Listeners,<br><br>I think the first thing would be to commend the innovation we are experiencing in our country. Who would have thought we would have such great ICT solutions today. Just two years ago you could not check about your voter registration credentials by sending a text message! (now to 3007), or get yellow pages access from 5991! We all agree that this comes with it's security limitations but this should be viewed as an opportunity to build secure systems that our government can benefit from. If we push it back to government the process of securing public online privileged information may take too long to get done. This now opens a new avenue for the private sector and perhaps a joint venture with government to build this secure systems we desire.<br>
<br>In my humble view we should not be asking the question why this or why that but how can we make this better and more secure!<br><br>On E-crime in Kenya I think this is a growing concern because typical e-crime would happen over the internet, accessed via a computer. In our situation internet access is mostly on the go. (On your hand held) You have access to your virtual bank (MPesa, MKesho, Zap, Yu Cash and others) and real bank. Should this interaction be compromised huge losses would follow. I have not yet heard of any groups or persons who have successfully compromised this systems but it's only a matter of time. However there are other forms of e-crime that is happening in the country where people harassed through their mobile phone or social networking sites. For more information on the local situation contact Alice on the forum to get access to the cyber crime against women in Kenya report.<br>
<br><br><br>Sammy.<br><br><br><br><div class="gmail_quote">On Tue, Jul 13, 2010 at 8:36 AM, wesley kirinya <span dir="ltr"><<a href="mailto:kiriinya2000@yahoo.com">kiriinya2000@yahoo.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font: inherit;" valign="top"><br> i<span><span>)<span>
</span></span></span>Sim card registration<br>1. Where is this database located? Is it at the private companies (Telecos) or some government office?<br><div> </div>2. Do the police have the hardware and software to cheaply, efficiently and conviniently access the data? Who within the police authorizes access to such data? What measures are there to prevent an authorized person viewing the data from abusing it because now the person not only sees numbers, but knows the names and residential addresses of people contacting a particular number.<br>
<br>3. Why give an ID number and birth info, yet this birth info was used when getting the ID? It seems the govenment needs to put it's data in order.<br><br>--- On <b>Tue, 7/13/10, Judy Okite <i><<a href="mailto:judyokite@gmail.com" target="_blank">judyokite@gmail.com</a>></i></b> wrote:<br>
<blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><br>From: Judy Okite <<a href="mailto:judyokite@gmail.com" target="_blank">judyokite@gmail.com</a>><br>Subject: [Skunkworks]
Kenya IGF 2010, Discussions :Day 7 of 8 Theme:E-Crime, Online Privacy & Data Security- Continuation<br>To: "KICTAnet ICT Policy Discussions" <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>>, "Skunkworks forum" <<a href="mailto:skunkworks@lists.my.co.ke" target="_blank">skunkworks@lists.my.co.ke</a>><br>
Date: Tuesday, July 13, 2010, 6:47 AM<div><div></div><div class="h5"><br><br><div><p class="MsoNormal">Good Morning,</p>
<p class="MsoNormal">As we near, closing these discussions we, feel free to
contribute to the former threads by clicking on the correct subject/title.</p>
<p class="MsoNormal">Today we continue with , </p>
<p></p><ul><li><span><span>a)<span>
</span></span></span>E-crime- situation in Kenya</li><li><span><span>b)<span>
</span></span></span>E- Voting- where Kenya is @</li></ul><p></p>
<p class="MsoNormal" style="margin-left: 0.25in;">And today we add </p>
<p><span><span>c)<span> c) </span></span></span>Online privacy and data security</p>
<p> i<span><span>)<span>
</span></span></span>Sim card registration- <span> </span>on the 21<sup>st</sup> June 2010 the
government through <span> </span>CCK(Communication
Commission of Kenya) declared it mandatory for all mobile users to register
their Sim cards</p>
<p class="MsoNormal" style="margin-left: 0.25in;">More info: <a rel="nofollow" href="http://www.cck.go.ke/news/2010/news_21june2010.html" target="_blank">http://www.cck.go.ke/news/2010/news_21june2010.html</a></p>
<p class="MsoNormal" style="margin-left: 0.25in;"><span><span style="color: rgb(51, 51, 51);">“The exercise is aimed at safeguarding the public against
acts of insecurity, including the wide spread threats posed by terrorism, drug
trafficking, money laundering, extortion, fraud, hate messages, and incitement
that are now wide spread throughout the world, “said the Minister for
Information and Communication.</span></span><span><span style="color: rgb(51, 51, 51);"></span></span></p>
<p class="MsoNormal"><span><span style="color: rgb(51, 51, 51);">Currently
we have 18million (I stand to be corrected ) mobile users in Kenya, In these
forms, one has to give their residential area , their identity card number,
their birth information etc… That is a whole lot of data on Kenyans… in short ,
a grand database! From yesterday’s discussions we saw that currently we have no
LAW<span> </span>to guard this database.</span></span></p>
<p class="MsoNormal" style="margin-left: 0.25in;"><span><span style="color: rgb(51, 51, 51);">Q. What will stop the Authority from using my details
wrongly?</span></span></p>
<p class="MsoNormal"><span><span style="color: rgb(51, 51, 51);">Q.
What happens if I don’t register by 31<sup>st</sup> of July? I will be
disconnected? Under what LAW?</span></span></p>
<p><span><span style="color: rgb(51, 51, 51);"> </span></span></p>
<p class="MsoNormal"><span style="color: rgb(51, 51, 51);"><br>
</span>ii) When I send a SMS to 3007 with an ID card number, it returns with
voter details, full names, place of voting and voter card number of the ID card
holder, however,</p>
<p class="MsoNormal">1, the system put in place, does not verify in any way that
it’s the real owner of the ID card, that has sent this query?</p>
<p><span><span>a)<span>
</span></span></span>Can this data be manipulated? Then what?</p>
<p class="MsoNormal">A question, on top of my head, with all these ongoing, what
creates demand for LAW?(if there is anything, like that)</p>
<p class="MsoNormal" style="margin-left: 0.25in;"> </p>
<p class="MsoNormal" style="margin-left: 0.25in;">Your queries, comments, inputs,
corrections are welcome!</p>
<p class="MsoNormal" style="margin-left: 0.25in;"> </p>
<p class="MsoNormal" style="margin-left: 0.25in;">Kind Regards,</p><div><br></div><div><br></div><div><br></div><div><br>-- <br>“To live is to choose. But to choose well, you must know who you are and what you stand for, where you want to go and why you want to get there.” Kofi Annan<br>
</div>
</div><br></div></div>-----Inline Attachment Follows-----<br><br><div>_______________________________________________<br>Skunkworks mailing list<br><a href="http://mc/compose?to=Skunkworks@lists.my.co.ke" target="_blank">Skunkworks@lists.my.co.ke</a><br>
<a href="http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks" target="_blank">http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks</a><br>------------<br>Skunkworks Server donations spreadsheet<br><a href="http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1fbjAwOUE&hl=en" target="_blank">http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1fbjAwOUE&hl=en</a><br>
------------<br>Skunkworks Rules<br><a href="http://my.co.ke/phpbb/viewtopic.php?f=24&t=94" target="_blank">http://my.co.ke/phpbb/viewtopic.php?f=24&t=94</a><br>------------<br>Other services @ <a href="http://my.co.ke" target="_blank">http://my.co.ke</a></div>
</blockquote></td></tr></tbody></table><br>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="http://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">http://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
This message was sent to: <a href="mailto:sam.gatere@gmail.com">sam.gatere@gmail.com</a><br>
Unsubscribe or change your options at <a href="http://lists.kictanet.or.ke/mailman/options/kictanet/sam.gatere%40gmail.com" target="_blank">http://lists.kictanet.or.ke/mailman/options/kictanet/sam.gatere%40gmail.com</a><br>
<br></blockquote></div><br>