Mauritius ICT Ministry needs a 101 course on DNS

November 16, 2014

Yesterday I wrote about electoral.govmu.org and its tool to verify voting registration. Folks on facebook checked the tool & a few sent me feedback. I also posted the article on the Mauritius Internet Users discussion list.

I saw a reply that prompted me to share it with others who are not subscribed on the mailing list, but would be interested with this member’s findings.

The clip of Viré Mam (^^,)

If you replace “o” in “govmu” by a zero, i.e electoral.g0vmu.org, you end up with the famous Viré Mam clip on Youtube.

electoral-vire-mam

In various presentations, articles and even in an IT Observation Report to the MNIC1, I highlighted how fake domains can be registered to mimic the Government. The latter one, IT Observation Report was submitted to MNIC State Lawyers and I wrote certain of my findings to the ICT Minister in a letter; I did elaborate several ways the IT infrastructure of the Government can be exploited. However, it’s a blind eye & deaf ear, maybe I am not a foreign expert, so my words and those of other local professionals have little value.

The domain g0vmu.org is registered as private.

# whois g0vmu.org Domain Name:G0VMU.ORG Domain ID: D174491640-LROR Creation Date: 2014-11-14T09:39:09Z Updated Date: 2014-11-14T09:39:10Z Registry Expiry Date: 2015-11-14T09:39:09Z Sponsoring Registrar:Wild West Domains, LLC (R120-LROR) Sponsoring Registrar IANA ID: 440 WHOIS Server: Referral URL: Domain Status: clientDeleteProhibited Domain Status: clientRenewProhibited Domain Status: clientTransferProhibited Domain Status: clientUpdateProhibited Domain Status: serverTransferProhibited Domain Status: addPeriod Registrant ID:CR181212746 Registrant Name:Registration Private Registrant Organization:Domains By Proxy, LLC Registrant Street: DomainsByProxy.com Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309 Registrant City:Scottsdale Registrant State/Province:Arizona Registrant Postal Code:85260 Registrant Country:US

Naked woman on mu.org

The same member also alerted that following a press article mentioning the Mauritius Government portal has migrated to gov.mu.org he verified the same. He could not find any website at gov.mu.org but instead found the painting of a semi-naked woman at mu.org.

Who cares?

User group attempts at helping the Mauritius ICT Ministry are constantly turned down or given a blind eye. To note it’s been 3 weeks since I contacted Infotech Team for a Linux & Open Source presentation for the upcoming Infotech 2014. None of my two emails received a reply.

I sent an email to CERT-MU regarding Joomla vulnerabilities on the Mauritius Revenue Authority website; yet no reply from them.

One last piece of advice

We’re only at the beginning of a Government website migration towards govmu.org and we can already feel the negative consequences. It’s a headbang ahead. I would have rather supported the ICT Ministry in fighting & getting hands on gov.mu. Sadly, they are not cooperative.

One last piece of advice to my folks working in the Ministry, never tell me who advised registering govmu.org, I’ll curse a lot. Secondly, if you still care about the potential of local professionals, you better grab your hands on gouv.mu while it is still available. Instead of being a global joke with govmu.org, it would be better to have an official French portal under www.gouv.mu like that of the French Government having various sub-domains under gouv.fr:

Else, you could also have gouvernement.mu which is still available.

I understand the issue with gov.mu is the hefty and un-ethical price-tag associated with the three-letter domain. If only you could listen to the proper channel, you’d get better advice how to circumvent the problem.

// this is a rant (^^,) I am a proud Mauritian living in a beautiful country surrounded by cool geniuses. Sadly, I am lead by a team of idiots.

[1] MNIC, Mauritius National Identity Card. Note that the official website www.mnic.mu is down since approximately a month now.

Additional reading: A technical analysis of the gov.mu domain name migration by S. Moonesamy.


Update #1

As posted by another member of the Mauritius Internet Users Group, govmu.net redirects to “Vire Mam 2” on Youtube.

Quote from an email sent to the MIU discussion list:

.org is not restricted to non-profit organisations. govmu.org is subject to the jurisdiction of the United States. govmu.org is managed by the National Computer Board. The disaster management plan is starting to look like a disaster.