hi, all you FLOSS guys out there,

   
http://www.themalaysianinsider.com/malaysia/article/1-malaysia-email-provider-tricubes-at-risk-of-delisting/

the above article "Tricubes Bhd’s RM50 million contract to develop the
1 Malaysia email service could be the financial lifeline of the
information technology firm which is at risk of being delisted..."

The 1 Malaysia Mail Server is meant to provide secure email services
to Malaysians for their dealings with the government, and to counter
the fact that a lot of the free email accounts are hosted on servers
outside of Malaysia, and hence expose the data....

50M to 'develop' a 'secure' email server for Malaysians to use??

And they are going to use MS technology to do it ??!

<quote>
The Malaysia Insider understands that the 1 Malaysia email service
will be using software from Microsoft, the company that now owns the
free Hotmail account service that has been eclipsed by another free
email provider, Google Inc.
</quote>

<quote>
The 1 Malaysia email service is part of Najib’s Economic
Transformation Programme (ETP) to achieve developed nation status by
2020. He said today the RM50 million investment will have a gross
national income (GNI) impact of RM39 million up to 2015 and will
enhance delivery of public services.
</quote>

Well, well, well..... something funny is going on.
There are perfectly good FLOSS email software, crypto tools etc... and
we (among OSDC) certainly have the manpower & skills to implement and
deploy such solutions.

Even if a 'bunch of FLOSS' developers cannot do so immediately, giving
funding to the community will allow them to build the skills and
knowledge within 1 year, to do so; and have that knowledge shared and
benefiting a larger community rather than 1 single company!

And can we do this with 1m, no problem! Even if you spend another 1-5m
for HW ( 1m will buy about  160 or 4 racks full of 1u servers, which
is enough to build a decent cloud...), and even if we DOUBLE all those
numbers, that figure won't go anywhere near 50m!

A quick look at their website, <http://www.tricubes.com> shows they
are using IIS-6.0, not exactly a very secure option. A quick google
found this bit:

http://cyberinsecure.com/microsoft-iis6-vulnerability-exposes-websites-sensitive-files-and-passwords/

<quote>
Microsoft IIS6 Vulnerability Exposes Website’s Sensitive Files And Passwords

Security experts are urging administrators using Microsoft’s Internet
Information Services version 6 to exercise extreme care following the
discovery that the popular web server is vulnerable to a simple attack
that exposes password-protected files and folders.
...
</quote>

and they have a shopping cart running on the site, on IIS 6.0?, I hope not.


Would you trust your data with MS?? I won't.

What do the rest of you guys say?







IIS 6.0



-- 
#-------
regds,

Boh Heong, Yap

-- 
To unsubscribe from and detail about this group 
http://portal.mosc.my/osdc-my-mailing-list-information

MOSC2011 http://fb.me/mosc2011 and http://www.mosc.my/

Kirim email ke