<div dir="ltr">Was someones toes stepped on? The initial link does not work...</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Mar 9, 2013 at 12:34 PM, S.M. Muraya <span dir="ltr"><<a href="mailto:murigi.muraya@gmail.com" target="_blank">murigi.muraya@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">A KE.xpert says the IEBC multiplication error was caused by a "faulty SQL join".<div><br></div>
<div><a href="https://twitter.com/paul_mungai/status/310334406168571904" target="_blank">https://twitter.com/paul_mungai/status/310334406168571904</a><br>
</div><div><br></div><div>Something to do with 8 candidates and a multiplication of 8....</div></div><div class="gmail_extra"><br><br><div class="gmail_quote"><div><div class="h5">On Sat, Mar 9, 2013 at 11:58 AM, Adam Nelson <span dir="ltr"><<a href="mailto:adam@varud.com" target="_blank">adam@varud.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">It doesn't really matter in terms of the election itself because the system was abandoned and was never intended to be the definitive basis of results. <div>
<br></div><div>However, saying that attacks were stopped in real time is already bad news. The fact that he was changing passwords and taking the "SQL server" off the network (I presume he means on some sort of public or unsafe network) just days before the election is pretty bad. The system could have been hijacked before he set up the IDS and did that work. It sounds like he did the best job possible but a penetration test is just one of many layers needed for security so this really does appear to be a textbook example of a failed implementation of an important technology system.</div>
<div><br></div><div>However, many best practices and lessons could come out of this. It almost seems like a book-length project.</div><div><br></div><div>-Adam</div><div class="gmail_extra"><br><div class="gmail_quote">
<div><div>
On Sat, Mar 9, 2013 at 11:47 AM, Rebecca Wanjiku <span dir="ltr"><<a href="mailto:rebeccawanjiku@yahoo.com" target="_blank">rebeccawanjiku@yahoo.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>
<table cellspacing="0" cellpadding="0" border="0"><tbody><tr><td valign="top" style="font:inherit"><div>Just in case you were wondering whether it was hacked, the person who did the pen test and monitored the network says no.<br>
<br>Read the views......<br><br><a href="http://www.wanjiku.co.ke/2013/03/was-the-iebc-network-compromise-an-insiders-view/" target="_blank">http://www.wanjiku.co.ke/2013/03/was-the-iebc-network-compromise-an-insiders-view/</a><br>
<br></div></td></tr></tbody></table><br></div></div>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/adam%40varud.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/adam%40varud.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div><br></div></div>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br></div></div>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/murigi.muraya%40gmail.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/murigi.muraya%40gmail.com</a><div class="im">
<br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</div></blockquote></div><br></div>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/krsnjo%40gmail.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/krsnjo%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div><div><b><pre style="text-align:left;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-top:3px;padding-right:20px;padding-bottom:3px;padding-left:20px;background-color:rgb(247,247,247);margin-top:22px;margin-right:0px;margin-bottom:22px;margin-left:0px">
<span style="font-family:arial;font-weight:normal;white-space:normal"><span style="font-family:'Trebuchet MS'">If the human brain were so simple that we could understand it, we would be so simple that we couldn't. - </span><span style="font-family:'Trebuchet MS'">Emerson M. Pugh</span></span></pre>
</b></div></div><div><span style="font-family:'Trebuchet MS'"><br></span></div><br>
</div>