₦airaland Forum

airsaylongcome:
12.99m attack attempts? Abi I no dey read well?

You're right if you say attempts. That doesn't mean they were successfully. Many organizations face more than that on a daily basis.

tegrianonigltd:
Lol, in my years in the Tech industry, never, in a day. Never ever never. They know many Nigerians are not tech saavy, especially their followers, so they dish out this things so they can argue with us.

What is never ever never? With your years in IT are you saying such attacks is not possible?

codeME:
The IT responsible person just told him the numbers of attack the firewall blocked, this is a normal thing for firewall.

You actually know what's happening. In many organizations there are millions of intrusion detection sensor alerts per day. I was actually expecting a higher number.

IkwerreBabe:
Hello Nairalanders-
Happy Friday! Looking for some advice.

A male friend has an upcoming appt next month and needs advice on how best to approach his interview. For context, he is 36 years old, has no travel history, has owned his own company of 11 employees for the past 5 years and wants to attend a few conferences and tour the US. A few questions:
1. As CEO/Founder, should he state his company is sponsoring him or that he is sponsoring himself? Essentially he is the same person, my question related more to taxonomy. Does one hold more weight?
2. Should he mention he will stay in a hotel or that I will accommodate him. Either is feasible. For context, I am a married woman, living with my husband + two children and he is financially able to support himself. I will not be providing any financial documents.
3. He initially completed his DS-160 form in April '22, is a new one required?

Any information you can provide is appreciated.

Thank you.

It depends on the purpose of the conference. Is it for personal development or related to the company. If related to the company business, it's logical to say so.

2. Is the event taking place in the city where you live. He should state what he filled in the form. After the event, you can accommodate him.

3. The DS-160 should be fine if the info is accurate.

Overall they are no major issues.

The aim of the BVAS is to perform MFA. Reads voters card and biometrics.

Can INEC uploads all the results immediately they are captured? They should be able to upload most of the results immediately but not all. They don't own the end to end infrastructure.

Are results uploaded to IReV? No, the results are uploaded to a database. So IReV is a web facing server that queries the database.

Is it the same database server used for the Presidential/NA reports. I'm not sure but it's unlikely. When I made some queries to the server, I was blocked by a firewall. It can be bypassed by using other protocols. Best practice demands it should be separate.

At a time IReV was down. I had high response time to the server. I could also tell there were spoofing packets to the server, if it was successful is a different case.

truthCoder:
I am suspecting that certain logs or footprints actually exist (wont be surprised if there are github commits for example) and the claim that they need to wipe is to enable them clean the records.

I am also guessing that due to the scale, cloud would be involved. (Thats going to be some serious compute cost. ), GCP, Azure or AWS. Footprints will always dey.

I am being hopeful that real forensic experts are on the LP and other aggrieved party’s teams.

There are logs for every transmission. The logs can be retrieved from the servers. If that will help the parties is a different issue.
For the data, it is not stored offshore. The forensics will reveal interesting details not so much with respect to posted results but with respect to accreditation /overvoting or successful packet injection.

silento:
Which validation cost 1mb to process , inec is corrupted simple

With amount spent on the useless technology
The creator speculated all this scenarios na inec just rigged and planing to clear evidence

A programmer with sense will always solve and even solve unseen problems Like this

Nothing like failure on this technology inec just have back door

Even programmers on this forum will come up with a better technology that will cost less and will not fail , it is high time we stop using foreign technology on a national matters

Imagine a bvas that determines who rules that no single person can give details or how it how's and then kind of encryption and how hackproof it is

Shame to inec and the people that want to run this country down

God bless nigeria

It's frustrating when things don't go as expected. The device worked as expected. The issue was with the IReV. They're interconnected but different. No technology is foolproof. The issue is not a programming issue, It's more of system design and architecture, issues relating to load balancing, caching, databases, proxies, scaling, web servers, microservices, CAP theory, Queues etc and/or human factor.

The Fault Tolerance and Critical Systems policy was poor. The budget was also poor. INEC's budget was N105.3B for procurement of accreditation devices if we assume all of that money was spent on procurement, the funding is poor, when you account for inflation and exchange rates. This is because the funds will be going offshore for foreign procurement. When you compare Nigeria's cost of elections vs other African countries. It's cheaper to conduct elections in Nigeria. Eg It costs Kenya $17 per voter and Nigeria $6 per voter. When they received the funds is a different story.

truthCoder:
I am not privy to the any of the process design for the BVAS so my comments would strictly be my opinions as a programmer.

First, it is clear that there was either a shoddy design process or an intentional fraud or a mix of both.

There are 100k+ BVAS systems all connected to servers to fetch biometrics, validate data and upload images of a potential 93 million voters all within the space of 10 hours with peak demand at the image upload and results submission window which starts from 4pm.

Cheers

The system design is likely the culprit or human error but as we always say systems always fail.

The BVAS are not connected to servers for authentication.

jazzme1:
I am a computer programmer. Just like we have many here today.

INEC is telling Court to allow them reconfigure BVAS before the next election.

The question is this?
1.How can a machine made for serious election not capable of working perfectly for at least 4 years before reconfiguration.

2. Does it mean INEC did not test run this machine before using it?

3. If INEC chairman can agree that the machine failed in most cases, why can't they call for the cancellation of the election?

4. If billions of money was spent for using BVAS, why can't INEC take it time to properly train it's staff on how to operate the machine?

1. Working properly and reconfiguration are 2 different issues. Many devices need to be reconfigured after use and that doesn't mean they're not working properly. After the Guber/HOA elections it will take 4 years before the next reconfiguration.

2. The machines were tested before use and there're no issues with it.

3. INEC Chairman never said that the machines failed. The primary role of the machine is for accreditation, that why it's called the Bimodal Voters Accreditation System (BVAS). Cancellation of election is a different issue, it's for law students to discuss that.

4. I agree that many of the ad hoc personnel were not properly trained. They should actually take time to train those who will be operating the devices.

Gerrard59:
Japan's passport is stronger than the Singapore's, quite alright. However, Singaporeans can apply for the H1B1 visa to work in the US - 99% chances of getting approval. On the other hand, Japanese have to apply for H1B like everyone else. That, in my opinion, elevates the Singaporean passport above Japan's.

This means, the Singaporean can easily work in the world’s biggest economy than his/her Japanese counterpart.

You're thinking from the perspective of a Nigerian. There's no incentive for a Japanese for wanting a job in the US and seeking H1B. The major beneficiaries of the H1B are Indians and Chinese. Don't forget the H1B is used by companies to seek for workers.

Accommodation in Accra is unnecessarily expensive. Paying $1200 a month for a furnished apartment was on the high side. I don't know what the cost will be now.

lilbro:
Just like every other western country you just have to look for a home where the schools in that vicinity are highly rated in terms of academics and sports, trust me when i say true born Canadians are leaving Canada for the us because of lack of opportunities. the Canadian economy thrives on immigration and it will get to a point where if not well managed the structure will start to deteriorate. Indians have messed the country up and they have carved a niche for themselves that they look at Africans and Nigerians most especially as big competition for them and they will go all out to frustrate you. But guess what? they have little or no say in the US! my family and I have tons of experience with Canada and we r so glad we left and now living our American Dream!

Detailed analysis and very nice to have a true life comparison of both countries. I was honestly surprised when the OP came up with the question. The sad part of such decisions is that it's difficult to reverse. I can't live in Canada for free but then that's just me.

tensazangetsu20:
LoL you need to research more. South American passports come with more working rights to the EU based on just passport alone.

I know that this year you'll enter a South American country. It seems your Dr. friend have left you.

ferhyntorlah:
Most people who go for 2nd passport aren't interested in living in the country.

They need the document for easy travels for themselves or their offsprings.

He's referring to Nigerians. Are you saying that Nigerians aren't interested in living in these South American countries and only need the passports for travels?

Mstravelindiva:
You’re welcome friend (and yes, I am having a wonderful time)!

I hope you doing well. Sending you peace and blessings!

Thanks

Do you use timeshare for your vacations?

1stGenAmerican:
I am very sorry about your friend, that makes me so angry. Please tell me that friend’s survivors sue the doctor and the facility for malpractice. It won’t bring him back but they deserve damages.

Thanks ma. That event changed my life. The irony of the issue was I was the one pressing for charges while the family declined. However I must tell you. If out of the billions of humans, you're able to find one person who shares the same vision as you and she died due to avoidable circumstances, your world will never be the same. That's a tragedy I'll never recover from.

1stGenAmerican:
Sir, kindly show me where I said this was a Nigerian problem. So far, all of the names released with the exception of 9, are Nigerian. Why do you always shade me for being xenophobic when I’m half Nigerian myself, sir?
These people, regardless of their nationality, didn’t complete the coursework but instead paid for completion certificates and in just about all cases, didn’t sit for the NCLEX but paid someone to sit for it on their behalf. Read up on the DOJ website. The majority were Africans and Carribeans because they usually are the people who keep this kind of thing among their people. But I don’t care if they’re White, Black, Blue, or Brown, anybody with fraudulent medical credentials is dangerous and should be stripped of all privileges.

My apologies if I made a wrong inference. My emotions may have also played out due to the past experience of my fiancée. I have been very hard on Nigerian or anyone violating any law. Like I always say you cannot escape the long arm of the law. I have equally applauded your stand on illegal migration and other issues. The actions of the individuals is wrong but they were part of thousands involved in the scheme the DOJ states there are over 7,600 people around the country with fraudulent nursing credentials.

JayGordon:
Hi Everyone,

Your input, especially from those with first hand experience would be appreciated.

We got Canadian PR last year and are aiming to relocate to Canada this summer (family of 5).

However, got a job offer (65k GBP) per year plus sponsorship for just myself. I will have to sort of Visa fees for my family as company will not do this. So I am just thinking how much I will have to budget just for the move.

The sponsorship will be for 3 years so I need to budget for NHS surcharge (3× 600 X 4) and visa fees 600 x 4 I think. Also, I think I have to réserve a minimum balance in my account?

I visited UK last December and the cost of living is high.

Option 2 is to continue with out Canadian plan as we have PR. The thing is no job lined up. I have stepped up search though.

ILR will take 5 years while we already have PR.

Anyone with experience with having to choose from the two countries?

Regards.

I've had a similar experience but different circumstances.

Relocation is a serious business, consult your spouse and think about your kids in the decision making process. To me it shouldn't be about you but your kids.

65k a year is considered an excellent wage in the UK. This also puts you in your professional career if that's what you're passionate about go for it.

Your wife also gets to work and earn a living and everyone is happy.

If you move to Canada, you'll get a job and you'll be fine. The job may not be in your profession. You'll adjust and everyone will be fine.

Mstravelindiva:
Hey Nairalanders, it’s your girl Ms Travelin Diva and I’m in Switzerland…Zurich to be more specific! Here are the deets (slang for details) for day 1 which was a success!

Thank you ma for sharing your travel experience. It's good to know you're enjoying life.

Focusmind:
I am not justifying the use of fake prerequisite for sitting the board exam. The truth is that these people are brilliant to have passed the board exam. Most of them may have majored in sciences, arts and social sciences that are not nursing. But because of the desire to qualify as a nurse, they forged a nursing diploma, which is a requirement for sitting for the board exam.

I can relate it to passing ICAN in Nigeria. I didn't study accounting in school. But I sat for the accounting board exam, which is ICAN and passed. Some that studied accounting have not yet passed the accounting board exam which is ICAN. In this case, the requirements for the accounting board exam is a degree from any discipline.

However, fraud and forgeries are not acceptable anywhere. If getting nursing diploma is a requirement before sitting for board exam, let it be. If you want to sit for the exam, then go back to school and obtain a nursing diploma.

About 8 years ago. I lost a dear friend due to the recklessness of a doctor. That event taught me a lot about the US. The practice is common and nothing new, from racketeering in prestigious institutions to fake practitioners. Over 250k people die as a result of medical recklessness and at a time a third leading cause of death in the US. It is an endemic problem.

1stGenAmerican:
I can assure you that they won’t be retrained nor are they considered an asset. These people were indicted by the FBI for purchasing fraudulent documents, this country doesn’t reward scammers. The ones without citizenship all stand the chance of deportation, especially the ones without green cards. They will also be permanently barred from the field of nursing. In the upcoming weeks, the names on the lists will triple and many fraudulent Nurse Practitioners will be added.
The reason that they weren’t immediately fired is because they have only been charged, not convicted, and in order to prevent suits, their employers are waiting for the state boards to suspend their licenses (which is happening now). They can’t work without a license and that saves the employers from having to fire them for other reasons.
In true Nigerian fashion, the ones that have been caught are naming the names of others as if that’ll help their case. They’re even telling on the ones working using someone else’s credentials or sharing credentials.
I hate this for honest Nigerians with obvious Nigerian names who did things the right way because before being hired, facilitates will place them under the microscope and make them jump through hoops to gain employment, just like banks now do.

There you go again ma. There's more than meets the eye in this case. This is a Nigerian forum and so it's not unexpected to highlight Nigerians in any negative news event. This practice have been common in the US and it's a dangerous precedent for the health sector.

These were among thousands that were issued fake nursing diplomas by different nursing schools.

I will not exonerate anyone from engaging in fraudulent activities but this is not a Nigerian problem like you make it sound. There's a reason this kind of activities is very common in the US. There's a reason why there're hundreds of unapproved institutions in the US awarding fake diplomas/degrees. Like you rightly stated "this country doesn’t reward scammers" but rewards scamming institutions.

airsaylongcome:
So my knowledge in these techniques is dated. 2005 when I had to build a proof-of-concept. We attacked the UE/BTS connection which was unencrypted at the time (has this changed?) Perhaps they have tightened it.

Now you are going to make me get one of those OSS BTS solutions and maybe try some techniques. You are right though. The aim of security is not to make it 100% impenetrable. It’s to increase the cost of penetration versus the benefit

Wow. 2005
You must be very old with playing around in tech. I learned most of those things from others. When you've been in the business world, regulatory framework is very important.

tensazangetsu20:
Well to each their own sha. But it's good to have options especially with the way Nigeria is going, if APC wins the Nigerian elections again. I don't think the Nigerian economy can ever recover to be honest.

Your guy is young, I pray the startup works sha. I resigned from a job In Europe as a very young man to come and focus on my startup in Nigeria. It never worked out and I really regret doing that when I was much younger but I have learnt a whole lot and gathered experiences I dont think I will trade for money.

There are some things that we don't have control over in life and I don't bother myself about those things. In fact I hardly have serious worries. All humans make mistakes, but like the saying goes...you don't cry over spilt milk. I'll tell you a little about myself. I was a shareholder in two small companies in Nigeria, they became so successful and I could travel anywhere in the world. I reached a settlement with the founders and moved on. I've started 3 businesses in the US and they all failed, the bank took my house as a collateral. I worked with one of the best companies in the world and got laid off, worse, I don't have anything to show for it. My mates are married with kids but I still have debt hanging over my head. But you know what, I'm perfectly fine, I've learned from the past, I don't sulk, I re-strategize. As they say we move.

airsaylongcome:
Na why I no dey reason japa laidis so. The only real draw back for me is the work hours. 5pm to 2am in my case

If you already have a good paying remote job in Nigeria, I don't see the reason to japa. The time is normal for US workers. Millions of persons work 2nd and 3rd shifts.

tensazangetsu20:
Gbam I swear how can you be on H1B for ten years and counting you didn't solidify your stay you even married a fellow H1B holder lol.

It simply shows that piority differs. What you consider as very important is of no value to others. I know some Nigerians who left the US immidiately after their studies. Some have their own businesses and are doing well. A guy in Lagos recently rejected an offer from Amazon to focus on his startup, he told me during an investors meeting.

If you are serious about relocating.

Study in the US
Focus on a startup
Marry a USC

truthCoder:
It has been in existence since o.

As airsaylongcome said earlier, it us highly insecure.

You would need extra funding for losses that you would incur through “local wire”.

I am building a fintech startup at the moment but not along these dynamics. Unfortunately, due to the simple reason that there are people smarter than me here and possibly better funded, I cannot disclose the USP.

Your USP is what sets your business apart, if it is truly unique getting funds will not be an issue.

airsaylongcome:
It’s not so expensive to to build and deploy BSS/BTS these days o. With the right software (I don’t want to mention two readily available ones) and small technical know how you can build one in no time. Now think about a MITM attack in a location where it is known that mobile internet is almost non existent and people there use USSD as primary means of banking transactions. Carnage. Yes it is a very targeted attack. But as long as it’s possible, it’s very high risk

The USSD mechanism has different security lapses but I don’t see the on path attack as easy as you stated. As greatigboman pointed out, it’s not been used in Nigeria for the following reasons.

The BTS you’re purchasing has many limitations. One of them is range, it can also be detected on networks.

The attacker will need knowledge of electronics and telecoms. Knowing how to make certain adjustments and tweaking, understanding Air interface, Abis Interface.

There is an end-to-end encryption over VPN that uses SSL or TLS to secure communication since 2017.

USSD is encrypted for mobile transactions. So, the attacker will need to understand decryption techniques and rainbow tables.

If there’s an incident, the device is blacklisted, and you go again to buy another device and change location. The same location may not work for your new device.

Even if an attacker succeeds, the investment to reward ratio is low and he also needs to cover his tracks.

In the past 5 years how many reports of such attacks have you heard of?

GREATIGBOMAN:
If man in the middle attack is very easy.

Why isn't there more USSD based scams and hacks? At least Ij Nigeria.

Not talking about the one where a scammer steals your SIM card and reset your bank details to transfer your money.


I mean the real hacks done by a hacker on multiple sims or USSD based device

I want to learn more

You're right. Such attacks are not common in Nigeria. Theoretical knowledge is different from practical demonstration. There are other types of USSD scams but haven't got many reports of on path attacks.

Kvngfrosh:
it’s free and paid.

I'm aware of that. He claimed it will not be monetized.

Besides what's the essence of a free product if you can't use it. The difference for me is worth far more the cost.

Hannania:
The ChatGPT it self will not be a paid service. That's why they lunched other subsidiaries. Microsoft invested $1bn for a reason. They're playing the same game they did when they bought Github(remember they had Copilot). Presently, The company's infrastructure is hosted on Azure(owned by Microsoft ).

This thread will give you a good overview about it::

https://twitter.com/callmehouck/status/1605918585238552578?t=qTQfIfZadt0dyKwWSeYceA&s=19

Theres even an investment cap on the company, where stack holders can't get more than 100% of their investment.

PS: It does not contain data for 2022 yet!

I rebutted your claim earlier. Now you know it's a paid service.

georgee:
Share the website

starlink .com

Enter your address and you see the amount in NGN