Saturday, June 13, 2020

REACH - 101. Minister Chan Chun Sing - making a living in covid-19 world(SK)
14 Jun 2020 (6pm - 10pm)

REACH
[4:16 pm, 14/06/2020] : Dear contributors,
We will be opening the chat from 6pm to 10pm today. The topic will be posted later.
Thank you
Megan 😄

REACH
[6:01 pm, 14/06/2020] : Dear contributors,
Welcome back! Our chat will be open from 6pm to 10pm today.
Please be reminded to be respectful and considerate to others in this WhatsApp chat group.
The topic will be posted shortly.

REACH
[6:01 pm, 14/06/2020]  Minister for Trade and Industry Chan Chun Sing will deliver the fourth National Broadcast this evening on the theme, "Making a Living in a COVID-19 World" at the following times:
7.30pm – English Broadcast (CNA)
8.30pm – Malay Broadcast (Suria)
8.30pm – English broadcast with sign language interpretation (Channel 5)
9.00pm – Tamil broadcast (Vasantham)
9.30pm – Mandarin broadcast (Channel 8)
-----

[6:09 pm, 14/06/2020] ☸️  Danny 心:
https://www.straitstimes.com/singapore/authorities-warn-of-fake-tracetogether-apps-urge-users-to-download-from-official-sources?xtor=CS3-18&utm_source=STiPhone&utm_medium=share&utm_term=2020-06-12%2014%3A06%3A11
====

Straits Times
Authorities warn of fake TraceTogether apps, urge users to download from official sources
PUBLISHED 12 Jun 2020
Hariz Baharudin

The Straits Times understands that the fake apps have the same branding as the TraceTogether app, but contain malicious software designed to steal sensitive information such as passwords and banking details.
In a blog post on Wednesday (June 10), United States-based cyber security firm Anomali said that it has discovered at least 12 bogus contact tracing apps that have been designed to fool users, which hackers are using to spread malicious software and steal data.
Two of the 12 fake apps that Anomali found mimicked TraceTogether.
The firm said the apps, once installed on a device, are designed to download and install malware and steal banking credentials and personal data.
--
[2:24 pm, 21/03/2020] ☸️  Danny 心:
(1) Assessing the use of Tracetogether Mobil Apps - to help in contact tracing.
d. Each time the hackee do eCommerce transaction eg. do banking, buy or sell share, access his CPF, etc ---- the malware with keylogger - will capture the hackee id, password, the SMS OTP that drop into his handphone and pipe them to the hacker server --- who will then use hackee id, password and sms otp to access his banking, share, cpf ----- and transfer their money, sell their share, transfer out the cpf balances etc to the hacker account --- each time the hackee access the internet via 4G or secure wi-fi to do their digital transaction.
======

Straits Times
Authorities warn of fake TraceTogether apps, urge users to download from official sources
PUBLISHED 12 Jun 2020
Hariz Baharudin

Users who have downloaded applications from unofficial sources should delete these apps, and run an antivirus scan on their devices. In cases where users cannot delete the application after it has been installed, they could perform a factory reset on their device to remove the potentially dangerous app.
----
[12:21 pm, 08/05/2020] ☸️  Danny 心:
Preparing ourselves from installing contact tracing tool :-
How to recover your handphone in the event of a malware attack, ransonware etc?
(4) Do a Security Virus scan to your handphone device ( to clean up the virus ) - everyday.
If can remove the malware, botnet, spyware, ransonware or virus - good.

(6) If cannot, then prepare to do a "drastic measure" to clear the malware, botnet, spyware, ransonware or virus.
You will need to ensure all your phone data - are properly backup to the Google Cloud as well as to your other personal backup devices - so that you can recover your data later.
Do a factory reset to erase all your data and reinstall the Google Android OS into your phone - to remove the malware, botnet, spyware, ransonware or virus.
Do not pay the hacker bitcoin or money -- if your handphone contracted ransonware - because even if you pay - there is no promise that the hacker will remove its ransonware.
====

CNA
SingCERT warns of fake COVID-19 contact tracing apps containing malware
12 Jun 2020 03:59PM
(Updated: 12 Jun 2020 04:08PM)
If the application cannot be deleted, users should back up their data and perform a factory reset on the device to try and remove it, said SingCERT.
----
[12:21 pm, 08/05/2020] ☸️  Danny 心:
(2) Ensure you backup all your contact list to Google drive (cloud) everyday.
(3) Ensure you backup your Whatsapp chat everyday to the Google Drive (cloud).
(5) Copy all the following files from your handphone directory to your laptop harddisk or portable harddisk :-
* DCIM
* Whatsapp media
(6) If cannot, then prepare to do a "drastic measure" to clear the malware, botnet, spyware, ransonware or virus.
You will need to ensure all your phone data - are properly backup to the Google Cloud as well as to your other personal backup devices - so that you can recover your data later.
Do a factory reset to erase all your data and reinstall the Google Android OS into your phone - to remove the malware, botnet, spyware, ransonware or virus.
Do not pay the hacker bitcoin or money -- if your handphone contracted ransonware - because even if you pay - there is no promise that the hacker will remove its ransonware.
(7) Then restore back your phone data from Google Drive (by removing your SIM card and reinsert it back) - Android will prompt and guide you to restore all your data back from the Google drive.
Then restore your other personal data from your personal backup device through your laptop harddisk or portable harddisk.

====
Straits Times
Authorities warn of fake TraceTogether apps, urge users to download from official sources
PUBLISHED 12 Jun 2020
Hariz Baharudin

In an advisory on Friday (June 12), Singapore Computer Emergency Response Team (SingCert), a unit of the Cyber Security Agency of Singapore, said that hackers are capitalising on an increased interest in contact tracing applications as countries progressively move out of their coronavirus lockdown phase.
---
[12:03 pm, 04/05/2020] ☸️  Danny 心:
(5) I seriously think that if a person have initiatives in pushing out any national IT projects - get the endorsement from CSA ( Cyber Security Authority ).
(6) CSA is reviewing and monitoring the National IT CII (Critical Information Infrastructure) - all the 12 to 13 Nation Economic sectors IT infrastructure- and Health IT Infrastructure is also under their purview - in case a person is not aware about it.
===

Not leaking.....   Zen Telepathy ......
---

Caleb
[6:09 pm, 14/06/2020] : When will announce when Phase 2 open?

Blue and White Flag Guy
[6:12 pm, 14/06/2020] : To chime in on this,
I recommend that the government doesn't only educate people to install the app from the official sources but also teach users who may not be able to find (or install) the app from their app store for one possible reason, that they're on VPN.
This way, people will not be tricked into installing unofficial apps.
All we have to do is not give people reasons to turn to unofficial sources.

[6:14 pm, 14/06/2020] ☸️  Danny 心:
 That's why I support Bluetooth token.

[6:14 pm, 14/06/2020] ☸️  Danny 心:
Bluetooth apps have the following deficiencies :-

1. Problem working with different OS.

2. Can cause security risk to handphone users such as stealing  handphone users banking credentials and data through passive hacking or active hacking.

3. Eg. Of Passive hacking is when users ignorantly downloading fake apps that steal data.

4. Eg. Of Active hacking is when hackers exploiting weak Bluetooth security by hacking Bluetooth handphone that is turn on in public domain.

[6:14 pm, 14/06/2020] ☸️  Danny 心:
The outcome and realities speak for itself.
Luckily the Bluetooth apps is not make mandatory...

[6:14 pm, 14/06/2020] ☸️  Danny 心:
1. There's no financial incentives to hack a Bluetooth token as there are no sensitive user bank credentials to be stolen.

2. Apps stored in the token is encrypted. Even if hack and stolen is not useful to the hackers.

3. No financial loss to public users.

4. That's why I support the Bluetooth token.
---

Blue and White Flag Guy
[6:14 pm, 14/06/2020] : Please don't flip flop policy on yourself

---

[6:15 pm, 14/06/2020] ☸️  Danny 心:
---
Straits Time

https://www.straitstimes.com/singapore/digital-virus-might-be-bigger-threat-than-covid-19-heng-swee-keat

Straits Times
'Digital virus' might be bigger threat than Covid-19: Heng Swee Keat
13 Jun 2020
Singapore must continue to protect itself against security threats such as cybercrime even in the middle of a pandemic, said Deputy Prime Minister Heng Swee Keat.
"A growing and ever-present threat is in cyberspace... The *digital virus* can be as, if not more, damaging than the physical virus."
As a highly digital society, and one that is using more digital tools to fight Covid-19, Singapore must be extra vigilant, he added.
"The security environment is increasingly complex and volatile. As a small country, we do not have the strategic depth to accommodate any compromises in security," he said.
In February, The Straits Times reported that $1 billion would be set aside over the next three years to boost the Government's cyber and data security.
--
That is why I like DPM Heng Swee Keat.  He sees what I see - that cybersecurity must be the core of any IT design that roll out to the public.

Minister Vivian also say that Tracetogether token should be open up in code, design - for public feedback and can be improved upon.

Minister Vivian openess, transparency, honesty, getting public to jointly improve the Tracetogether token so that people will willingly adopt the solution and use it to protect ourselves against the virus pandemic without attempt to sugar-coat - will surely win public confidence and acceptance.

We have good Ministers who spare no effort to emphasize good quality and with high integrity.
---

[12:03 pm, 04/05/2020] ☸️  Danny 心:
(2) If a person have the mindset of building IT infrastructure or IT apps - without regard to building in IT security ---- then the person is building a dangerous platform that will cause tremendous economic, social and even physical damages to the Nation.

(3) Just rent a video Diehard 4 --- and watch the whole movie - how international hackers - destroy a whole city by exploiting the IT vulnerabilities - then it is more fruitful to start  discussion here - if a person still have the notion about pushing IT initiatives with no regard to IT securities.

(4) I think a person will have very short memory, if one have forgotten the Singhealth hacking - APT - Advanced Persistent Threat conducted by State Hackers hacking into the Singhealth network - where we have just toil and completed the arduous task of plugging the IT securities loopholes in the SingHealth IT infrastructure - and now a person can talk about disregarding IT security.

(5) I seriously think that if a person have initiatives in pushing out any national IT projects - get the endorsement from CSA (Cyber Security Authority).

(6) CSA is reviewing and monitoring the National IT CII (Critical Information Infrastructure) - all the 12 to 13 Nation Economic sectors IT infrastructure- and Health IT Infrastructure is also under their purview - in case a person is not aware about it.

(7) A national IT project will never get passed the Security Review Committee for any Government or Nation-Wide IT infrastructure project - if a person disregard IT security.

(8) IT security must be the core of the design of any IT projects and must not be an afterthought.

(9) After completing an IT project and then start to think about its security is a patchwork.

---
[2:28 pm, 05/05/2020] ☸️  Danny 心:
If these Bluetooth vulnerability is not secured, malware that attack handphone with Bluetooth turn on (which is against the security best practice) - will spread like wildfire akin to covid-19 infection for all those handphone or devices with Bluetooth turn on.

[4:32 pm, 05/05/2020] ☸️  Danny 心:
Else we got to fight 3 fronts in national scale.
1. Virus
2. Economy
3. *Digital virus*
---
[12:22 pm, 06/05/2020] ☸️  Danny 心:
So now can understand why I so paranoid to get everything right before pushing any system to public.
Because there will be *liability to the government* if any *security breach* happen.

[12:25 pm, 06/05/2020] : esp when ZOOM was rolled out for HBL in schools, they face some security issues initially and then it was resolved thereafter

[12:27 pm, 06/05/2020] ☸️  Danny 心:
But won't it be better to get everything right before pushing out?
Zoom cause embarrassment to the students.
But what happens if national security meeting is recorded by hackers?

---


REACH
[6:34 pm, 14/06/2020] : COVID-19: Public servant arrested under OSA for allegedly sharing classified information about Phase 2
https://www.channelnewsasia.com/news/singapore/covid-19-man-arrested-osa-whatsapp-message-phase-2-12833794

Ken
[6:36 pm, 14/06/2020] : 🤦‍♂️
[6:36 pm, 14/06/2020] : Another one their sense of secrecy really 🤦‍♂️

Blue and White Flag Guy
[6:37 pm, 14/06/2020] : Honestly it's easy for us to comment but when you handle such things daily you'll get desensitized, another thing is we're all humans, you want to keep a secret? Suggest you use encryption then

Ken
[6:38 pm, 14/06/2020] : When you have access to sensitive information, you are paid to keep them. Not spread for whatever reason you have.

Blue and White Flag Guy
[6:39 pm, 14/06/2020] : Again, easy for you to say

Ken
[6:43 pm, 14/06/2020] : 🤷‍♂️ oh well, no point debate for this. Information to me if you have access, you are bound by your duty. Unless you think is morally wrong to keep it in.
Otherwise, you are paid to do your job. If you can’t do it quit. Thats how I look at it. Easy or not don’t need to prove to people.

Alvin
[6:45 pm, 14/06/2020] : Need to know basis

Blue and White Flag Guy
[6:45 pm, 14/06/2020] : You must understand that the reason such information keeps getting leaked is because they want to help.
Nobody can just handle that information and leave it be, it's human nature.

Ken
[6:45 pm, 14/06/2020] : If not declare anything can change at last min

Alvin
[6:46 pm, 14/06/2020] : If this person knows, either he is suppose to know and should not reveal (hence he is breaking OSA) or he dig info out which is not his privy.

Blue and White Flag Guy
[6:47 pm, 14/06/2020] : For this case, it's the former but rather than just read the news, we should figure out why this keeps happening rather than say "oh that's wrong" and dismiss the news afterwards
After all, this is not the first OSA offence related to COVID-19

Ken
[6:50 pm, 14/06/2020] : Have advance knowledge of situation, then the rest of the public also creates distrust. And only a handful will received such “useful” information. Which can benefit from it. Example face shield can or cannot be used. When which shops can open. Etc

Blue and White Flag Guy
[6:51 pm, 14/06/2020] : Do not understand your ststement

Ken
[6:56 pm, 14/06/2020] : Having pre-declare information means you have access to information that people can benefit from it, example business side or stocks related.
Works to increase investment in food, when they investing in it. People can prepare bids more time to prepare, the list goes on. Giving people unfair advantage with the knowledge.

[6:56 pm, 14/06/2020] ☸️  Danny 心:
(1) Thought that Government will usually categories document and information into "confidential", "restricted", "secret", "top secret".

(2) All information related to the above classification - cannot leak into public domain and cannot share with anyone that is not authorised to receive these information.

(3) Else OSA will kick in.

(4) Every civil servants will have to sign this declaration upon joining the service.

Blue and White Flag Guy
[6:57 pm, 14/06/2020] : There is no doubt about the OSA.
The doubt is how can we avoid further instances!

Ken
[6:58 pm, 14/06/2020] : Don’t want to say it but to have even tougher stand on such leak. 😔 when people just can’t keep it in.

Blue and White Flag Guy
[7:00 pm, 14/06/2020] : Nothing against you, this is about prevention rather than cure (damage control)

Ken
[7:08 pm, 14/06/2020] : As you know human is involve, really hard to secure everything. Prevention, tougher stand also act as prevention.
High level stuff, also have people working at the lower level.

---

Ken
[7:16 pm, 14/06/2020] : 🤣

[7:17 pm, 14/06/2020] ☸️  Danny 心: Very often with mask on, we can't recognise our friends or colleagues.

Such masks will give us a recognizable face when we meet our friends and colleagues.

(Contribution from my close friend).

XaniceAfcai
[7:26 pm, 14/06/2020] : Agreed. I can't but my neighbours fr next block recognise me. Oops

[7:27 pm, 14/06/2020] ☸️  Danny 心:
Hahahaha I like.
I bump into my neighbor who wear a big mask.
She wave to me and I can't recognise her.
Then I say are you my neighbor?
She say yes - and I started to laugh.
I say I can't recognise you in your mask.
This one is a good one.

XaniceAfcai
[7:31 pm, 14/06/2020] : So malu sometimes. Even my col fr diff level also dun recognise me... I wave at her when we r on same lift..
The hawker centre I always tabao... Recognise me leh..

[7:32 pm, 14/06/2020] ☸️  Danny 心:
Hahahaha.
So that photo masks machine give a face to our mask.

XaniceAfcai
[7:36 pm, 14/06/2020] : My fren commented look like monkey

[7:37 pm, 14/06/2020] ☸️  Danny 心:
Hahahaha.
Some people will like it.
Some will have different opinion.
But is certainly a good humour.


---
REACH
[6:35 pm, 14/06/2020] : Iswaran, Chan Chun Sing to chair new ministerial committee on digital transformation
https://www.channelnewsasia.com/news/singapore/iswaran-chan-chun-sing-ministerial-committee-digitalisation-12832576

[7:20 pm, 14/06/2020] ☸️  Danny 心:
(1) CNA reported that US and EU is the largest trading partners with China.

(2) However, when covid-19 kicks in for the 2 months, ASEAN become the largest trading partners with China.

(3) If Singapore business are able to leverage on Digitalisation, we can get a headstart of quickly securing our supply chain with both ASEAN and China - to regain our lost trade.

(4) So it is imperative for all our business, large enterprise, middle enterprise and small enterprise to quickly transformed and tap on the digital transformation - the ASEAN and China market is very big -- and if especially if the RCEP is signed --- we can quickly jumpstart our trade with the RCEP members.

---
---

REACH
[8:27 pm, 14/06/2020] : 📢Topic📢
Which part of Trade and Industry Minister Chan Chun Sing’s speech was the most meaningful for you?
How can we play our part to keep the economy competitive, so that businesses can prosper and create good jobs for Singaporeans?

---
[8:46 pm, 14/06/2020] ☸️  Danny 心:
Important key messages by Minister Chan Chun Sing that are important to me :-

(1) Life, Livelihood and Lifelines (new buzzword created - global supply chain) - are impacted by covid-19.

(2) Cannot save every business, and every job - but will save every Singaporeasn.

(3) Target to create 100,000 jobs - healthcare, ICT, transport, preschool, financial services.

(4) Redesign new business model to exploit new opportunities.

(5) Foreign investors choose Singapore because we are well connected globally, skill workforce, reliable and trusted hub - not because we are cheap or have abundant of natural resources.

(6) We provide 4 top drugs out of 10 in the World. And we are top producers of chemical in the World.

(7) We have resecured most of the essentials and food supply chain - and ensure that we have access to essential goods and food.

(8) Government will keep faith with Singaporeans as Singaporeans keep faith with the Government.

(9) As World trade fragment, we have managed to keep bi-lateral, multi-lateral trade agreement intact. eg. Bi-lateral FTA, CPTPP and the up and coming RCEP.

(10) All these will give us opportunities for our business to grow, investors to want to invest in Singapore to tap into our big regional markets.

(11) Similarly, our business must also leverage digitialisation and transform ourselves to market our products and services to the big regional markets.

(12) Attract global talents to come to Singapore to complement our workforce and work for our sides and grow our busines regionally.

(13) Give our workers opportunities in training and excel.

(14) Digitalisation and Internationalisation - are the 2 key buzzwords - that our business and workers must hone their skills on --- to ensure our business can grow not only domestically but also in huge overseas market - and create wealth for Singapore.

[8:56 pm, 14/06/2020] ☸️  Danny 心: ---
(1) One generation Pioneer Generation and Merdeka Generation - move Singapore from 3rd World to the 1st World --- with determination, incorruptibility, competency, diligent - building top notch infrastructure such as Changi Airport, ports, HDB, MRT etc bricks by bricks --- overcoming insurmountable challenges.

(2) Today Singapore is in a better position compared to the Pioneer Generation and Merdeka Generation - and we can overcome the seemingly insurmountable challenge post by this covid-19 ---- with the same gumption, guts, determination anchor on the same values of the Pioneer Generation and Merdeka Generation - that define us as Singaporeans.

----
REACH
[9:45 pm, 14/06/2020] : Hello REACH Contributors!
⏰ We will be closing the chat in 15 minutes ⏰
Thank you very much for being part of our WhatsApp chat and participating actively.
Goodnight! 😴
- Megan

[9:47 pm, 14/06/2020] ☸️  Danny 心: https://www.channelnewsasia.com/news/singapore/covid-19-student-st-anthony-s-canossian-secondary-school-12833904
Look like face masks is the life savers in preventing the spread of the virus.

[9:48 pm, 14/06/2020] ☸️  Danny 心:
Masks significantly reduce infection risk, likely preventing thousands of COVID-19 cases: Study
https://www.channelnewsasia.com/news/world/masks-significantly-reduce-infection-risk-likely-preventing-12831644

---

Boon2
[9:57 pm, 14/06/2020] : The Minister's passion can be seen in his pumping fist and other gestures. Thank you.
I thought there were missed opportunities to better understand the challenges that face Singapore's businesses and what the concrete directions forward.

For example, if global economics is expected to be muted, where is the economic demand coming from for the 100,000 new jobs that he had emphasised? Digitalisation was stressed again - but what are the plans to address some key effects of digitalisation which includes removing certain daily economy's jobs?

2. There are topics that the respected Trade Minister had stressed, that I thought would have been better if they were left to MOM to introduce and articulate  e.g. helping businesses to hire, re-skilling, setting up job placement centres, etc.

3. The speech seemed to  a lot on what was done and feel-good words.  It left me looking for concrete action steps that will be taken to increase Singapore's competitiveness. For example, is Singapore still largely on track for MTI's Industry Transformation plans, and which industry clusters are expected to lead our economic recovery and growth in a tremendously changed world trade dynamics?

As another question, how is MTI doing to help Singapore to achieve higher food security? Are there plans to ensure greater Singapore's self-sufficiency  in certain industries and skills as a result of lessons learned from CoVID pandemic and the changing global trading system?

No comments:

Post a Comment