That's the case for most countries in Asia and Africa, from my travel experience. I would spot vulnerabilities that leak extremely sensitive data all the time, just by using the services normally and legally. You immediately see that the verification is broken without even having to investigate. I don't investigate or report them, as it might lead to problems.

One of the good things about these attacks is that it publicizes failings and gives data to good actors inside the government to drive reform. Surely other operators (Intel services of China, India, Pakistan, etc...; criminal syndicates) have been inside these systems for years so it's nice for the cybersecurity agency to have tools to make it clear where they're exposed.

It provides me relief that I am not the only one suffering from Clownfair bot protection running amok. Condolences to you.

I've started email the customer support of pages that have overzealous CF settings saying that it's a pain and that if they want to keep me as a customer they need to fix it.

Most give a canned response of "we can't do anything" ̄\_(ツ)_/ ̄ but some small sites do something. GitLab has the most annoying CF bouncer and I moved my company off them once I got the we can't do anything about it response.

The secret is to never click on the check box. Click anywhere else. I haven't been stuck at the captcha in ages due to that.

Someone said services like Twitter, FB or Instagram are walled gardens. Cloudflare said "Hold my beer".

I am annoyed by bots, but I am even more annoyed by the internet being less open and less accessible every day.

I know of no other governments of Nepal.

Yes, this is the new government elected in March of this year after the old one was overthrown in September of last year.

[flagged]

Are you reading it as if the Nepalese government had a data breach? Given the positive connotation of 'welcoming', I read it differently but I can see the confusion indeed

https://www.troyhunt.com/tag/government/

It's a pattern that is used for new welcomes.

Well Troy Hunt makes money off the back of your data being leaked so I expect nothing less.

Most people don't trust their government enough to run a service like this. For example, my government lets bridges collapse[0], and it can barely keep the roads paved. The fact that any government service works at all is nothing short of a miracle to me.

[0] https://www.ntsb.gov/news/press-releases/Pages/NR20240221.as...

> if a government took it over that might be nice

> to avoid it being used by law enforcement

What?

Ehhhh, which government? Why would you want to build 200+ separate services for this? Would the US government report to a french citizen? Would we have two separate services from France/US?

I agree public services are great but let governments focus on more critical services.