Welcoming the Nepalese Government to Have I Been Pwned

(troyhunt.com)

80 points | by gnabgib 3 hours ago

5 comments

  • amritananda 3 hours ago
    This is good news considering the current state of government run IT services in Nepal (that the page to schedule a passport renewal appointment requires you change your local timezone or override TZ to Asia/Kathmandu should tell you the state of some of these services).

    In having to interact with Nepali government websites I've noticed things like endpoints not even doing basic input sanitization, letting your run arbitrary queries on biometric data. Asking around the tech industry on how to report this it seems like this is a common occurrence. Someone even found a vulnerability that was apparently purposefully unpatched to most likely aid in corruption.

  • waschl 3 hours ago
    First thought was: ouch, government data got leaked and added to the database.
  • bordercontrol 2 hours ago
    Please make it possible to change email addresses, so I don't have to create a new account and verify all domains again. Thank you for the great free service.
  • inigyou 3 hours ago
    Is this the new government after the old one was violently overthrown last year?
    • sbashyal 23 minutes ago
      Yes, this is the new government elected in March of this year after the old one was overthrown in September of last year.
    • bcraven 2 hours ago
      I know of no other governments of Nepal.
  • viccis 3 hours ago
    Seems like an almost irresponsibly misleading headline.
    • lucb1e 2 hours ago
      Are you reading it as if the Nepalese government had a data breach? Given the positive connotation of 'welcoming', I read it differently but I can see the confusion indeed
      • fn-mote 2 hours ago
        I also read the title as a sardonic welcome (negative connotation). I was surprised to find out it was just a tiny puff piece of self-promotion.

        Being “welcomed” to HIBP sounds a lot like being “welcomed” to the Bronx by a mugging.

        I admit I do not follow HIBP and was unaware of this kind of outreach they do.

    • bcraven 2 hours ago
      https://www.troyhunt.com/tag/government/

      It's a pattern that is used for new welcomes.

    • greenhat76 2 hours ago
      Well Troy Hunt makes money off the back of your data being leaked so I expect nothing less.
      • saghm 2 hours ago
        I'm pretty certain that my data would be leaked regardless of him, so as far as objectionable businesses go, his is pretty low on my list of ones to be upset about
      • anitil 1 hour ago
        In some sense companies that don't protect your data make money off the back of your data being leaked (in the sense that they saved money by not spending it on security)
      • lucb1e 2 hours ago
        And police officers make a living off of crime; ambulance personnel wouldn't get paid if nobody got sick or injured. What's the point of that observation?