April 2015 - skunkworks - Skunkworks Site

Fwd: SIP Trunk Providers - KE
by Odhiambo Washington 27 Jun '18

27 Jun '18

FYI I got this in my personal Inbox after the post. Perhaps some of you would like to comment about their experience with SimbaNET SIP Trunks. I never knew they existed. ---------- Forwarded message ---------- From: Dragan Dincic <dragan(a)simbanet.co.ke> Date: 20 August 2013 17:08 Subject: RE: [Skunkworks] SIP Trunk Providers - KE To: odhiambo(a)gmail.com SimbaNET provides SimbaTRUNK service.**** ** ** This services gives you a free Nairobi number and SIP trunk for 20$ a month for 30 channels. Local termination rates are like 2.99 Ksh for mobile and 2.39 Ksh for fixed. Most of the international destinations go for 2.33 Ksh (UK, USA, India, Europe) …**** ** ** SimbaTRUNK is on the market for at least last 6 months …**** ** ** ** ** Regards,**** [image: Dragan - SimbaNet Email Signature]**** ------------------------------ Wananchi Group Disclaimer and Confidentiality Note **** The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. The views expressed herein are those of the sender and not of the Wananchi Group. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. *http://www.zuku.co.ke***** ** ** -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."

7 12

Bitcoins
by Mark Mwangi 17 Jan '18

17 Jan '18

Is anyone here minting bitcoins? 1 is trading now for 60 dollars. I am regretting why I did not start minting years ago when they had just been launched. http://bitcoin.org/ -- Regards, Mark Mwangi markmwangi.me.ke

26 60

CERN NEWS : Are we there yet on the search for the Higgs boson ?
by Martin Chiteri 04 Jul '17

04 Jul '17

Video on youtube [ http://www.youtube.com/watch?v=2U9VyT5zevc ] There shall be a special seminar broadcast on the 4th of July, 2012 at [ http://webcast.web.cern.ch ] The Higgs' boson explained, Comic strip: [ http://vimeo.com/41038445 ] Martin.

9 29

Definitive How to for ZTE orange on ubuntu..
by [Brainiac] 15 Dec '16

15 Dec '16

Hello good people, if any of you have been successful in configuring the ZTE 3G+ modems on ubuntu, kindly share the procedure. Cheers. -- *“The twentieth century has been characterized by three developments of great political importance: the growth of democracy, the growth of corporate power, and the growth of corporate propaganda as a means of protecting corporate power against democracy”* ~ Alex Carey ~ Tel No: 0x2af23696

5 7

Home Theatres comparison
by Dennis Kioko 08 Nov '16

08 Nov '16

So, After more than 6 years of listening to music on my Creative SBS A300s and Logitec/Sennheiser earphones , I think I'm becoming deaf and therefore no longer in a position to appreciate the bass in the Creatives. I would like to replace them with a hometheatre that offers some great sound reproduction in the 50 Hz range upwards. However, I am surprised that most of what I am seeing here ( http://www.jumia.co.ke/home-theatre/) does not offer bluetooth pairing or even DNLA. I thought stuff in this age should even have a mobile app to control the damn thing? Are the Koreans and Japanese running out of steam? -- with Regards: blog.denniskioko.com <http://www.denniskioko.com/>

29 89

NMG Paywall or No Paywall
by Stephen Wanjau 19 Sep '16

19 Sep '16

Hey, I tried going to http://epaper.nationmedia.com/epaper/index.htm to read today's paper but on trying to navigate to page 2 I am prompted for a username and password which I gladly enter. However, when one clicks the download option they are redirected to a pdf version of the paper hosted at http://downloads.realviewtechnologies.com/Nation%20Media/Daily%20Nation/Mar… <hack_or_not>To access last weeks paper from another browser (where I am not logged in) I just used the same download URL but changed the date.</hack_or_not> What is the essence of having the paywall then? Stephen Wanjau Tel:+254 722 238 165 | Skype ID: mana.nas | Twitter ID: uwanja <http://www.twitter.com/uwanja> | *It is within reach. Believe it. *

19 26

Penetration Testing Companies
by Wilson Bandi 31 May '16

31 May '16

Hi Skunks, Kindly advice on any Pen-Test companies to contact me urgently. Thank you. -- Kind Regards, Wilson B.

4 3

resolved? no mail for 3 weeks
by Davis Mmare 16 May '16

16 May '16

no mails

14 26

[OT] AT&T Phone Unlock Codes
by Alex Ngatia 07 Mar '16

07 Mar '16

Happy new year skunks, Anyone dealing with this? I'd like to get a Galaxy S4 and Lumia 920 locked, both locked to AT&T. Please send me a quote off list. Regards, Alex

4 4

Bitcoin Predictions
by Patrick Kariuki 04 Nov '15

04 Nov '15

Around this time last year the Bitcoin made the great leap.. no telling what will happen this year - although all bets are on the 1st quarter of 2015. Any pipe dream predictions? :-)

7 26

Farm management software
by Ian Macharia 03 Nov '15

03 Nov '15

Hi Skunks, I am looking for a software(preferably open source) to manage farm operations this should include but not limited to: - inventory of farm inputs both for plants (seeds, fertilizer, pesticides, labour,) and animals (medicine, dairy feed, vet costs). - inventory of outputs from plants(harvest volumes) and animals(milk volumes, meat volumes). - inventory of farm machinery(tractors, generators, pumps, cars, trucks, etc). - records of farm machinery maintenance like fuel, service, parts. Thanks and regards, Ian

4 3

Request Tracker Ticketing System
by Humphrey Forum 28 Oct '15

28 Oct '15

Hello, Anybody out there who can assist in giving details on how to configure Request Tracker Ticketing System. The system has been written in Perl. I have managed to intall it but have been unable to configure it to pop E-Mails. Your assistance will be appreciated. Regards, Humphrey

6 12

help desk software
by Jacinta Gugu 28 Oct '15

28 Oct '15

Does anyone know of a good opens source helpdesk software, where clients report their issues to the IT team to be worked on ..

4 3

USSD App
by Dennis Mureithi 30 Sep '15

30 Sep '15

Dear Skunks, I have created a web service to manage sessions for a USSD application. What is the process of taking it to production? Precisely, can I acquire a short-code directly from mobile service provider or do i have to get that from a PRSP? Second, if I have to use a PRSP do I have to host the webservice with the or can I host it at my own server? Kindly advise. Kind regards -- * To follow the path: look to the master, follow the master, walk with the master, see through the master, become the master.* *- Zen Poem*

8 10

Bulk E-Mailing
by Ken Muturi 24 Sep '15

24 Sep '15

I want to write a bulk emailing app (PHP/MYSQL), am worried about server loads and host guy blocking my site ?? Which is the best/appropriate approach for writing this app.

6 7

Re: [Skunkworks] NCC Mobile County App Security
by John K. 29 Jul '15

29 Jul '15

Also please inform them of the fact that a brute force attack on their api is trivially simple to do. And since we know the PIN is a four digit number, it means there are only a max of 9999 combinations. They should either rate limit the API, or lock the account after X number of failed attempts, and require another form of authentication, either an sms, email, captcha etc I personally would not use the same PIN i use for mpesa/debit cards with their service until this is done, and I recommend the same for all skunks. On 24 February 2015 at 15:03, Jimmy Thuo <jimmy.thuo(a)gmail.com> wrote: > Ok thanks will link them up. > > On Tue, Feb 24, 2015 at 2:39 PM, John K. <kamau.john(a)gmail.com> wrote: > >> I'm not a pen tester myself, Gichuki (chuksjonia(a)gmail.com) who is on >> this list (and thread) is a pen tester, hopefully JamboPay can liaise >> with him/his company on some testing. >> >> On 24 February 2015 at 13:55, Jimmy Thuo <jimmy.thuo(a)gmail.com> wrote: >> >>> Hi John >>> I have a contact at JamboPay. If you are a pen tester or know someone >>> who is, Recommend them I can link you up with JamboPay. They need the >>> service. >>> >>> On Tue, Feb 24, 2015 at 7:07 AM, John K. via skunkworks < >>> skunkworks(a)lists.my.co.ke> wrote: >>> >>>> Some progress, seen that they have updated the app, they however didn't >>>> take into consideration existing users, and so the previous version of the >>>> app now crashes if you try and do any transaction. Seems the dev and >>>> product guys need to synchronize their activities. Now they face the >>>> massive task of dealing with support issues regarding the previous version >>>> which now no longer works, and crashes with the "unfortunately, x app has >>>> stopped" android error. >>>> >>>> In summary >>>> >>>> Good to see: >>>> >>>> 1. Https (finally) >>>> 2. No longer using hardcoded ip, now the api calls >>>> epayments.nairobi.go.ke >>>> >>>> >>>> >>>> Still needs work >>>> >>>> 1. API calls done over plain http should not be allowed. https >>>> should be the only way to communicate with the server. Should an internal >>>> developer ever forget to use a url that starts with https, then the call >>>> wouldn't work, otherwise the plain text communication would slip through to >>>> the production version. >>>> 2. The user PIN still being sent over each request. Still not good >>>> as a simple brute force attack of the main login API can reveal any users' >>>> pin, and only 9999 requests are required. >>>> >>>> >>>> On a final note, since the devs are obviously on this list, can any one >>>> of them please respond to this thread. Collaboration is how security is >>>> done, watching a thread and silently fixing issues while good, is not >>>> enough. Get involved, pull in some professional pen testers to see what >>>> other vulnerabilities your system has. The bad guys are also reading this >>>> thread, and unlike the rest of us, they won't post their findings. >>>> >>>> On 12 February 2015 at 18:37, Okechukwu <okechukwu(a)gmail.com> wrote: >>>> >>>>> Or just a wireshark installation on your laptop and your mobile phone >>>>> connecting to the same access point can tell you what protocols your apps >>>>> are using >>>>> >>>>> ./Ok3ch >>>>> >>>>> On Tue, Feb 10, 2015 at 10:01 PM, John K. via skunkworks < >>>>> skunkworks(a)lists.my.co.ke> wrote: >>>>> >>>>>> @Benjamin Force the device to use your own custom proxy that you can >>>>>> then monitor all traffic through it. In android it would mean when >>>>>> connecting to wifi, choose advanced, then enter your own proxy and port. >>>>>> >>>>>> On 10 February 2015 at 06:50, Gichuki John Chuksjonia via skunkworks >>>>>> <skunkworks(a)lists.my.co.ke> wrote: >>>>>> >>>>>>> Their domain is https://epayments.nairobi.go.ke/selfservice/login >>>>>>> >>>>>>> i haven't checked SSL on them, but i wonder if it is, or even whether >>>>>>> they have tested security on them or have any form of security >>>>>>> standards. >>>>>>> >>>>>>> On 2/10/15, Benjamin Muraguri via skunkworks < >>>>>>> skunkworks(a)lists.my.co.ke> wrote: >>>>>>> > How are you able to tell whether a mobile app uses SSL? Even for >>>>>>> say an >>>>>>> > email or banking app. For web applications, the URL gives it away, >>>>>>> but for >>>>>>> > a mobile application, how can one tell whether data is being >>>>>>> transmitted >>>>>>> > securely? >>>>>>> > >>>>>>> > On Tue Feb 10 2015 at 13:40:48 John K. via skunkworks < >>>>>>> > skunkworks(a)lists.my.co.ke> wrote: >>>>>>> > >>>>>>> >> Seems they may have patched the site, still waiting for a fix for >>>>>>> the >>>>>>> >> app. >>>>>>> >> I'll keep checking, for now the previous advice remains. Do not >>>>>>> use the >>>>>>> >> app >>>>>>> >> until they at the very minimum, enforce SSL. >>>>>>> >> >>>>>>> >> >>>>>>> >> >>>>>>> >> On a side note, can the devs explain why they are using a hard >>>>>>> coded IP? >>>>>>> >> If the IP tomorrow is not available, all installed apps become >>>>>>> useless? >>>>>>> >> Many users have no idea how to update apps, so, saying you'll >>>>>>> force an >>>>>>> >> update is not an option. >>>>>>> >> >>>>>>> >> >>>>>>> >> >>>>>>> >> >>>>>>> >> >>>>>>> >> >>>>>>> >> On Monday, February 9, 2015, Allan O. via skunkworks < >>>>>>> >> skunkworks(a)lists.my.co.ke> wrote: >>>>>>> >> >>>>>>> >>> Looks like they've taken measures to resolve those issues? >>>>>>> >>> >>>>>>> >>> On Sat, Feb 7, 2015 at 3:23 PM, John K. via skunkworks < >>>>>>> >>> skunkworks(a)lists.my.co.ke> wrote: >>>>>>> >>> >>>>>>> >>>> Anyone know the dev's of the Nairobi County App at JamboPay? >>>>>>> Need to >>>>>>> >>>> notify them of some serious security concerns in their app. >>>>>>> Seroius to >>>>>>> >>>> the >>>>>>> >>>> point that I won't use the app until they are patched. >>>>>>> >>>> >>>>>>> >>>> And if anyone on this list uses it, please don't use the same >>>>>>> PIN you >>>>>>> >>>> use for other secure services like Mpesa, atm etc until these >>>>>>> issues >>>>>>> >>>> are >>>>>>> >>>> patched. >>>>>>> >>>> >>>>>>> >>>> >>>>>>> >>>> >>>>>>> >>>> _______________________________________________ >>>>>>> >>>> skunkworks mailing list >>>>>>> >>>> skunkworks(a)lists.my.co.ke >>>>>>> >>>> ------------ >>>>>>> >>>> List info, subscribe/unsubscribe >>>>>>> >>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>>>>> >>>> ------------ >>>>>>> >>>> >>>>>>> >>>> Skunkworks Rules >>>>>>> >>>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>>>>>> >>>> ------------ >>>>>>> >>>> Other services @ http://my.co.ke >>>>>>> >>>> >>>>>>> >>> >>>>>>> >>> _______________________________________________ >>>>>>> >> skunkworks mailing list >>>>>>> >> skunkworks(a)lists.my.co.ke >>>>>>> >> ------------ >>>>>>> >> List info, subscribe/unsubscribe >>>>>>> >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>>>>> >> ------------ >>>>>>> >> >>>>>>> >> Skunkworks Rules >>>>>>> >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>>>>>> >> ------------ >>>>>>> >> Other services @ http://my.co.ke >>>>>>> > >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> -- >>>>>>> Gichuki John Ndirangu, C.E.H , C.P.T.P, O.S.C.P >>>>>>> I.T Security Analyst and Penetration Tester >>>>>>> jgichuki at inbox d0t com >>>>>>> >>>>>>> {FORUM}http://lists.my.co.ke/pipermail/security/ >>>>>>> http://chuksjonia.blogspot.com/ >>>>>>> >>>>>>> _______________________________________________ >>>>>>> skunkworks mailing list >>>>>>> skunkworks(a)lists.my.co.ke >>>>>>> ------------ >>>>>>> List info, subscribe/unsubscribe >>>>>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>>>>> ------------ >>>>>>> >>>>>>> Skunkworks Rules >>>>>>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>>>>>> ------------ >>>>>>> Other services @ http://my.co.ke >>>>>>> >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> skunkworks mailing list >>>>>> skunkworks(a)lists.my.co.ke >>>>>> ------------ >>>>>> List info, subscribe/unsubscribe >>>>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>>>> ------------ >>>>>> >>>>>> Skunkworks Rules >>>>>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>>>>> ------------ >>>>>> Other services @ http://my.co.ke >>>>>> >>>>> >>>>> >>>> >>>> _______________________________________________ >>>> skunkworks mailing list >>>> skunkworks(a)lists.my.co.ke >>>> ------------ >>>> List info, subscribe/unsubscribe >>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>> ------------ >>>> >>>> Skunkworks Rules >>>> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >>>> ------------ >>>> Other services @ http://my.co.ke >>>> >>> >>> >>> >>> -- >>> Best Regards >>> Jimmy Thuo >>> >> >> > > > -- > Best Regards > Jimmy Thuo >

3 3

Equitel Thin SIMs
by Mark Mwangi 20 Jul '15

20 Jul '15

Hey, Anyone using or tried out these thin SIMS from Equity? Thoughts? -- Regards, Mark Mwangi markmwangi.me.ke

16 23

OT - CITY COUNCIL OF NAIROBI WEBSITE
by Ken Teyie 16 Jul '15

16 Jul '15

The City Council of Nairobi or the Town Clerk must be a sleeping lot. Their 'official' site http://www.nairobicity.org still recognizes Dick Wathika as the Mayor and John Gakuo as the town clerk. Or do they have another site? Which one is it? Anyone knows? -- KT, M: +254 722 28 98 04 www.mondeas.com “When you are busy making excuses, you are not making money, making friends, or making the world a better place. Every loser out there has an excuse as to why they’re not a winner – but at the end of the day, they’re still a loser with an excuse.” -Tana Goertz

6 5

Re: [Skunkworks] Samsung SSD EVO840
by dwahome＠gmail.com 13 Jul '15

13 Jul '15

what capacity and at what cost? R D ----- Reply message ----- From: "Watson Kambo" <wkwats(a)gmail.com> To: "Skunkworks forum" <skunkworks(a)lists.my.co.ke> Subject: [Skunkworks] Samsung SSD EVO840 Date: Fri, May 9, 2014 10:00 Hello All, I finally got my hands on the SSD drive did the clone for my laptop and I can tell you am impressed, the boot up time has halved, loading my programs is much quicker and searching my files is a bliss. Guys this is it I love it, I do not need to upgrade my Core i5 an time soon, and having suffered a great loss recently when my Laptops Hard drive and my Backup disk both failed (My laptop bag had a slight accident :-)). I hope this at-least helps in case. Oh and the laptop is much much quieter. BR// -- Watson Kambo

2 1

e-citizen
by James Njoroge 07 Jul '15

07 Jul '15

Hi skunks, Does anyone know the firm / consultant who built this portal? I have a few good ideas.

11 11

iphone 4 orange uk
by Laban Jacobs 23 Jun '15

23 Jun '15

anyone that can factory unlock iPhone 4 Orange UK?

5 8

Re: [Skunkworks] TV Card that is digital compliant
by William Muriithi 19 Jun '15

19 Jun '15

> > > > I am looking for a tv card for my laptop that is digital/analog, > > preferably external, I have asked in CBD but guys have analogue only TV > > cards. This set-top box thing is going to stress me. > > A TV card for laptop, never seen a TV laptop but you may have luck with pcie desktop cards. Subscribe to a mythTV user group somewhere and you will get a solid answer. > > Any ideas where I can get one? > > > > _______________ Muriithi ________________________________ > > skunkworks mailing list > > skunkworks(a)lists.my.co.ke > > ------------ > > List info, subscribe/unsubscribe > > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > > ------------ > > > > Skunkworks Rules > > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > > ------------ > > Other services @ http://my.co.ke > > > > > > -- > Best regards, > Odhiambo WASHINGTON, > Nairobi,KE > +254733744121/+254722743223 > "I can't hear you -- I'm using the scrambler." >

4 5

KRA imposing taxes on cloud services for individuals?
by Sammy Njoroge 18 Jun '15

18 Jun '15

Does this mean you'd be billed VAT inclusive for your web hosting, Angani, dropbox, google apps & cloud..... ------------------------------------------- Dear AWS Customer, Due to changes in Kenyan value added tax ("VAT") legislation, sales of electronically supplied services to non-business customers located in Kenya may be subject to VAT. If you qualify as a business customer and would like to ensure that you are not charged VAT on AWS offerings, please respond to this email with your account number and your company's valid Kenyan Personal Identification Number. Sincerely, Amazon Web Services

6 5

president website
by Oliver Ndegwa 12 Jun '15

12 Jun '15

Someone help, this site has been like this for weeks now. I dont know if the admin is waiting for Uhuru Kenyatta to come fix it himself. Save the president such embarrassments. Someone needs to be fired. http://www.president.go.ke/www/en/index.php Oliver

19 21

Nanostation 2.4GHZ
by Collins Areba 21 May '15

21 May '15

Hello friends, I need the above mentioned. (Im not sure of the exact brand names, but I want a 2.4GHZ unit. The modern day equivalent to the old NS2. Regards, -- Regards, Collins Areba, P.O Box 44441, 00100 Nairobi, Kenya. Tel: +254 707 750 788 / 720 516 758 Twitter: @arebacollins. Skype: arebacollins

4 4