<div dir="ltr">Hey all,<div>This discussion I feel has gone off topic slightly; this focus on what technology we use and how well encrypted it is is besides the point. If you checked out Nanjira's tweets the second one is a photo form the Standard about the CA sending 2b to monitor communication(Sh1.1 billion on a spectrum monitoring system to monitor unauthorised broadcasts, Sh600 million on a social media monitoring system and Sh400 million on a device management system to closely monitor mobile phones and the activities around them), The article seems to have been taken offline for some reason but the google cached version can be found <a href="https://webcache.googleusercontent.com/search?q=cache:T9Z2xi4rXBIJ:https://www.standardmedia.co.ke/article/2000229727/communications-authority-to-monitor-private-talk-and-texts-during-poll+&cd=1&hl=en&ct=clnk">here</a>. </div><div><br></div><div>Under which law does the CA have the authority to monitor mobile phones without a court order? If it is by court order, can we have a copy of that order? The data that is collected by these systems, who is its custodian, how long will it be held for? What about my constitutionally right to privacy?(particularly part d of section 31: <b><i>the right not to have the privacy of my communications infringed</i></b>)</div><div><br></div><div>When was the tendering process for these systems and who is supplying them?(I've built social media monitoring tools -for research purposes- would have been nice to get 600m😅)<br></div><div><br></div><div>These systems have been acquired with the stated purpose of <i><u>preventing a repeat of the 2007/2008 post-election violence.</u></i> At iHub Research, a team of researchers that Nanjira and I were a part of a team that spent 5 years looking for a link between<a href="http://ihub.co.ke/research/projects/23"> hate speech online and violence offline</a> and never found one, not even a cursory one. So the question becomes where did the CA get the notion that this was necessary? Would they care to share their research?</div><div><br></div><div>Finally on internet shutdowns? By which law? Or court order? The article says<span style="color:rgb(102,102,102);font-family:raleway,sans-serif;font-size:15px"> </span><b style="font-style:italic">measures like an internet shut-down will only be deployed in a "worst-case scenario" </b>What the hell is a "worst case scenario"? I would like to know in very specific terms what that means and what conditions have to be met for it to be considered a worst-case scenario. </div><div><br></div><div>Last question, what happens to these systems after the election?</div><div><br></div><div>If someone from the CA could answer these questions I'd be most appreciative</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 14 January 2017 at 13:28, Moses Karanja via kictanet <span dir="ltr"><<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Ali, as you noted, The Guardian decided to go with the
catchphrase. Asking the right questions would have been boring but
who has time for boring studies when you can attack
Facebook/WhatsApp and get the spotlight? :)<br>
<br>
Security is hard and no one person/organization can get it 100%.
It is more practical to live with systems that can fail well by
being transparent on vulnerabilities and being proactive with
patching them. <br>
</p>
<p><br>
</p>
<p>M<br>
</p><div><div class="h5">
<br>
<div class="m_4311786534723401435moz-cite-prefix">On 14/01/2017 13:21, Ali Hussein wrote:<br>
</div>
<blockquote type="cite">
<div>Moses</div>
<div><br>
</div>
<div>Thanks for sharing. I personally considered the Guardian
story and then read the Open Whispers System blog and came to
the conclusion that it just may be possible that the Guardian
Newspaper in this case was really dabbling in sensationalism.</div>
<div><br>
</div>
<div>I'm keen to hear comments from listers who have a deeper
understanding of <span style="background-color:rgba(255,255,255,0)">cryptography. </span></div>
<div><br>
</div>
<div>Meanwhile in all things tech and social the best defense
against snooping and hacking is simply this:-</div>
<div><br>
</div>
<div>Exercise caution. Don't write or post anything that may
embarrass you if someone hacked into any of your devices. </div>
<div><br>
</div>
<div>This may be an opportunity for those who have gotten into the
habit of engaging in an online relationship to actually go out
and meet..You know...like we used to do in the 1980s and
before..</div>
<div><br>
</div>
<div>You may just find it super fulfilling...in more ways than
one.. :-) <br>
<br>
<div>
<div><span><b>Ali Hussein</b></span></div>
<div><span><b>Principal</b></span></div>
<div><b style="background-color:rgba(255,255,255,0)">Hussein
& Associates</b></div>
<div style="font-family:Helvetica;font-size:medium">+254 0713
601113 </div>
<div style="font-family:Helvetica;font-size:medium"><br>
</div>
<div>
<p style="margin:0in 0in 0pt"><span style="background-color:rgba(255,255,255,0)">Twitter:
@AliHKassim</span></p>
<span style="background-color:rgba(255,255,255,0)"></span>
<p style="margin:0in 0in 0pt"><span style="background-color:rgba(255,255,255,0)">Skype:
abu-jomo</span></p>
<p style="margin:0in 0in 0pt"><span style="background-color:rgba(255,255,255,0)">LinkedIn: <a href="http://ke.linkedin.com/in/alihkassim" target="_blank">http://ke.linkedin.<wbr>com/in/alihkassim</a></span></p>
<font><br>
</font></div>
<div><span style="background-color:rgba(255,255,255,0)">"We
are what we repeatedly do. Excellence, therefore, is not
an act but a habit." ~ Aristotle</span></div>
<div><br>
</div>
<div><span><br>
</span></div>
Sent from my iPad</div>
</div>
<div><br>
On 14 Jan 2017, at 8:24 AM, Moses Karanja via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><wbr>>
wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<p>Open Whispers response to The Guardian article, maintaining
it is not a backdoor:</p>
<blockquote>
<p>
The only question it might be reasonable to ask is whether
these safety number change notifications should be
"blocking" or "non-blocking." In other words, when a
contact's key changes, should WhatsApp require the user to
manually verify the new key before continuing, or should
WhatsApp display an advisory notification and continue
without blocking the user.</p>
</blockquote>
<p><a class="m_4311786534723401435moz-txt-link-freetext" href="https://whispersystems.org/blog/there-is-no-whatsapp-backdoor/" target="_blank">https://whispersystems.org/<wbr>blog/there-is-no-whatsapp-<wbr>backdoor/</a>
<br>
</p>
<p><br>
</p>
<p>Moses<br>
</p>
<p> <br>
</p>
<br>
<div class="m_4311786534723401435moz-cite-prefix">On 13/01/2017 21:43, <a class="m_4311786534723401435moz-txt-link-abbreviated" href="mailto:kictanet-request@lists.kictanet.or.ke" target="_blank">kictanet-request@lists.<wbr>kictanet.or.ke</a>
wrote:<br>
</div>
<blockquote type="cite">
<pre>Send kictanet mailing list submissions to
<a class="m_4311786534723401435moz-txt-link-abbreviated" href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>
To subscribe or unsubscribe via the World Wide Web, visit
<a class="m_4311786534723401435moz-txt-link-freetext" href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/listinfo/kictanet</a>
or, via email, send a message with subject or body 'help' to
<a class="m_4311786534723401435moz-txt-link-abbreviated" href="mailto:kictanet-request@lists.kictanet.or.ke" target="_blank">kictanet-request@lists.<wbr>kictanet.or.ke</a>
You can reach the person managing the list at
<a class="m_4311786534723401435moz-txt-link-abbreviated" href="mailto:kictanet-owner@lists.kictanet.or.ke" target="_blank">kictanet-owner@lists.kictanet.<wbr>or.ke</a>
When replying, please edit your Subject line so it is more specific
than "Re: Contents of kictanet digest..."
</pre>
<br>
<fieldset class="m_4311786534723401435mimeAttachmentHeader"></fieldset>
<br>
<pre>Today's Topics:
1. Re: (no subject) (McTim)
2. Re: (no subject) (Keith Andere)
3. Re: CA Speaks to Internet Shutdowns and "Monitoring" of
Online Comms (Mutemi wa Kiama)
</pre>
<br>
<fieldset class="m_4311786534723401435mimeAttachmentHeader"></fieldset>
<br>
<pre>______________________________<wbr>_________________
kictanet mailing list
<a class="m_4311786534723401435moz-txt-link-abbreviated" href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>
<a class="m_4311786534723401435moz-txt-link-freetext" href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/listinfo/kictanet</a>
</pre>
</blockquote>
<br>
<pre class="m_4311786534723401435moz-signature" cols="72">--
Moses Karanja
<a class="m_4311786534723401435moz-txt-link-abbreviated" href="http://www.moseskaranja.com/blog" target="_blank">www.moseskaranja.com/blog</a>
</pre>
</div>
</blockquote>
<blockquote type="cite">
<div><span>______________________________<wbr>_________________</span><br>
<span>kictanet mailing list</span><br>
<span><a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a></span><br>
<span><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/listinfo/kictanet</a></span><br>
<span>Twitter: <a href="http://twitter.com/kictanet" target="_blank">http://twitter.com/kictanet</a></span><br>
<span>Facebook: <a href="https://www.facebook.com/KICTANet/" target="_blank">https://www.facebook.com/<wbr>KICTANet/</a></span><br>
<span></span><br>
<span>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/options/kictanet/info%<wbr>40alyhussein.com</a></span><br>
<span></span><br>
<span>The Kenya ICT Action Network (KICTANet) is a
multi-stakeholder platform for people and institutions
interested and involved in ICT policy and regulation. The
network aims to act as a catalyst for reform in the ICT
sector in support of the national aim of ICT enabled growth
and development.</span><br>
<span></span><br>
<span>KICTANetiquette : Adhere to the same standards of
acceptable behaviors online that you follow in real life:
respect people's times and bandwidth, share knowledge, don't
flame or abuse or personalize, respect privacy, do not spam,
do not market your wares or qualifications.</span></div>
</blockquote>
</blockquote>
<br>
</div></div><span class="HOEnZb"><font color="#888888"><pre class="m_4311786534723401435moz-signature" cols="72">--
Moses Karanja
<a class="m_4311786534723401435moz-txt-link-abbreviated" href="http://www.moseskaranja.com/blog" target="_blank">www.moseskaranja.com/blog</a>
</pre>
</font></span></div>
<br>______________________________<wbr>_________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/<wbr>KICTANet/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/sidney.ochieng%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/options/kictanet/<wbr>sidney.ochieng%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div style="font-size:12.8px"><font size="2">Regards,</font></div><div style="font-size:12.8px"><span style="font-size:small">Sidney</span><br></div><div style="font-size:12.8px"><table cellpadding="0" cellspacing="0" width="100%" style="font-family:verdana;font-size:11px;color:rgb(51,61,71)"><tbody><tr><td height="20" valign="middle"><font size="2"><strong><br>Twitter:</strong> <a href="https://twitter.com/princelySid" target="_blank">@princelySid</a> | <b>Website: </b><a href="http://sidneyochieng.co.ke/" target="_blank">sidneyochieng.co.ke</a></font><br></td></tr></tbody></table></div></div></div>
</div>