REACH (Telegram) 11 - Over the course of the day, we will be sharing articles on key issues that were discussed in Parliament today. Please share with us what areas you might be interested in and let us have your views on the issues that were raised in Parliament today.
(SK)
07 Aug 2024 (10am - 7pm)
REACH (Telegram)
REACH Singapore, [7/8/2024 10:45 AM]
Dear contributors,
Welcome back! ๐
⏰ We will be opening the chat from 11am to 7pm today. ⏰
House Rules (short version of our Terms of Use) to keep in mind:
1. Be kind and respectful. We all want to be in a safe space to share our views.
2. Any and all threatening, abusive, vulgar or racially, religiously and ethnically objectionable content is prohibited.
3. Consider the quiet ones among us and give them a chance to comment.
4. No need to repeat your comment or in differnet forms (including caps) - we heard you loud and clear the first time.
5. Let's protect each other's privacy and keep contact details in this group what it should always be - confidential.
Full set of Terms of Use: https://www.reach.gov.sg/Participate/reach-telegram-group/REACH-Telegram-Group-Chat-Terms-of-Use/
We will strive to uphold these rules to ensure this is a safe space for all.
Please be assured that the points made by participants during the chat are aggregated and shared with relevant agencies.
The topic will be posted shortly.
Thank you.
Megan ๐
REACH Singapore, [7/8/2024 11:01 AM]
๐ข Topic ๐ข
Parliament will sit today (7 August) at 11am. Of note, parliamentary questions regarding the status of clean-up works following the oil spill at the Pasir Panjang Terminal, CrowdStrike Outage and Direct School Admission (DSA) scheme will be raised. The Good Samaritan Food Donation Bill will be read a second time and a motion on the topic of electoral boundaries will be filed.
๐ฌ Over the course of the day, we will be sharing articles on key issues that were discussed in Parliament today. Please share with us what areas you might be interested in and let us have your views on the issues that were raised in Parliament today.
๐ Good Samaritan Food Donation Bill
- MPs have called for food donors and rescuers to be thoroughly trained in handling large amounts of food safely, as they debated a proposed law that encourages the donation of unsold food while protecting businesses from lawsuits.
- The Good Samaritan Food Donation Bill – conceptualised by Mr Louis Ng (Nee Soon GRC) four years ago – seeks to shield donors from liability for any deaths or health issues resulting from the consumption of donated food, as long as strict hygiene and safety protocols are met.
- The Private Member’s Bill elicited bipartisan support from the four MPs who spoke on it on August 6, including those from the Workers’ Party (WP) and the Progress Singapore Party (PSP). The debate will continue on August 7 with about 10 more MPs expected to speak.
๐ Progress on Oil Spill clean-up works
- The East Coast Park beach section near the National Sailing Centre reopened on July 29, more than a month after it was closed for cleanup following an oil spill on June 14.
- The Sentosa Development Corporation (SDC) said on August 3 that Palawan Beach and Tanjong Beach will reopen in August after cleaning is completed.
- Siloso Beach reopened ahead of schedule after extensive cleaning efforts sped up the process. The work was completed in 1½ months, which was half the time it was originally expected to take.
๐ https://www.straitstimes.com/singapore/politics/mps-call-for-prioritising-safety-during-debate-on-food-donation-law-after-recent-food-poisoning-episodes
๐ https://www.straitstimes.com/singapore/east-coast-park-beach-section-near-national-sailing-centre-reopens-for-water-sports-after-oil-spill
๐ https://www.straitstimes.com/singapore/siloso-beach-in-sentosa-reopens-after-oil-spill-clean-up
๐ https://www.parliament.gov.sg/parliamentary-business/order-paper
----
REACH Singapore, [7/8/2024 11:30 AM]
[ Poll : Which issue are you most interested in for today's Parliament sitting? ]
- Status on clean-up works arising from the oil spill
- Shuttle bus services for Marine Parade residents
- IT outage caused by CrowdStrike
- Direct School Admission (DSA) scheme
- Good Samaritan Food Donation Bill
- Motion on Electoral Boundaries
REACH Singapore, [7/8/2024 11:53 AM]
Dear Contributors,
Please take a moment to participate in our polls ๐ and share your opinion ๐ญ. The poll questions are pinned for easy reference, and your vote is anonymous.
We look forward to hearing your thoughts on today’s topic!
Thank you.
Megan
REACH Singapore, [7/8/2024 12:20 PM]
Dear Contributors,
We want to HEAR MORE from you!
๐ฌ Over the course of the day, we will be sharing articles on key issues that were discussed in Parliament today. Please share with us what areas you might be interested in and let us have your views on the issues that were raised in Parliament today.
We have had good feedback from this group, and we hope that we can keep the discussion robust and active!
Thank you.
Megan ๐
LCL (Danny ๅฟ), [7/8/2024 12:44 PM]
1. Interested to know how to avoid or minimise the damage cause by relying on cloud providers - whose IT services are brought down by hackers, software updates, and distributed denial of service (DDOS).
2. Eg. Changi Airport services are brought down by crowdstrike software updates.
3. Secondary school students cloud providers online courseware are remotely hacked - and lose all their teaching notes and homework.
4. Driving centres driving lessons and driving tests are mass book by bots (resulting in denial of service) - DOS as for many months legitimate users cannot book.
LCL (Danny ๅฟ), [7/8/2024 12:46 PM]
"How am I going to pass my O-Levels': Students lose notes due to Mobile Guardian hack".
Big impact to secondary school students. https://www.channelnewsasia.com/singapore/mobile-guardian-hack-student-notes-gone-o-levels-exams-ipad-app-4528331#:~:text=How%20am%20I%20going%20to%20pass%20my%20O%2DLevels%27%3A%20Students%20lose%20notes%20due%20to%20Mobile%20Guardian%20hack
LCL (Danny ๅฟ), [7/8/2024 12:50 PM]
Notably the students mobile devices, iPad was hacked through MDM (Mobile Device Management) - which suppose to be remotely secured by endpoint security.
But in this case is compromised.
Not much information on how MDM are hacked because usually very stringent and secure authentication processes are in place to prevent hackers from accessing remote devices.
The hacking seems to have broken this myth.
REACH Singapore, [7/8/2024 1:02 PM]
[ Poll : Which issue are you most interested in for today's Parliament sitting? ]
- Status on clean-up works arising from the oil spill
- Shuttle bus services for Marine Parade residents
- IT outage caused by CrowdStrike
- Direct School Admission (DSA) scheme
- Good Samaritan Food Donation Bill
- Motion on Electoral Boundaries
REACH Singapore, [7/8/2024 1:02 PM]
Dear Contributors,
Please take a moment to participate in our polls ๐ and share your opinion ๐ญ. The poll questions are pinned for easy reference, and your vote is anonymous.
We look forward to hearing your thoughts on today’s topic!
Thank you.
Megan
Jun Ming, [7/8/2024 2:08 PM]
Aiyo national day week still discussing
Jun Ming, [7/8/2024 2:08 PM]
Take a break
Jun Ming, [7/8/2024 2:09 PM]
Everyone on holiday mood
G, [7/8/2024 2:17 PM]
๐ after much feedback (and via reach too) on selling off NTUC income to Allianz, looks like it's still the same old PAP playbook of "we are smarter and holier than thou, so you listen to us"
Real concerns are not addressed by the politicians, instead they just double down on their rhetoric ๐คท♀
LCL (Danny ๅฟ), [7/8/2024 2:29 PM]
*MDM Security Hack*
1. MDM (Mobile Device Management) that encompass BYOD (Bring Your Own Device) is a technology that comprise the following security measures :-
a. Users (Students) will bring their own device (eg.. iPad, HP or notebook) or School issue devices to access the schoolwares that are hosted in Cloud Providers.
b. Through WiFi, 4G or 5G or even LAN connection (UTP RJ45 connection) for laptops, users device will undergo a security posture assessment -- whereby the system will check the devices security posture eg. latest firewall version and patches, latest anti-virus signature updates, latest OS updates and patches.
c. If the security posture assessment passed, it will alllow access to the cloud service providers servers that host the school courseware.
d. Else, if the security posture assessment fail, it will be thrown into a Quaratine VLAN to undergo Remediation - e.g latest firewall patches, OS latest patch, anti-virus signature patch.
Once completed will be alllowed access to the cloud service providers servers that host the school courseware.
If Remediation fail, will be thrown into an Isolation VLAN - whereby school IT administrator will examine the reasons why it fails and rectification can be made.
e. After gaining access to the cloud service provider servers, the server will download a "Golden Clone" of VM (Virtual Machine) to the student device that comprise of individual student courseware notes and homework.
These VM are usually very safe because files or software in the devices cannot access or infect the VM courseware - as the VM is a secured container.
f. Hence I quite puzzle why is there a mass failure of students not able to access their devices and when they do, lose all their courseware homework and notes.
g. The only explaination is that the hackers could have hacked the cloud provider's servers or VMs.
Thought cloud service provider's cloud infrastructure should be well protected by a slew of security protection eg. firewall, proxies, IPS, end security in servers, APT protection, SIEMs (defense in depth) - that would have prevented hackers will compromising the servers.
Hence not sure if cloud providers have such security deployment.
h. Assume all the defense in depth is in placed and yet hackers still can penetrate (must be very skillful hackers) - I thought cloud providers should have backup all the students' VM in the cloud every day - as once the students completed their assignment in the courseware, VMs will be pull back by the servers,
So cannot imagine how come some students can lose all their homework and notes?
Didn't the cloud providers do daily backup of their servers into a backup storage - which should be a standard procedure?
I think MOE should verify with the cloud providers - why no backup to all students courseware, homework and notes - that can be recovered after the hacking.
No comments:
Post a Comment