October 2011 - skunkworks - Skunkworks Site

Huawei contacts
by Josh Handley 26 Oct '11

26 Oct '11

Does anyone have contact info for Huawei Kenya? Thanks, Josh

2 1

Vacancy Announcements
by ashok+skunkworks＠parliaments.info 26 Oct '11

26 Oct '11

Please see below -- developer vacancy announcements for short term engagement, application instructions are included : Software Developer Python / Plone : http://goo.gl/mXneL Software Developer Java / XML : http://goo.gl/tzoqL Ashok

1 0

a regex question. validating decimal values that fall within a postive or negative range
by Kiti Chigiri 26 Oct '11

26 Oct '11

Hi, I am writing a couple of regex values to validate for valid longitude values that should fall within a specific range , and so far i got the general syntax ok for longitudes , my regex is as follows: [-]?3[1-7]*[.]{0,1}[0-9]{0,6} i.e an optional negative sign followed by a number in the range 31-37 , followed by an optional decimal point, and if there is a decimal point then a set of numeric character to a max of 6 characters. When i run the regex on some test values i get the following results -31.00000000 TRUE 31.00000000 TRUE -37.999999999 TRUE 37.999999999 TRUE -36.744uiu82 TRUE ( but should be false.; it truncates the characters to return a true on -36.744) 36.744uiu82 TRUE ( but should be false.; it truncates the characters to return a true on 36.744) -3sers6.744uiu82 TRUE ( but should be false.; it truncates the characters to return a true on -3) 3sers6.744uiu82 TRUE ( but should be false.; it truncates the characters to return a true on 3) 28.90909 FALSE (does not fall in range) -28.90909 FALSE (does not fall in range) My problem is with the values in the text highlighted . Obviously 36.uoiuy5656 is not a valid value since in its entirety it contains a mix of non-numeric values What am i doing wrong or missing here? I am not well versed with greedy or backreferenced syntax. Any assitance would be greatly appreciated. Kind regards Kiti Chigiri

2 2

Spoolsv.exe taking 100% processor
by muite nicholas 26 Oct '11

26 Oct '11

Hi All, Im having a Dell Poweredge 1800 server acting as my TS. We have 45 users connected and quite a number of HP and Canon printers are installed on the TS. I have two issues 1. The spoolsv.exe on the server is taking up 100% CPU usage 2. The server has over 50 "in session" printers that do not disappear even when users are not connected via RDP. Any idea how I can resolve this issue? -- Muite Nicholas G mobile:+267 72900342 office:+267 3952511 email:nmuite@googlemail.com,

4 12

Database design question
by Peter Karunyu 26 Oct '11

26 Oct '11

Suppose you were designing a database to store accidents, and you had the need to categorize them, are the categories below sufficient? By accident here I mean non-intentional occurrences which lead to undesirable consequences... 1. Vehicle Accidents involving vehicles with at least 4 wheels 2. Cycles (is there a better name for this?) Vehicles with three wheels and less 3. Buildings 4. Infrastructure, e.g. bridges collapsing etc 5. Marine How do you differentiate someone drowning from a boat sinking? 6. Aircraft 7. Ordinance? Old military appliances that tend to explode? 8. Domestic Accidents which happen at home. But if a fire takes place at home, and a fire takes place at a factory, are these two different categories or should they be the same, or both? 9. Industrial

6 9

Re: [Skunkworks] Work From Home
by Kathryn Ngunjiri 26 Oct '11

26 Oct '11

Hi skunworks, Anyone with Information and experience about this ONLINE Jobs? You views are welcome. http://kenyanewsweekly.com/finance/ Thanks. Katie.

6 5

Town Turned Down Free Google Wi-Fi Fearing Kids Getting Access To Porn
by maina 25 Oct '11

25 Oct '11

Hehehe..this made my day.. "The tiny city of Moncks Corner rejected free Wi-Fi from Google, because it was afraid that it would give the city’s children access to porn" http://www.forbes.com/sites/kashmirhill/2011/10/19/south-carolina-town-turn… -- David Maina. P. O. Box 8310-00200, NAIROBI, KENYA.. Cell:+254-721-950073. Registered Linux User #407239. ---------------------------------------------------------------------- "By golly, I'm beginning to think Linux really *is* the best thing since sliced bread."

2 1

<OT>Looking for a second hand laptop
by solomon kariri 25 Oct '11

25 Oct '11

Hi, I friend of mine is looking for a second hand laptop. Please get in touch with me with the specs if you have one. -- Solomon Kariri, Software Developer, Cell: +254736 729 450 Skype: solomonkariri

1 0

Re: [Skunkworks] [Security Forum] Security Breach on Cfc Stanbic Account
by ty 25 Oct '11

25 Oct '11

Sorry but you lost me at "trying to fake security breaches in Kenyan Companies" . I also fail to see the correlation between you asserting to be a "Certified Ethical Hacker" from your somewhat well meaning but misguided conclusion leading to "tainted images" and "forensics". If you have been in this forum long enough you would recall discussions around "IS/Info Sec outfits and auditors have come out as simply "Template filling" professional so dont take it personally when security is questioned. Ironically which as a "Certified Ethical Hacker" is your duty to prove otherwise. -tyrus On Tue, Oct 25, 2011 at 5:38 PM, TOM MUSAU <kilonzotom2000(a)yahoo.com> wrote: > Am a certified ethical hacker, from my analysis, you guys are malicious and > want to be popular by trying to fake security breaches in Kenyan Companies, > dont dent peoples security image, do proper forensic analysis and give facts > > > > --- On *Tue, 10/25/11, ty <tyruskam(a)gmail.com>* wrote: > > > From: ty <tyruskam(a)gmail.com> > Subject: Re: [Security Forum] [Skunkworks] Security Breach on Cfc Stanbic > Account > To: "Skunkworks Mailing List" <skunkworks(a)lists.my.co.ke>, "[Security > Forum]All information security discussions in kenya are done here (Hacking, > Decryptions, Security management, physical security, Disastor Recovery, > Security Assessments etc etc)" <security(a)lists.my.co.ke> > Date: Tuesday, October 25, 2011, 3:54 AM > > > An interesting thing to note, from my experience, only a handful of local > banks and multinationals are PCI/DSS Compliant let alone self assured. > > -tyrus > > On Tue, Oct 25, 2011 at 4:41 PM, Kevin Omondi <kevin.ouma(a)gmail.com<http://us.mc1620.mail.yahoo.com/mc/compose?to=kevin.ouma@gmail.com> > > wrote: > > Could this be an inside Job ? > > > Regards > Kevin > > > On Tue, Oct 25, 2011 at 4:13 PM, Okumu O. C. Edmund < > edmund.okumu(a)gmail.com<http://us.mc1620.mail.yahoo.com/mc/compose?to=edmund.okumu@gmail.com> > > wrote: > > Interesting story line there. I do not work for CFC Stanbic except that i > am also a dissatisfied customer who fled. > > That not withstanding, as an Information Systems Risk specialist I noticed > one thing when CFC merged with Stanbic and around that time I started having > trouble with my accounts. It so happened that human was interfacing between > two systems i.e. The then CFC system and the Stanbic System. I know that > alot of work has been done to ensure that this no longer happens (No human > interfacing between the two systems), but it still explains what might have > transpired during the transition period. > > I can imagine fictitious accounts, illegal transfers..... happening like in > your case e.t.c. > > > On Mon, Oct 24, 2011 at 4:19 PM, Kevin Omondi <kevin.ouma(a)gmail.com<http://us.mc1620.mail.yahoo.com/mc/compose?to=kevin.ouma@gmail.com> > > wrote: > > Hi Skunks, > > On Friday the 21st of October I noticed something strange with my Cfc > Stanbic Account. While trying to withdraw money at the International House > ATM, I realized from the system that avaibale balance was 300 kshs and > Actual balance was the money which I was supposed to be having in my account > ( lets for the > sake of this discussion say its X shillings) > > > I reported this issue to the Bank branch and they mentioned that there was > a possible problem > > On Saturday while trying to withdraw money from the Buru Buru ATM, I got a > message insuficient funds. On gettting a mini statement it shows VISA ATM > withdrwals of equal amounts i.e x/3 done thrice to 3 decimal points which if > added up summed up to x. > > This looked like a well calculated hacking job. What I wondered is > > cfc cards are not allowed for internet transactions ( at least mine) and > furthermore they have no numbers on them. I have had my Card on me since > opening my account . > > After follow up, they told me that these transactions happened in > Mozambique. > > My question is what possible scenarios led to the hacking of my account and > loss of cash as I have never used it on the net or swiped it anywhere ? > > Im puzzled and told it has happened with a number of accounts at Cfc. If > you are with the bank, be very careful. > > > Regards > > Kevin > > _______________________________________________ > Skunkworks mailing list > Skunkworks(a)lists.my.co.ke<http://us.mc1620.mail.yahoo.com/mc/compose?to=Skunkworks@lists.my.co.ke> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke > > > > > -- > Edmund C. O. Okumu > P.O Box 8490-00200, > Nairobi, Kenya. > TEL: 254-721-734935 > > > _______________________________________________ > Skunkworks mailing list > Skunkworks(a)lists.my.co.ke<http://us.mc1620.mail.yahoo.com/mc/compose?to=Skunkworks@lists.my.co.ke> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke > > > > _______________________________________________ > Skunkworks mailing list > Skunkworks(a)lists.my.co.ke<http://us.mc1620.mail.yahoo.com/mc/compose?to=Skunkworks@lists.my.co.ke> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke > > > > -----Inline Attachment Follows----- > > _______________________________________________ > Security mailing list > Security(a)lists.my.co.ke<http://us.mc1620.mail.yahoo.com/mc/compose?to=Security@lists.my.co.ke> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/security > > > _______________________________________________ > Security mailing list > Security(a)lists.my.co.ke > http://lists.my.co.ke/cgi-bin/mailman/listinfo/security > >

1 0

Re: [Skunkworks] [Security Forum] Security Breach on Cfc Stanbic Account
by Mash 25 Oct '11

25 Oct '11

Haggai, Don't quote me ( i was misquoted). But sincerely speaking, bad stuff does happen. I've ever received a claim to settle an overdrawn amount from an account I had not opened. On complaining to the top management, the account was immediately deleted. Anyways, system lapses occur. Sent from My HTC ----- Reply message ----- From: "Haggai Nyang" <haggai.nyang(a)gmail.com> To: "Security Forum All information security discussions in Africa are done here (Hacking, Decryptions, Security management, physical security, Disastor Recovery, Security Assessments etc etc)" <security(a)lists.my.co.ke> Cc: "Skunkworks Mailing List" <skunkworks(a)lists.my.co.ke> Subject: [Skunkworks] [Security Forum] Security Breach on Cfc Stanbic Account Date: Tue, Oct 25, 2011 18:58 @mash that's scary news since you are in the banking sector... On Tue, Oct 25, 2011 at 18:32, Mash <mashlists(a)gmail.com> wrote: From a banking perspective, these claims are possible but not through hacking. What normally happens is that in case of such withdraws via an atm, the card centre may have linked your account to the wrong ATM card n vice versa. Take it like a cashier doing an over the counter transactIon to the wrong account. It happens alot. Sent from My HTC ----- Reply message ----- From: "ty" <tyruskam(a)gmail.com> To: "Skunkworks Mailing List" <skunkworks(a)lists.my.co.ke>, "[Security Forum]All information security discussions in kenya are done here (Hacking, Decryptions, Security management, physical security, Disastor Recovery, Security Assessments etc etc)" <security(a)lists.my.co.ke> Subject: [Skunkworks] Security Breach on Cfc Stanbic Account Date: Tue, Oct 25, 2011 16:54 An interesting thing to note, from my experience, only a handful of local banks and multinationals are PCI/DSS Compliant let alone self assured. -tyrus On Tue, Oct 25, 2011 at 4:41 PM, Kevin Omondi <kevin.ouma(a)gmail.com> wrote: Could this be an inside Job ? RegardsKevin On Tue, Oct 25, 2011 at 4:13 PM, Okumu O. C. Edmund <edmund.okumu(a)gmail.com> wrote: Interesting story line there. I do not work for CFC Stanbic except that i am also a dissatisfied customer who fled. That not withstanding, as an Information Systems Risk specialist I noticed one thing when CFC merged with Stanbic and around that time I started having trouble with my accounts. It so happened that human was interfacing between two systems i.e. The then CFC system and the Stanbic System. I know that alot of work has been done to ensure that this no longer happens (No human interfacing between the two systems), but it still explains what might have transpired during the transition period. I can imagine fictitious accounts, illegal transfers..... happening like in your case e.t.c. On Mon, Oct 24, 2011 at 4:19 PM, Kevin Omondi <kevin.ouma(a)gmail.com> wrote: Hi Skunks, On Friday the 21st of October I noticed something strange with my Cfc Stanbic Account. While trying to withdraw money at the International House ATM, I realized from the system that avaibale balance was 300 kshs and Actual balance was the money which I was supposed to be having in my account ( lets for the sake of this discussion say its X shillings) I reported this issue to the Bank branch and they mentioned that there was a possible problem On Saturday while trying to withdraw money from the Buru Buru ATM, I got a message insuficient funds. On gettting a mini statement it shows VISA ATM withdrwals of equal amounts i.e x/3 done thrice to 3 decimal points which if added up summed up to x. This looked like a well calculated hacking job. What I wondered is cfc cards are not allowed for internet transactions ( at least mine) and furthermore they have no numbers on them. I have had my Card on me since opening my account . After follow up, they told me that these transactions happened in Mozambique. My question is what possible scenarios led to the hacking of my account and loss of cash as I have never used it on the net or swiped it anywhere ? Im puzzled and told it has happened with a number of accounts at Cfc. If you are with the bank, be very careful. Regards Kevin _______________________________________________ Skunkworks mailing list Skunkworks(a)lists.my.co.ke http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke -- Edmund C. O. Okumu P.O Box 8490-00200, Nairobi, Kenya. TEL: 254-721-734935 _______________________________________________ Skunkworks mailing list Skunkworks(a)lists.my.co.ke http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke _______________________________________________ Skunkworks mailing list Skunkworks(a)lists.my.co.ke http://orion.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke _______________________________________________ Security mailing list Security(a)lists.my.co.ke http://orion.my.co.ke/cgi-bin/mailman/listinfo/security

2 1