Nipate
Forum => Kenya Discussion => Topic started by: Omollo on July 12, 2017, 06:33:17 PM
-
Invalid Tweet ID
(https://pbs.twimg.com/media/DEhqq2oXkAcQrn5.jpg)
-
Nyanza is leading in double registration. Homabay has 5% of its voters double registered.
-
Invalid Tweet ID
-
(https://pbs.twimg.com/media/DEXSTIKWsAQlMZb.jpg)
-
Have they established the cause of the double registrations? Accidental, malicious, technical?
They say that they are publishing the register a week before elections. I expect that they are taking the interim period to clean up the register, including double registrations. Is that correct?
-
https://www.standardmedia.co.ke/article/2001247278/kpmg-report-exposes-major-security-gaps-in-register
At least 10 security loopholes that could be exploited to manipulate the August 8 General Election have been exposed in an audit report of the country’s voter register.
The voter roll lacks mandatory security features and could therefore be easily hacked into and data of the 19.6 million registered voters deleted, added or amended, according to the audit report by KPMG.
In its report to the Independent Electoral and Boundaries Commission (IEBC), KPMG points out that there are two active default administrator accounts that could be used to access the voter register by unauthorised persons.
The firm further warns IEBC that deceased voters could still cast their ballots on August 8 and advises the electoral commission to strictly use biometric voter identification on polling day.
“In order to mitigate the risk of unregistered deceased persons being in the register of voters, it is imperative that the commission utilises biometric identification of voters as a primary mechanism on polling day,” reads the report.
ALSO READ: Why the Judiciary should be challenged
KPMG has pointed out a host of weak security settings, which it advises need to be addressed urgently to prevent the possibility of hacking of the register ahead of the polls, which are 25 days away.
“KPMG observed that there are two active default administrator accounts whose default passwords have not been changed. This significantly increases the risk of unauthorised access to the Register of Voters and using these accounts, a perpetrator can add, delete or amend the voter details in the Register of Voters,” warns the report.
The report also points out that “logs for monitoring super user activity” on the register had not been activated and manipulation of the register could go undetected.
An analysis of the roll revealed that the register is highly susceptible to cyber-attacks that could result in “unavailability of the database”.
Denied permission
This is because the commission was yet to instal security measures to prevent such attacks. Computer systems across the world have recently been attacked by hackers, leading to the loss of crucial data. In some instances, the hackers demanded ransom from affected organisations to restore their data.
KPMG says its auditors were denied permission to conduct tests to assess the risk of unauthorised persons accessing and manipulating the data. The electoral commission explained it was acquiring new ICT infrastructure.
ALSO READ: The law and morality of politics in Kenya
The audit report published by IEBC on its website on Tuesday has been the subject of confrontation between the commission and the Opposition National Super Alliance (NASA). NASA leaders led by presidential candidate Raila Odinga had accused IEBC of hiding details of the audit, which was meant to help improve the integrity of the register.
In its recommendation, KPMG wants IEBC in consultation with its technology provider, Morpho SAS, to urgently harden the database hosting the RoV (Register of the Voter). More worrying, the report notes, is that IEBC does not have a disaster recovery site, thus putting it in a dangerous position in its preparation for the forthcoming polls in the event of technology failure.
“Whilst we understand the commission is in the process of procuring a co-location site and new IT infrastructure, in the event of failure of systems prior to the establishment of a secondary production environment, this could represent significant risk to the preparation for or during the elections in August 2017,” says the report.
“KPMG further noted that IEBC carries out back-ups of the Register of Voters on backup tapes. There are no detached premises where these back-ups can be restored and tested. In the event that back-up tapes were to be destroyed at Head Office, the commission’s ability to recover critical voter registration data will be impaired due to lack of redundancy,” added the report.
Flash disks
IEBC is further exposed to data loss through its manual transfer of files. The report notes that the commission transfers data from its registration centres to its head office manually.
“The BVR system setup necessitates manual transfer of enrolment files from the BVR kits at the registration centres to the regional centres using flash disks.
ALSO READ: Raila: Uhuru plans to reject August polls results
“Due to the current practice of offline transfer of files between the registration centres and the regional offices, there exists a risk of loss of enrolment data before it reaches the regional office. This risk also exists when the data is transferred offline from the regional offices and head office,” says the report.
In its second Mass Voter Registration (MVR), the commission transferred 78 per cent of its enrolment manually. In a quality assurance conducted by the commission after the MVR II, the commission realised that some applications were missing due to the manual transfers.
“Through this exercise, the Returning Officers identified applications missing from the preliminary register,” the report said.
mnyamori@standardmedia.co.ke
-
Have they established the cause of the double registrations? Accidental, malicious, technical?
They say that they are publishing the register a week before elections. I expect that they are taking the interim period to clean up the register, including double registrations. Is that correct?
1. The system was disabled to allow that
2. The database has serious flaws
-
Have they established the cause of the double registrations? Accidental, malicious, technical?
They say that they are publishing the register a week before elections. I expect that they are taking the interim period to clean up the register, including double registrations. Is that correct?
1. The system was disabled to allow that
2. The database has serious flaws
The fact that they can have double registrations of the same ID, such an elementary feature, screams incompetence at a minimum. Maybe worse. They always have these kinds of problems even with half a decade to fix them.
Given that level of incompetence or worse, how can anyone assume they are correct when they promise that "the system was disabled to allow that"?
-
The fact that they can have double registrations of the same ID, such an elementary feature, screams incompetence at a minimum. Maybe worse. They always have these kinds of problems even with half a decade to fix them.
It's like reading a comic-book entitled "Elections in the Republic of Bananas". And this is the "IT powerhouse of Africa".
-
The fact that they can have double registrations of the same ID, such an elementary feature, screams incompetence at a minimum. Maybe worse. They always have these kinds of problems even with half a decade to fix them.
It's like reading a comic-book entitled "Elections in the Republic of Bananas". And this is the "IT powerhouse of Africa".
Also the fact that IEBC spends so much on its IT systems. They are either being taken to the cleaners, or they are part of a collusion to take wanjiku to the cleaners.
-
windy
I heard that ID numbers are not unique so that may explain why an ID number may have multiple registrations
The 1st of january is used for all people iwithout a specific date of birth.. Most people born before 1950 do not know their excat date of birth. thus GOK defaults to 1st of January to identify them..
Most of these allegations after hearing the other side I have concluded are just propaganda.. ON security I agree..
-
windy
I heard that ID numbers are not unique so that may explain why an ID number may have multiple registrations
The 1st of january is used for all people iwithout a specific date of birth.. Most people born before 1950 do not know their excat date of birth. thus GOK defaults to 1st of January to identify them..
I don't see how that explains anything. Even if people have the same names, same dates of birth, same villages of birth, same whatever ... it is still possible to ensure that ID numbers are distinct. Here is how to do it quite easily:
(a) Generate a random (or psuedo-random) number of a sufficient number of digits.
(b) Check to see if that number is already allocated.
- if not, then allocate it to the present person, who otherwise has "same everything" as a zillion others
- otherwise, repeat from (a)
Surely, even the Government of Kenya ought to be able to do that.
-
I think the incompetence goes to the agency that issues IDs.. I bet you there is no coordination and so numbers are just given. IF you been to an ID issuance place in Kenya the process is very manual nothing is automated. Most of these places you still have to complete a paper application that is sent to an office somewhere in my place i think it goes to Nairobi. One time my ID came back with someone else photo
-
I think the incompetence goes to the agency that issues IDs.. I bet you there is no coordination and so numbers are just given.
Yes, the numbers are just given, but on what basis? Even without coordination and with localized manual systems---all of which are already hard to explain in "The IT Powerhouse of Africa"---it is not difficult to devise a system that would have a much, much, much lower probability of duplication than appears to be the case here. Here is one:
- The ID number will consists of the digits that make up the date of birth, the digits that make up the individual's height (in centimetres), the time (24-hr digits) at which the application is finalized, and an identifying number of the place of issue.
Beyond the elections, the apparent inability of GoK to uniquely distinguish those of its citizens that are "in the system" has all sort of implications. What do these duplicates mean terms of tax collection, entitlements to government services, ..., any sort of legal-anything in which one must produce an ID?
....
But that's assuming that the problem really is incredibly, amazing incompetence. The other possibility is that what we have here is deliberate mischief.
-
The ID number will consists of the digits that make up the date of birth, the digits that make up the individual's height (in centimetres), the time (24-hr digits) at which the application is finalized, and an identifying number of the place of issue.
Beyond the elections, the apparent inability of GoK to uniquely distinguish those of its citizens that are "in the system" has all sort of implications. What do these duplicates mean terms of tax collection, entitlements to government services, ..., any sort of legal-anything in which one must produce an ID?
....
But that's assuming that the problem really is incredibly, amazing incompetence. The other possibility is that what we have here is deliberate mischief.
Yep. It is trivial to sort out uniqueness. What makes it even more difficult to understand IEBC's situation is that they even have the benefit of physical biometric information. If it's incompetence, it's the kind that requires a special effort. It's almost as if they need some inbuilt unreliability in the system.
-
Not changing default password is incompetence but having non unique IDs is design feature for system that is offline... Quit the hysteria.Iebc are deploying 41000 machines in some of the remotest and dangerous place.Do you want each device connected to central database everytime to check for uniqueness.
-
Not changing default password is incompetence but having non unique IDs is design feature for system that is offline... Quit the hysteria.Iebc are deploying 41000 machines in some of the remotest and dangerous place.Do you want each device connected to central database everytime to check for uniqueness.
National IDs are issued by the IEBC? Regardless of who is issuing them, who is checking what, and how many machines they have, they don't have to be "connected to central database everytime to check for uniqueness". It is sufficient to be connected just once, at any time, and in any period. People have months to do this sort of thing, and "machines in some of the remotest and dangerous place" is no excuse.
-
How many database or systems have you design so far - start from there - because I have designed several and this iebc system totally make sense to me. Those who double registered - can be later flagged - what you're proposing is that IEBC gadget should each be loaded with 30M (assuming that number of ID holder in kenya) records of ID numbers - all should check with other 41,000 devices to make sure no one has double registered in another station.
This gadgets are offline - the reg clerks carries it and end of the week - they take it to IEBC office and data is synced back to Nairobi - and that is why IEBC can issue stats of registered votes weekly -- of course some in pokot or turkana or mandera can even take a month before they sync back.
National IDs are issued by the IEBC? Regardless of who is issuing them, who is checking what, and how many machines they have, they don't have to be "connected to central database everytime to check for uniqueness". It is sufficient to be connected just once, at any time, and in any period. People have months to do this sort of thing, and "machines in some of the remotest and dangerous place" is no excuse.
-
How many database or systems have you design so far - start from there - because I have designed several and this iebc system totally make sense to me. Those who double registered - can be later flagged -
The elections are next month. When is the later?
what you're proposing is that IEBC gadget should each be loaded with 30M (assuming that number of ID holder in kenya) records of ID numbers - all should check with other 41,000 devices to make sure no one has double registered in another station.
You are confusing issues. Ensuring uniqueness of IDs is quite different from the registration for elections.
This gadgets are offline - the reg clerks carries it and end of the week - they take it to IEBC office and data is synced back to Nairobi - and that is why IEBC can issue stats of registered votes weekly -- of course some in pokot or turkana or mandera can even take a month before they sync back.
So IEBC can actually check for double registration? At the end of every week or whatever? And these ones weren't flagged then because?
-
While no error should be tolerated, questionable entries are about 3%
-
While no error should be tolerated, questionable entries are about 3%
The difference between 48% and 51%.
-
The Department that issues ID cards informed KPMG that:
1. The ID card numbers are unique
2. They are 8 digits
This is contained in the KPMG report.
windy
I heard that ID numbers are not unique so that may explain why an ID number may have multiple registrations
The 1st of january is used for all people iwithout a specific date of birth.. Most people born before 1950 do not know their excat date of birth. thus GOK defaults to 1st of January to identify them..
I don't see how that explains anything. Even if people have the same names, same dates of birth, same villages of birth, same whatever ... it is still possible to ensure that ID numbers are distinct. Here is how to do it quite easily:
(a) Generate a random (or psuedo-random) number of a sufficient number of digits.
(b) Check to see if that number is already allocated.
- if not, then allocate it to the present person, who otherwise has "same everything" as a zillion others
- otherwise, repeat from (a)
Surely, even the Government of Kenya ought to be able to do that.
-
The Department that issues ID cards informed KPMG that:
1. The ID card numbers are unique
2. They are 8 digits
This is contained in the KPMG report.
windy
I heard that ID numbers are not unique so that may explain why an ID number may have multiple registrations
The 1st of january is used for all people iwithout a specific date of birth.. Most people born before 1950 do not know their excat date of birth. thus GOK defaults to 1st of January to identify them..
I don't see how that explains anything. Even if people have the same names, same dates of birth, same villages of birth, same whatever ... it is still possible to ensure that ID numbers are distinct. Here is how to do it quite easily:
(a) Generate a random (or psuedo-random) number of a sufficient number of digits.
(b) Check to see if that number is already allocated.
- if not, then allocate it to the present person, who otherwise has "same everything" as a zillion others
- otherwise, repeat from (a)
Surely, even the Government of Kenya ought to be able to do that.
If you allow for errors, or other situations, as Pundit suggests, you might allow some duplicate entries. But not in the final database in production. If you've had about half a decade to deal with this, you don't need KPMG to even discover this information. It ought to be part of the automated workflow.
-
While no error should be tolerated, questionable entries are about 3%
The difference between 48% and 51%.
Yep , if the 3% is in either' strongholds...but they are almost randomly and evenly distributed barring Nyanza unassailable lead I double registration
-
Exactly - there will be errors - that is given - some of them are data entry errors by clerks -- some machines will fails - some few people will vote double (all you need is clerk issuing you two extra ballots) -etc - but as long as the errors will be fairly and randomly distributed - then will of people will be reflected.
The double registration in Nyanza is nearly five times elsewhere - point at attempts to rig. Jubilee need to find a way to watch out Luo Nyanza - otherwise going by double registration - all manner of shenagians will happen there.
Yep , if the 3% is in either' strongholds...but they are almost randomly and evenly distributed barring Nyanza unassailable lead I double registration
-
This is extremely silly and childish coming from a person who has been mounting every platform to proclaim his IT prowess. I think you are just some data clerk somewhere with no knowledge of a database.
Ghost voters need not be in Jubilee's strongholds. In fact so one can spread this type of computer illeterate gospel and get every reterd supporting him, such entries are best "stored" in opposition strongholds. If one read the NASA protest letter, the NASA experts found 400K names carefully spread around the country.
The idea is to "vote" for them remotely by some one with access to the database and with authority to do that. Then those figures will be transmitted to the Polling or Returning officers to include in their tallies.
Since there will be no actual ballot, that is why the Al Ghurair Printing is of deadly importance. They would need to pre-mark the ballots and deliver to the ballot boxes incase of any recount.
Then there is the silly claim that "Jubilee must watch Nyanza". Is NASA giving orders to IEBC staff in Luo Nyanza? Is the County Commissioner a NASA appointee?
I am more than convinced you Pundit are part of the rigging scheme
Exactly - there will be errors - that is given - some of them are data entry errors by clerks -- some machines will fails - some few people will vote double (all you need is clerk issuing you two extra ballots) -etc - but as long as the errors will be fairly and randomly distributed - then will of people will be reflected.
The double registration in Nyanza is nearly five times elsewhere - point at attempts to rig. Jubilee need to find a way to watch out Luo Nyanza - otherwise going by double registration - all manner of shenagians will happen there.
Yep , if the 3% is in either' strongholds...but they are almost randomly and evenly distributed barring Nyanza unassailable lead I double registration
-
Allegations n conspiracy theories are infinite.Evidence is rare.Why would I attempt to rig in homabay not mandera or lamu with a curfew.
-
Homabay leads with 20,259 double registered voters followed by Kisumu's 13,078 and Siaya's 9,506. As a percentage of their voters, these are 10.25%,6.62% and 4.81% respectively.
Why this is worrying is because the national county average is 1%.
Kiambu county has 8,511 or 0.72%.
But all this notwithstanding, NASWA propaganda brigade would have you believe that Kiambu is leading
Invalid Tweet ID
-
Precisely vooke.There is a near desperate attempt to prop Raila candidacy in Luo Nyanza but all noise is elsewhere. 10% is pretty significant.
-
This is extremely silly and childish coming from a person who has been mounting every platform to proclaim his IT prowess. I think you are just some data clerk somewhere with no knowledge of a database.
Ghost voters need not be in Jubilee's strongholds. In fact so one can spread this type of computer illeterate gospel and get every reterd supporting him, such entries are best "stored" in opposition strongholds. If one read the NASA protest letter, the NASA experts found 400K names carefully spread around the country.
The idea is to "vote" for them remotely by some one with access to the database and with authority to do that. Then those figures will be transmitted to the Polling or Returning officers to include in their tallies.
Since there will be no actual ballot, that is why the Al Ghurair Printing is of deadly importance. They would need to pre-mark the ballots and deliver to the ballot boxes incase of any recount.
Then there is the silly claim that "Jubilee must watch Nyanza". Is NASA giving orders to IEBC staff in Luo Nyanza? Is the County Commissioner a NASA appointee?
I am more than convinced you Pundit are part of the rigging scheme
Exactly - there will be errors - that is given - some of them are data entry errors by clerks -- some machines will fails - some few people will vote double (all you need is clerk issuing you two extra ballots) -etc - but as long as the errors will be fairly and randomly distributed - then will of people will be reflected.
The double registration in Nyanza is nearly five times elsewhere - point at attempts to rig. Jubilee need to find a way to watch out Luo Nyanza - otherwise going by double registration - all manner of shenagians will happen there.
Yep , if the 3% is in either' strongholds...but they are almost randomly and evenly distributed barring Nyanza unassailable lead I double registration
Conspiracy theories demand a modicum of intelligence.
Say someone manages to get 200 ghost voters in Houma Bay to vote for Uhuru. The results declaration forms are not going to register these 200 but rather the total valid votes cast.
The form 34 will be minus 200 as well as the scan that goes to the Constituency,county and national tallying center. Same case for the electronically transmitted results , which MUST be sent in the presence of the agents.
How exactly do you vote remotely?
-
Like I said earlier I only respond to intelligent humans.
-
This is extremely silly and childish coming from a person who has been mounting every platform to proclaim his IT prowess. I think you are just some data clerk somewhere with no knowledge of a database.
Ghost voters need not be in Jubilee's strongholds. In fact so one can spread this type of computer illeterate gospel and get every reterd supporting him, such entries are best "stored" in opposition strongholds. If one read the NASA protest letter, the NASA experts found 400K names carefully spread around the country.
The idea is to "vote" for them remotely by some one with access to the database and with authority to do that. Then those figures will be transmitted to the Polling or Returning officers to include in their tallies.
Since there will be no actual ballot, that is why the Al Ghurair Printing is of deadly importance. They would need to pre-mark the ballots and deliver to the ballot boxes incase of any recount.
Then there is the silly claim that "Jubilee must watch Nyanza". Is NASA giving orders to IEBC staff in Luo Nyanza? Is the County Commissioner a NASA appointee?
I am more than convinced you Pundit are part of the rigging scheme
Exactly - there will be errors - that is given - some of them are data entry errors by clerks -- some machines will fails - some few people will vote double (all you need is clerk issuing you two extra ballots) -etc - but as long as the errors will be fairly and randomly distributed - then will of people will be reflected.
The double registration in Nyanza is nearly five times elsewhere - point at attempts to rig. Jubilee need to find a way to watch out Luo Nyanza - otherwise going by double registration - all manner of shenagians will happen there.
Yep , if the 3% is in either' strongholds...but they are almost randomly and evenly distributed barring Nyanza unassailable lead I double registration
I would worry more about the high number of duplicates in Nyanza NASA strongholds. They stand out like a sore thumb defying the random errors theory. There is no way of knowing if these have been deliberately generated replacing legitimate voters, denying them a chance to vote, without allowing people to look at the register. IEBC has given them a small window of one week.
-
I would worry more about the high number of duplicates in Nyanza NASA strongholds. They stand out like a sore thumb defying the random errors theory. There is no way of knowing if these have been deliberately generated replacing legitimate voters, denying them a chance to vote, without allowing people to look at the register. IEBC has given them a small window of one week.
Nowhere have I even remotely offered the random error theory. My position is that all ghost voters must go regardless of where they are found.
-
I would worry more about the high number of duplicates in Nyanza NASA strongholds. They stand out like a sore thumb defying the random errors theory. There is no way of knowing if these have been deliberately generated replacing legitimate voters, denying them a chance to vote, without allowing people to look at the register. IEBC has given them a small window of one week.
Nowhere have I even remotely offered the random error theory. My position is that all ghost voters must go regardless of where they are found.
Sorry I wasn't clear. You haven't offered the random theory. But others have.
The point I am trying to make?
That the Nyanza figures being so high could indicate an attempt to disenfranchise legit NASA voters in that area.
How?
That if I were IEBC and determined to rig, one way I could do it is by replacing a legitimate voter with a different one. Overwrite them with someone else's information creating a double registration. When the legit voter shows up to vote, the system would show they are not in the register.
Given the shanty of a system they have in place, there is no way of telling if this has in fact happened.
Caveat:
I am relying on information about the report from jubilants, which may or may not be correct. Usually I trust that people are truthful. However in this case, my concern is provisional until I read the actual report.
-
Sorry I wasn't clear. You haven't offered the random theory. But others have.
The point I am trying to make?
That the Nyanza figures being so high could indicate an attempt to disenfranchise legit NASA voters in that area.
How?
That if I were IEBC and determined to rig, one way I could do it is by replacing a legitimate voter with a different one. Overwrite them with someone else's information creating a double registration. When the legit voter shows up to vote, the system would show they are not in the register.
Given the shanty of a system they have in place, there is no way of telling if this has in fact happened.
Caveat:
I am relying on information about the report from jubilants, which may or may not be correct. Usually I trust that people are truthful. However in this case, my concern is provisional until I read the actual report.
Termie
We have been demanding the publication of the register until now people are contributing money so one can go to court. For some reason NASA does not want to go to court to demand that the law be followed. The law is very clear on that.
The information we have is thanks to computer geeks that got a program to check as many ID cards are possible based on old data from the Registrar of persons. The IEBC learned of it and quickly shut down the portal and when it came back they had made it impossible or just difficult to do any further work.