Skip to main content

A bad case of writer's block

Of course the Image is copied from
http://calvinandhobbes.wikia.com/wiki/Writer%27s_Block
On Wednesday morning, like any other Wednesday, I emptied my waste basket into a polythene "paper" bag, and left it outside for collection, before boarding a matatu to work.

However, unlike other Wednesdays, I received a text message from a friend, telling me that he had "seen my story in the Nation". I ignored it, thinking that probably he had seeing a similar story , with facts similar and assumed that someone had copied my story.

Getting into the office, I was checking on recent stories I have written and how other media houses  reported them, when I stumbled onto an article titled "Tech gurus caught napping as 103 websites hacked" .

While the story of the hacking was exposed on the Security Forum, I was arguably the first journalist to cover it, with a little bit more facts that I added from some research and my experience.


I was therefore surprised to find lots of similarities between what I had written and what the journalist had written, (Note that the original article has been changed after I raised the issue) notably:

  • Such tutorials usually exploit programming errors in code, known as bugs, which have not been fixed. The hacker appears to have a website at http://www.direxer.com/ though this has not been updated to reflect the hacking. 
I was surprised that in addition to myself, here was another journalist who had made a general assumption that the hacking exploited bugs. Many websites nowadays are hacked from a technique known as server side scripting.

In addition, this was suspiciously similar to sentences I had written in my article.
The hacker appears to have a website at http://www.direxer.com/ though this has not been updated to reflect the hacking
Such tutorials usually exploit programming errors in code, known as bugs, which have not been fixed.
  •  In a message in the forum, the hacker says:
    show off by me...
    thanks for tutorial in www.code-security.com all...
    i have exploit from cs web, and i attacking to server Goverment Kenya,,,, and then,,, success full... this is deface in this night...
What I wrote. I have preserved the formatting, including the use of italics.
In a message in the forum, the hacker says

show off by me...
thanks for tutorial in www.code-security.com all...
i have exploit from cs web, and i attacking to server Goverment Kenya,,,, and then,,, success full... this is deface in this night...
  • The government has reportedly moved fast to take the affected websites offline through a Cyber Incidence Response Team (CIRT) based at the Communications Commission of Kenya.
  • The CIRT was formed to handle such situations and ensures Kenya's security in cyber space. In a comment, Vincent Ngundi who heads CIRT said: "We're on it. Thanks for the heads-up and comments" in Kenya's Security Forum where the news first broke.
What I wrote:
The government has moved fast to take the affected websites offline through a Cyber Incidence Response Team(CIRT) based at the Communications Commission of Kenya. The CIRT was formed to handle such situations and ensures Kenya's security in cyber space. Vincent Ngundi who heads CIRT has responded with the following comment "We're on it. Thanks for the heads-up and comments" in Kenya's Security Forum where the news first broke.
More
  • The government normally hosts several websites in one server at The Treasury thus compromising the server may expose several websites to a hacker.
  • The Administration Police website has been hacked several times in the recent past. At the same time, most of the websites hacked appear to have been running the Joomla Content Management system:  
What I wrote:
The government normally hosts several websites in one server at The Treasury thus compromising the server may expose several websites to a hacker. The Administration Police website has been hacked several times in the recent past. At the same time, most of the websites hacked appear to have been running the Joomla Content Management system.
I hope the journalist knows that the government websites are normally hosted at treasury because he did his Computer Science degree attachment at the Ministry of Co-operative Development and Marketing, and had to work with a website hosted at the treasury.

I hope the journalist knows that Direxer's site is actually a blog.

I hope the journalist  knows that the sites run Joomla because of a Firefox plugin known as Wappalyzer , which can show what popular technologies a site is using.

I hope the journalist knows Forum Code Security and code-security.net are the same.

I hope the journalist really made sure Direxer is Indonesian, cause in a hurry to post my article, I didn't.

I hope the journalist in addition to numbering the hacked sites to make sure they were 103 , he also confirmed that they had been hacked. I only checked a few.


I hope the journalist does know that he is listed as the author of this article too , and so am I.


I hope to grow my career under the journalist, who is also the president of the Kenya ICT Reporters Association (KIRA).

KIRA seeks to herald ICT journalism in Kenya and the region to the peak, by:
  • "keep pace and understand how the emerging technology tools like Twitter, Skype, Facebook, Youtube, google reader, RSS feeds, news alerts, blogs, websites, etc can be professionally utilised by journalists."
  • need to blog, tweet, skype and subscribe to feeds to remain on top of news.
A small correction, RSS can be traced back to 1995 and Google Reader is an RSS Feed Reader.

You can find out more about KIRA here, where the president also notes that "not many journalists are competent in this beat thus the skewed coverage of ICT matters" .


Below is the text of the original peice as it appeared on the Business Daily.

By JAMES RATEMO, jratemo@ke.nationmedia.com  (email the author)

Posted  Tuesday, January 17  2012 at  22:59

An Indonesian hacker has caught Kenya government tech gurus napping. In an unprecedented occurrence, an Indonesian hacker known as direxer has taken down 103 government of Kenya websites. 

According to a Tuesday discussion on Kenya's online tech forum, Kictanet, the hacker is part of an online Indonesian security forum known as Forum Code Security and says he took down the websites following tutorials from the forum.
The news of the hacking was first exposed on the site code-security.net/archives/114, a forum on code security.
The title on the website read: “Joint Discussion — Forum on Code Security”.
"Such tutorials usually exploit programming errors in code, known as bugs, which have not been fixed. The hacker appears to have a website at http://www.direxer.com/ though this has not been updated to reflect the hacking.
In a message in the forum, the hacker says:
show off by me...
thanks for tutorial in www.code-security.com all...
i have exploit from cs web, and i attacking to server Goverment Kenya,,,, and then,,, success full... this is deface in this night...
The government has reportedly moved fast to take the affected websites offline through a Cyber Incidence Response Team (CIRT) based at the Communications Commission of Kenya.

The CIRT was formed to handle such situations and ensures Kenya's security in cyber space. In a comment, Vincent Ngundi who heads CIRT said: "We're on it. Thanks for the heads-up and comments" in Kenya's Security Forum where the news first broke.
The government normally hosts several websites in one server at The Treasury thus compromising the server may expose several websites to a hacker.
The Administration Police website has been hacked several times in the recent past. At the same time, most of the websites hacked appear to have been running the Joomla Content Management system:
Also see details here












Comments

Post a Comment

Popular posts from this blog

Beers in Kenya: A sober opinion

Note: This is a dated post and has since been mostly passed by events. SAB Miller beers including Castle and Peroni are no longer widely available in Kenya after their exist. Sirville Brewery was bought out by Brew Bistro before being permanently shut in a tax dispute. Kenya is a land of milk, honey, beaches and taxes. I have penned, or is typed, a newer post here .  Peroni - One of the best beers in Kenya. Did a taste of canned and bottled Italian, and bottled Tanzanian I like the tangy flavour and body in Tanzanian Peroni. The can is close. Heineken drinkers will like the Italian one.  I have had a short beer swigging stint in my life. It has however been long enough for me to share my opinion of Kenyan beer. Interestingly, over the course of sharing such opinions with other drunkards connoisseurs,  I have found that we all have different views as to what beer is the best, which one makes you too drunk, or which one gives one free, extra hangover for every ha...
Post a Comment
Read more

Lusaka and Livingstone Zambia to Namibia By Road

Zambia is a pretty large country,  an exciting one and with no shortage of potholes.  For instance, take the direct route from Lusaka - Livingstone to Namibia through the Sesheke - Katima Mulilo border crossing. Typically, roads are either good or tend to have potholes here and there. However, the last 120 kilometres of the Livingstone to Sesheke/Katima Mulilo route are best described as potholes dotted by some road here and there for the just thirty kilometres past Kazungula town, which is also the Zambia - Botswana border crossing.  Trying to drive to Sesheke is so bad it will take you anywhere between 4 hours to 6 hours to navigate those 100 kilometres. You may or may not have your dignity at the end and your vehicle may be in more than one piece.  If you really must use the Sesheke - Katima Mulilo crossing as of December 2022, then take the 900 kilometre longer detour from Lusaka to Mongu then back to Katima Mulilo. It doesn't guarantee you absence of potholes, b...
Post a Comment
Read more

The Nairobi City By-Laws that Never Were

Well, you have all heard about the proposed Nairobi city by Laws, currently awaiting approval by the Local Government minister. The proposed laws seemed to be quite comprehensive, and ranged from simple laws governing traffic-lights-conduct to the outrageous ones which seek to limit the behavior of city dogs. We here at gramware have been having a feeling that some of the laws on dogs were referring to a word used to co-notate the gender of a female dog; and commonly used to refer to human beings with outrageous behaviours. Still, we think that there are some laws that city hall missed, and we decided to list some of them here. Most of them might be outrageous, and probably a reason why they didn't make the cut. Here they are: It shall be illegal for a city Resident to stop on a street to stare at a video screen for a period of time longer than 15 seconds. any resident contravening this shall be charged with obstruction. Pedestrians within the city shall attempt to walk in almost ...
Post a Comment
Read more

Kenyan Beers and Craft Beer Reviews for 2025

It's 2025, and you asked for yet another Kenyan beer review. Let's cut straight to the chase - we keep the many stories for once we are drunk. Right? This year we categorize the beers according to breweries.  Bila Shaka / Bateleur  Flagship is Bila Shaka which is a rich flavoured but bitter IPA with 6% volume.  They focus more on quality and experimenting.  Home to many pleasantly (sweet per 2 people. I agree) favoured beers like Dire Straits, and for the ladies who love it a lot on the sweeter side, there's Honey Badger. These come in at about 5% or so. Jua Kali isn't as sweet as the above and is a mixed rice and barley beer, for some reason popular in the hot coast. Capitan is their bar beer and is a light-ish, pleasant beer at 4% volume and a good time passer when you're there for a long and good night and have things to do the next day. My favourite local brewer and highly recommended, especially Dire Straits. It's a medium beer, don...
Post a Comment
Read more

Kenyan products: The art of punishing your consumer

This post was written in 2011. Facts may have and indeed have changed - but the conclusion has not.  Dormans instant coffee tastes better than Sasini instant coffee. Ramtons electronics are manufactured for Kenya's Hypermart Limited, yet maintain a high product quality Peanut butter used to taste so good, but you could not afford it on the pocket money that you got back in school. A few years later, you have your first real job and your first "disposable" income. You buy your first real tub of peanut butter, probably the first in your life. You feel proud that Dominion peanut butter is manufactured in Ruiru, a town that you visited in your campus days to withdraw your pocket money, it was the nearest bank ATM to your campus.  This was before Equity bank became a mainstream bank and decided to open an ATM in your campus, and before M-Pesa meant that you ...
Post a Comment
Read more