3 ms·
Welcoming the Nepalese Government to Have I Been Pwned
- amritananda 2mo agoThis is good news considering the current state of government run IT services in Nepal (that the page to schedule a passport renewal appointment requires you change your local timezone or override TZ to Asia/Kathmandu should tell you the state of some of these services). In having to interact with Nepali government websites I've noticed things like endpoints not even doing basic input sanitization, letting your run arbitrary queries on biometric data. Asking around the tech industry on how to report this it seems like this is a common occurrence. Someone even found a vulnerability that was apparently purposefully unpatched to most likely aid in corruption.
- bordercontrol 2mo agoThat's the case for most countries in Asia and Africa, from my travel experience. I would spot vulnerabilities that leak extremely sensitive data all the time, just by using the services normally and legally. You immediately see that the verification is broken without even having to investigate. I don't investigate or report them, as it might lead to problems.
- AdamN 2mo agoOne of the good things about these attacks is that it publicizes failings and gives data to good actors inside the government to drive reform. Surely other operators (Intel services of China, India, Pakistan, etc...; criminal syndicates) have been inside these systems for years so it's nice for the cybersecurity agency to have tools to make it clear where they're exposed.
- inigyou 2mo agoIs this the new government after the old one was violently overthrown last year?
- waschl 2mo agoFirst thought was: ouch, government data got leaked and added to the database.
- viccis 2mo agoSeems like an almost irresponsibly misleading headline.
- bcraven 2mo agohttps://www.troyhunt.com/tag/government/ https://www.troyhunt.com/tag/government/ It's a pattern that is used for new welcomes.
- greenhat76 2mo agoWell Troy Hunt makes money off the back of your data being leaked so I expect nothing less.
- lucb1e 2mo agoAnd police officers make a living off of crime; ambulance personnel wouldn't get paid if nobody got sick or injured. What's the point of that observation?
- subscribed 2mo agoPolice officers help for free. If they find during an investigation that you're avictim of a crime they WILL tell you where they found the data and what was exactly in it. Troy? He'll basically resell you your own stolen data, because that's the only way to know if the password leaked was 20 years or 1 month old, and to what services exactly. If you're leaked in infostealer dump, you'd learn from the police what was associated with your email in this dump, so you know to snort if it was only empty password store from your Firefox, or financial data exposing you to ruin. Troy? Oh, he can tell you that too, but for a price. He'll sell you your personal data back. (I've looked far and wide and there doesn't seem to be ANY way to list as much as the domains of the email/password dumps without paying for access to the API)
- bluezly 2mo ago[dead]
- bordercontrol 2mo agoPlease make it possible to change email addresses, so I don't have to create a new account and verify all domains again. Thank you for the great free service.
- Nail2680 2mo agoI do like the idea behind Have I Been Pwned, and honestly if a government took it over that might be nice if we had some guarantees. It feels like something that ought to be a public service with super duper special oversight to avoid it being used by law enforcement(since sending any information is necessarily bad)
- vasco 2mo ago> if a government took it over that might be nice > to avoid it being used by law enforcement What?
- HaloZero 2mo agoEhhhh, which government? Why would you want to build 200+ separate services for this? Would the US government report to a french citizen? Would we have two separate services from France/US? I agree public services are great but let governments focus on more critical services.
- theandrewbailey 2mo agoMost people don't trust their government enough to run a service like this. For example, my government lets bridges collapse[0], and it can barely keep the roads paved. The fact that any government service works at all is nothing short of a miracle to me. [0] https://www.ntsb.gov/news/press-releases/Pages/NR20240221.aspx https://www.ntsb.gov/news/press-releases/Pages/NR20240221.as...
- randunel 2mo agoI'm surprised they can get past the CF captcha, I still can't. Ever since the beginning: https://imgur.com/a/AzNSreV https://imgur.com/a/AzNSreV
- orangesilk 2mo agoIt provides me relief that I am not the only one suffering from Clownfair bot protection running amok. Condolences to you.
- bpev 2mo agoI moved my code off Cloudflare just because I got frustrated on other people's websites. Being the change I want to see, I guess?
- digitalPhonix 2mo agoI've started email the customer support of pages that have overzealous CF settings saying that it's a pain and that if they want to keep me as a customer they need to fix it. Most give a canned response of "we can't do anything" ̄\_(ツ)_/ ̄ but some small sites do something. GitLab has the most annoying CF bouncer and I moved my company off them once I got the we can't do anything about it response.
- Macha 2mo agoHumble quite frequently locks me out with theirs and all support ever does is “have you updated your browser and restarted your router?” - it’s clear the agent has no idea what a cloudflare is and it’s not in their list of acceptable escalation reasons
- chrisandchris 2mo agoSomeone said services like Twitter, FB or Instagram are walled gardens. Cloudflare said "Hold my beer". I am annoyed by bots, but I am even more annoyed by the internet being less open and less accessible every day.
- s4mbh4 2mo ago
- niteshpant 2mo ago[dead]
- leriksen 2mo agoViva Nepal !!!
- deleted 2mo ago[deleted]
- nexusfinancial- 2mo agoOuch