nairobi INFORMATION SECURITY GOVERNANCE & IS AUDIT
14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
14th – 15th Nairobi ENTERPRISE WIDE RISK MANAGEMENT
21st – 25th Nairobi SANS SEC401-SECURITY ESSENTIALS BOOTCAMP STYLE
28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS ESSENTIALS
MARCH 2011
28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
APRIL 2011
11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM
13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM
25th – 29th Nairobi ISO 27001 LEAD AUDITOR + EXAMS (RABQSA or IRCA)
MAY 2011
9th – 12th Nairobi IS AUDIT RISK & SECURITY COURSE
16th – 18th Nairobi ACTION CENTERED INTERNAL AUDIT MANAGEMENT
16th –20th Nairobi CISSP CBK COURSE (ISC)
28th Nairobi CISSP EXAMINATION (ISC)2 * *
JUNE 2011
6th – 10th Nairobi CERTIFIED BUSINESS CONTINUITY MANAGER (BCI Accredited)
13th - 17th Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
20th – 24th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
* *
JULY 2011
25th – 27th Kisumu INFORMATION SECURITY MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS
AUGUST 2011
1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS
4th – 5th Nairobi PRINCE2 PRACTITIONER + EXAMS
22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP
SEPTEMBER 2011
21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
26th – 29th Nairobi PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
* *
* For more details contact:*
* *
* Preston *
K-Ninety East Africa Ltd.
P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 Cell +254 722 77 14 78
Email* podera@k90ea.com <training@k-90ea.com>***
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jmugambi@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jmugambi%40gmail.com
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: wainaina.mungai@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/wainaina.mungai%40gmail...
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: muchiri@semacraft.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/muchiri%40semacraft.com

Joe and Wash have answered the query on puck.nether.net......but i would like to hear more on DeathStar.org ;-) On Wed, Jan 5, 2011 at 10:53 PM, Muchiri Nyaggah <muchiri@semacraft.com>wrote:
What about puck.nether.net's registrar, DeathStar.org! [shiver]
Kind regards,
*Muchiri* Nyaggah
Director
@muchiri
+254 722 506400
Semacraft.com
On Wed, Jan 5, 2011 at 9:52 PM, Wainaina Mungai <wainaina.mungai@gmail.com
wrote:
A kenic search gives the info below about kenyapolice.go.ke. What seems sinister is the name servers - *puck.nether.net*
WM
Domain Information Query: kenyapolice.go.keStatus: ActiveCreated: 18 Jun 2004Modified: 27 Dec 2009Expires: 18 Jun 2013Name Servers: hazina.treasury.go.ke puck.nether.net Registrar Information Registrar Name: Government Information Technology Services Registrant: International Name: Kenya Police HeadquartersInternational Address: Vigilance House P.O. Box 30083 NAIROBI 00100 KE Phone Number: +254 20 335142 Admin Contact:International Name:Government Information TechnologyInternational Organisation: Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Technical Contact:International Name: Government Information TechnologyInternational Organisation:Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Billing Contact:International Name: Commissioner of PoliceInternational Address: Vigilance House, Harambee Avenue P.O. Box 30083 NAIROBI 00100 KE Email Address: kenyapolice@TREASURY.GO.KEPhone Number: +254 20 333641 On Wed, Jan 5, 2011 at 7:51 PM, Josiah Mugambi <jmugambi@gmail.com>wrote:
It's been hacked and defaced again -- Josiah Mugambi
2011/1/5 Josiah Mugambi <jmugambi@gmail.com>
Not 100% sure of the facts but the original site was apparently running
on a windows based web server, it got defaced. Possibly the fedora apache test page is a sign that some background web development work on a new site is ongoing.
-- Josiah Mugambi
2011/1/5 Preston Odera <podera_2002@yahoo.com>
Dear All
Has Kenya Police Website been Hacked? When you go to the website you get "Fedora Test Page"
More hacking could be going on we need professionals to get more trainings on latest trends on hacking in order to secure our websites.
I organize courses in the region to help manage the manage the manace.
Appropriate courses coming up are detailed below:-.
* K-Ninety East Africa Ltd.*
Courses January 2011 to September 2011
(The courses can also be organized in-house . Contact us for more details)
JANUARY 2011 24th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS
27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS
FEBRUARY 2011
31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
7th – 11th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
7th – 11th Nairobi INFORMATION SECURITY GOVERNANCE & IS AUDIT
14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
14th – 15th Nairobi ENTERPRISE WIDE RISK MANAGEMENT
21st – 25th Nairobi SANS SEC401-SECURITY ESSENTIALS BOOTCAMP STYLE
28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS ESSENTIALS
MARCH 2011
28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
APRIL 2011
11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM
13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM
25th – 29th Nairobi ISO 27001 LEAD AUDITOR + EXAMS (RABQSA or IRCA)
MAY 2011
9th – 12th Nairobi IS AUDIT RISK & SECURITY COURSE
16th – 18th Nairobi ACTION CENTERED INTERNAL AUDIT MANAGEMENT
16th –20th Nairobi CISSP CBK COURSE (ISC)
28th Nairobi CISSP EXAMINATION (ISC)2 * *
JUNE 2011
6th – 10th Nairobi CERTIFIED BUSINESS CONTINUITY MANAGER (BCI Accredited)
13th - 17th Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
20th – 24th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
* *
JULY 2011
25th – 27th Kisumu INFORMATION SECURITY MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS
AUGUST 2011
1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS
4th – 5th Nairobi PRINCE2 PRACTITIONER + EXAMS
22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP
SEPTEMBER 2011
21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
26th – 29th Nairobi PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
* *
* For more details contact:*
* *
* Preston *
K-Ninety East Africa Ltd.
P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 Cell +254 722 77 14 78
Email* podera@k90ea.com <training@k-90ea.com>***
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jmugambi@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jmugambi%40gmail.com
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: wainaina.mungai@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/wainaina.mungai%40gmail...
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: muchiri@semacraft.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/muchiri%40semacraft.com

Really there should not be much doubt as to whether the Police website was hacked or not. Some insights here http://www.theonlinekenyan.com/2011/01/kenya-police-website-hacked.html for those who did not follow. The police website hacking even became quite the buzz and humor with Kenyans on twitter in the last 48 hours (search the hash tag #KenyaPolicePassword). More seriously though, it should have been common sense for the police to simply bring down the site as they figured out a way out of the security breach (Delink DNS pointer in worst case scenario). For about 48 hours the site remained an embarrassing exhibit -international embarrassment to the police (and Kenya government). Regarding the name servers, why go so much beyond the primary one - hazina.treasury.go.ke ? Regards Kieti On Wed, Jan 5, 2011 at 11:35 PM, Wainaina Mungai <wainaina.mungai@gmail.com>wrote:
Joe and Wash have answered the query on puck.nether.net......but i would like to hear more on DeathStar.org ;-)
On Wed, Jan 5, 2011 at 10:53 PM, Muchiri Nyaggah <muchiri@semacraft.com>wrote:
What about puck.nether.net's registrar, DeathStar.org! [shiver]
Kind regards,
*Muchiri* Nyaggah
Director
@muchiri
+254 722 506400
Semacraft.com
On Wed, Jan 5, 2011 at 9:52 PM, Wainaina Mungai < wainaina.mungai@gmail.com> wrote:
A kenic search gives the info below about kenyapolice.go.ke. What seems sinister is the name servers - *puck.nether.net*
WM
Domain Information Query: kenyapolice.go.keStatus: ActiveCreated: 18 Jun 2004Modified: 27 Dec 2009Expires: 18 Jun 2013Name Servers: hazina.treasury.go.ke puck.nether.net Registrar Information Registrar Name: Government Information Technology Services Registrant: International Name: Kenya Police HeadquartersInternational Address: Vigilance House P.O. Box 30083 NAIROBI 00100 KE Phone Number: +254 20 335142 Admin Contact:International Name:Government Information TechnologyInternational Organisation: Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Technical Contact:International Name: Government Information TechnologyInternational Organisation:Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Billing Contact:International Name: Commissioner of PoliceInternational Address: Vigilance House, Harambee Avenue P.O. Box 30083 NAIROBI 00100 KE Email Address: kenyapolice@TREASURY.GO.KEPhone Number: +254 20 333641 On Wed, Jan 5, 2011 at 7:51 PM, Josiah Mugambi <jmugambi@gmail.com>wrote:
It's been hacked and defaced again -- Josiah Mugambi
2011/1/5 Josiah Mugambi <jmugambi@gmail.com>
Not 100% sure of the facts but the original site was apparently running
on a windows based web server, it got defaced. Possibly the fedora apache test page is a sign that some background web development work on a new site is ongoing.
-- Josiah Mugambi
2011/1/5 Preston Odera <podera_2002@yahoo.com>
Dear All
Has Kenya Police Website been Hacked? When you go to the website you get "Fedora Test Page"
More hacking could be going on we need professionals to get more trainings on latest trends on hacking in order to secure our websites.
I organize courses in the region to help manage the manage the manace.
Appropriate courses coming up are detailed below:-.
* K-Ninety East Africa Ltd.*
Courses January 2011 to September 2011
(The courses can also be organized in-house . Contact us for more details)
JANUARY 2011 24th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS
27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS
FEBRUARY 2011
31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
7th – 11th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
7th – 11th Nairobi INFORMATION SECURITY GOVERNANCE & IS AUDIT
14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
14th – 15th Nairobi ENTERPRISE WIDE RISK MANAGEMENT
21st – 25th Nairobi SANS SEC401-SECURITY ESSENTIALS BOOTCAMP STYLE
28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS ESSENTIALS
MARCH 2011
28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
APRIL 2011
11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM
13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM
25th – 29th Nairobi ISO 27001 LEAD AUDITOR + EXAMS (RABQSA or IRCA)
MAY 2011
9th – 12th Nairobi IS AUDIT RISK & SECURITY COURSE
16th – 18th Nairobi ACTION CENTERED INTERNAL AUDIT MANAGEMENT
16th –20th Nairobi CISSP CBK COURSE (ISC)
28th Nairobi CISSP EXAMINATION (ISC)2 * *
JUNE 2011
6th – 10th Nairobi CERTIFIED BUSINESS CONTINUITY MANAGER (BCI Accredited)
13th - 17th Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
20th – 24th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
* *
JULY 2011
25th – 27th Kisumu INFORMATION SECURITY MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS
AUGUST 2011
1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS
4th – 5th Nairobi PRINCE2 PRACTITIONER + EXAMS
22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP
SEPTEMBER 2011
21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
26th – 29th Nairobi PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
* *
* For more details contact:*
* *
* Preston *
K-Ninety East Africa Ltd.
P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 Cell +254 722 77 14 78
Email* podera@k90ea.com <training@k-90ea.com>***
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jmugambi@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jmugambi%40gmail.com
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: wainaina.mungai@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/wainaina.mungai%40gmail...
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: muchiri@semacraft.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/muchiri%40semacraft.com
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jkieti@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jkieti%40gmail.com
-- My Blog - www.gmeltdown.com ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' Keep on doing what you know is right ...

The nameservers were simply an entertaining detour. Deathstar.org is a very old domain and like someone pointed out, in the 90's coming up with creative eyebrow-raising names was cool. Now we read anything in everything :) Is there overlap between what the ICT board does and the GITS department at Treasury where public sector ICT policy is concerned? Who would ultimately be responsible for responding to breaches of this nature on government IT infrastructure? Kind regards, *Muchiri* Nyaggah Director @muchiri +254 722 506400 Semacraft.com On Thu, Jan 6, 2011 at 9:31 AM, John Kieti <jkieti@gmail.com> wrote:
Really there should not be much doubt as to whether the Police website was hacked or not. Some insights here http://www.theonlinekenyan.com/2011/01/kenya-police-website-hacked.html for those who did not follow. The police website hacking even became quite the buzz and humor with Kenyans on twitter in the last 48 hours (search the hash tag #KenyaPolicePassword).
More seriously though, it should have been common sense for the police to simply bring down the site as they figured out a way out of the security breach (Delink DNS pointer in worst case scenario). For about 48 hours the site remained an embarrassing exhibit -international embarrassment to the police (and Kenya government).
Regarding the name servers, why go so much beyond the primary one - hazina.treasury.go.ke ?
Regards Kieti
On Wed, Jan 5, 2011 at 11:35 PM, Wainaina Mungai < wainaina.mungai@gmail.com> wrote:
Joe and Wash have answered the query on puck.nether.net......but i would like to hear more on DeathStar.org ;-)
On Wed, Jan 5, 2011 at 10:53 PM, Muchiri Nyaggah <muchiri@semacraft.com>wrote:
What about puck.nether.net's registrar, DeathStar.org! [shiver]
Kind regards,
*Muchiri* Nyaggah
Director
@muchiri
+254 722 506400
Semacraft.com
On Wed, Jan 5, 2011 at 9:52 PM, Wainaina Mungai < wainaina.mungai@gmail.com> wrote:
A kenic search gives the info below about kenyapolice.go.ke. What seems sinister is the name servers - *puck.nether.net*
WM
Domain Information Query: kenyapolice.go.keStatus: ActiveCreated: 18 Jun 2004Modified: 27 Dec 2009Expires: 18 Jun 2013Name Servers: hazina.treasury.go.ke puck.nether.net Registrar Information Registrar Name: Government Information Technology Services Registrant: International Name: Kenya Police HeadquartersInternational Address: Vigilance House P.O. Box 30083 NAIROBI 00100 KE Phone Number: +254 20 335142 Admin Contact:International Name:Government Information TechnologyInternational Organisation: Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Technical Contact:International Name: Government Information TechnologyInternational Organisation:Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Billing Contact:International Name: Commissioner of PoliceInternational Address: Vigilance House, Harambee Avenue P.O. Box 30083 NAIROBI 00100 KE Email Address: kenyapolice@TREASURY.GO.KEPhone Number: +254 20 333641 On Wed, Jan 5, 2011 at 7:51 PM, Josiah Mugambi <jmugambi@gmail.com>wrote:
It's been hacked and defaced again -- Josiah Mugambi
2011/1/5 Josiah Mugambi <jmugambi@gmail.com>
Not 100% sure of the facts but the original site was apparently running
on a windows based web server, it got defaced. Possibly the fedora apache test page is a sign that some background web development work on a new site is ongoing.
-- Josiah Mugambi
2011/1/5 Preston Odera <podera_2002@yahoo.com>
> Dear All > > Has Kenya Police Website been Hacked? When you go to the website you > get > "Fedora Test Page" > > More hacking could be going on we need professionals to get more > trainings on latest trends on hacking in order to secure our websites. > > I organize courses in the region to help manage the manage the > manace. > > Appropriate courses coming up are detailed below:-. > > > * K-Ninety East Africa Ltd.* > > Courses January 2011 to September 2011 > > > (The courses can also be organized in-house . Contact us > for more details) > > > > > > JANUARY 2011 > 24th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS > > 27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS > > > > FEBRUARY 2011 > > 31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC > INVESTIGATOR + Exam (EC-Council) > > 7th – 11th Nairobi CERTIFIED ETHICAL HACKER + > EXAM (EC-Council) > > 7th – 11th Nairobi INFORMATION SECURITY > GOVERNANCE & IS AUDIT > > 14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + > EXAMS > > 14th – 15th Nairobi ENTERPRISE WIDE RISK > MANAGEMENT > > 21st – 25th Nairobi SANS SEC401-SECURITY > ESSENTIALS BOOTCAMP STYLE > > 28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS > ESSENTIALS > > > > MARCH 2011 > > 28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI > accredited) > > > > APRIL 2011 > > 11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM > > 13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM > > > 25th – 29th Nairobi ISO 27001 LEAD AUDITOR + > EXAMS (RABQSA or IRCA) > > > > MAY 2011 > > 9th – 12th Nairobi IS AUDIT RISK & SECURITY > COURSE > > 16th – 18th Nairobi ACTION CENTERED INTERNAL > AUDIT MANAGEMENT > > 16th –20th Nairobi CISSP CBK COURSE (ISC) > > 28th Nairobi CISSP EXAMINATION (ISC)2 * > * > > > > JUNE 2011 > > 6th – 10th Nairobi CERTIFIED BUSINESS > CONTINUITY MANAGER (BCI Accredited) > > 13th - 17th Nairobi COMPUTER HACKING FORENSIC > INVESTIGATOR + Exam (EC-Council) > > 20th – 24th Nairobi CERTIFIED ETHICAL HACKER + > EXAM (EC-Council) > > * * > > JULY 2011 > > 25th – 27th Kisumu INFORMATION SECURITY > MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS > > > > AUGUST 2011 > > 1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS > > 4th – 5th Nairobi PRINCE2 PRACTITIONER + > EXAMS > > 22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP > > > > SEPTEMBER 2011 > > 21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + > EXAMS > > 26th – 29th Nairobi PROJECT MANAGEMENT > PROFESSIONAL (PMI accredited) > > * * > > * For more details contact:* > > * > * > > * > Preston > * > > K-Ninety East Africa Ltd. > > P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 > Cell +254 722 77 14 78 > > Email* podera@k90ea.com <training@k-90ea.com>*** > > > > > > _______________________________________________ > kictanet mailing list > kictanet@lists.kictanet.or.ke > http://lists.kictanet.or.ke/mailman/listinfo/kictanet > > This message was sent to: jmugambi@gmail.com > Unsubscribe or change your options at > http://lists.kictanet.or.ke/mailman/options/kictanet/jmugambi%40gmail.com > >
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: wainaina.mungai@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/wainaina.mungai%40gmail...
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: muchiri@semacraft.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/muchiri%40semacraft.com
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jkieti@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jkieti%40gmail.com
-- My Blog - www.gmeltdown.com ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' Keep on doing what you know is right ...
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: muchiri@semacraft.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/muchiri%40semacraft.com

On Thu, Jan 6, 2011 at 11:23 AM, Muchiri Nyaggah <muchiri@semacraft.com>wrote:
The nameservers were simply an entertaining detour. Deathstar.org is a very old domain and like someone pointed out, in the 90's coming up with creative eyebrow-raising names was cool. Now we read anything in everything :)
Is there overlap between what the ICT board does and the GITS department at Treasury where public sector ICT policy is concerned? Who would ultimately be responsible for responding to breaches of this nature on government IT infrastructure?
Wait a moment! Was the server where www.kenyapolice.go.ke was hosted on govt IT infrastructure? gw# dig www.kenyapolice.go.ke +short 62.24.109.6 gw# dig -x 62.24.109.6 +short g-3-3-0-core-as12455.telkom.co.ke. So, the IP is obtained from Telkom. A whois lookup shows the block in which it belongs as not delegated so I can't tell whether the website is hosted on Telkom's equipment or govt equipment. It would be nice to know who has custody of the server that was compromised, in order to answer the question posed by Muchiri on "Who would ultimately be responsible for responding to breaches of this nature on government IT infrastructure?" Looking at the Kenya Police website, I see nothing important in it that can affect govt operations but I could be shortsighted. Police are not known to be that IT Savvy as to be able to operate/interact with Netizens. They don't conduct any business online - not even those e-mail addresses listed on their website. Most Police officers are computer illiterate. Maybe that is one of those things we need to be looking at, now that there is focus on the Police/govt. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

On Thu, Jan 6, 2011 at 12:00 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
On Thu, Jan 6, 2011 at 11:23 AM, Muchiri Nyaggah <muchiri@semacraft.com> wrote:
The nameservers were simply an entertaining detour.
and puck has provided free secondary service for a long time as well, nothing sinister there. Deathstar.org is a
very old domain and like someone pointed out, in the 90's coming up with creative eyebrow-raising names was cool. Now we read anything in everything :) Is there overlap between what the ICT board does and the GITS department at Treasury where public sector ICT policy is concerned? Who would ultimately be responsible for responding to breaches of this nature on government IT infrastructure?
I've no idea.
Wait a moment! Was the server where www.kenyapolice.go.ke was hosted on govt IT infrastructure?
gw# dig www.kenyapolice.go.ke +short 62.24.109.6 gw# dig -x 62.24.109.6 +short g-3-3-0-core-as12455.telkom.co.ke.
So, the IP is obtained from Telkom. A whois lookup shows the block in which it belongs as not delegated so I can't tell whether the website is hosted on Telkom's equipment or govt equipment.
Of course, it should be listed as assigned to a customer, UNLESS, it's counted as part of Telkom hosting infrastructure, which is quite possible from this dig: $dig 109.24.62.in-addr.arpa ; <<>> DiG 9.3.2 <<>> 109.24.62.in-addr.arpa ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1141 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;109.24.62.in-addr.arpa. IN A ;; AUTHORITY SECTION: 109.24.62.in-addr.arpa. 10800 IN SOA dns1.jambonet.co.ke. hostmaster.jambonet.co.ke. 2008082827 10800 3600 1209600 172800 ;; Query time: 156 msec ;; SERVER: 196.200.16.2#53(196.200.16.2) ;; WHEN: Thu Jan 06 17:23:36 2011 ;; MSG SIZE rcvd: 106
It would be nice to know who has custody of the server that was compromised, in order to answer the question posed by Muchiri on "Who would ultimately be responsible for responding to breaches of this nature on government IT infrastructure?"
Call it Telkom IMHO. -- Cheers, McTim "A name indicates what we seek. An address indicates where it is. A route indicates how we get there." Jon Postel

Just wondering, has anyone from the Kenya Police come out and made a statement around this? It's scary that the Kenya Police ( a day later) had no clue that their site had been hacked! Edwin -----Original Message----- From: kictanet-bounces+eonchari=lynxbits.com@lists.kictanet.or.ke [mailto:kictanet-bounces+eonchari=lynxbits.com@lists.kictanet.or.ke] On Behalf Of McTim Sent: Thursday, January 06, 2011 5:31 PM To: Edwin Cc: KICTAnet ICT Policy Discussions Subject: Re: [kictanet] Has Kenya Police Website been Hacked? On Thu, Jan 6, 2011 at 12:00 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
On Thu, Jan 6, 2011 at 11:23 AM, Muchiri Nyaggah <muchiri@semacraft.com> wrote:
The nameservers were simply an entertaining detour.
and puck has provided free secondary service for a long time as well, nothing sinister there. Deathstar.org is a
very old domain and like someone pointed out, in the 90's coming up with creative eyebrow-raising names was cool. Now we read anything in everything :) Is there overlap between what the ICT board does and the GITS department at Treasury where public sector ICT policy is concerned? Who would ultimately be responsible for responding to breaches of this nature on government IT infrastructure?
I've no idea.
Wait a moment! Was the server where www.kenyapolice.go.ke was hosted on govt IT infrastructure?
gw# dig www.kenyapolice.go.ke +short 62.24.109.6 gw# dig -x 62.24.109.6 +short g-3-3-0-core-as12455.telkom.co.ke.
So, the IP is obtained from Telkom. A whois lookup shows the block in which it belongs as not delegated so I can't tell whether the website is hosted on Telkom's equipment or govt equipment.
Of course, it should be listed as assigned to a customer, UNLESS, it's counted as part of Telkom hosting infrastructure, which is quite possible from this dig: $dig 109.24.62.in-addr.arpa ; <<>> DiG 9.3.2 <<>> 109.24.62.in-addr.arpa ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1141 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;109.24.62.in-addr.arpa. IN A ;; AUTHORITY SECTION: 109.24.62.in-addr.arpa. 10800 IN SOA dns1.jambonet.co.ke. hostmaster.jambonet.co.ke. 2008082827 10800 3600 1209600 172800 ;; Query time: 156 msec ;; SERVER: 196.200.16.2#53(196.200.16.2) ;; WHEN: Thu Jan 06 17:23:36 2011 ;; MSG SIZE rcvd: 106
It would be nice to know who has custody of the server that was compromised, in order to answer the question posed by Muchiri on "Who would ultimately be responsible for responding to breaches of this nature on government IT infrastructure?"
Call it Telkom IMHO. -- Cheers, McTim "A name indicates what we seek. An address indicates where it is. A route indicates how we get there." Jon Postel _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet This message was sent to: eonchari@lynxbits.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/eonchari%40lynxbits.com

Have you tried a KENIC lookout for any other .go.ke domain? Personally I find nothing sinister with puck.nether.net. The domain names created on the Internet are crafted mostly out of the imagination of the people behind them. When the Internet started and there was only .com, .net, .org (I don;t remember if there was another in that TLD space) only your creativity with {domain|host}names won you accolades with your peers. puck.nether must be from such creativity/imaginativity:) On Wed, Jan 5, 2011 at 9:52 PM, Wainaina Mungai <wainaina.mungai@gmail.com>wrote:
A kenic search gives the info below about kenyapolice.go.ke. What seems sinister is the name servers - *puck.nether.net*
WM
Domain Information Query: kenyapolice.go.keStatus: ActiveCreated: 18 Jun 2004Modified: 27 Dec 2009Expires: 18 Jun 2013Name Servers: hazina.treasury.go.ke puck.nether.net Registrar Information Registrar Name: Government Information Technology Services Registrant: International Name: Kenya Police HeadquartersInternational Address: Vigilance House P.O. Box 30083 NAIROBI 00100 KE Phone Number: +254 20 335142 Admin Contact:International Name: Government Information TechnologyInternational Organisation: Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Technical Contact:International Name: Government Information TechnologyInternational Organisation:Ministry of FinanceInternational Address: Treasury Building Harambee Avenue P.O. Box 30007 NAIROBI 00100 KE Email Address: gits@TREASURY.GO.KE Phone Number:+254-20-2252299 Billing Contact:International Name: Commissioner of PoliceInternational Address:Vigilance House, Harambee Avenue P.O. Box 30083 NAIROBI 00100 KE Email Address: kenyapolice@TREASURY.GO.KEPhone Number: +254 20 333641 On Wed, Jan 5, 2011 at 7:51 PM, Josiah Mugambi <jmugambi@gmail.com> wrote:
It's been hacked and defaced again -- Josiah Mugambi
2011/1/5 Josiah Mugambi <jmugambi@gmail.com>
Not 100% sure of the facts but the original site was apparently running on
a windows based web server, it got defaced. Possibly the fedora apache test page is a sign that some background web development work on a new site is ongoing.
-- Josiah Mugambi
2011/1/5 Preston Odera <podera_2002@yahoo.com>
Dear All
Has Kenya Police Website been Hacked? When you go to the website you get
"Fedora Test Page"
More hacking could be going on we need professionals to get more trainings on latest trends on hacking in order to secure our websites.
I organize courses in the region to help manage the manage the manace.
Appropriate courses coming up are detailed below:-.
* K-Ninety East Africa Ltd.*
Courses January 2011 to September 2011
(The courses can also be organized in-house . Contact us for more details)
JANUARY 2011 24th – 26th Nairobi PRINCE2 FOUNDATION + EXAMS
27th – 28th Nairobi PRINCE2 PRACTITIONER + EXAMS
FEBRUARY 2011
31st Jan – 4th Feb Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
7th – 11th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
7th – 11th Nairobi INFORMATION SECURITY GOVERNANCE & IS AUDIT
14th – 16th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
14th – 15th Nairobi ENTERPRISE WIDE RISK MANAGEMENT
21st – 25th Nairobi SANS SEC401-SECURITY ESSENTIALS BOOTCAMP STYLE
28th – 5th Nairobi SANS SEC408 - COMPUTER FORENSICS ESSENTIALS
MARCH 2011
28th – 31st Mombasa PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
APRIL 2011
11th – 12th Nairobi VIRTUALIZATION COURSE + EXAM
13th – 14th Nairobi CLOUD COMPUTING COURSE + EXAM
25th – 29th Nairobi ISO 27001 LEAD AUDITOR + EXAMS (RABQSA or IRCA)
MAY 2011
9th – 12th Nairobi IS AUDIT RISK & SECURITY COURSE
16th – 18th Nairobi ACTION CENTERED INTERNAL AUDIT MANAGEMENT
16th –20th Nairobi CISSP CBK COURSE (ISC)
28th Nairobi CISSP EXAMINATION (ISC)2 * *
JUNE 2011
6th – 10th Nairobi CERTIFIED BUSINESS CONTINUITY MANAGER (BCI Accredited)
13th - 17th Nairobi COMPUTER HACKING FORENSIC INVESTIGATOR + Exam (EC-Council)
20th – 24th Nairobi CERTIFIED ETHICAL HACKER + EXAM (EC-Council)
* *
JULY 2011
25th – 27th Kisumu INFORMATION SECURITY MANAGEMENT BASED ON ISO/IEC 27002 + EXAMS
AUGUST 2011
1st – 3rd Nairobi PRINCE2 FOUNDATION + EXAMS
4th – 5th Nairobi PRINCE2 PRACTITIONER + EXAMS
22nd – 27th Nairobi INFORMATION SECURITY BOOTCAMP
SEPTEMBER 2011
21st – 23th Nairobi ITIL V3 FOUNDATION COURSE + EXAMS
26th – 29th Nairobi PROJECT MANAGEMENT PROFESSIONAL (PMI accredited)
* *
* For more details contact:*
* *
* Preston *
K-Ninety East Africa Ltd.
P.O. Box 3894-00100 Nairobi Tel: +254 20 6008316 or +254 20 3544352 Cell +254 722 77 14 78
Email* podera@k90ea.com <training@k-90ea.com>***
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: jmugambi@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/jmugambi%40gmail.com
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: wainaina.mungai@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/wainaina.mungai%40gmail...
_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke http://lists.kictanet.or.ke/mailman/listinfo/kictanet
This message was sent to: odhiambo@gmail.com Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/options/kictanet/odhiambo%40gmail.com
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!
participants (10)
-
Alice Munyua
-
Edwin Onchari
-
John Kieti
-
Josiah Mugambi
-
McTim
-
Muchiri Nyaggah
-
ngethe.kariuki2007@yahoo.co.uk
-
Odhiambo Washington
-
Preston Odera
-
Wainaina Mungai