Surveillance, Control, and the Illusion of Privacy

(Hard Talk)

Conspiracy theories about powerful entities placing citizens under close surveillance are everywhere. To me, such monitoring makes sense only when it targets real threats - those plotting war, destabilizing nations, or committing heinous crimes.

Since the 1980s, we’ve dreamed of moving forward - of Star Trek technologies becoming real, of breakthroughs in medicine, science, engineering, robotics, computing etc.

Ironically much of that has happened. Yet today, some long for the simplicity of the past. Nostalgia often hits hardest when progress becomes undeniable.

But progress comes with a cost. Is true privacy nearly gone? Every click, search, and swipe leaves a trace. Some call it discipline, others call it control and the difference is significant.

Yet the world may not be as dire as The Matrix or The Net portrays. The lesson is clear, at some point, we should not become overly dependent on technology, no matter how advanced it becomes. As a US friend Wayne - used to say to me : "Shut down your computer and go out and play"

Some retreat to remote areas, seeking peace. Ironically, even isolation has been exploited by cults and manipulative movements. Control finds a way.

Leaders, tech giants, diplomats, intelligence community, journalists, economist, corporate world etc and even nations need information, sometimes genuine, sometimes manipulated. Fake news, disinformation, and half-truths can be weaponized to hide what’s really classified - but of course, in the era that we're living now, it's hard to "classify" some information as "confidential" (the "old school" might work - hard copy with no uploading). Power always resides with those who hold the right information.

The old saying, “If you’ve done nothing wrong, you’ve nothing to fear,” sounds comforting. But reality is rarely that simple. As Michel Foucault observed, surveillance shapes behaviour through the possibility of being watched. George Orwell imagined a world in 1984 where truth itself was rewritten to control minds. (Well, as some say, history is often written by the victors - and that may very well be true)

In the digital age, we are both watchers and watched. Data and product. Privacy? Is it a right, a slipping privilege, or a tool meant to protect society?

The only choice we have is adaptation. (Accepting globalization which includes virtual borderless world via technological advancement) For me, that means moving forward, staying active, avoid trouble and not letting these complex systems give me headaches. Maybe this is what being a good citizen truly means - aware, alert, yet accepting of the world we inhabit.

SOME MEMORIES BEING FORCED TO LIVE IN THE OLD STYLE

I wrote this just two months ago, and little did I know it has made a difference in some lives. It’s never easy, but you must recognize your own worth, your time, your mental health. When people reject good ideas and cling to outdated ways, take it as a clear signal.

MEMORIES

I once worked briefly for a company (which I won’t name here) that clung to outdated, hierarchical ways of management rather than embracing good practices. Despite my efforts to drive improvement, internal “politicking” was rampant, and some individuals did everything they could to push me out. In the end, they succeeded, much to the disappointment of top management. That experience nearly shattered my confidence and made me question my own worth.

However, when I later joined a foreign-based company, I was surprised to find that many people there genuinely valued my experience and skills. The contrast was striking and ironic, it taught me an important lesson - sometimes, you need to be selective about where you choose to work.

PENIPUAN SCAM SYARIKAT DISENARAIKAN DI ACE MARKET

Telah menulis kisah ini pada 2016 kemudian ditulis kembali 2024. Dikongsi kembali sebab ada pihak cuba membuat "comeback" dengan cara yang salah.

Tahun 2016, saya ada menghadiri satu jemputan untuk mendengar ceramah 30 minit mengenai satu syarikat pelaburan yang katanya nak disenaraikan di ACE market di sebuah hotel (3 bintang)

Terkejut juga bila dapat kad perniagaan dari mereka yang bertugas di pintu masuk bilik mesyuarat tertera sebuah "Syarikat Sdn. Bhd." Ada lebihkurang 20 orang yang hadir dan mereka meminta saya duduk di kerusi paling hadapan walaupun saya mendesak untuk duduk di kerusi belakang. (rasa lain macam nih)

Sepanjang penerangan diberikan, saya sudah dapat mengesan "red flags" antara lain - "bukan skim cepat kaya", "diluluskan undang-undang" dll bla-bla-bla ibarat macam syarikat jualan langsung pula. (produk pun tidak ada - sekadar memaparkan kilang-kilang (ODM) tertentu usahasama untuk "contract manufacturing")

Cara penerangan mengenai prosedur penyenaraian pun saya tengok banyak kesalahan. Terus-terus IPO, kut mana ni? 

Mana "pre-submission" (penstrukturan IPO, "due diligence" dll) Mana "regulatory approval"? dan beberapa proses lain? Yang ditunjukkan surat permohonan untuk disenaraikan? Kandungannya pun nampak silap.

Hati da rasa - ini macam scam ni.

Dah habis penerangan, saya buat-buatlah bodoh bertanya depan-depan orang ramai :

1) Boleh ke Syarikat Sdn. Bhd. jadi firma pelaburan? Bukan yang "awam berhad" ke?

2) Berapa jumlah modal untuk melayakkan diri ke ACE market? Berapa "total market capitalization" yang diperlukan semasa disenaraikan? Berapa lama konsesi yang diberikan oleh kerajaan?

3) Mana lesen pengurusan dana? Mana lesen pengurus dana? (2 lesen tu)

4) Mana prospektus?

Tiba-tiba berbunyi satu suara di belakang saya menyokong apa yang saya katakan. 

Penganjur dah terketar-ketar nak menjawab. Lalu saya pun bangun dan keluar dari ceramah berkenaan diikuti oleh rakan saya dan dua hingga tiga orang dari ceramah berkenaan. Rasa membazir masa pula datang.

Rupa-rupanya di belakang saya tadi yang menyokong saya adalah penyamar orang awam dari pihak berkuasa. Khabarnya dah ada operasi tutup dan rampas tidak lama selepas acara berkenaan. 

Banyak juga whatssap dan PM FB yang saya dapat - ...malaslah nak layan kerana semua mesej yang ditulis adalah sia-sia belaka.

Dah terhantuk baru tergadah. Tapi ramai lagi yang percaya dengan penipuan seperti ini. Sampai ribuan ringgit habis. Saya rasa malas nak tegur sebab ada sahaja alasan/jawapan "penjilat"- biarla pihak berkuasa buat kerja sikit. Saya sekadar nak selamatkan kawan-kawan yang terpengaruh je.

BANK LOAN AGEISM

Another form of ageism shows up in some banks’ personal loan policies, where the maximum age limit is set at 58. What’s the justification? health concerns? or the assumption someone might pass away?

If the bank doesn’t want to offend anyone, it could simply evaluate applications individually and reject applicants on legitimate grounds.

But by displaying a strict age limit, it becomes a clear case of age-based discrimination.

POLITICIANS - STOP POLITICISING TUGU NEGARA

 

"Tugu Negara’s Nose And Height Not Asian Enough, Opposition MP Moots Facelift"

The Tugu Negara stands as a national memorial honouring our fallen soldiers who fought bravely for Malaysia’s independence. It’s a sacred symbol of sacrifice and unity not something to be politicised or trivialised.

Decades ago, there were already misguided claims by "holier than thou" generalizing Muslims of worshipping idols during Warrior's Day and in the 1970s, terrorists even planted a bomb that almost destroyed the monument.

One has to wonder does the MP making such remarks have any family members who once fought for this nation’s freedom? If so, they would surely understand the value of what the Tugu represents.

There are far more pressing issues that deserve attention

DON'T CALL ME PROFESSOR OR DR, JUST EN NIK, MR. NIK OR TUAN NIK

Over the years, I’ve been invited to deliver lectures at numerous institutions of higher learning both government and, more frequently, private universities and colleges. These invitations were extended based on my hands-on experience and the competencies I’ve developed over nearly three decades in the field.

Whenever I conduct these sessions, I always make it clear to my audience whether students or faculty members not to address me as “Professor.” This often surprises the management, who assure me that it’s acceptable within the university compound. However, out of deep respect for those who have truly earned such titles through years of academic pursuit and research, I prefer to be called “Mr. Nik.”

Don’t get me wrong and am not being humble either - many of my close friends are academicians, and I truly enjoy engaging with them. Our discussions are always stimulating, especially when we exchange perspectives on specific topics. Their passion for knowledge and research continues to inspire me.

I take great pride in the professional recognitions and certifications I’ve received from various institutions, which affirm my competency and result-oriented approach, even earning CPD points along the way.

While I’ve been approached with honorary offers from some universities, I believe that such distinctions should be earned, just as I’ve earned my experience and credibility through years of hard work. 

CONSTRUCTION RISK ASSESSMENT

As I reviewed past records of my previous “due diligence” assessments in construction projects, the first thing I always examined was the Risk Assessment, especially those prepared prior to project inception. I still observed numerous recurring errors that often led to excessive client complaints and even stop-work orders, resulting in costly consequences for contractors.

Depending on the project, these errors covered areas such as planning and scope, design and technical, human and management, quantification and evaluation, implementation and monitoring, environmental and social aspects, as well as documentation and compliance.

For example, under Planning and Scope, the most crucial part, among common mistakes included incomplete risk identification (e.g. ground conditions, utility conflicts, adjacent property issues), overreliance on generic templates, and failure to consider early uncertainties such as land acquisition delays or unclear design intent. I also found cases of vague scope definitions and poor coordination between architectural, structural, and M & E trades.

I advised contractors to align closely with client requirements, review contracts thoroughly, and conduct workshops at each phase (design, pre-construction, operation). They should also adopt online tools to maintain a live risk register, integrate risk management with cost control, scheduling, and procurement, and apply quantitative methods like Monte Carlo simulation and sensitivity analysis for key risks.

I’ll be conducting another similar assessment soon and frankly, the recurring nature of these issues remains concerning. Someone asked me just now, “I thought contractors don’t do Risk Assessments only HIRARC. Isn’t that the consultant’s or client’s job?” A good question indeed. I should have clarified that in Design and Build contracts, it’s quite common for the contractor to engage their own consultants to carry out a Risk Assessment, which is then reviewed and validated by the client or their authorized representative. On the other hand, HIRARC (Hazard Identification, Risk Assessment, and Risk Control) is typically conducted by the contractor’s Safety and Health Officer (SHO), together with site supervisors trained in HIRARC procedures. The two often get mixed up - Risk Assessment focuses on overall project and design risks, while HIRARC zeroes in on workplace safety and task-level hazards. It’s a subtle but important distinction. To further clarify on the question being asked : Risk Assessment vs HIRARC - 2 different scopes - Risk Assessment (in the broader project management sense) covers strategic, financial, design, technical, environmental, and contractual risks. It’s often done at project inception, design, or pre-construction stages. Responsibility may rest with the consultant, client’s representative, or in Design & Build (D&B) projects the contractor’s design team. The client or their representative then reviews and validates it. HIRARC on the other hand, is part of occupational safety and health (OSH). In Section 1.5 “General Requirement” of the same document, it states: “HIRARC shall be established by contractor and risk control measures shall be implemented before any new work commencement.” It’s done for site activities, work methods, and tasks, not for project-level risk. Conducted by the contractor’s Safety & Health Officer (SHO) or trained supervisors. (DOSH Malaysia’s Guidelines on HIRARC (2008). In the 2008 DOSH guideline (Guidelines for HIRARC), the purpose section (page 1 etc) states: “The purpose of this guideline is to provide a systematic and objective approach to assessing risks… It is intended for use in the construction sector among others" In CIS 25:2018 (CIDB), under Section 1.2 “Normative reference”, it cites Guidelines for Hazard Identification, Risk Assessment and Risk Control (HIRARC) (2008) by Department of Occupational Safety and Health Malaysia (DOSH) as foundational. In Design & Build (D & B) contracts, the contractor takes on both design and construction responsibilities. Therefore, they are legally and contractually required to manage design-related risks too. Many contractors have in-house design consultants or appoint external ones for this. Their risk assessments are submitted to the client’s consultant or Engineer’s Representative (ER) for validation. Many people confuse the two: 1) HIRARC = task-level safety assessment (hands-on, site-based). 2) Risk Assessment (Project/Design level) = strategic and technical risk management (design, cost, schedule, procurement, etc.). Contractors generally conduct HIRARC as part of OSH compliance, while Risk Assessment at the project level may be done by consultants except in Design & Build projects, where the contractor (with their design consultants) prepares it, and the client or authorized representative validates it. So, yes both are "risk assessments" in nature, but they serve different purposes and fall under different frameworks.

I’ve always had a soft spot for classic signs - simple, straightforward, and filled with that touch of nostalgia.

 

THE FIRE AT CARIGALI TOWER KLCC

(1 November, 2025) 

Menara 3 Petronas KLCC, which caught fire earlier this morning on its top floor, is actually better known as the Menara Carigali (Petronas Carigali Tower) not the Twin Towers themselves, nor the bustles or the Maxis Tower or Suria KLCC nearby. 

Please refrain from making any speculations or spreading inaccurate information, as BOMBA (the Fire and Rescue Department) has already extinguished the fire, and an investigation is currently underway to determine when the premises can be safely re-entered.

I commend BOMBA and the occupants of Carigali Tower for their swift and orderly evacuation. I’m certain no elevators or escalators were used, only the emergency stairways, a clear reflection of the competence and effectiveness of their fire drill procedures and safety measures. I’m also confident that most occupants gathered safely at the assembly point, though I can imagine a few may have understandably panicked in the rush to get out. 

I also hope the investigation will look into the performance of the automatic sprinkler system and fire extinguishers, as well as assess whether the concerned occupants were properly trained to respond during such emergencies. Let’s now await the official media announcement for further updates.

1928 – 2019 | A Life of Service, Faith, and Patriotism - Abdul Majid bin Hassan (Wan Abdul Majid bin Wan Hassan)

Born in 1928, Abdul Majid bin Hassan (Wan Abdul Majid bin Wan Hassan) grew up during a time of immense change and challenge in Malaya. In 1941, he was enrolled at Sultan Ismail College, Kota Bharu, when the course of his life and the nation’s was interrupted by the outbreak of the Japanese Occupation (1941–1945). Like many of his generation, his studies were disrupted, and those turbulent years shaped his resolve, discipline, and sense of duty.

After the war, when the British Military Administration (BMA) took over from the Japanese, he answered the call to serve. He enlisted as a Private in the Malay Regiment, the proud forerunner of today’s Rejimen Askar Melayu DiRaja (Royal Malay Regiment).

Through perseverance, courage, and devotion, he rose to the rank of Staff Sergeant. He was believed to have been selected for the United Nations peacekeeping mission in the Congo (ONUC, 1960–1963) under the 2nd Batallion, though he was later recalled to serve under emergency ordinance during a period of heightened security operations in Malaya where he served with distinction defending the country through years of hardship and uncertainty.

Upon retiring from military service in (circa) 1969/1970, he continued his commitment to national development, serving first in the Land Office, later in the Public Works Department (PWD) now Jabatan Kerja Raya (JKR) and eventually retired from the Forestry Department.

Alongside my mum, who was active in a women's movement during the struggle for independence, they represented a generation defined by courage, humility, and love for the homeland.

He passed away in 2019, leaving behind a proud legacy of integrity, service, and faith. His life from a soldier, to public servant stands as a quiet yet powerful reflection of a man who lived fully in the service of God, King, and Country.

Al-Fatihah

JUST ANOTHER DAY OF WORK

I was speaking politely to someone after noticing that the data analysis presented was incomplete. It only outlined how many problems were found and which unit, section, department, or site they belonged to.

What I was asking for was a deeper analysis one that includes the cost of rectification. For instance, a single workmanship issue could cost more to repair than what’s spent on improving the system, procedures, or policy itself.

Throughout the discussion, I remained patient even when the person raised the voice to make a point. I simply nodded, knowing it was more about “defending one’s turf.” I didn’t embarrass the person publicly - it was initially a one-on-one discussion.

Only when the big boss walked and asked as the voice was carrying - did the person finally eased up. I then briefly explained what I was looking for, emphasizing that it wasn’t just about data, but also about financial implications and contingency costs. I hadn’t even touched on the subsequent points yet determining the accurate root cause analysis and reviewing the effectiveness of past risk assessments that may need improvement.

(You can’t see the bigger picture if you fail to notice the smaller ones)

The lesson: This is what happens when someone chooses not to work as part of a team and assumes they know everything. Collaboration and openness are key - without them, even the best data or ideas lose their value.

How to Detect and Report Fake Online Reviews

I’ve started noticing a pattern that many people tend to overlook. Fake reviews - whether generated by bots, low-cost marketers using templates, or paid reviewers - often reuse the same words and phrases because they’re mass-produced using copy-paste scripts or automated “mail-merge” style tools.

So here’s a compact, practical playbook: how to spot fake reviews, what actions to take, and which tools or channels can help.

How to Spot Fake Reviews (Quick Checklist)

• Repeated phrasing or identical sentences across multiple reviews - the classic “mail-merge” vibe,

• Clusters of short 5-star reviews with vague praise and no real details (e.g., “Great app! Works perfectly!” or the typical “This is the best app I’ve ever used!”),

• Reviewer profiles with little or no detail, or posting dozens of reviews within days,

• Timing clusters - many reviews appearing within minutes or hours,

• Unverified purchases or missing order details despite claims of ownership,

• Unnatural rating spikes - sudden floods of 5-stars after bad publicity,

• Off-topic or incentivized comments (“DM me for a discount”) - usually against platform policy.

Why Identical Language Appears

• Paid marketers use pre-written templates for speed and volume,

• Bots or low-tier freelancers copy and paste identical text across accounts,

• Some services use “review scripts” that simply replace product names in standard sentences - a digital form of mail-merge.

What Platforms Officially Say

• Google and other major platforms allow you to report reviews that violate content policies,

• Maps and Business Profiles forbid fake engagement - content not based on real experiences or posted for incentives,

• Regulators are tightening control: The U.S. FTC has finalized a rule banning the buying and selling of fake online reviews, raising enforcement risks for both sellers and marketplaces.

Actions You Can Take (Consumer or Business)

• Collect evidence : screenshots, timestamps, reviewer names, URLs, and repeated phrases,

• Report suspicious reviews,

• For apps: use the flag/report option,

• For businesses (Google Maps/Search): Open the Review : Report / Flag as inappropriate in your Business Profile,

If you’re a business or developer:

• Use your Console or Business Profile appeal workflow and attach evidence,

• Follow up if the reviews aren’t removed,

• Public reply strategy: Respond calmly and factually, Ask for order details or invite the reviewer to discuss privately, never attack or accuse - stay professional and brief.

If no action is taken:

• Escalate to platform support, a consumer protection agency, or legal counsel especially since regulators are now more proactive.

Tools and Services That Can Help

• Automated detectors and browser tools like Fakespot and ReviewMeta can analyze aggregate patterns.

• However, availability changes - some have changed ownership or shut down - so always check current reliability before using them.

Conclusion

Platforms combine AI-based detection with human moderation, but it takes time. If you’re a business owner, always appeal through official channels and document everything. Identical phrasing across multiple reviews is strong evidence for moderators or regulators.

And remember, stay calm, stay factual. A composed, evidence-based approach builds credibility with genuine users while exposing the fakery for what it is..