- skunkworks - Skunkworks Site

Open Web Application Security Project (OWASP) Kenya Chapter
by wycliffe 06 Apr '09

06 Apr '09

Dear All, This is to let you know that we have started OWASP Kenya chapter. The Open Web Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of application software - develop,purchase, test and maintain secure applications. OWASP mission is to make application security visible,so that people and organizations can make informed decisions about true application security risks. Everyone is free to participate in OWASP and all of OWASP materials are available under a free and open software license It is our hope that this community will attract developers, security practitioners,operators, vendors,students...generally any interested parties Please help me in spreading the word to your friends, colleagues,study groups. Please visit OWASP kenyan Chapter using the link below: https://www.owasp.org/index.php/Kenya You could join the Kenyan mailing list through the link below https://lists.owasp.org/mailman/listinfo/owasp-kenya Regards, Wycliffe omondiOWASP Kenya Chapter leader

2 1

access a LINUX NFS share from a winXP PC
by ukuta ken 06 Apr '09

06 Apr '09

Do i need to install anything extra on the winXP PC?

2 3

VoIP Calls via 888 short code
by Odhiambo Washington 06 Apr '09

06 Apr '09

Hello skunks, One can make VoIP calls via Safaricom and Orange/TLK but dialing 888-CC-AC-NUMBER. I have tested this with Orange/TKL and the quality is really good (or was I lucky?). I am wondering how they implement this service. Who is their upstream provider, if any? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ "Clothes make the man. Naked people have little or no influence on society." -- Mark Twain

5 4

Re: [Skunkworks] mobile technology
by fyodor 06 Apr '09

06 Apr '09

All. Its funny how we all went complaining of how much noise is on skunkworks, then it goes under for a week, we go all sulky and mood less, once its back, its flaming time....:) I would recommend a really good book titled "Nudge"...kinda explains it all. BTW there is a forum still on test runs where you have a chance to say anything in specific categories. Kindly check it out if you are interested. http://my.co.ke/phpbb/index.php -tyrus _IEEE Member -- Want to help people? Click here to learn more about human resource training. http://tagline.hushmail.com/fc/BLSrjkqZ6IVx8HB3n9qOrARjUCRPConTe9ZFDR8UzXzL…

1 0

Anyone experiencing probs with accesskenya
by Kevin Ouma 06 Apr '09

06 Apr '09

Hi, Is anyone on this forum with AccessKenya, We have over the last year been experiencing a good service from them but this has severely deteroriated over the last 2 weeks. Also if anyone working for an ISP other than access please contact me on PM as we would like to change ISPs if this problem persists. Kev

1 0

Re: [Skunkworks] Fwd: KRA has gone online...but!
by fyodor 06 Apr '09

06 Apr '09

Mr Kihahu, Am actually on it and the team of devel guys working on this are taking the above stated point very seriously cuz we cant and shouldnt be tied to one browser...like seriously. Had a talk with Vincent(dunno if he is around) sometime back but he hasnt reverted yet. This would be a great chance. -tyrus _IEEE Member On Sun, 05 Apr 2009 13:24:40 +0300 john kihahu <kihahu(a)gmail.com> wrote: >*Lets not just be critics acting like our politicians!!* Fyodor, >you know >you need to contact some1 bout it n I'm sure you know who that >person is! > > > > > > > >If you notice this notice you will notice that this notice is not >worth >noticing > > >On Sun, Apr 5, 2009 at 12:19, Solomon Mburu <solo.mburu(a)gmail.com> >wrote: > >> Yes Georg, I can attest to that! >> >> Such a pathetic way of telling someone thank you!!! >> >> >> >> 2009/4/5 George Githinji <georgkam(a)gmail.com> >> >>> This is total crap! >>> https://forodha.kra.go.ke/ >>> >>> trying accessing this URL and from latest firefox browser and >it displays >>> a message. >>> Simba 2005 can only accessed using >>> *Microsoft Internet Explorer Version 5.0 and above*. >>> >>> >>> I can't believe it! >>> >>> On Sat, Apr 4, 2009 at 9:00 PM, Solomon Mburu ><solo.mburu(a)gmail.com>wrote: >>> >>>> >>>> Dear Skunks and Skunkettes, >>>> >>>> At least we are back and right on course! >>>> >>>> The other day I went to Times Tower (Tower Wing) to apply for >a VAT >>>> certificate from KRA. The lady at the reception bluntly >refused to have my >>>> documents saying KRA is no longer accepting manual >applications either for >>>> VAT or PIN. She further told me to log on to >www.kra.go.ke/portal and >>>> I'd be able to register the details of my company, as long as >it is a valid >>>> and legal entity. >>>> >>>> When I logged on to the site, which is too colourful for my >'ageing' >>>> eyes, I finally clicked on the Taxpayer >Registration<https://mapato1.kra.go.ke/itms>just under the E- >registration services I entered the company's PIN number >>>> and all the details about the company were on my screen. >>>> Now, the funny part is that when I set a new password and >waited for next >>>> page to open, I was told that the agent (who registered my >company) does not >>>> exist on the Integrated Tax Management System of KRA. So I >cannot proceed >>>> with the registration for a VAT certificate. >>>> >>>> Then I gave a shot at my PIN and interestingly, the PIN number >does not >>>> exist on the ITMS of KRA again. I've tried this on a number of >occasions >>>> without getting any through. (I tried using my friends PIN and >his worked, >>>> though it later asked for his parent's names). Could it be >that PIN >>>> certificates can be fake? And can KRA really isue fake PIN >certificates? >>>> >>>> Anyone amongst you who has experienced a problem with the KRA >portal? >>>> >>>> It really gets into my nerves! >>>> >>>> Mburu >>>> >>>> -- >>>> Man is a gregarious animal and enjoys agreement as cows will >graze all >>>> the same way to the side of a hill! >>>> >>>> >>>> >>>> >>>> -- >>>> Man is a gregarious animal and enjoys agreement as cows will >graze all >>>> the same way to the side of a hill! >>>> >>>> >>>> _______________________________________________ >>>> Skunkworks mailing list >>>> Skunkworks(a)lists.my.co.ke >>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>> >>>> >>> >>> >>> -- >>> --------------- >>> Sincerely >>> George >>> >>> Skype: george_g2 >>> Blog: http://biorelated.wordpress.com/ >>> >>> _______________________________________________ >>> Skunkworks mailing list >>> Skunkworks(a)lists.my.co.ke >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>> >>> >> >> >> -- >> Man is a gregarious animal and enjoys agreement as cows will >graze all the >> same way to the side of a hill! >> >> >> _______________________________________________ >> Skunkworks mailing list >> Skunkworks(a)lists.my.co.ke >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> >>Since am not allowed to destroy money cuz it belongs to the Govt, it means they can ask it back any moment......oh wait, its called Taxes!! -- Easy-to-use, advanced features, flexible phone systems. Click here for more info. http://tagline.hushmail.com/fc/BLSrjkqmC5tQrb7QKAgscoTSiXmjgyNJ52cqeRDqbJAK…

3 2

Re: [Skunkworks] Fwd: KRA has gone online...but!
by fyodor 06 Apr '09

06 Apr '09

Mr Kihahu, Am actually on it and the team of devel guys working on this are taking the above stated point very seriously cuz we cant and shouldnt be tied to one browser...like seriously. Had a talk with Vincent(dunno if he is around) sometime back but he hasnt reverted yet. This would be a great chance. -tyrus _IEEE Member On Sun, 05 Apr 2009 13:24:40 +0300 john kihahu <kihahu(a)gmail.com> wrote: >*Lets not just be critics acting like our politicians!!* Fyodor, >you know >you need to contact some1 bout it n I'm sure you know who that >person is! > > > > > > > >If you notice this notice you will notice that this notice is not >worth >noticing > > >On Sun, Apr 5, 2009 at 12:19, Solomon Mburu <solo.mburu(a)gmail.com> >wrote: > >> Yes Georg, I can attest to that! >> >> Such a pathetic way of telling someone thank you!!! >> >> >> >> 2009/4/5 George Githinji <georgkam(a)gmail.com> >> >>> This is total crap! >>> https://forodha.kra.go.ke/ >>> >>> trying accessing this URL and from latest firefox browser and >it displays >>> a message. >>> Simba 2005 can only accessed using >>> *Microsoft Internet Explorer Version 5.0 and above*. >>> >>> >>> I can't believe it! >>> >>> On Sat, Apr 4, 2009 at 9:00 PM, Solomon Mburu ><solo.mburu(a)gmail.com>wrote: >>> >>>> >>>> Dear Skunks and Skunkettes, >>>> >>>> At least we are back and right on course! >>>> >>>> The other day I went to Times Tower (Tower Wing) to apply for >a VAT >>>> certificate from KRA. The lady at the reception bluntly >refused to have my >>>> documents saying KRA is no longer accepting manual >applications either for >>>> VAT or PIN. She further told me to log on to >www.kra.go.ke/portal and >>>> I'd be able to register the details of my company, as long as >it is a valid >>>> and legal entity. >>>> >>>> When I logged on to the site, which is too colourful for my >'ageing' >>>> eyes, I finally clicked on the Taxpayer >Registration<https://mapato1.kra.go.ke/itms>just under the E- >registration services I entered the company's PIN number >>>> and all the details about the company were on my screen. >>>> Now, the funny part is that when I set a new password and >waited for next >>>> page to open, I was told that the agent (who registered my >company) does not >>>> exist on the Integrated Tax Management System of KRA. So I >cannot proceed >>>> with the registration for a VAT certificate. >>>> >>>> Then I gave a shot at my PIN and interestingly, the PIN number >does not >>>> exist on the ITMS of KRA again. I've tried this on a number of >occasions >>>> without getting any through. (I tried using my friends PIN and >his worked, >>>> though it later asked for his parent's names). Could it be >that PIN >>>> certificates can be fake? And can KRA really isue fake PIN >certificates? >>>> >>>> Anyone amongst you who has experienced a problem with the KRA >portal? >>>> >>>> It really gets into my nerves! >>>> >>>> Mburu >>>> >>>> -- >>>> Man is a gregarious animal and enjoys agreement as cows will >graze all >>>> the same way to the side of a hill! >>>> >>>> >>>> >>>> >>>> -- >>>> Man is a gregarious animal and enjoys agreement as cows will >graze all >>>> the same way to the side of a hill! >>>> >>>> >>>> _______________________________________________ >>>> Skunkworks mailing list >>>> Skunkworks(a)lists.my.co.ke >>>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>>> >>>> >>> >>> >>> -- >>> --------------- >>> Sincerely >>> George >>> >>> Skype: george_g2 >>> Blog: http://biorelated.wordpress.com/ >>> >>> _______________________________________________ >>> Skunkworks mailing list >>> Skunkworks(a)lists.my.co.ke >>> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >>> >>> >> >> >> -- >> Man is a gregarious animal and enjoys agreement as cows will >graze all the >> same way to the side of a hill! >> >> >> _______________________________________________ >> Skunkworks mailing list >> Skunkworks(a)lists.my.co.ke >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> >>Since am not allowed to destroy money cuz it belongs to the Govt, it means they can ask it back any moment......oh wait, its called Taxes!! -- Click for quality replacement window deals and save! http://tagline.hushmail.com/fc/BLSrjkqfaqV4JqTRzIjM03MP6cF2j9Bq9ZLIKr4X8YS0…

1 0

Someone cannot access or receive skunkworks mail
by ndungu stephen 06 Apr '09

06 Apr '09

Hi people, please put back Jorum Gachuiri back on skunkmail. Thanks. w/r snn ---------- Forwarded message ---------- From: Joram Gachuiri <jgachuirii(a)gmail.com> Date: Thu, Apr 2, 2009 at 7:06 AM Subject: SkunkWorks To: ndungustephen(a)gmail.com Someone may have deleted me from SKUNKS email list. How can I get back there ? Ask faith Nkatha or responsible to put me back. I miss lots of IT stuff

1 0

test 2
by Skunkworks forum 06 Apr '09

06 Apr '09

-- Josiah Mugambi +254 738 504418 http://blog.josiahmugambi.com SK Classifeds... Visit stockskenya.co.ke for more info.

14 17

POS-FISCAL PRINTER SETUP!!!!!?
by Lenchipai Nakodony 06 Apr '09

06 Apr '09

3 2

Re: [Skunkworks] Multimedia University College (formerly KCCT) looking for Lecturers...
by omolo omolo 06 Apr '09

06 Apr '09

Walu I trust you are doing great. Does the deadline block expression of interest? Guide. God bless. o. 2009/2/27 John Walubengo <jwalu(a)yahoo.com> > Hey, > > Incase you missed to catch the above in the Dailies - plse sambaza (spread) > far and wide. > > walu. > NB: Two thousand years ago, He said 'The Harvest was big, but the Laborers > were few'. Plse help in getting us the laborers by spreading the message. > > > > > > _______________________________________________ > skunkworks mailing list > skunkworks(a)my.co.ke > http://ole.kenic.or.ke/mailman/listinfo/skunkworks > Blog http://skunkworks-ke.blogspot.com > Beta Blog http://blog.my.co.ke > Get Skunkworks RSS Feeds: http://www.jahazi.com/rss/ > -- Richard Omolo Computer Science, Egerton University +254 73 5431503 +254 72 1680611 Box 536 Njoro, Kenya

1 0

Slashcode for SKW ?
by MotoBaridi 06 Apr '09

06 Apr '09

Skunks, How about running skw on slashcode (the software system that runs slashdot.org) ?? ------------------------------ <MotoBaridi, incoherently mumbling to self since 1981> ------------------------------ T: +254 722 296 184 , +254 732 296 654 E: motobaridi(a)motobaridi.com

1 0

Re: [Skunkworks] Fwd: KRA has gone online...but!
by wesley kiriinya 06 Apr '09

06 Apr '09

Does anyone who needs to file tax online (or do something important on the KRA website) need to go to that URL? If so then it seems KRA has taken 2 steps forward and 1.5 steps backwards. KRA may insist that people file taxes online and since not filing them is illegal then one has to go online, but ALAS! you need to buy Windows so that you can run IE. So one either endures long qeues or buys Windows else you land in jail. (Mathematically ones chances of going to jail because of taxes have increased since one must avoid using pirated Windows O_O) I for one would like to know what feature of this Simba system ties it to IE (and probably forces any Kenyan who wants to file taxes online to buy Windows). No problem if Windows has a technology that no other OS has. If that's not the case then supporting open systems that can be purchased, maintained, used and extended (especially for government institutions that provide public (tax-paid) services) at a reasonable price is a wiser decision. X_X? --- On Sun, 4/5/09, Solomon Mburu <solo.mburu(a)gmail.com> wrote: From: Solomon Mburu <solo.mburu(a)gmail.com> Subject: Re: [Skunkworks] Fwd: KRA has gone online...but! To: "Skunkworks forum" <skunkworks(a)lists.my.co.ke> Date: Sunday, April 5, 2009, 12:19 PM Yes Georg, I can attest to that! Such a pathetic way of telling someone thank you!!! 2009/4/5 George Githinji <georgkam(a)gmail.com> This is total crap! https://forodha.kra.go.ke/ trying accessing this URL and from latest firefox browser and it displays a message. Simba 2005 can only accessed using Microsoft Internet Explorer Version 5.0 and above. I can't believe it! On Sat, Apr 4, 2009 at 9:00 PM, Solomon Mburu <solo.mburu(a)gmail.com> wrote: Dear Skunks and Skunkettes, At least we are back and right on course! The other day I went to Times Tower (Tower Wing) to apply for a VAT certificate from KRA. The lady at the reception bluntly refused to have my documents saying KRA is no longer accepting manual applications either for VAT or PIN. She further told me to log on to www.kra.go.ke/portal and I'd be able to register the details of my company, as long as it is a valid and legal entity. When I logged on to the site, which is too colourful for my 'ageing' eyes, I finally clicked on the Taxpayer Registration just under the E-registration services I entered the company's PIN number and all the details about the company were on my screen. Now, the funny part is that when I set a new password and waited for next page to open, I was told that the agent (who registered my company) does not exist on the Integrated Tax Management System of KRA. So I cannot proceed with the registration for a VAT certificate. Then I gave a shot at my PIN and interestingly, the PIN number does not exist on the ITMS of KRA again. I've tried this on a number of occasions without getting any through. (I tried using my friends PIN and his worked, though it later asked for his parent's names). Could it be that PIN certificates can be fake? And can KRA really isue fake PIN certificates? Anyone amongst you who has experienced a problem with the KRA portal? It really gets into my nerves! Mburu -- Man is a gregarious animal and enjoys agreement as cows will graze all the same way to the side of a hill! -- Man is a gregarious animal and enjoys agreement as cows will graze all the same way to the side of a hill! _______________________________________________ Skunkworks mailing list Skunkworks(a)lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks -- --------------- Sincerely George Skype: george_g2 Blog: http://biorelated.wordpress.com/ _______________________________________________ Skunkworks mailing list Skunkworks(a)lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks -- Man is a gregarious animal and enjoys agreement as cows will graze all the same way to the side of a hill! -----Inline Attachment Follows----- _______________________________________________ Skunkworks mailing list Skunkworks(a)lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks

1 0

Re: [Skunkworks] Right under our noses.
by fyodor 06 Apr '09

06 Apr '09

Alex, Errrmm... >I think we need a Tuesday >talk >on "communicating with government":-) > Does the Govt ever listen? I mean, some ideas and opinions just die along the Red-tape process.......i could be wrong. -tyrus _IEEE Member -- Click to get kitchen cabinets at affordable prices. http://tagline.hushmail.com/fc/BLSrjkqfY0n2Fx2poUfQXiMVNWfe9vOxmDrQHZFTzNbq…

3 2

Connectivity Case Study: Nairobi, Kenya
by Patrick Kariuki 06 Apr '09

06 Apr '09

http://techforworldtravel.wordpress.com/ Notes: 1. The recent troubles in Kenya have frightened international investors, so hotels and tour operators are pulling out all the discounts they can to attract business. - Yawn! 2. Panari - high-speed WiFi - "something I suspect is not in the hotel’s control. DUH!! What is in their control, however, are the rates they charge. DUH!! A mere 3 hours of surfing cost me a whopping US$18, and there’s a negligible discount (but...but...) for buying longer periods of access." 3. "At Nairobi airport, the technology is even less business-friendly" Duh! 4. "The Premier Lounge’s own “loungehotspot” had a relatively strong signal, but the router’s connection to the net was quite unstable, frequently going offline." Duh! 5. "Nobody knowledgeable was available at the desk, so fellow travellers tried to help each other." Duh! 6. "The phone is still the preferred way, even for data. Nairobi almost has 3G - SafariCom and Celtel both have EDGE<http://en.wikipedia.org/wiki/Enhanced_Data_Rates_for_GSM_Evolution>(technically a “2.75G” connection) data availability on their networks though I was not able to make it work" Duh! 7. "100 Kenyan shillings (about US$1.50 at time of writing) gets you a sim card, though I bought mine at a kiosk at the airport for three times that." Duh! 8. "My Uganda MTN SIM card found Safaricom’s network but would not keep a signal - apparently SafariCom is having major network issues right now." Duh!! Anything else the world needs to know about Kenya's connectivity issues?

1 0

Please unsubscribe my address
by Steve Mugiri 06 Apr '09

06 Apr '09

Please unsubscribe my address from the list: Unsubscribe link at the bottom of emails ( http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ) does not seem to resolve and I cannot keep up with the volume of email in my Inbox as Daily Digest does not seem to be working. Hopefully, I can re-subscribe when the daily digest service becomes available again. Thanks.

1 0

my.co.ke Debian mirror is back
by Lmwangi 05 Apr '09

05 Apr '09

Hi all, The debian mirror is back! It's update 2/3 times a week. The speeds are excellent if your local loop is good. Get:141 http://my.co.ke testing/main subversion-tools 1.5.6dfsg-1 [184kB] Fetched 81.0MB in 8s (9847kB/s) debconf: delaying package configuration, since apt-utils is not installed (Reading database ... 50591 files and dire... :)

1 0

Fwd: Undelivered Mail Returned to Sender
by thea maina 05 Apr '09

05 Apr '09

Hi Guys, My pal is looking for a call tracking software that connects to their siemens PABX to replace his current (Elcom teleman) They don't have the password, but if someone out there know how to get through (crack) to it, the better. Any leads are appreciated cheers ------------ Thea Maina Nairobi Kenya http://www.mafans.com skype: thea.mnairobi

1 0

We've been to the promised land
by David Kiania | Asentric Consulting Ltd 05 Apr '09

05 Apr '09

Afew hours after landing in mombasa, I caught up with Mombasa skunks George & Arthur and set out to the Seacom Landing station. We were very impressed with what we saw. Seacom are deliberate in their planning, professional and very well organized. Noor had assigned a gentleman called Peter Ouko to walk us through. The guys knows the network like the back of his hand and has been at it since Nov last year. Cutting through the hype here's what we found:- 1) the Mombasa landing point will have physical links to Cairo (96 Uw), Dar (64 Uw), South Africa (64 Uw). 2) Of this Cairo and SA are complete and what's left is Dar which will be connected in the high seas 180km anytime time coming week. 3) Most of the equipment has been installed eg DWDM, Muxes, Generators, ODFs and NOC. What's left is the patching of the TZ cable and final commissioning and acceptance. 4) It's very possible for the service to be ready ahead of Schedule 27th June 09. For all that believe seeing is believing we have it all captured in fotos & video footage. More detailed illustration on the technical/implementation will follow on some blog or something. Transmission stuff is fun, the two coders I was with were totally clueless. Chin up troops we are almost there. Am glad skunks is back, thanks Laban. -- David Kiania [Asentric Consulting Ltd] If a man has in himself the soul of a slave will he not become one no matter what his birth .... -Richest Man in Babylon

6 5

Fwd: KRA has gone online...but!
by Solomon Mburu 05 Apr '09

05 Apr '09

Dear Skunks and Skunkettes, At least we are back and right on course! The other day I went to Times Tower (Tower Wing) to apply for a VAT certificate from KRA. The lady at the reception bluntly refused to have my documents saying KRA is no longer accepting manual applications either for VAT or PIN. She further told me to log on to www.kra.go.ke/portal and I'd be able to register the details of my company, as long as it is a valid and legal entity. When I logged on to the site, which is too colourful for my 'ageing' eyes, I finally clicked on the Taxpayer Registration<https://mapato1.kra.go.ke/itms>just under the E-registration services I entered the company's PIN number and all the details about the company were on my screen. Now, the funny part is that when I set a new password and waited for next page to open, I was told that the agent (who registered my company) does not exist on the Integrated Tax Management System of KRA. So I cannot proceed with the registration for a VAT certificate. Then I gave a shot at my PIN and interestingly, the PIN number does not exist on the ITMS of KRA again. I've tried this on a number of occasions without getting any through. (I tried using my friends PIN and his worked, though it later asked for his parent's names). Could it be that PIN certificates can be fake? And can KRA really isue fake PIN certificates? Anyone amongst you who has experienced a problem with the KRA portal? It really gets into my nerves! Mburu -- Man is a gregarious animal and enjoys agreement as cows will graze all the same way to the side of a hill! -- Man is a gregarious animal and enjoys agreement as cows will graze all the same way to the side of a hill!

3 3

Fwd: Business Information Technology (bit.or.ke)
by Solomon Mburu 04 Apr '09

04 Apr '09

I got this information and thought it worth sharing with you. Any body a victim, or it is just one of those "Y2K" kind of stuff? Mburu ---------- Forwarded message ---------- From: Welcome to Business Information Technology .or.ke <kkimson(a)gmail.com> Date: 2009/4/3 Subject: Business Information Technology (bit.or.ke) To: solo.mburu(a)gmail.com Business Information Technology (bit.or.ke)<http://www.bit.or.ke/index.php?option=com_content&view=frontpage> [image: Link to Welcome to Business Information Technology .or.ke]<http://www.bit.or.ke/index.php?option=com_content&view=frontpage> How to Protect yourself from the Conficker computer worm<http://feedproxy.google.com/%7Er/WelcomeToBusinessInformationTechnologyorke…> Posted: 02 Apr 2009 07:16 AM PDT Lately we have seen lots of media coverage on how the Conficker worm is going to cause havoc on April 1. The Conficker worm, formally named W32/Conficker.worm, started infecting systems late last year by exploiting a vulnerability in Microsoft Windows. Since then we have seen a couple of variants of this worm and lots of binaries that carry this malicious payload. Conficker.C is the latest variant; it will change the behavior of its “call-home protocol” on Wednesday, April 1st. Conficker may use this protocol to update itself to include some as-yet unknown functionality. Some antivirus companies already offers protection from this worm in its endpoint and network products. Microsoft has also issued a security update to patch the vulnerability that the Conficker family has used to propagate. The following information will give you an overview of the worm, the steps one can take to clean an infected system, and measures to prevent reinfection. What is the Conficker worm? The W32/Conficker worm exploits the MS08-067 vulnerability in Microsoft Windows Server Service. If the vulnerability is successfully exploited, it could allow remote code execution when file sharing is enabled. Machines should be patched and rebooted to protect against this worm’s reinfecting the system after cleaning, which may require more that one reboot. * Upon detecting this worm, reboot the system to clean memory correctly. May require more than one reboot. * The worm often creates scheduled tasks to reactivate itself. * The worm often uses autorun.inf files to reactivate itself. It has been identified thousands of binaries that carry this payload. Depending on the specific variant, the worm may spread via LAN, WAN, web, or removable drives and by exploiting weak passwords. Conficker disables several important system services and security products and downloads arbitrary files. Computers infected with the worm become part of an army of compromised computers and could be used to launch attacks on web sites, distribute spam, host phishing web sites, or carry out other malicious activities. Conficker.C is the most recent variant of this worm and is dependent on its predecessors, the .A and .B variants. Exposure to .C is limited to systems that are still infected with the earlier variants. The virus, called Conficker or Downadup, first appeared in November 08 but has recently become more prevalent, infecting millions of machines by some estimates. Technically it’s a worm, a kind of malicious software that automatically spreads itself from computer to computer. The cyber-security community is up in arms because worms haven’t been an issue for years. Over the course of the decade, computer hackers shifted their techniques away from rapidly spreading worms—people will remember worms like “blaster” and “Melissa” that shut down entire offices for a day or two—towards targeted snippets of code that are harder to detect. The reason: money. Worms are basically a big irritant; code that gets past security software can be used to steal information or make a computer send spam email, both of which command a big price on the black market. Microsoft issued a software update that protects computers from Conficker in October 08. Most anti-virus software will also stop it. The result is that while Conficker is spreading rapidly, it is mainly doing so in parts of the world where people haven’t updated their systems. About 29% of infections are in China, followed by Argentina, Brazil, Russia, and India, according to Symantec. Many of these countries are among those with the highest rate of software piracy, which probably isn’t a coincidence. Less than 1% of infections appear to be in the U.S. according to multiple security researchers. Conficker is, by all accounts, a pretty sophisticated piece of software.According to the Internet Storm Center, which tracks virus infections and Internet attacks, Conficker can spread in three ways. First, it attacks a vulnerability in the Microsoft Server service. Computers without the October patch can be remotely attacked and taken over. Second, Conficker can attempt to guess or 'brute force' Administrator passwords used by local networks and spread through network shares. And third, the worm infects removable devices and network shares with an autorun file that executes as soon as a USB drive or other infected device is connected to a victim PC. Conficker and other worms are typically of most concern to businesses that don't regularly update the desktops and servers in their networks. Once one computer in a network is infected, it often has ready access to other vulnerable computers in that network and can spread rapidly. Home computers, on the other hand, are usually protected by a firewall and are less at risk. However, a home network can suffer as well. For example, a laptop might pick up the worm from a company network and launch attacks at home. The most critical and obvious protection is to make sure the Microsoft patch is applied. Network administrators can also use a blocklist to try and stop the worm's attempts to connect to Web sites. And finally, you can disable Autorun so that a PC won't suffer automatic attack from an infected USB drive or other removable media when it's connected. The Internet Storm Center links to one method for doing so but the instructions involve changing the Windows registry and should only be attempted by adminstrators or tech experts. Comments under those instructions also list other potential methods for disabling autorun. The U.S. Department of Homeland Security released a tool to detect whether a computer is infected by the Conficker worm. You are subscribed to email updates from Welcome to Business Information Technology .or.ke<http://www.bit.or.ke/index.php?option=com_content&view=frontpage> To stop receiving these emails, you may unsubscribe now<http://feedburner.google.com/fb/a/mailunsubscribe?k=QNhVKXYSghseaLJTCOtqo-l…> .Email delivery powered by Google Inbox too full? [image: (feed)]<http://feeds2.feedburner.com/WelcomeToBusinessInformationTechnologyorke> Subscribe<http://feeds2.feedburner.com/WelcomeToBusinessInformationTechnologyorke>to the feed version of Welcome to Business Information Technology . or.ke in a feed reader. If you prefer to unsubscribe via postal mail, write to: Welcome to Business Information Technology .or.ke, c/o Google, 20 W Kinzie, Chicago IL USA 60610 -- Man is a gregarious animal and enjoys agreement as cows will graze all the same way to the side of a hill!

1 0

Outage
by James Wachira 04 Apr '09

04 Apr '09

Almost went nuts there without the regular posts on skunkworks...was worried it was CONFLICKER, ;-) Regards, James W

1 0

Right under our noses.
by David Kiania | Asentric Consulting Ltd 04 Apr '09

04 Apr '09

It takes 150,000 acres (66,0000 ha) in Turkana to produce 30% of the country's electricity requirements from wind only. If you dont believe me check out www.laketurkanawindpower.com. They are in the process of putting up 326 wind turbines and 425 km of powerlines. My only beef is that it's taken Dutch tourists to harness the reasources in our own backyard right under our noses. If I was to go mathematical doesn't this mean with an additional 45k acres we can double our energy output currently standing at 1000 Mw? And from renewable source; green power! -- David Kiania [Asentric Consulting Ltd] If a man has in himself the soul of a slave will he not become one no matter what his birth .... -Richest Man in Babylon

7 7

WhereCamp Africa
by Martin Gachunga 04 Apr '09

04 Apr '09

WhereCamp Africa is now in session. You can follow on Twitter: #WhereCampAfrica or #wcafrica Live blogging: http://silcsolutions.com/Liveblog.aspx -- Regards, Martin Kamau

1 0

Testing
by Laban Mwangi 04 Apr '09

04 Apr '09

testing -- Laban Mwangi Systems Administrator Packet Central Ltd Tel: (+254)20 3592272 Mobile: (+254)735 823856 GPG Key:AE3E905F website:www.pct.co.ke

5 6