Send Skunkworks mailing list submissions to
    skunkworks@lists.my.co.ke

To subscribe or unsubscribe via the World Wide Web, visit
    http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
or, via email, send a message with subject or body 'help' to
    skunkworks-request@lists.my.co.ke

You can reach the person managing the list at
    skunkworks-owner@lists.my.co.ke

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Skunkworks digest..."

Today's Topics:

   1. Re: Request For Data -- Web Proxy/Mail/VoIP (Jared Koyier)
   2. Mick Wilson/UNEP/NBO/UNO is on leave (Mick Wilson)
   3. Re: Kebs targets makers of software with quality rules
(Murigi Muraya)
   4. Re: Request For Data -- Web Proxy/Mail/VoIP (rsohan@gmail.com)
   5. Re: Request For Data -- Web Proxy/Mail/VoIP (saidimu apale)
   6. Re: Kebs targets makers of software with quality rules
(ashok+skunkworks@parliaments.info)
   7. Re: Kebs targets makers of software with quality rules
(Ashok Hariharan)
   8. The VB IDE Tips and trick talk is virtually empty (Murigi Muraya)
   9. Re: INERNET GATEWAY PING BLOCK (Steve Muchai)
10. Fwd: Securing Africa's speedy Internet for development
(Barrack Otieno)

----------------------------------------------------------------------

Message: 1
Date: Thu, 19 Nov 2009 17:33:52 +0000
From: "Jared Koyier" <jaredkoyier@gmail.com>
To: "Skunkworks Forum" <skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] Request For Data -- Web Proxy/Mail/VoIP
Message-ID: <4b058182.1a135e0a.5171.4883@mx.google.com>
Content-Type: text/plain;    charset="utf-8"

I tend to think logs are a little raw and any ISP that keeps such might consider them to be client confidential.

Sent from my ?xpensive phone
-----Original Message-----
From: Alex Nderitu
Sent: 19/11/2009 6:47:30 pm
Subject: Re: [Skunkworks] Request For Data -- Web Proxy/Mail/VoIP

Logs! All the best :)

On 11/19/09, rsohan@gmail.com <rsohan@gmail.com> wrote:
> Dear All,
>
> I'm involved in a university research project examining how people use the
> internet in Kenya.
>
> I'm looking for people on the list who may be working for ISPs and are able
> to provide us with web proxy, mail,
> voip, etc logs.
>
> While I'm happy to provide full and complete details of the proposal and
> proposed research offline,
> I'll keep this note brief in the interests of economy.
>
> All sources will be acknowledged and fully involved in the research.
>
> Please do get in touch off-list if you think you may be able to help.
>
> Regards
>
> R. Sohan
>

--
Sent from my mobile device
_______________________________________________
Skunkworks mailing list
Skunkworks@lists.my.co.ke
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------
Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke
Other lists
-------------
Announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce
Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science
kazi:    http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general

------------------------------

Message: 2
Date: Thu, 19 Nov 2009 20:47:26 +0300
From: Mick Wilson <Mick.Wilson@unep.org>
To: Skunkworks Forum <skunkworks@lists.my.co.ke>
Subject: [Skunkworks] Mick Wilson/UNEP/NBO/UNO is on leave
Message-ID:
    <OFAC237FCB.7CF508EE-ON43257673.0061BA35-43257673.0061BA35@unon.org>
Content-Type: text/plain; charset="us-ascii"

I will be out of the office starting 19/11/2009 and will not return until
23/11/2009.

I am out of office for a few days and will be checking this mail less often
than you'd like. If you need an intelligent reply before I get back then
please contact caroline.mureithi@unep.org or, for POW 2010 matters,
norberto.fernandez@unep.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.my.co.ke/pipermail/skunkworks/attachments/20091119/557cea52/attachment-0001.htm>

------------------------------

Message: 3
Date: Thu, 19 Nov 2009 21:30:11 +0300
From: Murigi Muraya <mmskunkworks@gmail.com>
To: Skunkworks Forum <skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] Kebs targets makers of software with quality
    rules
Message-ID:
    <2d516db90911191030s5471f1aev15e8366fc36ba630@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

>
> <conrad>

> As for the ICT Board / KEBS I will withhold my opinion until I find out
> exactly who are participating in that committee

> </conrad>
>

<steve>

@Aki when you talk about regulating the theoretical and practical
aspects of writing and executing software codes doesn't that
responsibility fall with my compiler. coz as far as i am concerned my
C++ compiler comply to certain standards.

</steve>

My sentiments are similar to Steve Obbayi's but unlike Conrad will not fully
restrain myself from stating much that is in my mind.

Will see if we can get one or two of these KICTB & KEBS people to our Feb
2010 Kenya MSDN Interop meet. Seems they are trying achieve something that
no one (software organization or industry body) anywhere in the world has
succeeded in doing = creating certification for software developers /
engineers - acceptable industry (local and global) wide ....

Tech giants such as Microsoft, Oracle, SAP, Google, IBM etc, when hiring
software engineers ask for insight into and experience with certain
standards = Platforms (Windows or *nix) and Compilers (C/C++/C#..Java ..)
the software engineers will use to improve old or create new technologies.
Developer tools even cause software developers to follow (or not) certain
practices in their work so ... e.g. FOSS (GPL) tools discourage deliberate
obfuscation of software (source) code. Si?

Why not call whatever is being done by the KICTB and KEBS a Promotion (not a
Certification of) 'Best Practices' - reviewed or updated every few years?
My position is that certification should be left to major vendors - bound to
versions of products (standards). Nothing proves software engineering skills
more than PRODUCTS / (or software consumed as) SERVICES
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.my.co.ke/pipermail/skunkworks/attachments/20091119/e2a77411/attachment-0001.htm>

------------------------------

Message: 4
Date: Thu, 19 Nov 2009 19:23:54 +0000
From: "rsohan@gmail.com" <rsohan@gmail.com>
To: jaredkoyier@gmail.com, Skunkworks Forum
    <skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] Request For Data -- Web Proxy/Mail/VoIP
Message-ID:
    <42b5beb80911191123pb5bc10ao6ecebe52d5fb0f34@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

On Thu, Nov 19, 2009 at 5:33 PM, Jared Koyier <jaredkoyier@gmail.com> wrote:

> I tend to think logs are a little raw and any ISP that keeps such might
> consider them to be client confidential.
>

Raw? What do you mean? The logs are the definitive source on what actually
happened.

As to the confidentiality argument -- I agree. However, I point out it is
exceedingly trivial to anonymize logs without losing any contextual
information; and I would be happy to provide scripts to anyone who doesn't
want to do it themselves.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.my.co.ke/pipermail/skunkworks/attachments/20091119/c5dbf6e1/attachment-0001.htm>

------------------------------

Message: 5
Date: Thu, 19 Nov 2009 14:55:39 -0500
From: saidimu apale <saidimu@gmail.com>
To: Skunkworks Forum <skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] Request For Data -- Web Proxy/Mail/VoIP
Message-ID:
    <aa5297390911191155u363103cet5125eb24bf9d92da@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Interesting study Sohan. We could all benefit from such a study and I wish
there was a way to collect data without privacy concerns.

Unfortunately, it isn't as easy to anonymize data. Often when you think
you've done it right someone comes along and fairly easily de-anonymizes it.
Check out the links below (they all refer to the same Netflix dataset but
with varying degrees of detail).

- When 2+2 Equals A Privacy Question (New York Times):
http://www.nytimes.com/2009/10/18/business/18stream.html?_r=4

- How To Break Anonymity of the Netflix Prize Dataset:
http://www.cs.utexas.edu/~shmat/shmat_oak08netflix.pdf

- AOL had a major fiasco a few years back when it also released "anonymized"
search records of its users:
http://en.wikipedia.org/wiki/AOL_search_data_scandal

- New Study Looks at Re-Identification Risks of Hospital Pharmacy
Prescription Records
http://www.cheo.on.ca/english/3100-09-10-14.shtml (The journal article
referenced is here: http://www.cheo.on.ca/english/pdf/news_CJHP-El-Emam.pdf)

I don't know you can get meaningful data for your study without running into
significant privacy risks. These guys (Artificial Intelligence for
Development http://ai-d.org/) seem to have a large dataset of mobile phone
data from Kenya. I don't know how they got it and how they deal with privacy
issues. They may be of some use to you.

Saidi

On Thu, Nov 19, 2009 at 2:23 PM, rsohan@gmail.com <rsohan@gmail.com> wrote:

> On Thu, Nov 19, 2009 at 5:33 PM, Jared Koyier <jaredkoyier@gmail.com>wrote:
>
>> I tend to think logs are a little raw and any ISP that keeps such might
>> consider them to be client confidential.
>>
>
> Raw? What do you mean? The logs are the definitive source on what actually
> happened.
>
> As to the confidentiality argument -- I agree. However, I point out it is
> exceedingly trivial to anonymize logs without losing any contextual
> information; and I would be happy to provide scripts to anyone who doesn't
> want to do it themselves.
>
>
> _______________________________________________
> Skunkworks mailing list
> Skunkworks@lists.my.co.ke
> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
> ------------
> Skunkworks Rules
> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
> ------------
> Other services @ http://my.co.ke
> Other lists
> -------------
> Announce:
> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce
> Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science
> kazi:    http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.my.co.ke/pipermail/skunkworks/attachments/20091119/aae0ee64/attachment-0001.htm>

------------------------------

Message: 6
Date: Thu, 19 Nov 2009 20:28:35 +0000
From: ashok+skunkworks@parliaments.info
To: Skunkworks Forum <skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] Kebs targets makers of software with quality
    rules
Message-ID:
    <a245ea580911191228vb1c17a7k457fc6dce6ee38aa@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

On Thu, Nov 19, 2009 at 5:07 PM, aki <aki275@googlemail.com> wrote:

> Sawa @Rad. I think the only problem I have with freeware is that there is
> no incentive for people to learn more and develop more. We are too
> comfortable with getting software apps, solutions etc on a plate and serving
> it to others and feel proud. We are not going into things like programming
> academies, higher learning and also churning out locally to say
> eg local/int'l markets.
>

Ban freeware and reinvent the wheel when it already exists ? are you serious
or joking or inebriated ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.my.co.ke/pipermail/skunkworks/attachments/20091119/68901584/attachment-0001.htm>

------------------------------

Message: 7
Date: Thu, 19 Nov 2009 20:34:30 +0000
From: Ashok Hariharan <ashok@parliaments.info>
To: Skunkworks Forum <skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] Kebs targets makers of software with quality
    rules
Message-ID:
    <a245ea580911191234y4fbacf7fof963659acc8bc8c7@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

On Thu, Nov 19, 2009 at 1:35 PM, aki <aki275@googlemail.com> wrote:

> BD article today....
> http://www.businessdailyafrica.com/Company%20Industry/-/539550/688040/-/item/0/-/159ke5tz/-/index.html
>
> *This is what got me thinking :*
>
> "The Kenya ICT Board is also working on a certification programme that will
> *regulate* the theoretical and practical aspects of writing and executing
> software codes."
>

"Last month, ICT board chairman Paul Kukubo proposed that an international
academic institution or standards body be hired to develop and implement a
software developer certification programme for Kenya."

Dont such benchmarks / standards / certifications already exist ? ISO / BVQI
/ microsoft / oracle / linux etc. certificaitons ?

If you want to target an export market any of these would suffice ....
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.my.co.ke/pipermail/skunkworks/attachments/20091119/c0d9b5f1/attachment-0001.htm>

------------------------------

Message: 8
Date: Fri, 20 Nov 2009 00:15:36 +0300
From: Murigi Muraya <mmskunkworks@gmail.com>
To: Skunkworks forum <skunkworks@lists.my.co.ke>
Subject: [Skunkworks] The VB IDE Tips and trick talk is virtually
    empty
Message-ID:
    <2d516db90911191315w2d741c34g71ba86c8180f3088@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

http://twitter.com/akcoder/status/5868426765
The VB IDE Tips and trick talk is virtually empty. Literally 5 people in the
whole room. C# IDE talk is about half full (250
people)#PDC09<http://twitter.com/search?q=%23PDC09> 4
minutes ago <http://twitter.com/akcoder/status/5868426765> from
TweetDeck<http://www.tweetdeck.com/>

<kenya> vb developer - solo moves - stays away from conferences - thinks vb
is IT - working on their little gods (projects) </kenya>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.my.co.ke/pipermail/skunkworks/attachments/20091120/611dd19d/attachment-0001.htm>

------------------------------

Message: 9
Date: Fri, 20 Nov 2009 04:05:39 +0300
From: Steve Muchai <smuchai@gmail.com>
To: Skunkworks Forum <skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] INERNET GATEWAY PING BLOCK
Message-ID:
    <4c0507190911191705t40185a8eqaa3a1be78fce89be@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

On Thu, Nov 19, 2009 at 10:11 AM, Cynthia Wahome <cwahome@jambo.co.ke> wrote:
>
> Hello All
> From a security point of view,is it advisable to block ICMP packets on
> your router? if so how do you do it?

IMHO. NO, but the sec guys may differ :)

1. Decide what ICMP types you'll allow to and past your border, and,
what you'll respond to.
2. Rate limit.
3. Ensure your upstream provider will co-operate.
4. Rate limit.

#1 depends on what services you're running behind that router. If you
choose to block, that depends on what router you're running.

> on the other hand, ICMP is very critical especially for network
> troubleshooting. also with the fibre now active, there cud be many hacking
> attempts.
> So how do you balance?

IMHO again.

Believe you me, ICMP would be the least of your worries on today's
'net. Wait till you're hit by by a TCP SYN flood or some other DOS (at
that point, refer to #3). About the hacking bit, blocking ICMP won't
help if your little corner of the net has some hole in it. The sec
guys on the list will tell you this, I'm sure.

Good reference here, and Team cymru goes beyond just ICMP, so go thru
their other pages:

http://www.cymru.com/Documents/icmp-messages.html

BR,
S

--
Sent from my luminous socks?

------------------------------

Message: 10
Date: Fri, 20 Nov 2009 04:33:08 +0200
From: Barrack Otieno <otieno.barrack@gmail.com>
To: Skunkworks forum <skunkworks@lists.my.co.ke>
Subject: [Skunkworks] Fwd: Securing Africa's speedy Internet for
    development
Message-ID:
    <4ee4e32f0911191833k544ed948xea35ae295bdfefd6@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Got this from another list, might be of use to some of us,

Dear All,

As discussed, I attach a recent presentation dealing with the opportunities
and security (Information Assurance) challenges of Africa's newly
acquired fibre-optic cables.

I made the presentation at the BarCampAfrica UK event found here:
http://barcampafricauk09.eventbrite.com/

Additionally, I covered similar themes on the BBC World Service Digital
Planet programme here: http://www.bbc.co.uk/programmes/p004hhnr

Best Regards,
Frederick

*Dr Frederick Wamala, Ph.D, CISSP?**
**--------------------------------------------------------**
*Information Systems & Innovation Group
Department of Management
London School of Economics
London WC2A 2AE
*----------------------------------------------------------*

Please access the attached hyperlink for an important electronic
communications disclaimer:
http://www.lse.ac.uk/collections/secretariat/legal/disclaimer.htm

   - Dr Frederick Wamala -- BarCamp09 1.0.ppt
<http://dgroups.org/?tvtc8l8r>- 4.6 MB, application/vnd.ms-powerpoint

--
Barrack O. Otieno
Administrative Manager
Afriregister Ltd (Ke)
P.o.Box 21682
Nairobi 00100
Tel:
+254721325277
+254733206359
+254202498789
Riara Road, Bamboo Lane
www.afriregister.com
www.afriregister.co.ke
ICANN accredited registrar.
Skype: barrack.otieno
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.my.co.ke/pipermail/skunkworks/attachments/20091120/3814d300/attachment.htm>

------------------------------

_______________________________________________
Skunkworks mailing list
Skunkworks@lists.my.co.ke
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks

End of Skunkworks Digest, Vol 8, Issue 195
******************************************