अनिश भट्टराई, धरान/सुनसरी
कम्तीमा चार सरकारी वेवसाईट सहित दर्जनौ नेपाली वेब साइटहरु ह्याकर हरुको फन्दामा परेका छन । ह्ययाकिङ्ग भएका सरकारी वेव साईटहरुमा सयुक्त राष्ट्रसघको सहयोगमा निर्माण हुन लागेको युनाईटेट नेसन्स पार्क को वेव साईट देखी युरोपियन युनियन को सहयोगमा सचालित सिल्क एसोसियसन नेपालको वेव साईट सम्म परेको छ ।
ह्याकिङ्ग भएका वेव साईटहरुका सर्भरमा नेपाल सरकारको आधिकारिक वेव सर्भर National Information Technology Center (NITC) देखी निजी क्षेत्रवाट सचालित World-Link Communications Inc, EVEREST NET PVT. LTD, आदी नाम चलेका आई एस पी हरुमा पनि परेका छन । ह्याकिङ्ग भएका वेव साईटहरु धेरै चाँही काठमाण्डौको नाम चलेको वेव होष्टिङ्ग तथा डिजाईनिङ्ग गर्ने कम्पनी Radiant InfoTech Nepal (P.) Ltd ले बनाएका परेका छन ।
ßLacK_Wh!TE, md.r00t, [SiLeNtp0is0n] जस्ता उपनाम भएका ह्याकरहरुको वारेमा विस्तृत विवरण प्राप्त हुन नसके पनि उनिहरुको उदेश्य सर्भरमा प्रवेश गरी महत्वपुर्ण सुचना सकलन गर्नु तथा सम्बन्धित लाई वेव सर्भरको सुरक्षाको वारेमा जानकारी दिनु रहेको देखिन्छ ।
(हेर्नुस : http://whoishostingthis.com)
महिला बालबालिका तथा समाज कल्याण मन्त्रालय
राष्ट्रिय एडस तथा सरुवा रोग नियन्त्रण केन्द्र
शहरी विकास तथा भवन निर्माण विभाग
Nepal Cloth Merchant and Tailoring Association
Agri-Business and Trade Promotion Multi-Purpose Co-operative (ABTRACO)
ki secure gernu peryo server lai natra tesko jimma hacker lai dida huncha.
नेपाल मा मान्छे को जिउ र धन को सुरक्ष्या छैन, आधारभूत आबश्यकता को त सुरक्ष्या छैन भने यो वेब साईट को सुरक्ष्या ता कुन ठुलो कुरा भो र?
अनिश जी, ह्याक भएको समाचार त पाईयो तर ह्याक नहोस भन्नको लागि अपनाउनु पर्ने तरीकाहरु सहित लेखलाई अलिक बढाउनु भएको भए अझै सुनमा सुगन्ध हुने थियो कि ? आखिर तपाई पनि आइ. टि. को ज्ञाता नै हुनुहुन्छ हैन र ?
I didn’t find any worldlink Pages in list neither hosted from Worldlink. Are you talking about video.com.np, which is hosted by MOS,AFAIK, Please correct if I am wrong
moreover, most of the site developed by radiant infotech has administration control panel with username and password “admin”, which any one can guess easily.
kehi samay agadi department of labor ko site pani hackable thiyo, http://www.dolep.gov.np , yo website ko admin control ma simple sql injection halera chhirna sakinthyo. koi hacker haru hani noksani garchhan bhane koi hacker haru website haru ko truti aauleuna lai hack gardinchha so that the site owners can learn from their mistakes.
Please know the difference between hacking and cracking. All above examples/news are cracking. Hacking is misused bu our media. Do u know what is hacking?
There is a community, a shared culture, of expert programmers and networking wizards that traces its history back through decades to the first time-sharing minicomputers and the earliest ARPAnet experiments. The members of this culture originated the term ‘hacker’. Hackers built the Internet. Hackers made the Unix operating system what it is today. Hackers run Usenet. Hackers make the World Wide Web work. If you are part of this culture, if you have contributed to it and other people in it know who you are and call you a hacker, you’re a hacker.
The hacker mind-set is not confined to this software-hacker culture. There are people who apply the hacker attitude to other things, like electronics or music — actually, you can find it at the highest levels of any science or art. Software hackers recognize these kindred spirits elsewhere and may call them ‘hackers’ too — and some claim that the hacker nature is really independent of the particular medium the hacker works in. But in the rest of this document we will focus on the skills and attitudes of software hackers, and the traditions of the shared culture that originated the term ‘hacker’.
There is another group of people who loudly call themselves hackers, but aren’t. These are people (mainly adolescent males) who get a kick out of breaking into computers and phreaking the phone system. Real hackers call these people ‘crackers’ and want nothing to do with them. Real hackers mostly think crackers are lazy, irresponsible, and not very bright, and object that being able to break security doesn’t make you a hacker any more than being able to hotwire cars makes you an automotive engineer. Unfortunately, many journalists and writers have been fooled into using the word ‘hacker’ to describe crackers; this irritates real hackers no end.
The basic difference is this: hackers build things, crackers break them.
Source: http://catb.org/~esr/faqs/hacker-howto.html#what_is
Yestai ho mai u bhanney nepali programmer ley bahako site..
Aaba ta thaha pauchan ki thulo padma basne hakimharule, talab khayera matra hudo rahenachha bhanne kura.
Mithilesh
This shows how weak our official security system is.
Yestai nai hunchha! Nepali server haru ma security level sarai nai kam chha. Tyo server ko kunai euta website hack bhayo bhaney sabai site haru pani hack huna sakchan.
Nepal ma CyberLaw ramrari implement pani bhako chhaina. Ani hackers haru lai trace garney tyesto kunai uchit samyantra pani tayar bhako chhaina.
Yestai stiti rahaney bhayo bhaney, Nepal ka website haru dindinai hack hunchan ra hami sanga samachar padhera basnu baheyak kehi pani upaya hudaina.
kam lagani garera website banaune client bhayepachi developer le kaha bata secure site banauna sakcha.chineko bharmai sittai mai website banauna lagaune thuprai esta company haru chan. try gardai janus ajai dherai website haru parchan yo list ma.
What to say about nepali web site.
Please just follow following simple technique to see the capability of nepali technician, which is common for web developer. (It is first step of security).
1. browse http://hlcit.gov.np/admin/
2. Enter username as
a’ or 1=1 or ‘a’!=’b
3. Enter password as
a’ or 1=1 or ‘a’!=’b
4. Click on “Login” button
5. And now do as you like in this web site.
HLCIT is in such situation then what can other government site do?
Means nepali organizations are not dependent on website. Website is not necessary for them. Web site is only fashion. They do not care about information published in website whether they are out dated or not. Only they feel proud to give their URL address. (WAW! WE ARE GREAT WE HAVE OUR OWN WEB SITE)
HA HA HA! THANKS NEPALI TECHNOLGY. YOU ARE REALLY IN 21 ST CENTUARY. HA HA HA
यी मध्ये NITC बाट कुनै पनि HOST नभएकोले NITC को नाम जोडिनु दु:ख को कुरा हो।
धेरै नै वेबसाइट ह्याक भो नि त /
Nepal Khudra byapar chain hack bhako chaina saathi
Sarkari nai parcha ta bandhu. Private le safety ko bandobast garihalchan ni ta!!!!!!!!!!!!!!!!!!!
अरु त ठीकै हो सरकारी वेब पनि एस्तो लिस्ट माँ पर्नु त लाजै लाग्दो कुरा भयो