Live data from Hacker News

Welcoming the Nepalese Government to Have I Been Pwned

troyhunt.com

1–10 of 40 posts

Re: Welcoming the Nepalese Government to Have I Been Pwned

#2
This is good news considering the current state of government run IT services in Nepal (that the page to schedule a passport renewal appointment requires you change your local timezone or override TZ to Asia/Kathmandu should tell you the state of some of these services).

In having to interact with Nepali government websites I've noticed things like endpoints not even doing basic input sanitization, letting your run arbitrary queries on biometric data. Asking around the tech industry on how to report this it seems like this is a common occurrence. Someone even found a vulnerability that was apparently purposefully unpatched to most likely aid in corruption.

Re: Welcoming the Nepalese Government to Have I Been Pwned

#10
post #5

Seems like an almost irresponsibly misleading headline.

Well Troy Hunt makes money off the back of your data being leaked so I expect nothing less.

And police officers make a living off of crime; ambulance personnel wouldn't get paid if nobody got sick or injured. What's the point of that observation?
Post reply on HN