<div dir="ltr"><div>Found this interesting as well...food for thought!</div><div> </div><div><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Josphat Karanja</b> <span dir="ltr"><<a href="mailto:karanjajf@gmail.com">karanjajf@gmail.com</a>></span><br>
Date: Wed, Aug 28, 2013 at 10:35 PM<br>Subject: [Skunkworks] FBI and DHS Concerned About Android Vulnerabilities<br>To: Skunkworks forum <<a href="mailto:skunkworks@lists.my.co.ke">skunkworks@lists.my.co.ke</a>>, <a href="mailto:skunkworks@my.co.ke">skunkworks@my.co.ke</a><br>
<br><br><p dir="ltr">found this insightful</p><p dir="ltr">*****************************************************************************</p><p dir="ltr">TOP OF THE NEWS<br> --FBI and DHS Concerned About Android Vulnerabilities<br>
(August 26, 2013)<br> According to an unclassified US government document, the FBI and the<br> Department of Homeland Security (DHS) are concerned about security flaws<br> in the Android operating system. Specifically, the document outlines<br>
concerns about threats faced by law enforcement officers and officials<br> who are using devices running older versions of the operating system.<br> The document says, "Android is the world's most widely used mobile<br>
operating system and continues to be a primary target for malware<br> attacks due to its open source architecture." It also offers mitigation<br> advice for certain types of threats.<br><a href="http://news.cnet.com/8301-1009_3-57600105-83/android-security-holes-worry-fbi-dhs/" target="_blank"><font color="#0066cc">http://news.cnet.com/8301-</font><font color="#0066cc">1009_3-57600105-83/android-</font><font color="#0066cc">security-holes-worry-fbi-dhs/</font></a><br>
<a href="http://info.publicintelligence.net/DHS-FBI-AndroidThreats.pdf" target="_blank"><font color="#0066cc">http://info.</font><font color="#0066cc">publicintelligence.net/DHS-</font><font color="#0066cc">FBI-AndroidThreats.pdf</font></a> <br>
[Editor's Note (Murray): Ironic. DHS has favored Android over iOS for<br> exactly this reason. That the government has consistently used its<br> buying power to favor "open" over "secure" is at least partially<br>
</p><br>_______________________________________________<br> skunkworks mailing list<br><a href="mailto:skunkworks@lists.my.co.ke"><font color="#0066cc">skunkworks@lists.my.co.ke</font></a><br> ------------<br> List info, subscribe/unsubscribe<br>
<a href="http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks" target="_blank"><font color="#0066cc">http://orion.my.co.ke/cgi-bin/</font><font color="#0066cc">mailman/listinfo/skunkworks</font></a><br> ------------<br>
<br> Skunkworks Rules<br><a href="http://my.co.ke/phpbb/viewtopic.php?f=24&t=94" target="_blank"><font color="#0066cc">http://my.co.ke/phpbb/</font><font color="#0066cc">viewtopic.php?f=24&t=94</font></a><br> ------------<br>
Other services @ <a href="http://my.co.ke/" target="_blank"><font color="#0066cc">http://my.co.ke</font></a><br></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Aug 27, 2013 at 9:16 AM, Evans Ikua <span dir="ltr"><<a href="mailto:ikua.evans@gmail.com" target="_blank">ikua.evans@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Well, I see all this as food for thought.<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">
<div><div class="h5">On Mon, Aug 26, 2013 at 11:42 PM, S.M. Muraya <span dir="ltr"><<a href="mailto:murigi.muraya@gmail.com" target="_blank">murigi.muraya@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid"><div><div class="h5"><div dir="ltr"><div>No comments about the closed ios/ipad ecosystem being used in serikali?</div>
<div><br></div><div>Please google "android malware".... It is about apps, not the so much the operating system.<br>
</div><div><br></div><div><a href="http://www.zdnet.com/android-app-malware-rates-jump-40-percent-7000019093/" target="_blank">http://www.zdnet.com/android-app-malware-rates-jump-40-percent-7000019093/</a></div><div><br>
</div><div>Android smartphones with our gps coordinates are on us most of the time.<br>
</div><div><br></div><div>Not to forget, very insecure apps/services powered by Linux Servers 24 hours ....<br></div><div><br></div><div><a href="http://arstechnica.com/security/2013/05/critical-linux-vulnerability-imperils-users-even-after-silent-fix/" target="_blank">http://arstechnica.com/security/2013/05/critical-linux-vulnerability-imperils-users-even-after-silent-fix/</a><br>
</div><div><br></div><div><a href="http://krebsonsecurity.com/2013/08/simple-hack-threatens-oudated-joomla-sites/" target="_blank">http://krebsonsecurity.com/2013/08/simple-hack-threatens-oudated-joomla-sites/</a><br></div>
<div><br></div>
<div><br></div></div><div class="gmail_extra"><div><br clear="all"><div><div dir="ltr"><div>Blessings</div><div><br></div><div>Murigi / Stanley Muraya</div><div><br></div><div><span style="text-align:justify;color:rgb(0,19,32);line-height:13px;font-family:Trebuchet,Arial,Helvetica,sans-serif;background-color:rgb(253,254,255)"><span style="background-color:rgb(253,254,255)"><span style="line-height:20px"><font size="1"><b>"Better a patient person than a warrior, one with self-control than one who takes a city." Prov 16:32</b></font></span><span style="font-size:14px;background-color:rgb(253,254,255)"><br>
</span></span></span></div></div></div>
<br><br></div><div class="gmail_quote"><div>On Mon, Aug 26, 2013 at 6:53 PM, Walubengo J <span dir="ltr"><<a href="mailto:jwalu@yahoo.com" target="_blank">jwalu@yahoo.com</a>></span> wrote:<br></div><div>
<div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid">
<div><div style="font-family:times new roman,new york,times,serif;font-size:12pt">@Muraya,<br><br>I used to think Android is "open"? Meaning the comparison to Windows would not be appropriate in that if someone sneaked in spy-software in Android, I (and many others) can sniff it out, but if someone sneaked in some spy software in Windows, only Microsoft and perhaps the US govt would know?<br>
<br>Incidentally what @Ikua raises in not far-fetched. In 2010, it is widely believed the US /Israeli Governments unleashed a worm called "stuxnet" that chewed up the Iranian nuclear plants to a halt. The mode of delivery is also widely believed as being through one of the many regular Windows updates that we so faithfully do every week or month over the net.<br>
<br>In other words, most Listers here and across the globe do have the "stuxnet" worm on their machines but it is in sleep mode simply because their
organisations do not run nuclear reactors with specific circuitry. This worm was clever enough to only wake up upon sensing certain "signature" frequencies originating from certain circuitry that was dominant in Iranian nuclear reactors.<br>
<br>Obviously only Microsoft could be able to see the additional logic/payload in that particular update. Contrast this to updates whose code is "open"...<br><br>For those technically inclined, you can pick up the story @<br>
<br><a href="http://en.wikipedia.org/wiki/Stuxnet" target="_blank">http://en.wikipedia.org/wiki/Stuxnet</a><br><br>walu. <br><br> <br><br><div><span><br></span></div><div><br></div> <div style="font-family:times new roman,new york,times,serif;font-size:12pt">
<div style="font-family:times new roman,new york,times,serif;font-size:12pt"> <div dir="ltr"> <hr size="1"> <font face="Arial"> <b><span style="font-weight:bold">From:</span></b> S.M. Muraya <<a href="mailto:murigi.muraya@gmail.com" target="_blank">murigi.muraya@gmail.com</a>><br>
<b><span style="font-weight:bold">To:</span></b> <a href="mailto:jwalu@yahoo.com" target="_blank">jwalu@yahoo.com</a> <br><b><span style="font-weight:bold">Cc:</span></b> KICTAnet ICT Policy Discussions <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>> <br>
<b><span style="font-weight:bold">Sent:</span></b> Monday, August 26, 2013 4:12 PM<div><br> <b><span style="font-weight:bold">Subject:</span></b> Re: [kictanet] Is Windows 8 a Trojan horse for the NSA? The German Government thinks so<br>
</div></font> </div> <div><div><div><br><div><div dir="ltr">If we worry about 200 Million Windows 8.1 PCs (by 2015) how about 1 Billion mobile devices running Android by 2015?</div><div><br clear="all"><div><div dir="ltr">
<div>Blessings</div><div>
<br></div><div>Murigi / Stanley Muraya</div><div><br></div><div><span style="text-align:justify;color:rgb(0,19,32);line-height:13px;font-family:Trebuchet,Arial,Helvetica,sans-serif;background-color:rgb(253,254,255)"><span style="background-color:rgb(253,254,255)"><span style="line-height:20px"><font size="1"><b>"Better a patient person than a warrior, one with self-control than one who takes a city." Prov 16:32</b></font></span><span style="font-size:14px;background-color:rgb(253,254,255)"><br>
</span></span></span></div></div></div>
<br><br><div>On Mon, Aug 26, 2013 at 3:12 PM, Evans Ikua <span dir="ltr"><<a href="mailto:ikua.evans@gmail.com" target="_blank" rel="nofollow">ikua.evans@gmail.com</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid">
<div dir="ltr"><div>The German Government is now deeply suspicious that the Trusted
Platform Module (TPM) technology built into a growing number of Windows 8
PCs and tablets is creating a gigantic back door for NSA surveillance,
leaked documents have suggested.</div>
<div>Documents from the German Ministry of Economic Affairs <a href="http://www.zeit.de/digital/datenschutz/2013-08/trusted-computing-microsoft-windows-8-nsa/seite-1" target="_blank" rel="nofollow">obtained by German title <i>Zeit Online</i></a>
uncover the alleged unease of officials at the direction of version 2.0
of the standard being developed under the auspices of the multi-vendor
Trusted Computing Group (TCG).</div>
<div>TPM has been marketed as a security and Digital Rights Management
(DRM) technology since its appearance in 2006, but version 2.0 would
embed a chip on every PC that has complete control over which programs
can and can’t run, a setting that can’t be over-ridden under Windows 8.
The chip is also where the cryptographic data is stored for Windows
BitLocker and it enables remote administration.</div><br><div><a href="http://news.techworld.com/security/3465259/is-windows-8-trojan-horse-for-nsa-german-government-thinks-so/#tk.nl_win" target="_blank" rel="nofollow">Please read more here</a><span><font color="#888888"><br clear="all">
<br>-- <br><b>----------------------------------------------------<br>Kind Regards,<br>Evans Ikua,</b><br>
</font></span></div></div>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank" rel="nofollow">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank" rel="nofollow">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/murigi.muraya%40gmail.com" target="_blank" rel="nofollow">https://lists.kictanet.or.ke/mailman/options/kictanet/murigi.muraya%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div><br></div></div><br>_______________________________________________<br>kictanet mailing list<br><a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br></div></div>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com</a><div>
<br><br>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>KICTANetiquette : Adhere to the same standards of
acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
<br></div></div> </div> </div> </div></div></blockquote></div></div></div><br></div>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br></div></div>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/ikua.evans%40gmail.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/ikua.evans%40gmail.com</a><div class="im">
<br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</div></blockquote></div><br><br clear="all"><div class="im"><br>-- <br><b>----------------------------------------------------<br>Kind Regards,<br>Evans Ikua,</b><br></div><div class="im"><a href="http://lanetconsulting.com" target="_blank">lanetconsulting.com</a>,<br>
<a href="http://lpi-eastafrica.org" target="_blank">lpi-eastafrica.org</a>,<br><a href="http://ict-innovation.fossfa.net" target="_blank">ict-innovation.fossfa.net</a>,<br>Skype: @ikuae<br>Cell: <a href="tel:%2B254-722-955831" target="_blank" value="+254722955831">+254-722-955831</a><br>
</div></div>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/roykoikai%40gmail.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/roykoikai%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div><br><br clear="all"><br>-- <br>"Change is slow and gradual. It requires hardwork, a bit of<br>luck, a fair amount of self-sacrifice and a lot of patience."<br><br>Roy.
</div>