<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>That is why we did a responsible disclosure. Safaricom did reach back to us and promised to give a detailed report. </div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">Even after polite reminders, we did not hear back from them officially. </div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">---<div>Moses</div></div><div><br>On 23 Mar 2017, at 11:25, Ali Hussein <<a href="mailto:ali@hussein.me.ke">ali@hussein.me.ke</a>> wrote:<br><br></div><blockquote type="cite"><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div>These are very serious allegations guys.</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">It would be great to hear from Safaricom.<br><br><div><span style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.294118); -webkit-composition-fill-color: rgba(175, 192, 227, 0.231373);"><b>Ali Hussein</b></span></div><div><span style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.294118); -webkit-composition-fill-color: rgba(175, 192, 227, 0.231373);"><b>Principal</b></span></div><div><b style="background-color: rgba(255, 255, 255, 0);">Hussein & Associates</b></div><div style="font-family: Helvetica; font-size: medium; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: auto; ">+254 0713 601113 </div><div style="font-family: Helvetica; font-size: medium; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: auto; "><br></div><div><p style="margin: 0in 0in 0pt;"><span style="background-color: rgba(255, 255, 255, 0);">Twitter: @AliHKassim</span></p><span style="background-color: rgba(255, 255, 255, 0);"><font></font></span><p style="margin: 0in 0in 0pt;"><span style="background-color: rgba(255, 255, 255, 0);">Skype: abu-jomo</span></p><p style="margin: 0in 0in 0pt;"><span style="background-color: rgba(255, 255, 255, 0);">LinkedIn: <a href="http://ke.linkedin.com/in/alihkassim" target="_blank">http://ke.linkedin.com/in/alihkassim</a></span></p><font><br></font></div><div><span style="background-color: rgba(255, 255, 255, 0);">"We are what we repeatedly do. Excellence, therefore, is not an act but a habit." ~ Aristotle</span></div><div><br></div><div><span style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.294118); -webkit-composition-fill-color: rgba(175, 192, 227, 0.231373);"><br></span></div>Sent from my iPad</div><div><br>On 23 Mar 2017, at 10:04 AM, Odhiambo Washington via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">I recently had a very traumatizing experience with a client I was consulting for and whose preferred mode of connection is Safaricom 4G.<div><br></div><div>For two days I was struggling to figure out why what seemed so obvious (in my mind) was NOT working with Safaricom while I had tested the same with JTL and Access Kenya links.</div><div><br></div><div>It turned out that Safaricom truly tamper with traffic to the Internet. This includes even VPN traffic.</div><div><br></div><div>This test result presented here is not a surprise to me at all. Safaricom's DPI (Deep Packet Inspection) systems are so robust and advanced that they can do ANYTHING with your traffic.</div><div><br></div><div>I wrote a private email to Stephen Chege of Safaricom (we all remember him) but didn't receive even an acknowledgement. The problem I had - with DNS and VPN still stand unresolved.</div><div><br></div><div>And this is why I am always suspicious about the dalliance (for lack of a better word. I am thinking in Dholuo and translating to English) between Safaricom and the govt, especially since one of them was given a senior govt job!</div><div><br></div><div> </div></div><div class="gmail_extra"><br><div class="gmail_quote">On 23 March 2017 at 09:27, Mose Karanja via kictanet <span dir="ltr"><<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Hello listers. <div><br></div><div>CIPIT has been conducting network measurements on Kenyan Internet
Service Providers (ISPs) since June 2016 using assorted techniques.
Between 6 – 10 February 2017, the data indicated the presence of a middle-box on the cellular network of one provider,
Safaricom Limited (AS33771) that had not previously presented any signs
of traffic manipulation. Middle-boxes assume dual-use character in that
they can be used for legitimate functions (e.g., network optimisation)
and can simultaneously be used for traffic manipulation, surveillance
and aiding censorship.</div><div><br></div><div>In light of such dual uses, this report makes clear that service
providers operating middle-boxes must communicate to the public in a
transparent manner the justification for such activity. This is
especially relevant as government bodies announce plans to monitor and possibly censor the
Internet during Kenya’s current electoral processes.</div><div><br></div><div>You can download the brief from this link: <br><div><br></div><div><a href="http://blog.cipit.org/2017/03/23/cipit-research-reveals-evidence-of-internet-traffic-tampering-in-kenya-the-case-of-safaricoms-network/#more-5833" target="_blank">http://blog.cipit.org/2017/03/<wbr>23/cipit-research-reveals-<wbr>evidence-of-internet-traffic-<wbr>tampering-in-kenya-the-case-<wbr>of-safaricoms-network/#more-<wbr>5833</a> </div></div><div><br></div><div>-Moses</div></div><br>______________________________<wbr>_________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/<wbr>KICTANet/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/odhiambo%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/options/kictanet/<wbr>odhiambo%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Best regards,<br>Odhiambo WASHINGTON,<br>Nairobi,KE<br>+254 7 3200 0004/+254 7 2274 3223<br>"<span style="font-size:12.8px">Oh, the cruft.</span><span style="font-size:12.8px">"</span></div></div></div>
</div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>kictanet mailing list</span><br><span><a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a></span><br><span><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a></span><br><span>Twitter: <a href="http://twitter.com/kictanet">http://twitter.com/kictanet</a></span><br><span>Facebook: <a href="https://www.facebook.com/KICTANet/">https://www.facebook.com/KICTANet/</a></span><br><span></span><br><span>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com">https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com</a></span><br><span></span><br><span>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.</span><br><span></span><br><span>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.</span></div></blockquote></div></blockquote></body></html>