June 2013 - skunkworks - Skunkworks Site

IBM SAS FRU39R77350
by Joseph Maina 06 Jun '13

06 Jun '13

I am looking for the above item or its equivalent for my IBM server any lead on the price in kenya?

2 2

Securely Developing on Mobile
by Alex Nyika 06 Jun '13

06 Jun '13

Some few tips from the Facebook Engineering department. More than ever, people are using their mobile device as their primary means of accessing the Internet. This provides not only unparalleled access to information, but also millions upon millions of applications built by third party developers. This platform approach enables users to experience great apps built by developers both large and small. However, this decentralized platform approach only works if there are strong, industry-wide best practices around important app basics such as security. For this reason, we applaud the Federal Trade Commission for hosting its Public Forum on Threats to Mobile Devices and thank them for including Facebook in this important meeting. For everyone who couldn’t make the forum yesterday, we have documented some of the best practices for developing on Android and iOS, and we're excited to share them with other developers. >From the outset, it is important to note that making apps that are secure on Android and iOS is hard. When your application behaves in manner that is unintended, it creates security and privacy implications for the end user, and this might not be restricted to the confines of your app, but potentially across the device. Top risks include malware installed on the phone alongside your app, tools that allow malicious actors to snoop on device activity, and even malicious websites that can trigger actions in your app using custom URL schemes. The only way to ensure that your application is secure is to engineer your application for security from the ground up. Here are some recommendations to reduce vulnerabilities in your application: *1. Use HTTPS in a secure way* HTTPS can help you protect the privacy of user data against a man-in-the-middle attack, which could manifest as snooping on data and stealing user sessions on the network. However, to obtain this protection your app needs to perform several steps to verify the server to which it is connecting, and this process is very error-prone. Even a small mistake in verification can result in no protection at all. Read more here - <https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> http://crypto.stanford.edu/~dabo/pubs/abstracts/ssl-client-bugs.html<http://www.facebook.com/l.php?u=http%3A%2F%2Fcrypto.stanford.edu%2F%7Edabo%…> Android Instead of using the SSLSocketFactory classes, you should use APIs like HttpsURLConnection, which are simpler to use and perform the correct verification steps on your behalf. HttpsURLConnection also adds features (including TLS tickets and SNI headers, which only work correctly after Jellybean) to the HTTPS connection that gives you better performance than using raw SSL sockets. It should always be better to use this API. iOS Similarly, on iOS it is preferable to always use the high level API NSURLConnection for network requests. Lower level APIs such as CFStream need explicit and often error-prone configuration of SSL. Android and iOS To debug network requests with a proxy, such as Charles, you may prefer manually installing a SSL certificate in your testing device rather than using preprocessor variables and debug-only code to deactivate SSL validation. See more - <https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> http://www.charlesproxy.com/documentation/faqs/ssl-connections-from-within-…<http://www.facebook.com/l.php?u=http%3A%2F%2Fwww.charlesproxy.com%2Fdocumen…> <https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> *2. There are No Client Secrets* Often, developers will spend time trying to obfuscate secrets in the application, which will be used to either authenticate their app to their server or to perform a client-side OAUTH flow. Trying to obfuscate a secret in Android and iOS clients is a futile effort as the secrets can always be recovered using the abundance of reverse-engineering and debugging tools available for APKs (<https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> https://code.google.com/p/android-apktool/<http://www.facebook.com/l.php?u=https%3A%2F%2Fcode.google.com%2Fp%2Fandroid…>), Java (<https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> http://en.wikipedia.org/wiki/JAD_(JAva_Decompiler)<http://www.facebook.com/l.php?u=http%3A%2F%2Fen.wikipedia.org%2Fwiki%2FJAD_…>), and Objective C (<https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> http://www.fscript.org/<http://www.facebook.com/l.php?u=http%3A%2F%2Fwww.fscript.org%2F&h=kAQFWvEwp…> ). a. Authenticating an app to your server Often the goal of authenticating the app to the server is to prevent users from getting phished. A good solution to phishing is to support a two-factor authentication for your application. Facebook login approvals (<https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> https://www.facebook.com/note.php?note_id=10150172618258920) is an example of a large scale two-factor authentication solution that millions of people use daily. b. OAUTH Do not expose your OAUTH secrets to the world via your client application. Store the OAUTH secrets on your server so that they are indeed secret. To obtain an OAUTH token, the client would then request an end-point on your server that could proxy the token request to the OAUTH provider with the secret, and then, return the token to the client. Once the client obtains the OAUTH token, it can directly make requests to the OAUTH provider. *3. WebViews* Android Some applications use Android WebViews and store cookies in the WebViews to access the remote servers. You should restrict the web-pages that can load inside your WebView with a whitelist. If you are only going to open pages from your domain in the WebView you should restrict those. This will prevent others from triggering the loading of local resources such as javascript:// urls and file:// urls, which can be used to XSS users on Android. (Read more here – ( http://www.80vul.com/android/android-0days.txt<http://www.facebook.com/l.php?u=http%3A%2F%2Fwww.80vul.com%2Fandroid%2Fandr…> ) iOS In the simple case, a UIWebView is just a web browser tab sharing its cookie storage with the app. However, more complex interactions are often needed between the embedded JavaScript and the app. This is usually done by having the app catch and interpret URLs of a special scheme in the outgoing requests of the WebView. These interactions must be carefully reviewed. In particular, a. if the webview is meant to browse the web, it should not be given large privileges over the native app; b. if they include user-controlled strings (this typically includes the initial URL and any string injected in the Javascript environment using stringByEvaluatingJavaScriptFromString) make sure to sanitize the native inputs of webviews *4. Tap-Jacking* Android Other applications can overlay content over your application, and fool users into clicking buttons on your app underneath. To prevent this consider setting the setFilterTouchesWhenObscured (<https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> http://developer.android.com/reference/android/view/View.html#setFilterTouc…<http://www.facebook.com/l.php?u=http%3A%2F%2Fdeveloper.android.com%2Frefere…>) property to true in your views. This will prevent your application from getting touches when another application is obscuring it. iOS Proofs of concept exist on iOS as well (<https://www.facebook.com/notes/facebook-security/securely-developing-on-mob…> http://www-personal.umich.edu/~yangqi/pivot/mobile_phishing_defense.pdf<http://www.facebook.com/l.php?u=http%3A%2F%2Fwww-personal.umich.edu%2F%7Eya…>) although this issue should concern only jailbroken devices. *5. Race Conditions onInstalling Apps* Permission stealing [Android] Other apps that are installed before your app, could steal android permissions (including signature level permissions) that you have declared in your manifest by declaring them before you. Your app will function normally, but as a result of this, malware that steals permissions could snoop into all of your app's content providers and other components. To prevent this, reduce both the exposure of components and also explicitly authenticate the callers of your components. Stealing of URL schemes [iOS] Except for a core subset managed by iOS, URL schemes are registered on first-come, first-served basis. *6. Controlling Exposed Features* Activities, services and broadcast receivers [Android] You should aim to expose as little of your application as possible to other applications that are potentially malicious. Not setting intent-filters on components, or explicitly setting "exported=false," will cause components to be local to your application. This is the most effective way of protecting components. Make sure that before any action that changes the state of your app is taken, the user performs a UI action like clicking a button (this is analogous to CSRF protection in web applications). It is dangerous to perform a write action based on an intent extra passed into a component. Exposed URL schemes [iOS] Similarly, iOS apps should not perform state-changing actions on processing URLs without asking for confirmation from the user. *7. Watch Out for Internal URL Schemes.* In addition to exposed URL schemes, it is common to define custom URL schemes internally to an iOS or Android app so as to let trusted sources trigger specific actions. Android When using custom URL schemes in intent filters, be cognizant of the fact that they can be triggered by not only apps installed on the device, but also malicious websites that the user opens in the browser by simply clicking on a link. This triggers an ACTION_VIEW intent for the URL that was clicked, so that the user does not need to install malware for the malware to exploit a particular component if it has another vulnerability. iOS Make sure to distinguish internal URLs created by trusted sources from public URLs callable by external apps or made clickable in user contents. The library class NSDataDetector does not restrict the schemes of URLs detected in user contents. *8. Authenticating Callers of Components* * * Android a. Activities Consider calling activities that need to know their caller using startActivityForResult(). The calleeActivity can then enforce the identity of the caller using getCallingPackage()and ensures that is non-null and the package that it expects. A signature check using PackageManager is the most effective way of ensuring the caller is from the same app family as the callee. b. Content Providers The user id of the caller can be obtained using Binder.getCallingUid(), and can be used for permission enforcement via signature checks. c. Broadcast Receivers There is no current way to get the identity of the initiator of the broadcast. For system broadcasts, ensure that you check the action string of the incoming intent to make sure an intent is coming from the system. d. Services Services can enforce the callerusing Binder.getCallingUid() and using signature checks. However services using the messaging IPC mechanism cannot get the caller uid in the handleMessage() callback. Consider using AIDL-based service calls for exposed services. iOS Rather than UIApplicationDelegate:application:handleOpenURL:, you may want to implement UIApplicationDelegate:application:openURL:sourceApplication:annotation: and use the sourceApplication to authenticate a URL caller over time. To mitigate spoofing of callers' URL schemes, the Facebook SDK also lets callers to the main app choose an encryption key for their response. *9. Use explicit intents andIntent hijacking [Android]* If private data is being transmitted in an intent, use explicit intents. Explicit intents ensure that the callee receiving the intent will be the one that the caller intended to receive the intent. Android provides ways to call components using implicit intents, however, keep in mind implicit intents could allow a malicious application to hijack the intent. If using implicit intents, you should dynamically resolve the receivers of the intent and perform signature checks before sending the intent. "setPackage" is also an option, which restricts the package that can receive an intent. However, this works only after Ice Cream Sandwich. *10. Open redirects* You could protect all your components with permissions and checks, however if there exists even one component in your application that takes a component as an input and redirects to that component, this could be used to circumvent all checks. Avoid this practice at all costs. *11. SQL injection* Android SQLLiteQueryBuilder is a standard way of building SQL queries for Android. However even though it seems to be safe against SQL injection attacks, underneath the hood its imply concatenates strings. This allows attackers to insert arbitrary clauses into the SQL statement. You must carefully sanitize user input strings to content providers that are exposed. iOS You should refrain from constructing SQL query strings directly and instead use a more abstract framework such as EGODatabase or FMDB. *12. Language-Based Vulnerabilities[iOS]* Objective C is susceptible to a variety of programming errors that can be exploited: * C fragments are vulnerable to the classical C vulnerabilities such as buffer overflows. * Zombie objects may be exploited. * User-dependent inputs occurring in format strings, selectors, or regular expressions may be exploited. * It is important to keep in mind that static types appearing in the code are not enforced at runtime. * Returning nil values on failures and unimplemented selectors is often ok. Yet, unexpected nil values can cause a crash with some library functions, and can yield unpredictable results in general (for instance [nil isEqualToString:nil] == 0). -- Kind regards, Alex Nyika

1 0

Of passwords and md5
by Peter Karunyu 06 Jun '13

06 Jun '13

I thought I was using good passwords, till today morning when I stumbled upon this article<http://arstechnica.com/security/2013/05/how-crackers-make-minced-meat-out-o…>by ARS Technica

8 25

Re: [Skunkworks] List of words or phrases in Swahili plus their English equivalents
by Martin Chiteri 06 Jun '13

06 Jun '13

Hi everyone, For those with some level of interest on this project, we now have a public Github repository hosting all our work: https://github.com/chiteri/shdnbi2013_machinelearning This will guide everyone on what we intend to do over the weekend. Thank you. Martin. On Thu, May 30, 2013 at 2:39 PM, Martin Chiteri <martin.chiteri(a)gmail.com>wrote: > Thank you, the previous link you sent was great too. > > Martin. > > > On Thu, May 30, 2013 at 1:53 PM, Christian Ledermann < > christian.ledermann(a)gmail.com> wrote: > >> http://opus.lingfil.uu.se/ >> >> >> >> On Thu, May 30, 2013 at 11:04 AM, Martin Chiteri >> <martin.chiteri(a)gmail.com> wrote: >> > Sure Christian, we will take a peep. >> > >> > Thank you and have a good day. >> > >> > Martin. >> > >> > >> > On Thu, May 30, 2013 at 10:21 AM, Christian Ledermann >> > <christian.ledermann(a)gmail.com> wrote: >> >> >> >> have also a look at >> >> http://www.clips.ua.ac.be/demos >> >> >> >> >> >> On Thu, May 30, 2013 at 4:15 AM, Henry Addo <addhen(a)gmail.com> wrote: >> >> > Harry works:-) >> >> > >> >> > >> >> > Henry! >> >> > -- >> >> > Be the change you want to see ~ Mahatma Gandhi. So stop complaining >> :-). >> >> > Website: http://www.findreels.com >> >> > >> >> > >> >> > >> >> > On Thu, May 30, 2013 at 10:13 AM, Martin Chiteri >> >> > <martin.chiteri(a)gmail.com> >> >> > wrote: >> >> >> >> >> >> ``Hello Harry .... " , "Hello Henry ...... " ..... Close enough >> ...... >> >> >> 8-) >> >> >> >> >> >> Martin. >> >> >> >> >> >> >> >> >> On Thu, May 30, 2013 at 4:06 AM, Martin Chiteri >> >> >> <martin.chiteri(a)gmail.com> >> >> >> wrote: >> >> >>> >> >> >>> Hello Harry, >> >> >>> >> >> >>> Thank you for your pointer. >> >> >>> >> >> >>> We have decided to take a slightly different approach. What we >> will do >> >> >>> is >> >> >>> to pull text from different entries on Wikipedia in both Swahili >> and >> >> >>> English. After that we will make computer(s) go through them in the >> >> >>> hope >> >> >>> that they will start to recognize patterns in the way words are >> used, >> >> >>> how >> >> >>> often, where and check maybe the rules of spelling and the general >> >> >>> structure >> >> >>> of sentences (grammar) in both languages. >> >> >>> >> >> >>> From what I have been informed, this is what usually happens with >> data >> >> >>> from the CMS experiment. You can get a rough idea of the ``type" of >> >> >>> event >> >> >>> (proton-proton collision) even if you don't know exactly what >> happened >> >> >>> to >> >> >>> the quarks when they collided. >> >> >>> >> >> >>> Martin. >> >> >>> >> >> >>> >> >> >>> >> >> >>> On Thu, May 30, 2013 at 3:38 AM, Henry Addo <addhen(a)gmail.com> >> wrote: >> >> >>>> >> >> >>>> You might want to check out kamusi.org if you haven't >> >> >>>> >> >> >>>> >> >> >>>> Henry! >> >> >>>> -- >> >> >>>> Be the change you want to see ~ Mahatma Gandhi. So stop >> complaining >> >> >>>> :-). >> >> >>>> Website: http://www.findreels.com >> >> >>>> >> >> >>>> >> >> >>>> >> >> >>>> On Wed, May 29, 2013 at 7:52 PM, Martin Chiteri >> >> >>>> <martin.chiteri(a)gmail.com> wrote: >> >> >>>>> >> >> >>>>> Thank you Christian and Kala, >> >> >>>>> >> >> >>>>> I had no idea that such resources were in existence. I will take >> >> >>>>> some >> >> >>>>> more time and have a look at them. >> >> >>>>> >> >> >>>>> Thank you gentlemen. >> >> >>>>> >> >> >>>>> Martin. >> >> >>>>> >> >> >>>>> >> >> >>>>> On Wed, May 29, 2013 at 11:59 AM, Emmanuel Kala >> >> >>>>> <emkala(a)googlemail.com> >> >> >>>>> wrote: >> >> >>>>>> >> >> >>>>>> The folks that publish the Swahili-English dictionary (I can't >> >> >>>>>> remember their name) ought to have a corpus in digital form >> that's >> >> >>>>>> lying >> >> >>>>>> somewhere. >> >> >>>>>> >> >> >>>>>> Also, if you're into computational linguistics, Google released >> >> >>>>>> their >> >> >>>>>> N-gram corpus a couple of years ago and it's available for >> >> >>>>>> download: >> >> >>>>>> >> >> >>>>>> >> http://googleresearch.blogspot.com/2006/08/all-our-n-gram-are-belong-to-you… >> >> >>>>>> >> >> >>>>>> On May 29, 2013, at 11:27 AM, Christian Ledermann >> >> >>>>>> <christian.ledermann(a)gmail.com> wrote: >> >> >>>>>> >> >> >>>>>> > and >> >> >>>>>> > >> >> >>>>>> > >> https://wiki.ushahidi.com/display/WIKI/Localization+and+Translation >> >> >>>>>> > >> >> >>>>>> > On Wed, May 29, 2013 at 11:24 AM, Christian Ledermann >> >> >>>>>> > <christian.ledermann(a)gmail.com> wrote: >> >> >>>>>> >> http://blog.ushahidi.com/2013/05/17/in-your-own-words/ >> >> >>>>>> >> >> >> >>>>>> >> On Wed, May 29, 2013 at 10:53 AM, Martin Chiteri >> >> >>>>>> >> <martin.chiteri(a)gmail.com> wrote: >> >> >>>>>> >>> Hello Skunks, >> >> >>>>>> >>> >> >> >>>>>> >>> I would like to request for a substantial amount of words, >> >> >>>>>> >>> phrases >> >> >>>>>> >>> or >> >> >>>>>> >>> sentences written in Swahili together with their >> equivalents in >> >> >>>>>> >>> the English >> >> >>>>>> >>> language. I know this is a tall order but I guess that some >> >> >>>>>> >>> people >> >> >>>>>> >>> on these >> >> >>>>>> >>> lists might have samples, perhaps from projects done for >> >> >>>>>> >>> translations (Bible >> >> >>>>>> >>> / Website / stand-alone systems internationalization efforts >> >> >>>>>> >>> and >> >> >>>>>> >>> so forth). >> >> >>>>>> >>> >> >> >>>>>> >>> The aim is to get enough material that will be used in a >> >> >>>>>> >>> machine >> >> >>>>>> >>> learning >> >> >>>>>> >>> based project in an upcoming Hackathon next month. We would >> >> >>>>>> >>> like >> >> >>>>>> >>> to train >> >> >>>>>> >>> machines to recognize phrases in the different languages >> then >> >> >>>>>> >>> attempt to use >> >> >>>>>> >>> similar techniques to make them detect various sub-atomic >> >> >>>>>> >>> particle >> >> >>>>>> >>> types >> >> >>>>>> >>> from another set of Physics data. >> >> >>>>>> >>> >> >> >>>>>> >>> Any help will be highly appreciated. Thank you. >> >> >>>>>> >>> >> >> >>>>>> >>> Martin. >> >> >>>>>> >>> >> >> >>>>>> >>> -- >> >> >>>>>> >>> You received this message because you are subscribed to the >> >> >>>>>> >>> Google >> >> >>>>>> >>> Groups >> >> >>>>>> >>> "Nairobi Python Users Group" group. >> >> >>>>>> >>> To unsubscribe from this group and stop receiving emails >> from >> >> >>>>>> >>> it, >> >> >>>>>> >>> send an >> >> >>>>>> >>> email to naipug+unsubscribe(a)googlegroups.com. >> >> >>>>>> >>> For more options, visit >> >> >>>>>> >>> https://groups.google.com/groups/opt_out. >> >> >>>>>> >>> >> >> >>>>>> >>> >> >> >>>>>> >> >> >> >>>>>> >> >> >> >>>>>> >> >> >> >>>>>> >> -- >> >> >>>>>> >> Best Regards, >> >> >>>>>> >> >> >> >>>>>> >> Christian Ledermann >> >> >>>>>> >> >> >> >>>>>> >> Nairobi - Kenya >> >> >>>>>> >> Mobile : +254 702978914 >> >> >>>>>> >> >> >> >>>>>> >> <*)))>{ >> >> >>>>>> >> >> >> >>>>>> >> If you save the living environment, the biodiversity that we >> >> >>>>>> >> have >> >> >>>>>> >> left, >> >> >>>>>> >> you will also automatically save the physical environment, >> too. >> >> >>>>>> >> But >> >> >>>>>> >> If >> >> >>>>>> >> you only save the physical environment, you will ultimately >> lose >> >> >>>>>> >> both. >> >> >>>>>> >> >> >> >>>>>> >> 1) Don’t drive species to extinction >> >> >>>>>> >> >> >> >>>>>> >> 2) Don’t destroy a habitat that species rely on. >> >> >>>>>> >> >> >> >>>>>> >> 3) Don’t change the climate in ways that will result in the >> >> >>>>>> >> above. >> >> >>>>>> >> >> >> >>>>>> >> }<(((*> >> >> >>>>>> > >> >> >>>>>> > >> >> >>>>>> > >> >> >>>>>> > -- >> >> >>>>>> > Best Regards, >> >> >>>>>> > >> >> >>>>>> > Christian Ledermann >> >> >>>>>> > >> >> >>>>>> > Nairobi - Kenya >> >> >>>>>> > Mobile : +254 702978914 >> >> >>>>>> > >> >> >>>>>> > <*)))>{ >> >> >>>>>> > >> >> >>>>>> > If you save the living environment, the biodiversity that we >> have >> >> >>>>>> > left, >> >> >>>>>> > you will also automatically save the physical environment, >> too. >> >> >>>>>> > But >> >> >>>>>> > If >> >> >>>>>> > you only save the physical environment, you will ultimately >> lose >> >> >>>>>> > both. >> >> >>>>>> > >> >> >>>>>> > 1) Don’t drive species to extinction >> >> >>>>>> > >> >> >>>>>> > 2) Don’t destroy a habitat that species rely on. >> >> >>>>>> > >> >> >>>>>> > 3) Don’t change the climate in ways that will result in the >> >> >>>>>> > above. >> >> >>>>>> > >> >> >>>>>> > }<(((*> >> >> >>>>>> > >> >> >>>>>> > -- >> >> >>>>>> > You received this message because you are subscribed to the >> >> >>>>>> > Google >> >> >>>>>> > Groups "Nairobi Python Users Group" group. >> >> >>>>>> > To unsubscribe from this group and stop receiving emails from >> it, >> >> >>>>>> > send an email to naipug+unsubscribe(a)googlegroups.com. >> >> >>>>>> > For more options, visit >> https://groups.google.com/groups/opt_out. >> >> >>>>>> > >> >> >>>>>> > >> >> >>>>>> >> >> >>>>>> -- >> >> >>>>>> You received this message because you are subscribed to the >> Google >> >> >>>>>> Groups "Nairobi Python Users Group" group. >> >> >>>>>> To unsubscribe from this group and stop receiving emails from >> it, >> >> >>>>>> send >> >> >>>>>> an email to naipug+unsubscribe(a)googlegroups.com. >> >> >>>>>> For more options, visit >> https://groups.google.com/groups/opt_out. >> >> >>>>>> >> >> >>>>>> >> >> >>>>> >> >> >>>>> -- >> >> >>>>> You received this message because you are subscribed to the >> Google >> >> >>>>> Groups "Nairobi Python Users Group" group. >> >> >>>>> To unsubscribe from this group and stop receiving emails from it, >> >> >>>>> send >> >> >>>>> an email to naipug+unsubscribe(a)googlegroups.com. >> >> >>>>> For more options, visit https://groups.google.com/groups/opt_out >> . >> >> >>>>> >> >> >>>>> >> >> >>>> >> >> >>>> >> >> >>>> -- >> >> >>>> You received this message because you are subscribed to the Google >> >> >>>> Groups "Nairobi Python Users Group" group. >> >> >>>> To unsubscribe from this group and stop receiving emails from it, >> >> >>>> send >> >> >>>> an email to naipug+unsubscribe(a)googlegroups.com. >> >> >>>> For more options, visit https://groups.google.com/groups/opt_out. >> >> >>>> >> >> >>>> >> >> >>> >> >> >>> >> >> >> >> >> >> -- >> >> >> You received this message because you are subscribed to the Google >> >> >> Groups >> >> >> "Nairobi Python Users Group" group. >> >> >> To unsubscribe from this group and stop receiving emails from it, >> send >> >> >> an >> >> >> email to naipug+unsubscribe(a)googlegroups.com. >> >> >> For more options, visit https://groups.google.com/groups/opt_out. >> >> >> >> >> >> >> >> > >> >> > >> >> > -- >> >> > You received this message because you are subscribed to the Google >> >> > Groups >> >> > "Nairobi Python Users Group" group. >> >> > To unsubscribe from this group and stop receiving emails from it, >> send >> >> > an >> >> > email to naipug+unsubscribe(a)googlegroups.com. >> >> > For more options, visit https://groups.google.com/groups/opt_out. >> >> > >> >> > >> >> >> >> >> >> >> >> -- >> >> Best Regards, >> >> >> >> Christian Ledermann >> >> >> >> Nairobi - Kenya >> >> Mobile : +254 702978914 >> >> >> >> <*)))>{ >> >> >> >> If you save the living environment, the biodiversity that we have left, >> >> you will also automatically save the physical environment, too. But If >> >> you only save the physical environment, you will ultimately lose both. >> >> >> >> 1) Don’t drive species to extinction >> >> >> >> 2) Don’t destroy a habitat that species rely on. >> >> >> >> 3) Don’t change the climate in ways that will result in the above. >> >> >> >> }<(((*> >> >> >> >> -- >> >> You received this message because you are subscribed to the Google >> Groups >> >> "Nairobi Python Users Group" group. >> >> To unsubscribe from this group and stop receiving emails from it, send >> an >> >> email to naipug+unsubscribe(a)googlegroups.com. >> >> For more options, visit https://groups.google.com/groups/opt_out. >> >> >> >> >> > >> > -- >> > You received this message because you are subscribed to the Google >> Groups >> > "Nairobi Python Users Group" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an >> > email to naipug+unsubscribe(a)googlegroups.com. >> > For more options, visit https://groups.google.com/groups/opt_out. >> > >> > >> >> >> >> -- >> Best Regards, >> >> Christian Ledermann >> >> Nairobi - Kenya >> Mobile : +254 702978914 >> >> <*)))>{ >> >> If you save the living environment, the biodiversity that we have left, >> you will also automatically save the physical environment, too. But If >> you only save the physical environment, you will ultimately lose both. >> >> 1) Don’t drive species to extinction >> >> 2) Don’t destroy a habitat that species rely on. >> >> 3) Don’t change the climate in ways that will result in the above. >> >> }<(((*> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Nairobi Python Users Group" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to naipug+unsubscribe(a)googlegroups.com. >> For more options, visit https://groups.google.com/groups/opt_out. >> >> >> >

1 0

ISP - engineering role
by John Gitau 05 Jun '13

05 Jun '13

A local ISP very high growth is looking for an experienced engineer to join their team. You absolutely MUST have a CCNP (their network their requirements) and some experience specifically with BGP and OSPF. Again those two are a must know - hence the ccnp requirement on the assumption you didn't dump your way through it. Either way the interview process will ensure this wont be an issue. It would help if you have sat through a routing class with afnog or isoc or any of my past routing classes:-) Base remuneration should start at 130k and your powers of persuasion can probably get that higher. Much much higher. If interested and feel you meet the criteria, please forward send me an email jgitau(a)gmail.com stating your interest and I'll put you through to the right people. JGitau

2 1

Re: [Skunkworks] Duping Google!
by William Muriithi 05 Jun '13

05 Jun '13

> > Google seems to retain alot of information about account activity. > > I created mine in India ages ago, and when I'm logging out, I still see > alot of <google.co.in> as I get logged out. It's possible Google just > defaulted your account to Kenya, (don't ask me how they did that....) > > I agree with you here. Think they domicile accounts to specific regions to assist in tracking suspicious activities. They most likely keep a history of where you are located the last 6 hours and if account show up across the other side of the world all of a sudden, it could indicate account hijacking. Seen that on Facebook too. I don't have a Facebook account so I can't see what's in a friends profile. A friend of mine just sent her password to get around the problem and I couldn't log on to her Facebook account. The only possible explanation was the geographic distance. Muriithi > On 4 June 2013 12:57, Odhiambo Washington <odhiambo(a)gmail.com> wrote: > > > Yes, I am logged into a PC in the UK, and no, I am not installing any > > device(s). I am trying to purchase something that is sold in the Google > > Play - sold in the US and the UK. I have a UK address I'd like this item > > shipped to. > > When I get to the point of checkout, I am asked to login and the moment I > > do with my gmail account, I get presented with that notification. I need a > > way to circumvent it. > > > > > > On 4 June 2013 12:52, mash lists <mashlists(a)gmail.com> wrote: > > > >> You are logged in the UK but the device you are trying to install in is > >> in Kenya right? > >> > >> > >> On 4 June 2013 12:46, Odhiambo Washington <odhiambo(a)gmail.com> wrote: > >> > >>> Do I really need this extension when the PC is actually sitting in the > >>> UK? I think there is something in my Gmail profile that they are checking. > >>> > >>> > >>> On 4 June 2013 12:42, Dennis Kioko <dmbuvi(a)gmail.com> wrote: > >>> > >>>> There's a chrome extension for that, can't remember the name now that > >>>> I'm away from my PCs. > >>>> > >>>> Turn it on, and voila, you are in the US or UK. > >>>> > >>>> _______________________________________________ > >>>> skunkworks mailing list > >>>> skunkworks(a)lists.my.co.ke > >>>> ------------ > >>>> List info, subscribe/unsubscribe > >>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > >>>> ------------ > >>>> > >>>> Skunkworks Rules > >>>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > >>>> ------------ > >>>> Other services @ http://my.co.ke > >>>> > >>> > >>> > >>> > >>> -- > >>> Best regards, > >>> Odhiambo WASHINGTON, > >>> Nairobi,KE > >>> +254733744121/+254722743223 > >>> "I can't hear you -- I'm using the scrambler." > >>> > >>> _______________________________________________ > >>> skunkworks mailing list > >>> skunkworks(a)lists.my.co.ke > >>> ------------ > >>> List info, subscribe/unsubscribe > >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > >>> ------------ > >>> > >>> Skunkworks Rules > >>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > >>> ------------ > >>> Other services @ http://my.co.ke > >>> > >> > >> > >> _______________________________________________ > >> skunkworks mailing list > >> skunkworks(a)lists.my.co.ke > >> ------------ > >> List info, subscribe/unsubscribe > >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > >> ------------ > >> > >> Skunkworks Rules > >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > >> ------------ > >> Other services @ http://my.co.ke > >> > > > > > > > > -- > > Best regards, > > Odhiambo WASHINGTON, > > Nairobi,KE > > +254733744121/+254722743223 > > "I can't hear you -- I'm using the scrambler." > > > > _______________________________________________ > > skunkworks mailing list > > skunkworks(a)lists.my.co.ke > > ------------ > > List info, subscribe/unsubscribe > > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > > ------------ > > > > Skunkworks Rules > > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > > ------------ > > Other services @ http://my.co.ke > > > > > > -- > Thanks and Regards, > Kariuki James Wanjau, > (+254) 0717-315-092 >

5 10

Rs forms for joomla 2.5
by Susan Makhanu 05 Jun '13

05 Jun '13

Hi all, Has anyone come across Rs Forms for joomla 2.5 I can download for free??? Regards, ___________________________________________ Susan Makhanu, Web Administration, ICT Services Maseno University Cell: +254-712-984774

2 1

Python's hardest problem: The "GIL of death"
by Martin Chiteri 05 Jun '13

05 Jun '13

Nice article on the issue: http://www.jeffknupp.com/blog/2012/03/31/pythons-hardest-problem/ Saw it first from this G+ post by Ian Bicking <http://www.ianbicking.org/>(now at Mozilla, creator <http://www.ianbicking.org/blog/> of VirtualEnv, pip and towtruck among a host of other Python and JavaScript tools) https://plus.google.com/+IanBicking/posts/SY6745qEQAb Martin.

1 0

Portable Hand-Held Scanners
by Jac 05 Jun '13

05 Jun '13

Hey Anyone who knows where I can get hand held scanner that I can use to scan a book or documents that are already bonded(binding)? Something like this: http://www.youtube.com/watch?v=fIz03cTGCAY I need one urgerntly. Nay leads? Thanks -- Jackson Gathoni

4 4

Looking for a Wordpress /Drupal Developer
by njuguna waweru 05 Jun '13

05 Jun '13

Hi Team. I'm currently looking for a person who is good in Wordpress and Drupal - Plug-ins and Themes. He/she should also have a bias in graphic design. The job is a short contract for about a week. Kindly send me your C.V via systemz88(a)gmail.com. Thanks.

1 0