<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;">@Judy, <br><br>in general technology tends to moves ahead of its security implications...and so all these MPESA/MKESHO/ and/or eCommerce in general will always happen before laws and regulations catch up. It only becomes an issue if such laws take a relatively longer period to happen. Within the Kenyan Context so far.<br><br>1. Kenya Comm. Amendement Act (2009) - done (good for ecommerce)<br>2. Data Protection Bill/Act - NOT YET DONE -wonder @ what level this is<br>3. Freedom of Information Bill/Act - NOT YET DONE - wonder @ what level this is<br><br>These three laws are complimentary within the ICT/IS security domain and must eventually be delivered sooner rather than later...<br><br>walu.<br>nb: visit www.isaca.or.ke and see more of what ISACA-Kenya are trying to do in contributing in this security space...<br> <br><br>--- On <b>Mon, 7/12/10,
Judy Okite <i><judyokite@gmail.com></i></b> wrote:<br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><br>From: Judy Okite <judyokite@gmail.com><br>Subject: Re: [kictanet] Kenya IGF 2010, Discussions :Day 6 of 8 Theme:E-Crime, Online Privacy & Data Security.<br>To: jwalu@yahoo.com<br>Cc: "KICTAnet ICT Policy Discussions" <kictanet@lists.kictanet.or.ke><br>Date: Monday, July 12, 2010, 3:36 PM<br><br><div id="yiv1238984224">Solomon,<div><br></div><div>thank you....and I agree with you, irregardless of how many players may have to be brought into it...we need to laws to protect the consumers as well as the service providers.</div><div><br></div>
<div>when we talk about e-crime, am sure that its not just about MPESA/ZAP...lets take for example a personal experience, given to us by Michuki, earlier last week...</div><div>and I quote</div><div><br></div><div><span class="Apple-style-span" style="font-family: arial,sans-serif; font-size: 13px; border-collapse: collapse;">"Well if you may, let me indulge you with my personal experience with my<br>
bank regarding online transactions.<br><br>My bank approached me with a new service called email authorization.<br>Which means that i can send an email to authorize transactions from my<br>account. Well as exciting as this may sound, i asked how would they be<br>
in a position to validate that am the sender. At that point the bank had<br>no way to do so.<br><br>All the same, i went ahead and said, i have a PGP key, would you be<br>willing to exchange keys with me so that you have a way of validating<br>
that am the sender i.e encrypt my messages or digitally sign them for<br>security purposes. At that point it was clear that such a feature did<br>not exist.<br><br>I have to give credit to my bank for taking the bold step of introducing<br>
such a service. I would however have been even more glad if they<br>supported digital email signatures or PGP for email authorizations. But<br>then again, how many people actually use this?."</span></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br>
</span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;">the introduction to online services, is GREAT! it could be towards the right direction, .....BUT are we jumping before we leap? again I ask, are we being oblivious to the implications?</span></font></div>
<div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;">Kind Regards,<br>
</span></font><br><div class="gmail_quote">On Mon, Jul 12, 2010 at 1:18 PM, Solomon Mburu Kamau <span dir="ltr"><<a rel="nofollow" ymailto="mailto:solo.mburu@gmail.com" target="_blank" href="/mc/compose?to=solo.mburu@gmail.com">solo.mburu@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br><br><div class="gmail_quote"><div>On 12 July 2010 12:54, Judy Okite <span dir="ltr"><<a rel="nofollow" ymailto="mailto:judyokite@gmail.com" target="_blank" href="/mc/compose?to=judyokite@gmail.com">judyokite@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Wesley and Solomon,<div><br></div><div>Thank you for your contributions, what are we saying? these platforms are here with us and we are using them, we have fallen victims,</div><div><br></div><div>whichever way that has been dealt with outside, the public forum, is upto the person's concerned? </div>
<div><br></div><div>do you you wait until you become a victim, before you know which law applies or will apply?</div><div><br></div><div> However, that said, MPESA/ZAP/SOKOTELE was/has been in operation for a while, the KCA 2009 never captured it or atleast the IT part of it. why?</div>
</blockquote></div><div><br style="font-family: georgia,serif;"><span style="font-family: georgia,serif;">You've touched on a classic mobile money transfer (SOKOTELE) which was not as vibrant as is successor, ZAP!</span><br style="font-family: georgia,serif;">
<span style="font-family: georgia,serif;">To answer your question, I think the KCA 2009 was developed as a need for supply and not demand. By this, I mean that the regulator saw it wise to have law that governs the use of technology and its related programmes. One of the most important thing here is to understand there is a greater need to look at the dynamics of the platforms, and see ways in which to integrate them well into the laws of the land.</span><br style="font-family: georgia,serif;">
<br style="font-family: georgia,serif;"><span style="font-family: georgia,serif;">When you are a victim of scam through the mobile money transfer, the providers must give ways in which a person can have the money back. </span><br style="font-family: georgia,serif;">
<span style="font-family: georgia,serif;">Since the law is already in place, then once becoming a victim, should have a reprieve, though the providers are better placed to inform the public on how to go about!</span> <br>
</div><div><div></div><div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><br></div><div>floor is open....</div><div><br></div><div>Kind Regards,</div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><div><div></div><div>
Mon, Jul 12, 2010 at 12:11 PM, Solomon Mburu Kamau <span dir="ltr"><<a rel="nofollow" ymailto="mailto:solo.mburu@gmail.com" target="_blank" href="/mc/compose?to=solo.mburu@gmail.com">solo.mburu@gmail.com</a>></span> wrote:</div></div><div class="gmail_quote">
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div>Dear All,<br><br>Inline responses<br><br><div class="gmail_quote">
<div>On 12 July 2010 09:02, wesley kirinya <span dir="ltr"><<a rel="nofollow" ymailto="mailto:kiriinya2000@yahoo.com" target="_blank" href="/mc/compose?to=kiriinya2000@yahoo.com">kiriinya2000@yahoo.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit; -x-system-font: none;" valign="top"><br><span style="color: black;"><span><span> b) </span></span></span>E-voting<br>1. A human being only has 10 finger prints which cannot be replaced. I think the public deserves to know how secure their finger prints are in the e-system.<br>
<br>2. Is Kenya's election problem really an identity problem? Those are problems where I would expect fingerprints to be captured. IMHO I think it's a problem of non-existing people voting by ballot boxes being tampered with. Technology can help with electronic capturing of the cast votes. I've not heard much about this. If the problem is not really identity but non-existing ppl voting, then stealing votes is still here with us...<br>
<br>8~)<br><br><br>--- On <b>Mon, 7/12/10, Judy Okite <i><<a rel="nofollow" ymailto="mailto:judyokite@gmail.com" target="_blank" href="/mc/compose?to=judyokite@gmail.com">judyokite@gmail.com</a>></i></b> wrote:<br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;">
<br>From: Judy Okite <<a rel="nofollow" ymailto="mailto:judyokite@gmail.com" target="_blank" href="/mc/compose?to=judyokite@gmail.com">judyokite@gmail.com</a>><br>Subject: [kictanet] Kenya IGF 2010, Discussions :Day 6 of 8 Theme:E-Crime, Online Privacy & Data Security.<br>
To: <a rel="nofollow" ymailto="mailto:kiriinya2000@yahoo.com" target="_blank" href="/mc/compose?to=kiriinya2000@yahoo.com">kiriinya2000@yahoo.com</a><br>Cc: "KICTAnet ICT Policy Discussions" <<a rel="nofollow" ymailto="mailto:kictanet@lists.kictanet.or.ke" target="_blank" href="/mc/compose?to=kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>><br>
Date: Monday, July 12, 2010, 1:45 AM<div><div></div><div><br><br><div><p class="MsoNormal">Good Morning, </p><p class="MsoNormal"><br></p><p class="MsoNormal"> I hope that we<span>
</span>all,<span> </span>had a restful weekend! unless you were @ the campaign trails :-)</p>
<p class="MsoNormal">To the FIFA world cup2010 winners,SPAIN, CONGRATULATIONS!!</p>
<p class="MsoNormal">To the rest, lets keep an eye on 2014…yet another chance to
better our skills <span style="font-family: Wingdings;"><span>J</span></span></p><p class="MsoNormal"><span style="font-family: Wingdings;"><span><br></span></span></p>
<p class="MsoNormal">As we continue with our discussions, your comments and
contributions to the former threads are welcome, just respond to <span> </span>the correct subject/title.</p>
<p class="MsoNormal">The next two days (Monday & Tuesday) we will be
discussing:</p>
<p><span><span>a)<span> a) </span></span></span>e-crime-</p>
<p class="MsoNormal">Definition:<span><span style="color: black;"> E-crime is where a computer or
other electronic communications device (eg mobile phone) is used to commit an
offence.</span></span></p>
<p class="MsoNormal"><span><span style="color: black;">Looking at this definition, the question on top of my head, <span> </span>is how many transactions do we do through our
mobile phones, in Kenya.</span></span></p>
<p><span style="color: black;"><span>a)<span>
</span></span></span>MPESA, ZAP- transfer of money</p>
<p class="MsoNormal" style="margin-left: 0.25in;">To my knowledge (I stand to be
corrected) MPESA /ZAP still rides under the umbrella of Telecommunication,
banking and IT.</p>
<p class="MsoNormal" style="margin-left: 0.25in;">Lately, you can pay your
electricity bill, water bill etc…through this medium.</p>
<p class="MsoNormal" style="margin-left: 0.25in;">Their usage has increased and we have
branded it innovation, creativity, but are we being oblivious of the
implications? </p></div></div></div></blockquote></td></tr></tbody></table></blockquote></div><div><br style="font-family: georgia,serif;"><span style="font-family: georgia,serif;">When these 'innovations' were developed here in Kenya, we were apprehensive. First, it was because we were not sure whether such platforms were worthy emulating or using because, of obvious reasons such as security among others. Years later, the same problem still exists because of lack of mass education and capacity development for their use from the providers and regulator.<br>
Their are ramifications which are likely to be great since there are scams around alleged to be coming from the providers. This is just the tip of the iceberg. There are those who have fallen victims to the scams and a lot of money gotten lost. <br>
As the platforms become advanced, so are the thugs. </span><br></div><div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><table border="0" cellpadding="0" cellspacing="0">
<tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit; -x-system-font: none;" valign="top"><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><div><div><div>
<p class="MsoNormal" style="margin-left: 0.25in;">Where or who do you approach in
loss of your money? </p>
<p class="MsoNormal" style="margin-left: 0.25in;">KPLC or Safaricom/Zain?etc and many other services that we are paying for using MPESA/ZAP</p></div></div></div></blockquote></td></tr></tbody></table></blockquote></div><div>
<font face="georgia,serif">In normal situation, one should approach their respective provider in case of a loss of money. If for example, I was to pay KShs. 2,000 for my electricity using MPESA or ZAP, and typed a wrong account, KPLC will is not the custodian of these platforms, but Safaricom and Zain respectively!</font> <br>
</div><div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit; -x-system-font: none;" valign="top">
<blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><div><div><div>
<p class="MsoNormal" style="margin-left: 0.25in;"> </p>
<p><span style="color: black;"><span>b)<span> b) </span></span></span>E-voting</p>
<p>Definition: <span><span style="color: black;"> </span></span><span><span style="color: black;">is
an election system that allows a voter to record his or her secure and secret
ballot electronically.</span></span></p>
<p class="MsoNormal" style="margin-left: 0.25in;">Currently we have a pilot project
on e-voting that will first be tested, during the referendum on 4th August 2010.there are <span style="font-family: Arial; line-height: 21px;">at least 1.5 million new voters in the 18 EVR pilot constituencies.</span></p>
<p class="MsoNormal" style="margin-left: 0.25in;"><span style="font-family: Arial; line-height: 21px;">more info: <a rel="nofollow" target="_blank" href="http://www.standardmedia.co.ke/InsidePage.php?id=2000007579&cid=4&ttl=Kenya%20enters%20era%20of%20electronic%20voting">http://www.standardmedia.co.ke/InsidePage.php?id=2000007579&cid=4&ttl=Kenya%20enters%20era%20of%20electronic%20voting</a></span></p>
<p class="MsoNormal">In the recent days, we have experienced instances of
‘computer error’ within the Ministry of Finance and Education, what happens when
the same happens with the IIEC?</p>
<p class="MsoNormal">What do we have in place as a country, to ensure that this
does not happen </p><p class="MsoNormal">and if it does, does IIEC have the technical know-how?</p><p class="MsoNormal">and as
Kenyans, are we assured that such a case will have ‘e-evidence’ on how and when
and where the ‘computer error’ took place?</p></div></div></div></blockquote></td></tr></tbody></table></blockquote></div><div><br><span style="font-family: georgia,serif;">I'm still going by what Wesley put forth. Without capacity development, the end-users are 'bombarded' with pilot programs without involving them. Ideally, it would work 'well' if the voters were given enough education on how to register, follow-up and vote using electronic voter registry (platform). Security is also another thing that requires much attention since there is no assurance that the e-voting is secure and free from any hitch. </span> <br>
</div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit; -x-system-font: none;" valign="top">
<blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><div><div><div><p class="MsoNormal"><br></p>
<p class="MsoNormal">I hope that these two are bound to see our inboxes full as
it touches on each and every one of us.</p>
<p class="MsoNormal">Your thoughts, corrections, inputs, queries, reactions are
welcome!</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Kind Regards, </p><br>-- <br>“To live is to choose. But to choose well, you must know who you are and what you stand for, where you want to go and why you want to get there.” Kofi Annan<br>
</div><br></div></div>-----Inline Attachment Follows-----<br><br><div>_______________________________________________<br>kictanet mailing list<br><a rel="nofollow" target="_blank" href="http://mc/compose?to=kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a rel="nofollow" target="_blank" href="http://lists.kictanet.or.ke/mailman/listinfo/kictanet">http://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br><br>This message was sent to: <a rel="nofollow" target="_blank" href="http://mc/compose?to=kiriinya2000@yahoo.com">kiriinya2000@yahoo.com</a><br>
Unsubscribe or change your options at <a rel="nofollow" target="_blank" href="http://lists.kictanet.or.ke/mailman/options/kictanet/kiriinya2000%40yahoo.com">http://lists.kictanet.or.ke/mailman/options/kictanet/kiriinya2000%40yahoo.com</a><br>
</div></blockquote></td></tr></tbody></table><br>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a rel="nofollow" ymailto="mailto:kictanet@lists.kictanet.or.ke" target="_blank" href="/mc/compose?to=kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a rel="nofollow" target="_blank" href="http://lists.kictanet.or.ke/mailman/listinfo/kictanet">http://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br></div>
This message was sent to: <a rel="nofollow" ymailto="mailto:solo.mburu@gmail.com" target="_blank" href="/mc/compose?to=solo.mburu@gmail.com">solo.mburu@gmail.com</a><br>
Unsubscribe or change your options at <a rel="nofollow" target="_blank" href="http://lists.kictanet.or.ke/mailman/options/kictanet/solo.mburu%40gmail.com">http://lists.kictanet.or.ke/mailman/options/kictanet/solo.mburu%40gmail.com</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Solomon Mbũrũ Kamau<br><br>*****************************************************<br>Man is a gregarious animal and enjoys agreement as cows will graze all the same way to the side of a hill!<br>
<br>AND<br><br>It is better to die in dignity than in the ignomity of ambiguous generosity! <br><br><a rel="nofollow" target="_blank" href="http://smiley2.wordpress.com">http://smiley2.wordpress.com</a><br><a rel="nofollow" target="_blank" href="http://mburu.sikika.co.ke">http://mburu.sikika.co.ke</a><br>
<br><br><br><br><br><br>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a rel="nofollow" ymailto="mailto:kictanet@lists.kictanet.or.ke" target="_blank" href="/mc/compose?to=kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a rel="nofollow" target="_blank" href="http://lists.kictanet.or.ke/mailman/listinfo/kictanet">http://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br></div></div>
This message was sent to: <a rel="nofollow" ymailto="mailto:judyokite@gmail.com" target="_blank" href="/mc/compose?to=judyokite@gmail.com">judyokite@gmail.com</a><br>
Unsubscribe or change your options at <a rel="nofollow" target="_blank" href="http://lists.kictanet.or.ke/mailman/options/kictanet/judyokite%40gmail.com">http://lists.kictanet.or.ke/mailman/options/kictanet/judyokite%40gmail.com</a><br>
<br></blockquote></div><div><br><br clear="all"><br>-- <br>“To live is to choose. But to choose well, you must know who you are and what you stand for, where you want to go and why you want to get there.” Kofi Annan<br>
</div></div>
</blockquote></div></div></div><div><div></div><div><br><br clear="all"><br>-- <br>Solomon Mbũrũ Kamau<br><br>*****************************************************<br>Man is a gregarious animal and enjoys agreement as cows will graze all the same way to the side of a hill!<br>
<br>AND<br><br>It is better to die in dignity than in the ignomity of ambiguous generosity! <br><br><a rel="nofollow" target="_blank" href="http://smiley2.wordpress.com">http://smiley2.wordpress.com</a><br><a rel="nofollow" target="_blank" href="http://mburu.sikika.co.ke">http://mburu.sikika.co.ke</a><br>
<br><br><br><br><br><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>“To live is to choose. But to choose well, you must know who you are and what you stand for, where you want to go and why you want to get there.” Kofi Annan<br>
</div>
</div><br>-----Inline Attachment Follows-----<br><br><div class="plainMail">_______________________________________________<br>kictanet mailing list<br><a ymailto="mailto:kictanet@lists.kictanet.or.ke" href="/mc/compose?to=kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br><a href="http://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">http://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br><br>This message was sent to: <a ymailto="mailto:jwalu@yahoo.com" href="/mc/compose?to=jwalu@yahoo.com">jwalu@yahoo.com</a><br>Unsubscribe or change your options at <a href="http://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com" target="_blank">http://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com</a><br></div></blockquote></td></tr></table><br>