Re: [Skunkworks] Visa card for Online Transaction?
Thanks Denis, Is there a bank that allows online Transactions with their Debit card without jumping through 1000 hoops? Can anyone share on KCB and Equity? O_O --- On Wed, 4/27/11, skunkworks-request@lists.my.co.ke <skunkworks-request@lists.my.co.ke> wrote: From: skunkworks-request@lists.my.co.ke <skunkworks-request@lists.my.co.ke> Subject: Skunkworks Digest, Vol 14, Issue 297 To: skunkworks@lists.my.co.ke Date: Wednesday, April 27, 2011, 12:00 PM Send Skunkworks mailing list submissions to skunkworks@lists.my.co.ke To subscribe or unsubscribe via the World Wide Web, visit http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks or, via email, send a message with subject or body 'help' to skunkworks-request@lists.my.co.ke You can reach the person managing the list at skunkworks-owner@lists.my.co.ke When replying, please edit your Subject line so it is more specific than "Re: Contents of Skunkworks digest..." Today's Topics: 1. Re: iPhones secretly tracking their users? +Android too! (John Gitau) 2. Mick Wilson/UNEP/NBO/UNO is on mission (Mick Wilson) 3. IPv6 UG (Phares Kariuki) 4. Re: Visa card for Online Transaction? (Denis G. Wahome) 5. Re: Visa card for Online Transaction? (Paul Kevin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 27 Apr 2011 09:30:41 +0300 From: John Gitau <jgitau@gmail.com> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] iPhones secretly tracking their users? +Android too! Message-ID: <BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 hmm...Kinuthia, I agree and sort of disagree with you on who has access to the technologies. True, the biggest beneficiaries are governments. The trick here is to figure out the motivation behind trying to 'crack' the security or lack of it. Who would have imagined trying to crack standard 802.xx wireless networks in the past. GSM hardware is slowly becoming commoditized. You are now using gsm/umts to do millions in transactions from Mpesa to ATM's....currently you can get firmware for a baseband processor, FREE, you can build in your house today a small gsm network for tests or whatever, for less than 1000 USD...my point is...don't ignore this (well you cant do much about it, but have it at the back of your mind) - and if a criminal, ditch the cellphone:-)....the ATM you go to is probably using GSM/UMTS:-), so is your MPESA and whatever mobile money transfer you use.... You still think there's no motivation to invest in this stuff....:-) JGitau On Tue, Apr 26, 2011 at 9:53 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com> wrote:
On a similar note, a very interesting account of the Athens Affair, for those who maybe patient to read through. Goes to show what can be done by a determined person;
http://spectrum.ieee.org/telecom/security/the-athens-affair/1
On Tue, Apr 26, 2011 at 9:29 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com> wrote:
The A5/1 crack is not a theory, it's a reality and those guys in that link demonstrated this sometime last yr. However, what was apparent was that to achieve an actual tap is a very complicated and expensive affair, so much so that to exploit it in any meaningful way would require organized entities with unlimited resources (such as government security agencies). Infact, not far fetched conjecture within industry circles has always suggested that all the current A5/* GSM ciphering algorithms were cracked long ago by some agencies (Mossad is a prime suspect), its just that it's not in the public domain.
On Tue, Apr 26, 2011 at 7:59 PM, John Adams <adams.opiyo@gmail.com> wrote:
That makes this guys theory correct...that A/51 encryption is a toast!....:)...this could be the next big infiltration point....
On Tue, Apr 26, 2011 at 2:38 PM, John Gitau <jgitau@gmail.com> wrote:
actually its not just androids and Iphones, any phone with gps can 'track' you...Im not sure how much info you need but: but the US several years back made it a requirement that cellphones making 911 calls also send their locations or have the ability to avail it, this was built into the baseband processor - the specs were defined on 3GPP TS 04.31. the specification was called RRLP - radio resource location services. http://en.wikipedia.org/wiki/RRLP
Unfortunately for you, this communication is not authenticated. RRLP is to say the least one of the most dangerously open protocols out there - ?gsm (well the baseband processor) is full of them -. fortunately for you, people/governments are not interested in hacking gsm networks and phones yet...if you're a criminal however....just use that torch with a phone:-)
Apple and Android probably just have apps sitting on top of this, but all gps enabled gsm phones are a risky affair...steve if you need more details on the baseband processor/gps and maybe a few papers you know where to reach me..
JGitau On Sat, Apr 23, 2011 at 11:45 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com> wrote:
I think if Android devices were found to be doing this it wont be much of a fuss, after all android has very strong open source thus geek community roots...this is normally taken as a shameless excuse to do all sorts things and get away with it :) :)..... But iPhone doing this kind of thing after some sort of rogue update and not declaring??? Walalalala!!....
On Sat, Apr 23, 2011 at 8:59 PM, Dennis Kioko <dmbuvi@gmail.com> wrote:
On a lighter note, Windows and RIM have come out protesting that no one is bothering to find out if they are secretly tracking users. Both firms have promised to pay anyone?who?proves that they are?secretly?tracking users too. link not available _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- --Cursed be the day I was born if I do not learn a new thing today--Chinese Saying
Regards, Adams John Opiyo.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau ------------------------------ Message: 2 Date: Wed, 27 Apr 2011 10:01:27 +0300 From: "Mick Wilson" <Mick.Wilson@unep.org> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: [Skunkworks] Mick Wilson/UNEP/NBO/UNO is on mission Message-ID: <OF4548E4A2.22612958-ON4325787F.002695F3-4325787F.002695F3@LocalDomain> Content-Type: text/plain; charset="us-ascii" I will be out of the office starting 27/04/2011 and will not return until 29/04/2011. I am in Abu Dhabi until the end of the week. I will have some access to email but may be unable to get back to you before 29 Apr. If it's urgent please contact ashbindu.singh@unep.org
StanChart Excel banking comes with a free international debit card. I use it all the time to transact online when I feel loaded, otherwise i use credit cards. ./Ok3ch Sent from my iPad On Apr 27, 2011, at 12:05, wesley kirinya <kiriinya2000@yahoo.com> wrote:
Thanks Denis,
Is there a bank that allows online Transactions with their Debit card without jumping through 1000 hoops? Can anyone share on KCB and Equity?
O_O
--- On Wed, 4/27/11, skunkworks-request@lists.my.co.ke <skunkworks-request@lists.my.co.ke> wrote:
From: skunkworks-request@lists.my.co.ke <skunkworks-request@lists.my.co.ke> Subject: Skunkworks Digest, Vol 14, Issue 297 To: skunkworks@lists.my.co.ke Date: Wednesday, April 27, 2011, 12:00 PM
Send Skunkworks mailing list submissions to skunkworks@lists.my.co.ke
To subscribe or unsubscribe via the World Wide Web, visit http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks or, via email, send a message with subject or body 'help' to skunkworks-request@lists.my.co.ke
You can reach the person managing the list at skunkworks-owner@lists.my.co.ke
When replying, please edit your Subject line so it is more specific than "Re: Contents of Skunkworks digest..."
Today's Topics:
1. Re: iPhones secretly tracking their users? +Android too! (John Gitau) 2. Mick Wilson/UNEP/NBO/UNO is on mission (Mick Wilson) 3. IPv6 UG (Phares Kariuki) 4. Re: Visa card for Online Transaction? (Denis G. Wahome) 5. Re: Visa card for Online Transaction? (Paul Kevin)
----------------------------------------------------------------------
Message: 1 Date: Wed, 27 Apr 2011 09:30:41 +0300 From: John Gitau <jgitau@gmail.com> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: Re: [Skunkworks] iPhones secretly tracking their users? +Android too! Message-ID: <BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1
hmm...Kinuthia, I agree and sort of disagree with you on who has access to the technologies. True, the biggest beneficiaries are governments.
The trick here is to figure out the motivation behind trying to 'crack' the security or lack of it. Who would have imagined trying to crack standard 802.xx wireless networks in the past. GSM hardware is slowly becoming commoditized. You are now using gsm/umts to do millions in transactions from Mpesa to ATM's....currently you can get firmware for a baseband processor, FREE, you can build in your house today a small gsm network for tests or whatever, for less than 1000 USD...my point is...don't ignore this (well you cant do much about it, but have it at the back of your mind) - and if a criminal, ditch the cellphone:-)....the ATM you go to is probably using GSM/UMTS:-), so is your MPESA and whatever mobile money transfer you use....
You still think there's no motivation to invest in this stuff....:-)
JGitau
On Tue, Apr 26, 2011 at 9:53 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com> wrote:
On a similar note, a very interesting account of the Athens Affair, for those who maybe patient to read through. Goes to show what can be done by a determined person;
http://spectrum.ieee.org/telecom/security/the-athens-affair/1
On Tue, Apr 26, 2011 at 9:29 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com> wrote:
The A5/1 crack is not a theory, it's a reality and those guys in that link demonstrated this sometime last yr. However, what was apparent was that to achieve an actual tap is a very complicated and expensive affair, so much so that to exploit it in any meaningful way would require organized entities with unlimited resources (such as government security agencies). Infact, not far fetched conjecture within industry circles has always suggested that all the current A5/* GSM ciphering algorithms were cracked long ago by some agencies (Mossad is a prime suspect), its just that it's not in the public domain.
On Tue, Apr 26, 2011 at 7:59 PM, John Adams <adams.opiyo@gmail.com> wrote:
That makes this guys theory correct...that A/51 encryption is a toast!....:)...this could be the next big infiltration point....
On Tue, Apr 26, 2011 at 2:38 PM, John Gitau <jgitau@gmail.com> wrote:
actually its not just androids and Iphones, any phone with gps can 'track' you...Im not sure how much info you need but: but the US several years back made it a requirement that cellphones making 911 calls also send their locations or have the ability to avail it, this was built into the baseband processor - the specs were defined on 3GPP TS 04.31. the specification was called RRLP - radio resource location services. http://en.wikipedia.org/wiki/RRLP
Unfortunately for you, this communication is not authenticated. RRLP is to say the least one of the most dangerously open protocols out there - ?gsm (well the baseband processor) is full of them -. fortunately for you, people/governments are not interested in hacking gsm networks and phones yet...if you're a criminal however....just use that torch with a phone:-)
Apple and Android probably just have apps sitting on top of this, but all gps enabled gsm phones are a risky affair...steve if you need more details on the baseband processor/gps and maybe a few papers you know where to reach me..
JGitau On Sat, Apr 23, 2011 at 11:45 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com> wrote:
I think if Android devices were found to be doing this it wont be much of a fuss, after all android has very strong open source thus geek community roots...this is normally taken as a shameless excuse to do all sorts things and get away with it :) :)..... But iPhone doing this kind of thing after some sort of rogue update and not declaring??? Walalalala!!....
On Sat, Apr 23, 2011 at 8:59 PM, Dennis Kioko <dmbuvi@gmail.com> wrote: > > On a lighter note, Windows and RIM have come out protesting that no > one is > bothering to find out if they are secretly tracking users. Both firms > have > promised to pay anyone?who?proves that they are?secretly?tracking > users > too. > link not available > _______________________________________________ > Skunkworks mailing list > Skunkworks@lists.my.co.ke > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- --Cursed be the day I was born if I do not learn a new thing today--Chinese Saying
Regards, Adams John Opiyo.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau
------------------------------
Message: 2 Date: Wed, 27 Apr 2011 10:01:27 +0300 From: "Mick Wilson" <Mick.Wilson@unep.org> To: Skunkworks Mailing List <skunkworks@lists.my.co.ke> Subject: [Skunkworks] Mick Wilson/UNEP/NBO/UNO is on mission Message-ID: <OF4548E4A2.22612958-ON4325787F.002695F3-4325787F.002695F3@LocalDomain>
Content-Type: text/plain; charset="us-ascii"
I will be out of the office starting 27/04/2011 and will not return until 29/04/2011.
I am in Abu Dhabi until the end of the week. I will have some access to email but may be unable to get back to you before 29 Apr. If it's urgent please contact ashbindu.singh@unep.org
Equity works on Visa and Paypal too, however a while ago it was not working on Paypal
Hey Guys, KCB has the least hoops and the best service. You can get an internet enabled debit card ... I believe cheapest to run currently! I would stay away from a credit-card :) Sam On Wed, Apr 27, 2011 at 12:05 PM, wesley kirinya <kiriinya2000@yahoo.com>wrote:
Thanks Denis,
Is there a bank that allows online Transactions with their Debit card without jumping through 1000 hoops? Can anyone share on KCB and Equity?
O_O
--- On *Wed, 4/27/11, skunkworks-request@lists.my.co.ke < skunkworks-request@lists.my.co.ke>* wrote:
From: skunkworks-request@lists.my.co.ke <skunkworks-request@lists.my.co.ke
Subject: Skunkworks Digest, Vol 14, Issue 297 To: skunkworks@lists.my.co.ke Date: Wednesday, April 27, 2011, 12:00 PM
Send Skunkworks mailing list submissions to skunkworks@lists.my.co.ke<http://mc/compose?to=skunkworks@lists.my.co.ke>
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks or, via email, send a message with subject or body 'help' to skunkworks-request@lists.my.co.ke<http://mc/compose?to=skunkworks-request@lists.my.co.ke>
You can reach the person managing the list at skunkworks-owner@lists.my.co.ke<http://mc/compose?to=skunkworks-owner@lists.my.co.ke>
When replying, please edit your Subject line so it is more specific than "Re: Contents of Skunkworks digest..."
Today's Topics:
1. Re: iPhones secretly tracking their users? +Android too! (John Gitau) 2. Mick Wilson/UNEP/NBO/UNO is on mission (Mick Wilson) 3. IPv6 UG (Phares Kariuki) 4. Re: Visa card for Online Transaction? (Denis G. Wahome) 5. Re: Visa card for Online Transaction? (Paul Kevin)
----------------------------------------------------------------------
Message: 1 Date: Wed, 27 Apr 2011 09:30:41 +0300 From: John Gitau <jgitau@gmail.com <http://mc/compose?to=jgitau@gmail.com>
To: Skunkworks Mailing List <skunkworks@lists.my.co.ke<http://mc/compose?to=skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] iPhones secretly tracking their users? +Android too! Message-ID: <BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com<http://mc/compose?to=BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
hmm...Kinuthia, I agree and sort of disagree with you on who has access to the technologies. True, the biggest beneficiaries are governments.
The trick here is to figure out the motivation behind trying to 'crack' the security or lack of it. Who would have imagined trying to crack standard 802.xx wireless networks in the past. GSM hardware is slowly becoming commoditized. You are now using gsm/umts to do millions in transactions from Mpesa to ATM's....currently you can get firmware for a baseband processor, FREE, you can build in your house today a small gsm network for tests or whatever, for less than 1000 USD...my point is...don't ignore this (well you cant do much about it, but have it at the back of your mind) - and if a criminal, ditch the cellphone:-)....the ATM you go to is probably using GSM/UMTS:-), so is your MPESA and whatever mobile money transfer you use....
You still think there's no motivation to invest in this stuff....:-)
JGitau
On Tue, Apr 26, 2011 at 9:53 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com <http://mc/compose?to=kinuthia.ngugi@gmail.com>> wrote:
On a similar note, a very interesting account of the Athens Affair, for those who maybe patient to read through. Goes to show what can be done by a determined person;
http://spectrum.ieee.org/telecom/security/the-athens-affair/1
On Tue, Apr 26, 2011 at 9:29 PM, Kinuthia Ngugi < kinuthia.ngugi@gmail.com <http://mc/compose?to=kinuthia.ngugi@gmail.com>> wrote:
The A5/1 crack is not a theory, it's a reality and those guys in that
link
demonstrated this sometime last yr. However, what was apparent was that to achieve an actual tap is a very complicated and expensive affair, so much so that to exploit it in any meaningful way would require organized entities with unlimited resources (such as government security agencies). Infact, not far fetched conjecture within industry circles has always suggested that all the current A5/* GSM ciphering algorithms were cracked long ago by some agencies (Mossad is a prime suspect), its just that it's not in the public domain.
On Tue, Apr 26, 2011 at 7:59 PM, John Adams <adams.opiyo@gmail.com<http://mc/compose?to=adams.opiyo@gmail.com>> wrote:
That makes this guys theory correct...that A/51 encryption is a toast!....:)...this could be the next big infiltration point....
On Tue, Apr 26, 2011 at 2:38 PM, John Gitau <jgitau@gmail.com<http://mc/compose?to=jgitau@gmail.com>>
wrote:
actually its not just androids and Iphones, any phone with gps can 'track' you...Im not sure how much info you need but: but the US several years back made it a requirement that cellphones making 911 calls also send their locations or have the ability to avail it, this was built into the baseband processor - the specs were defined on 3GPP TS 04.31. the specification was called RRLP - radio resource location services. http://en.wikipedia.org/wiki/RRLP
Unfortunately for you, this communication is not authenticated. RRLP is to say the least one of the most dangerously open protocols out there - ?gsm (well the baseband processor) is full of them -. fortunately for you, people/governments are not interested in hacking gsm networks and phones yet...if you're a criminal however....just use that torch with a phone:-)
Apple and Android probably just have apps sitting on top of this, but all gps enabled gsm phones are a risky affair...steve if you need more details on the baseband processor/gps and maybe a few papers you know where to reach me..
JGitau On Sat, Apr 23, 2011 at 11:45 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com<http://mc/compose?to=kinuthia.ngugi@gmail.com>>
wrote:
I think if Android devices were found to be doing this it wont be much of a fuss, after all android has very strong open source thus geek community roots...this is normally taken as a shameless excuse to do all sorts things and get away with it :) :)..... But iPhone doing this kind of thing after some sort of rogue update and not declaring??? Walalalala!!....
On Sat, Apr 23, 2011 at 8:59 PM, Dennis Kioko <dmbuvi@gmail.com<http://mc/compose?to=dmbuvi@gmail.com>
wrote: > > On a lighter note, Windows and RIM have come out protesting that no > one is > bothering to find out if they are secretly tracking users. Both firms > have > promised to pay anyone?who?proves that they are?secretly?tracking > users > too. > link not available
> _______________________________________________ > Skunkworks mailing list > Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- --Cursed be the day I was born if I do not learn a new thing today--Chinese Saying
Regards, Adams John Opiyo.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau
------------------------------
Message: 2 Date: Wed, 27 Apr 2011 10:01:27 +0300 From: "Mick Wilson" <Mick.Wilson@unep.org<http://mc/compose?to=Mick.Wilson@unep.org>
To: Skunkworks Mailing List <skunkworks@lists.my.co.ke<http://mc/compose?to=skunkworks@lists.my.co.ke>
Subject: [Skunkworks] Mick Wilson/UNEP/NBO/UNO is on mission Message-ID: <OF4548E4A2.22612958-ON4325787F.002695F3-4325787F.002695F3@LocalDomain
Content-Type: text/plain; charset="us-ascii"
I will be out of the office starting 27/04/2011 and will not return until 29/04/2011.
I am in Abu Dhabi until the end of the week. I will have some access to email but may be unable to get back to you before 29 Apr. If it's urgent please contact ashbindu.singh@unep.org<http://mc/compose?to=ashbindu.singh@unep.org>
Bank of Africa Kenya has one also, Toucan Visa Card. Just load the money in account and transact online. Little fees. Rgds On 4/27/11, Sam Keiru <sam.keiru@gmail.com> wrote:
Hey Guys, KCB has the least hoops and the best service. You can get an internet enabled debit card ... I believe cheapest to run currently! I would stay away from a credit-card :) Sam
On Wed, Apr 27, 2011 at 12:05 PM, wesley kirinya <kiriinya2000@yahoo.com>wrote:
Thanks Denis,
Is there a bank that allows online Transactions with their Debit card without jumping through 1000 hoops? Can anyone share on KCB and Equity?
O_O
--- On *Wed, 4/27/11, skunkworks-request@lists.my.co.ke < skunkworks-request@lists.my.co.ke>* wrote:
From: skunkworks-request@lists.my.co.ke <skunkworks-request@lists.my.co.ke
Subject: Skunkworks Digest, Vol 14, Issue 297 To: skunkworks@lists.my.co.ke Date: Wednesday, April 27, 2011, 12:00 PM
Send Skunkworks mailing list submissions to
skunkworks@lists.my.co.ke<http://mc/compose?to=skunkworks@lists.my.co.ke>
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks or, via email, send a message with subject or body 'help' to
skunkworks-request@lists.my.co.ke<http://mc/compose?to=skunkworks-request@lists.my.co.ke>
You can reach the person managing the list at
skunkworks-owner@lists.my.co.ke<http://mc/compose?to=skunkworks-owner@lists.my.co.ke>
When replying, please edit your Subject line so it is more specific than "Re: Contents of Skunkworks digest..."
Today's Topics:
1. Re: iPhones secretly tracking their users? +Android too! (John Gitau) 2. Mick Wilson/UNEP/NBO/UNO is on mission (Mick Wilson) 3. IPv6 UG (Phares Kariuki) 4. Re: Visa card for Online Transaction? (Denis G. Wahome) 5. Re: Visa card for Online Transaction? (Paul Kevin)
----------------------------------------------------------------------
Message: 1 Date: Wed, 27 Apr 2011 09:30:41 +0300 From: John Gitau <jgitau@gmail.com <http://mc/compose?to=jgitau@gmail.com>
To: Skunkworks Mailing List <skunkworks@lists.my.co.ke<http://mc/compose?to=skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] iPhones secretly tracking their users? +Android too! Message-ID: <BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com<http://mc/compose?to=BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
hmm...Kinuthia, I agree and sort of disagree with you on who has access to the technologies. True, the biggest beneficiaries are governments.
The trick here is to figure out the motivation behind trying to 'crack' the security or lack of it. Who would have imagined trying to crack standard 802.xx wireless networks in the past. GSM hardware is slowly becoming commoditized. You are now using gsm/umts to do millions in transactions from Mpesa to ATM's....currently you can get firmware for a baseband processor, FREE, you can build in your house today a small gsm network for tests or whatever, for less than 1000 USD...my point is...don't ignore this (well you cant do much about it, but have it at the back of your mind) - and if a criminal, ditch the cellphone:-)....the ATM you go to is probably using GSM/UMTS:-), so is your MPESA and whatever mobile money transfer you use....
You still think there's no motivation to invest in this stuff....:-)
JGitau
On Tue, Apr 26, 2011 at 9:53 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com <http://mc/compose?to=kinuthia.ngugi@gmail.com>> wrote:
On a similar note, a very interesting account of the Athens Affair, for those who maybe patient to read through. Goes to show what can be done by a determined person;
http://spectrum.ieee.org/telecom/security/the-athens-affair/1
On Tue, Apr 26, 2011 at 9:29 PM, Kinuthia Ngugi < kinuthia.ngugi@gmail.com <http://mc/compose?to=kinuthia.ngugi@gmail.com>> wrote:
The A5/1 crack is not a theory, it's a reality and those guys in that
link
demonstrated this sometime last yr. However, what was apparent was that to achieve an actual tap is a very complicated and expensive affair, so much so that to exploit it in any meaningful way would require organized entities with unlimited resources (such as government security agencies). Infact, not far fetched conjecture within industry circles has always suggested that all the current A5/* GSM ciphering algorithms were cracked long ago by some agencies (Mossad is a prime suspect), its just that it's not in the public domain.
On Tue, Apr 26, 2011 at 7:59 PM, John Adams <adams.opiyo@gmail.com<http://mc/compose?to=adams.opiyo@gmail.com>> wrote:
That makes this guys theory correct...that A/51 encryption is a toast!....:)...this could be the next big infiltration point....
On Tue, Apr 26, 2011 at 2:38 PM, John Gitau <jgitau@gmail.com<http://mc/compose?to=jgitau@gmail.com>>
wrote:
actually its not just androids and Iphones, any phone with gps can 'track' you...Im not sure how much info you need but: but the US several years back made it a requirement that cellphones making 911 calls also send their locations or have the ability to avail it, this was built into the baseband processor - the specs were defined on 3GPP TS 04.31. the specification was called RRLP - radio resource location services. http://en.wikipedia.org/wiki/RRLP
Unfortunately for you, this communication is not authenticated. RRLP is to say the least one of the most dangerously open protocols out there - ?gsm (well the baseband processor) is full of them -. fortunately for you, people/governments are not interested in hacking gsm networks and phones yet...if you're a criminal however....just use that torch with a phone:-)
Apple and Android probably just have apps sitting on top of this, but all gps enabled gsm phones are a risky affair...steve if you need more details on the baseband processor/gps and maybe a few papers you know where to reach me..
JGitau On Sat, Apr 23, 2011 at 11:45 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com<http://mc/compose?to=kinuthia.ngugi@gmail.com>>
wrote:
> I think if Android devices were found to be doing this it wont be much > of a > fuss, after all android has very strong open source thus geek > community > roots...this is normally taken as a shameless excuse to do all > sorts > things > and get away with it :) :)..... But iPhone doing this kind of thing > after > some sort of rogue update and not declaring??? Walalalala!!.... > > On Sat, Apr 23, 2011 at 8:59 PM, Dennis Kioko > <dmbuvi@gmail.com<http://mc/compose?to=dmbuvi@gmail.com>
> wrote: >> >> On a lighter note, Windows and RIM have come out protesting that >> no >> one is >> bothering to find out if they are secretly tracking users. Both firms >> have >> promised to pay anyone?who?proves that they are?secretly?tracking >> users >> too. >> link not available
>> _______________________________________________ >> Skunkworks mailing list >> Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> ------------ >> Skunkworks Rules >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >> ------------ >> Other services @ http://my.co.ke > > > _______________________________________________ > Skunkworks mailing list > Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke >
-- **Gitau
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- --Cursed be the day I was born if I do not learn a new thing today--Chinese Saying
Regards, Adams John Opiyo.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke<http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau
------------------------------
Message: 2 Date: Wed, 27 Apr 2011 10:01:27 +0300 From: "Mick Wilson" <Mick.Wilson@unep.org<http://mc/compose?to=Mick.Wilson@unep.org>
To: Skunkworks Mailing List <skunkworks@lists.my.co.ke<http://mc/compose?to=skunkworks@lists.my.co.ke>
Subject: [Skunkworks] Mick Wilson/UNEP/NBO/UNO is on mission Message-ID: <OF4548E4A2.22612958-ON4325787F.002695F3-4325787F.002695F3@LocalDomain
Content-Type: text/plain; charset="us-ascii"
I will be out of the office starting 27/04/2011 and will not return until 29/04/2011.
I am in Abu Dhabi until the end of the week. I will have some access to email but may be unable to get back to you before 29 Apr. If it's urgent please contact ashbindu.singh@unep.org<http://mc/compose?to=ashbindu.singh@unep.org>
Need I say that the Bank of Africa takes 3 days before your cash is reflected. Wouldnt recommend. Kevin On Thu, Apr 28, 2011 at 8:06 AM, TheBigBoss <thebigboss@peperuka.com> wrote:
Bank of Africa Kenya has one also, Toucan Visa Card. Just load the money in account and transact online. Little fees. Rgds
On 4/27/11, Sam Keiru <sam.keiru@gmail.com> wrote:
Hey Guys, KCB has the least hoops and the best service. You can get an internet enabled debit card ... I believe cheapest to run currently! I would stay away from a credit-card :) Sam
On Wed, Apr 27, 2011 at 12:05 PM, wesley kirinya <kiriinya2000@yahoo.com>wrote:
Thanks Denis,
Is there a bank that allows online Transactions with their Debit card without jumping through 1000 hoops? Can anyone share on KCB and Equity?
O_O
--- On *Wed, 4/27/11, skunkworks-request@lists.my.co.ke < skunkworks-request@lists.my.co.ke>* wrote:
From: skunkworks-request@lists.my.co.ke < skunkworks-request@lists.my.co.ke
Subject: Skunkworks Digest, Vol 14, Issue 297 To: skunkworks@lists.my.co.ke Date: Wednesday, April 27, 2011, 12:00 PM
Send Skunkworks mailing list submissions to
skunkworks@lists.my.co.ke< http://mc/compose?to=skunkworks@lists.my.co.ke>
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks or, via email, send a message with subject or body 'help' to
skunkworks-request@lists.my.co.ke< http://mc/compose?to=skunkworks-request@lists.my.co.ke>
You can reach the person managing the list at
skunkworks-owner@lists.my.co.ke< http://mc/compose?to=skunkworks-owner@lists.my.co.ke>
When replying, please edit your Subject line so it is more specific than "Re: Contents of Skunkworks digest..."
Today's Topics:
1. Re: iPhones secretly tracking their users? +Android too! (John Gitau) 2. Mick Wilson/UNEP/NBO/UNO is on mission (Mick Wilson) 3. IPv6 UG (Phares Kariuki) 4. Re: Visa card for Online Transaction? (Denis G. Wahome) 5. Re: Visa card for Online Transaction? (Paul Kevin)
----------------------------------------------------------------------
Message: 1 Date: Wed, 27 Apr 2011 09:30:41 +0300 From: John Gitau <jgitau@gmail.com < http://mc/compose?to=jgitau@gmail.com>
To: Skunkworks Mailing List <skunkworks@lists.my.co.ke< http://mc/compose?to=skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] iPhones secretly tracking their users? +Android too! Message-ID: <BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com< http://mc/compose?to=BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
hmm...Kinuthia, I agree and sort of disagree with you on who has access to the technologies. True, the biggest beneficiaries are governments.
The trick here is to figure out the motivation behind trying to 'crack' the security or lack of it. Who would have imagined trying to crack standard 802.xx wireless networks in the past. GSM hardware is slowly becoming commoditized. You are now using gsm/umts to do millions in transactions from Mpesa to ATM's....currently you can get firmware for a baseband processor, FREE, you can build in your house today a small gsm network for tests or whatever, for less than 1000 USD...my point is...don't ignore this (well you cant do much about it, but have it at the back of your mind) - and if a criminal, ditch the cellphone:-)....the ATM you go to is probably using GSM/UMTS:-), so is your MPESA and whatever mobile money transfer you use....
You still think there's no motivation to invest in this stuff....:-)
JGitau
On Tue, Apr 26, 2011 at 9:53 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com < http://mc/compose?to=kinuthia.ngugi@gmail.com>> wrote:
On a similar note, a very interesting account of the Athens Affair, for those who maybe patient to read through. Goes to show what can be done by a determined person;
http://spectrum.ieee.org/telecom/security/the-athens-affair/1
On Tue, Apr 26, 2011 at 9:29 PM, Kinuthia Ngugi < kinuthia.ngugi@gmail.com <http://mc/compose?to=kinuthia.ngugi@gmail.com
wrote:
The A5/1 crack is not a theory, it's a reality and those guys in that
link
demonstrated this sometime last yr. However, what was apparent was that to achieve an actual tap is a very complicated and expensive affair, so much so that to exploit it in any meaningful way would require organized entities with unlimited resources (such as government security agencies). Infact, not far fetched conjecture within industry circles has always suggested that all the current A5/* GSM ciphering algorithms were cracked long ago by some agencies (Mossad is a prime suspect), its just that it's not in the public domain.
On Tue, Apr 26, 2011 at 7:59 PM, John Adams <adams.opiyo@gmail.com<http://mc/compose?to=adams.opiyo@gmail.com>> wrote:
That makes this guys theory correct...that A/51 encryption is a toast!....:)...this could be the next big infiltration point....
On Tue, Apr 26, 2011 at 2:38 PM, John Gitau <jgitau@gmail.com<http://mc/compose?to=jgitau@gmail.com>>
wrote:
> > actually its not just androids and Iphones, any phone with gps can > 'track' you...Im not sure how much info you need but: but the US > several years back made it a requirement that cellphones making 911 > calls also send their locations or have the ability to avail it, this > was built into the baseband processor - the specs were defined on > 3GPP > TS 04.31. the specification was called RRLP - radio resource location > services. http://en.wikipedia.org/wiki/RRLP > > Unfortunately for you, this communication is not authenticated. RRLP > is to say the least one of the most dangerously open protocols out > there - ?gsm (well the baseband processor) is full of them -. > fortunately for you, people/governments are not interested in hacking > gsm networks and phones yet...if you're a criminal however....just > use > that torch with a phone:-) > > Apple and Android probably just have apps sitting on top of this, but > all gps enabled gsm phones are a risky affair...steve if you need > more > details on the baseband processor/gps and maybe a few papers you know > where to reach me.. > > JGitau > On Sat, Apr 23, 2011 at 11:45 PM, Kinuthia Ngugi > <kinuthia.ngugi@gmail.com< http://mc/compose?to=kinuthia.ngugi@gmail.com>> wrote: > > I think if Android devices were found to be doing this it wont be much > > of a > > fuss, after all android has very strong open source thus geek > > community > > roots...this is normally taken as a shameless excuse to do all > > sorts > > things > > and get away with it :) :)..... But iPhone doing this kind of thing > > after > > some sort of rogue update and not declaring??? Walalalala!!.... > > > > On Sat, Apr 23, 2011 at 8:59 PM, Dennis Kioko > > <dmbuvi@gmail.com<http://mc/compose?to=dmbuvi@gmail.com>
> > wrote: > >> > >> On a lighter note, Windows and RIM have come out protesting that > >> no > >> one is > >> bothering to find out if they are secretly tracking users. Both firms > >> have > >> promised to pay anyone?who?proves that they are?secretly?tracking > >> users > >> too. > >> link not available
> >> _______________________________________________ > >> Skunkworks mailing list > >> Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> > >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > >> ------------ > >> Skunkworks Rules > >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > >> ------------ > >> Other services @ http://my.co.ke > > > > > > _______________________________________________ > > Skunkworks mailing list > > Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> > > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > > ------------ > > Skunkworks Rules > > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > > ------------ > > Other services @ http://my.co.ke > > > > > > -- > **Gitau
> _______________________________________________ > Skunkworks mailing list > Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke
-- --Cursed be the day I was born if I do not learn a new thing today--Chinese Saying
Regards, Adams John Opiyo.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke<
http://mc/compose?to=Skunkworks@lists.my.co.ke>
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau
------------------------------
Message: 2 Date: Wed, 27 Apr 2011 10:01:27 +0300 From: "Mick Wilson" <Mick.Wilson@unep.org<http://mc/compose?to=Mick.Wilson@unep.org>
To: Skunkworks Mailing List <skunkworks@lists.my.co.ke< http://mc/compose?to=skunkworks@lists.my.co.ke>
Subject: [Skunkworks] Mick Wilson/UNEP/NBO/UNO is on mission Message-ID:
<OF4548E4A2.22612958-ON4325787F.002695F3-4325787F.002695F3@LocalDomain
Content-Type: text/plain; charset="us-ascii"
I will be out of the office starting 27/04/2011 and will not return until 29/04/2011.
I am in Abu Dhabi until the end of the week. I will have some access to email but may be unable to get back to you before 29 Apr. If it's urgent please contact ashbindu.singh@unep.org<http://mc/compose?to=ashbindu.singh@unep.org>
I've used my two KCB Debit cards bila activation/validation/hoops/charges for almost a year now. Just use a kawaida bankika card ps: the M-Pesa to/from account is a good plus.: On 4/28/11, Kevin Ouma <kevin.ouma@gmail.com> wrote:
Need I say that the Bank of Africa takes 3 days before your cash is reflected. Wouldnt recommend.
Kevin
On Thu, Apr 28, 2011 at 8:06 AM, TheBigBoss <thebigboss@peperuka.com> wrote:
Bank of Africa Kenya has one also, Toucan Visa Card. Just load the money in account and transact online. Little fees. Rgds
On 4/27/11, Sam Keiru <sam.keiru@gmail.com> wrote:
Hey Guys, KCB has the least hoops and the best service. You can get an internet enabled debit card ... I believe cheapest to run currently! I would stay away from a credit-card :) Sam
On Wed, Apr 27, 2011 at 12:05 PM, wesley kirinya <kiriinya2000@yahoo.com>wrote:
Thanks Denis,
Is there a bank that allows online Transactions with their Debit card without jumping through 1000 hoops? Can anyone share on KCB and Equity?
O_O
--- On *Wed, 4/27/11, skunkworks-request@lists.my.co.ke < skunkworks-request@lists.my.co.ke>* wrote:
From: skunkworks-request@lists.my.co.ke < skunkworks-request@lists.my.co.ke
Subject: Skunkworks Digest, Vol 14, Issue 297 To: skunkworks@lists.my.co.ke Date: Wednesday, April 27, 2011, 12:00 PM
Send Skunkworks mailing list submissions to
skunkworks@lists.my.co.ke< http://mc/compose?to=skunkworks@lists.my.co.ke>
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks or, via email, send a message with subject or body 'help' to
skunkworks-request@lists.my.co.ke< http://mc/compose?to=skunkworks-request@lists.my.co.ke>
You can reach the person managing the list at
skunkworks-owner@lists.my.co.ke< http://mc/compose?to=skunkworks-owner@lists.my.co.ke>
When replying, please edit your Subject line so it is more specific than "Re: Contents of Skunkworks digest..."
Today's Topics:
1. Re: iPhones secretly tracking their users? +Android too! (John Gitau) 2. Mick Wilson/UNEP/NBO/UNO is on mission (Mick Wilson) 3. IPv6 UG (Phares Kariuki) 4. Re: Visa card for Online Transaction? (Denis G. Wahome) 5. Re: Visa card for Online Transaction? (Paul Kevin)
----------------------------------------------------------------------
Message: 1 Date: Wed, 27 Apr 2011 09:30:41 +0300 From: John Gitau <jgitau@gmail.com < http://mc/compose?to=jgitau@gmail.com>
To: Skunkworks Mailing List <skunkworks@lists.my.co.ke< http://mc/compose?to=skunkworks@lists.my.co.ke>
Subject: Re: [Skunkworks] iPhones secretly tracking their users? +Android too! Message-ID: <BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com< http://mc/compose?to=BANLkTiny1iTX3LAQSt2Nt5G5G8gV3DpPdg@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
hmm...Kinuthia, I agree and sort of disagree with you on who has access to the technologies. True, the biggest beneficiaries are governments.
The trick here is to figure out the motivation behind trying to 'crack' the security or lack of it. Who would have imagined trying to crack standard 802.xx wireless networks in the past. GSM hardware is slowly becoming commoditized. You are now using gsm/umts to do millions in transactions from Mpesa to ATM's....currently you can get firmware for a baseband processor, FREE, you can build in your house today a small gsm network for tests or whatever, for less than 1000 USD...my point is...don't ignore this (well you cant do much about it, but have it at the back of your mind) - and if a criminal, ditch the cellphone:-)....the ATM you go to is probably using GSM/UMTS:-), so is your MPESA and whatever mobile money transfer you use....
You still think there's no motivation to invest in this stuff....:-)
JGitau
On Tue, Apr 26, 2011 at 9:53 PM, Kinuthia Ngugi <kinuthia.ngugi@gmail.com < http://mc/compose?to=kinuthia.ngugi@gmail.com>> wrote:
On a similar note, a very interesting account of the Athens Affair, for those who maybe patient to read through. Goes to show what can be done by a determined person;
http://spectrum.ieee.org/telecom/security/the-athens-affair/1
On Tue, Apr 26, 2011 at 9:29 PM, Kinuthia Ngugi < kinuthia.ngugi@gmail.com <http://mc/compose?to=kinuthia.ngugi@gmail.com
wrote:
The A5/1 crack is not a theory, it's a reality and those guys in that
link
demonstrated this sometime last yr. However, what was apparent was that to achieve an actual tap is a very complicated and expensive affair, so much so that to exploit it in any meaningful way would require organized entities with unlimited resources (such as government security agencies). Infact, not far fetched conjecture within industry circles has always suggested that all the current A5/* GSM ciphering algorithms were cracked long ago by some agencies (Mossad is a prime suspect), its just that it's not in the public domain.
On Tue, Apr 26, 2011 at 7:59 PM, John Adams <adams.opiyo@gmail.com<http://mc/compose?to=adams.opiyo@gmail.com>> wrote: > > That makes this guys theory correct...that A/51 encryption is a > toast!....:)...this could be the next big infiltration point.... > > On Tue, Apr 26, 2011 at 2:38 PM, John Gitau > <jgitau@gmail.com<http://mc/compose?to=jgitau@gmail.com>> wrote: >> >> actually its not just androids and Iphones, any phone with gps can >> 'track' you...Im not sure how much info you need but: but the US >> several years back made it a requirement that cellphones making >> 911 >> calls also send their locations or have the ability to avail it, this >> was built into the baseband processor - the specs were defined on >> 3GPP >> TS 04.31. the specification was called RRLP - radio resource location >> services. http://en.wikipedia.org/wiki/RRLP >> >> Unfortunately for you, this communication is not authenticated. RRLP >> is to say the least one of the most dangerously open protocols out >> there - ?gsm (well the baseband processor) is full of them -. >> fortunately for you, people/governments are not interested in hacking >> gsm networks and phones yet...if you're a criminal however....just >> use >> that torch with a phone:-) >> >> Apple and Android probably just have apps sitting on top of this, but >> all gps enabled gsm phones are a risky affair...steve if you need >> more >> details on the baseband processor/gps and maybe a few papers you know >> where to reach me.. >> >> JGitau >> On Sat, Apr 23, 2011 at 11:45 PM, Kinuthia Ngugi >> <kinuthia.ngugi@gmail.com< http://mc/compose?to=kinuthia.ngugi@gmail.com>> wrote: >> > I think if Android devices were found to be doing this it wont >> > be much >> > of a >> > fuss, after all android has very strong open source thus geek >> > community >> > roots...this is normally taken as a shameless excuse to do all >> > sorts >> > things >> > and get away with it :) :)..... But iPhone doing this kind of thing >> > after >> > some sort of rogue update and not declaring??? Walalalala!!.... >> > >> > On Sat, Apr 23, 2011 at 8:59 PM, Dennis Kioko >> > <dmbuvi@gmail.com<http://mc/compose?to=dmbuvi@gmail.com>
>> > wrote: >> >> >> >> On a lighter note, Windows and RIM have come out protesting >> >> that >> >> no >> >> one is >> >> bothering to find out if they are secretly tracking users. Both firms >> >> have >> >> promised to pay anyone?who?proves that they are?secretly?tracking >> >> users >> >> too. >> >> link not available
>> >> _______________________________________________ >> >> Skunkworks mailing list >> >> Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> >> >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> >> ------------ >> >> Skunkworks Rules >> >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >> >> ------------ >> >> Other services @ http://my.co.ke >> > >> > >> > _______________________________________________ >> > Skunkworks mailing list >> > Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> >> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> > ------------ >> > Skunkworks Rules >> > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >> > ------------ >> > Other services @ http://my.co.ke >> > >> >> >> >> -- >> **Gitau
>> _______________________________________________ >> Skunkworks mailing list >> Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> ------------ >> Skunkworks Rules >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >> ------------ >> Other services @ http://my.co.ke > > > > -- > --Cursed be the day I was born if I do not learn a new thing > today--Chinese Saying > > Regards, > Adams John Opiyo.
> > > _______________________________________________ > Skunkworks mailing list > Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke< http://mc/compose?to=Skunkworks@lists.my.co.ke> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- **Gitau
------------------------------
Message: 2 Date: Wed, 27 Apr 2011 10:01:27 +0300 From: "Mick Wilson" <Mick.Wilson@unep.org<http://mc/compose?to=Mick.Wilson@unep.org>
To: Skunkworks Mailing List <skunkworks@lists.my.co.ke< http://mc/compose?to=skunkworks@lists.my.co.ke>
Subject: [Skunkworks] Mick Wilson/UNEP/NBO/UNO is on mission Message-ID:
<OF4548E4A2.22612958-ON4325787F.002695F3-4325787F.002695F3@LocalDomain
Content-Type: text/plain; charset="us-ascii"
I will be out of the office starting 27/04/2011 and will not return until 29/04/2011.
I am in Abu Dhabi until the end of the week. I will have some access to email but may be unable to get back to you before 29 Apr. If it's urgent please contact ashbindu.singh@unep.org<http://mc/compose?to=ashbindu.singh@unep.org>
participants (7)
-
Dennis Kioko -
Edward Obiko -
Kevin Ouma -
Okechukwu -
Sam Keiru -
TheBigBoss -
wesley kirinya