Hey Michuki,<div><br></div><div>Nice to see a thoughtful response. I will be commenting in greater detail soon, but just for the meantime here's some more food for thought.</div><div><br></div><div>A group calling themselves "Rwandan-Hackers" compromised the Standard Media website yesterday and published online a list of KTN Live members which included username, encrypted password and email addresses, a snippet follows:</div>
<div><br></div><ol style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:48px;color:rgb(172,172,172);font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:21px;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(248,248,248)">
<li class="li1" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de1" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
�� � � � � � � � � � � � � � � � HACKED BY RWANDAN HACKED</div></li><li class="li2" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de2" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
�</div></li><li class="li1" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de1" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
� � � � � � � � � � � � � � � � � �<a href="http://rwandan-hackers.blogspot.com/">http://rwandan-hackers.blogspot.com/</a> �</div></li><li class="li2" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial">
<div class="de2" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
�</div></li><li class="li1" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de1" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
Target:<a href="http://www.standardmedia.co.ke/">http://www.standardmedia.co.ke/</a></div></li><li class="li2" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de2" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
Date:09/02/2012 18:27:43</div></li><li class="li1" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de1" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
DB Detection:MySQL (Auto Detected)</div></li><li class="li2" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de2" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
Method:GET</div></li><li class="li1" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de1" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
Type:Integer (Auto Detected)</div></li><li class="li2" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de2" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
Data Base:eastand_xp</div></li><li class="li1" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de1" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
Table:ktnlive_members</div></li><li class="li2" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de2" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
Total Rows:831</div></li><li class="li1" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de1" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
�</div></li><li class="li2" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de2" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
username � � � �password � � � �email</div></li><li class="li1" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial"><div class="de1" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
007finanz � � � d3ce7658a5c2c9f66790ed0f5d4970ad � � � �<a href="mailto:007finanz@gmail.com">007finanz@gmail.com</a></div></li><li class="li2" style="background-image:initial;background-color:rgb(255,255,255);background-repeat:initial initial">
<div class="de2" style="padding-top:0px;padding-right:5px;padding-bottom:0px;padding-left:5px;vertical-align:top;color:rgb(0,0,0);border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);margin-top:0px;margin-right:0px;margin-bottom:0px;background-image:initial;background-color:rgb(255,255,255);line-height:21px;font-family:Consolas,Menlo,Monaco,'Lucida Console','Liberation Mono','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace,serif;background-repeat:initial initial">
05mark �77a6bc8aedf55b28f38794e2d5b0d3a1 � � � �<a href="mailto:muniukm@yahoo.com">muniukm@yahoo.com</a></div></li></ol><div><br></div><div>The complete list with close to a thousand names is at:�<a href="http://pastebin.com/QCtP3AxH">http://pastebin.com/QCtP3AxH</a></div>
<div>Best regards,</div><div><br></div><div>Brian</div><div><br><div class="gmail_quote">On Sat, Feb 11, 2012 at 9:04 PM, Michuki Mwangi <span dir="ltr"><<a href="mailto:michuki@swiftkenya.com">michuki@swiftkenya.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Brian, et al,<br>
<div class="im"><br>
<br>
On 2/11/12 12:03 PM, Brian Munyao Longwe wrote:<br>
> Today's(last night's) hacking of the Toyota Kenya website as evidenced<br>
> by Moses Kemibaro's screenshot - <a href="http://t.co/w7RDDjfP" target="_blank">http://t.co/w7RDDjfP</a> - should serve as<br>
> a wake up call to CxOs and any organization that has a web presence or<br>
> online resources.<br>
><br>
<br>
</div>While i agree with you. I would like to subject this to discussion.<br>
<br>
1. There no business critical information sufficient to warrant the<br>
investment into securing the website. In reality, its not like they<br>
broke into the new toyota show room on Waiyaki way and got away with the<br>
any car(s).<br>
<br>
2. I would bet that the folks at Toyota don't know what percentage of<br>
their monthly sales are courtesy of their website.<br>
<br>
3. The website is hosted at <a href="http://www.softlayer.com/" target="_blank">http://www.softlayer.com/</a> so this means its<br>
an outsourced solution. In this case who is complacent a. the hosting<br>
company (they provide the infrastructure/service or b. the<br>
developer/website designer. The reason being I do not believe that its<br>
in toyota's core business to be concerned about their website security.<br>
Unless someone makes them see the business sense of it.<br>
<div class="im"><br>
> Especially as it comes hardly 2 weeks after the shameful hacking of over<br>
> 103 government websites by an amateur Indonesian techie. In this<br>
> particular case it turns out that all 103 sites were hosted on the same<br>
> physical server - a malpractice, as far as web-hosting and system<br>
> administration goes.<br>
<br>
</div>Am not 100% in agreement here.<br>
<br>
1. It not uncommon to have 103 low traffic websites on a single server<br>
going by the computing resources available today. After all its what the<br>
world of Virtualization and virtual Web hosting is all about.<br>
<br>
IMHO am pretty pleased by fact that;<br>
<br>
1. We have 103 Government websites - so we are making baby steps.<br>
<br>
2. It also means that we have a resourceful sysadmin who understands<br>
virtual web-hosting and is capable of hosting 103 website on one IP<br>
address (that we didn't know until this incident).<br>
<div class="im"><br>
> It is clear that the increase in online threats and<br>
> cyber-security issues has a lot to do with Kenya's improved connectivity<br>
> to the global Internet - with 3 submarine fiber optic cables opening the<br>
> country and sub-region to cyber-criminals and pranksters alike.<br>
><br>
<br>
</div>+1<br>
<br>
However, its important that we note that the websites in discussion were<br>
hosted in two different places i.e US and Kenya.<br>
<br>
IMHO to mainstream security the websites will have to mean more than<br>
just online or web presence. For Govt websites for instance if the KRA<br>
website was hacked - we can indeed expect delays in customs clearance of<br>
goods, loss of revenue collection, etc. Currently it is a matter of<br>
public image. Therefore considering our brevity of mind, it will soon be<br>
back to business as usual.<br>
<br>
Similarly, for many local companies, websites are like a company<br>
brochure + directory service (no pun intended). If you think am out of<br>
my mind compare <a href="http://www.toyotaea.com" target="_blank">www.toyotaea.com</a> (the hacked site) and <a href="http://toyota.com" target="_blank">toyota.com</a>.<br>
Clearly one is a brochure and the other is a salesperson. I almost<br>
obvious that if the <a href="http://www.toyota.com" target="_blank">www.toyota.com</a> website had a 4 hour outage, it would<br>
affect their sales target for the week. Because they would be one<br>
salesperson less.<br>
<br>
Taking into consideration that most of these companies have a PR agency<br>
that will issue a very reassuring statement after such an incident for a<br>
standard retainer.<br>
<br>
In summary, considering that our websites are non-critical to the<br>
organization/business operations and continuity. Why should we be<br>
investing so much or to phrase it as Brian did why should CxO's care?.<br>
<br>
Convince me!<br>
<br>
Mich.<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>Brian Munyao Longwe<br>e-mail: <a href="mailto:blongwe@gmail.com" target="_blank">blongwe@gmail.com</a><br>cell:� +254715964281<br>blog : <a href="http://zinjlog.blogspot.com" target="_blank">http://zinjlog.blogspot.com</a><br>
meta-blog: <a href="http://mashilingi.blogspot.com" target="_blank">http://mashilingi.blogspot.com</a><br>
</div>