Nepal Joins Have I Been Pwned's Government Service
Welcoming the Nepalese Government to Have I Been Pwned
Nepal's National Cyber Security Centre is the 47th government to join Have I Been Pwned's free government service. The service monitors government email addresses against breach data, enabling rapid response to compromised accounts. This helps national cyber teams strengthen threat monitoring and incident response, protecting government departments and public resources from credential-based attacks.
This gives the NCSC the ability to identify exposure across government email addresses and respond quickly when those accounts appear in a new data breach.
- amritananda
This is good news considering the current state of government run IT services in Nepal (that the page to schedule a passport renewal appointment requires you change your local timezone or override TZ to Asia/Kathmandu should tell you the state of some of these services).
In having to interact with Nepali government websites I've noticed things like endpoints not even doing basic input sanitization, letting your run arbitrary queries on biometric data. Asking around the tech industry on how to report this it seems like this is a common occurrence. Someone even found a vulnerability that was apparently purposefully unpatched to most likely aid in corruption.
- randunel
I'm surprised they can get past the CF captcha, I still can't. Ever since the beginning: https://imgur.com/a/AzNSreV
- waschl
First thought was: ouch, government data got leaked and added to the database.
- bordercontrol
Please make it possible to change email addresses, so I don't have to create a new account and verify all domains again. Thank you for the great free service.
- inigyou
Is this the new government after the old one was violently overthrown last year?