Back

Welcoming the Nepalese Government to Have I Been Pwned

21 points53 minutestroyhunt.com
amritananda33 minutes ago

This is good news considering the current state of government run IT services in Nepal (that the page to schedule a passport renewal appointment requires you change your local timezone or override TZ to Asia/Kathmandu should tell you the state of some of these services).

In having to interact with Nepali government websites I've noticed things like endpoints not even doing basic input sanitization, letting your run arbitrary queries on biometric data. Asking around the tech industry on how to report this it seems like this is a common occurrence. Someone even found a vulnerability that was apparently purposefully unpatched to most likely aid in corruption.

waschl27 minutes ago

First thought was: ouch, government data got leaked and added to the database.

viccis8 minutes ago

Seems like an almost irresponsibly misleading headline.

inigyou30 minutes ago

Is this the new government after the old one was violently overthrown last year?