Viva Nepal !!!
Welcoming the Nepalese Government to Have I Been Pwned
21–30 of 40 posts
Re: Welcoming the Nepalese Government to Have I Been Pwned
#22Earlier quoted context omitted.
And police officers make a living off of crime; ambulance personnel wouldn't get paid if nobody got sick or injured. What's the point of that observation?
Police officers help for free. If they find during an investigation that you're avictim of a crime they WILL tell you where they found the data and what was exactly in it. Troy? He'll basically resell you your own stolen data, because that's the only way to know if the password leaked was 20 years or 1 month old, and to what services exactly. If you're leaked in infostealer dump, you'd learn from the police what was…
[dead]
Re: Welcoming the Nepalese Government to Have I Been Pwned
#23I do like the idea behind Have I Been Pwned, and honestly if a government took it over that might be nice if we had some guarantees. It feels like something that ought to be a public service with super duper special oversight to avoid it being used by law enforcement(since sending any information is necessarily bad)
> if a government took it over that might be nice
> to avoid it being used by law enforcement
What?
Re: Welcoming the Nepalese Government to Have I Been Pwned
#24I do like the idea behind Have I Been Pwned, and honestly if a government took it over that might be nice if we had some guarantees. It feels like something that ought to be a public service with super duper special oversight to avoid it being used by law enforcement(since sending any information is necessarily bad)
Ehhhh, which government? Why would you want to build 200+ separate services for this? Would the US government report to a french citizen? Would we have two separate services from France/US?
I agree public services are great but let governments focus on more critical services.
Re: Welcoming the Nepalese Government to Have I Been Pwned
#25I'm surprised they can get past the CF captcha, I still can't. Ever since the beginning: https://imgur.com/a/AzNSreV
It provides me relief that I am not the only one suffering from Clownfair bot protection running amok.
Condolences to you.
Re: Welcoming the Nepalese Government to Have I Been Pwned
#26I'm surprised they can get past the CF captcha, I still can't. Ever since the beginning: https://imgur.com/a/AzNSreV
I've started email the customer support of pages that have overzealous CF settings saying that it's a pain and that if they want to keep me as a customer they need to fix it.
Most give a canned response of "we can't do anything" ̄\_(ツ)_/ ̄ but some small sites do something. GitLab has the most annoying CF bouncer and I moved my company off them once I got the we can't do anything about it response.
Re: Welcoming the Nepalese Government to Have I Been Pwned
#27Earlier quoted context omitted.
And police officers make a living off of crime; ambulance personnel wouldn't get paid if nobody got sick or injured. What's the point of that observation?
Police officers help for free. If they find during an investigation that you're avictim of a crime they WILL tell you where they found the data and what was exactly in it. Troy? He'll basically resell you your own stolen data, because that's the only way to know if the password leaked was 20 years or 1 month old, and to what services exactly. If you're leaked in infostealer dump, you'd learn from the police what was…
You seem to have wildly different experiences with police than most
Re: Welcoming the Nepalese Government to Have I Been Pwned
#28[deleted]
Re: Welcoming the Nepalese Government to Have I Been Pwned
#29I'm surprised they can get past the CF captcha, I still can't. Ever since the beginning: https://imgur.com/a/AzNSreV
Someone said services like Twitter, FB or Instagram are walled gardens. Cloudflare said "Hold my beer".
I am annoyed by bots, but I am even more annoyed by the internet being less open and less accessible every day.
Re: Welcoming the Nepalese Government to Have I Been Pwned
#30This is good news considering the current state of government run IT services in Nepal (that the page to schedule a passport renewal appointment requires you change your local timezone or override TZ to Asia/Kathmandu should tell you the state of some of these services). In having to interact with Nepali government websites I've noticed things like endpoints not even doing basic input sanitization, letting your run a…
That's the case for most countries in Asia and Africa, from my travel experience. I would spot vulnerabilities that leak extremely sensitive data all the time, just by using the services normally and legally. You immediately see that the verification is broken without even having to investigate. I don't investigate or report them, as it might lead to problems.