Rendered at 05:06:32 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
amritananda 7 hours ago [-]
This is good news considering the current state of government run IT services in Nepal (that the page to schedule a passport renewal appointment requires you change your local timezone or override TZ to Asia/Kathmandu should tell you the state of some of these services).
In having to interact with Nepali government websites I've noticed things like endpoints not even doing basic input sanitization, letting your run arbitrary queries on biometric data. Asking around the tech industry on how to report this it seems like this is a common occurrence. Someone even found a vulnerability that was apparently purposefully unpatched to most likely aid in corruption.
waschl 7 hours ago [-]
First thought was: ouch, government data got leaked and added to the database.
randunel 2 hours ago [-]
I'm surprised they can get past the CF captcha, I still can't. Ever since the beginning: https://imgur.com/a/AzNSreV
bordercontrol 6 hours ago [-]
Please make it possible to change email addresses, so I don't have to create a new account and verify all domains again. Thank you for the great free service.
Nail2680 2 hours ago [-]
I do like the idea behind Have I Been Pwned, and honestly if a government took it over that might be nice if we had some guarantees. It feels like something that ought to be a public service with super duper special oversight to avoid it being used by law enforcement(since sending any information is necessarily bad)
vasco 10 minutes ago [-]
> if a government took it over that might be nice
> to avoid it being used by law enforcement
What?
leriksen 1 hours ago [-]
Viva Nepal !!!
inigyou 7 hours ago [-]
Is this the new government after the old one was violently overthrown last year?
bcraven 6 hours ago [-]
I know of no other governments of Nepal.
sbashyal 4 hours ago [-]
Yes, this is the new government elected in March of this year after the old one was overthrown in September of last year.
bofadeez 3 hours ago [-]
You should at least attempt to ask an LLM for advice before asking a question that contributes nothing and only takes away value from a conversation like this.
Personally I'd recommend Fable or Kimi K3. Have you tried them yet? They're better at your job than you could ever be, even in theory.
viccis 7 hours ago [-]
Seems like an almost irresponsibly misleading headline.
lucb1e 6 hours ago [-]
Are you reading it as if the Nepalese government had a data breach? Given the positive connotation of 'welcoming', I read it differently but I can see the confusion indeed
fn-mote 6 hours ago [-]
I also read the title as a sardonic welcome (negative connotation). I was surprised to find out it was just a tiny puff piece of self-promotion.
Being “welcomed” to HIBP sounds a lot like being “welcomed” to the Bronx by a mugging.
I admit I do not follow HIBP and was unaware of this kind of outreach they do.
Well Troy Hunt makes money off the back of your data being leaked so I expect nothing less.
saghm 6 hours ago [-]
I'm pretty certain that my data would be leaked regardless of him, so as far as objectionable businesses go, his is pretty low on my list of ones to be upset about
anitil 5 hours ago [-]
In some sense companies that don't protect your data make money off the back of your data being leaked (in the sense that they saved money by not spending it on security)
lucb1e 6 hours ago [-]
And police officers make a living off of crime; ambulance personnel wouldn't get paid if nobody got sick or injured. What's the point of that observation?
subscribed 3 hours ago [-]
Police officers help for free.
If they find during an investigation that you're avictim of a crime they WILL tell you where they found the data and what was exactly in it.
Troy? He'll basically resell you your own stolen data, because that's the only way to know if the password leaked was 20 years or 1 month old, and to what services exactly. If you're leaked in infostealer dump, you'd learn from the police what was associated with your email in this dump, so you know to snort if it was only empty password store from your Firefox, or financial data exposing you to ruin.
Troy? Oh, he can tell you that too, but for a price. He'll sell you your personal data back.
(I've looked far and wide and there doesn't seem to be ANY way to list as much as the domains of the email/password dumps without paying for access to the API)
In having to interact with Nepali government websites I've noticed things like endpoints not even doing basic input sanitization, letting your run arbitrary queries on biometric data. Asking around the tech industry on how to report this it seems like this is a common occurrence. Someone even found a vulnerability that was apparently purposefully unpatched to most likely aid in corruption.
> to avoid it being used by law enforcement
What?
Personally I'd recommend Fable or Kimi K3. Have you tried them yet? They're better at your job than you could ever be, even in theory.
Being “welcomed” to HIBP sounds a lot like being “welcomed” to the Bronx by a mugging.
I admit I do not follow HIBP and was unaware of this kind of outreach they do.
It's a pattern that is used for new welcomes.
If they find during an investigation that you're avictim of a crime they WILL tell you where they found the data and what was exactly in it.
Troy? He'll basically resell you your own stolen data, because that's the only way to know if the password leaked was 20 years or 1 month old, and to what services exactly. If you're leaked in infostealer dump, you'd learn from the police what was associated with your email in this dump, so you know to snort if it was only empty password store from your Firefox, or financial data exposing you to ruin.
Troy? Oh, he can tell you that too, but for a price. He'll sell you your personal data back.
(I've looked far and wide and there doesn't seem to be ANY way to list as much as the domains of the email/password dumps without paying for access to the API)