MangalMan's Perspective.

After scouring through inspiring and thought provoking chunk of info from betanews i felt ever compelled to do a Nepali version of the whole thing. I was not really expecting anything big but i think digging of my nose has yielded gold this time around.Ok here is the deal wikiscanner lets you input an organization name or domain and gives a list of what folks using their network have been up to on Wikipedia.Should i be elaborating about wikipedia? I guess not.

Apparently employees from Nepal Telecom have been involved in the editing of wiki entry of their rivals i mean “Spice Nepal” interesting i think.

Lets see i will make a list of edits they made and the date it was done.

On 17th of May 2007 Data under the Title Network information was altered to claim falsely that Spice Nepal has collapsed.

On 12th of June 2007 Web link to the Companies website was changed to http://www.russiansmugler.com

On the same day this piece of precious info was added to the entry

“Because of the reimbursement of the leased equpment, it is planning to close the network and will be handover to Nepal Telecom being a government Owned company.”

Oh same words right down to the spelling mistake.

On December 25th 2007

Network Status: Live from September 2005 was altered to Network Status: Dead from September 2005

Same day http://www.pidaluworld.comWorld and www.alu.com were the weblinks that were added (replaced with the home page link) to the entry.

On same day oh wow this is the most interesting of all the edits entire network status data was altered i think i need to give you a snapshot of this one this is funny at least it is to me. Click on the picture for expanded view.

Line 18:		Line 18:
	==Network Information==		==Network Information==
-	* Operator Name: Spice Nepal Private Ltd	+	* Operator Name: Mafia Don from Russia Company Unlimited
-	* Network Name: Mero Mobile	+	* Network Name: Mahato Mobile(Be aware of virus)
-	* Technology: GSM 900/1800	+	* Technology: TDM 100/420
	* Network Status: Dead from September 2005		* Network Status: Dead from September 2005

LOL....

Ok off we go to the faq section which i feel is a must here

FAQ

1)No I am Not an employee of Spice Nepal

2)No I am Not the one at Nepal telecom who has done this

3) Yes People at Nepal Telecom are complete idiots to think that they can get away with this with out anyone ever finding out.

4) No I am not going to reveal my Mobile number.

5) My email address is back2mangalman@gmail.com

6) Yes Nepal telecom's mobile service sucks big time.

7) Adsl chai thikai cha tara paisa ghataunu parcha ha ha

8) I ate mushroom today and i am feeling very sleepy bye bye.

link to download the entire result
1)
http://www.mediafire.com/?m2cxmrxnjyp
File size 3.8 MB
File format text
2)
http://www.mediafire.com/?namxbmgxhej
File size 501.17 KB
File format Rar compressed use Winrar or similar compressing/decompressing software to extract and view.

I have recorded and uploaded the last speech of the last king of New republic Nepal.
Listen to him.Download is about 3.72 Mb.From Media fire.
Here.
He is heard trying to defend his actions.Also he says the allegations about his and his families involvement in the royal massacre are not true. However the speculation about whether or not he will hand over the Crown seen in the picture and the Royal Stick.(Raj Danda in Nepali) is over now.Couldn't not find anything better than that to describe the Raj Danda sorry for that.He is heard saying that theses objects with historic importance would be handed over to the government of Nepal today.The hall where this press conference took place had a capacity of 80 people however there were more than 200 jornos inside at the time of the speech.After the speech king did not answer the question of any jornos.

गणतंत्र को प्रस्ताव पारित ।
Motion to declare Nepal as a Republic filed and voted for.

time-11:25 pm

final vote count 560 for the motion 4 against the motion

time-12:00am
People Spontaneously coming out to the road to celebrate in Thamel area.

Somebody opined Narayanhiti Palace be made Narayanhiti Party Palace do you agree?

time-12:05am past my bed time.Time to say good night sleep tight don't let the bed bugs bite.

Wishing & Hoping for a prosperous Nepalese Republic.

After a lot of delays the much talked about adsl service from Nepal Telecom has finally been started from today. The price of internet in Nepal can only go down from this point onwards. Very good news for everyone who have been paying unreasonably high price for the service till date.

You can get and fill up the form here.They will charge you Rs 500 as activation charge.
Lets do a quick price analysis.They have initially rolled out 2 data schemes.The first one at 128kbps and another one 256kbps.128kbps would be charged at Rs900 per month in prepaid basis the the other one at RS1500 this is excluding taxes.Now lets tax them to know the actual price a customer has to pay.

Rs900+900*10%=Rs990 (10% TSC)
Rs990+990*13%=Rs 1118(13% VAT)

This is my initial guess. I might be wrong here.Can anyone confirm?

Noticed something funny? Yes Nepal Telecom taxes the tax.First they tax you 10% TSC add it up and then again Tax the sum with 13% VAT.
You work out the second ones price.
Besides this price every adsl customer has to do a initial investment on buying adsl modem(ATU-R) the customer premises equipment and the splitter. I have no idea about these equipments local market price.Any idea?

Some very related and relevant links you guys might want to explorer
http://back2mangalman.blogspot.com/2008/03/nepal-telecom-says-adsl-coming-soon.html
http://back2mangalman.blogspot.com/2008/03/adsl2-what-is-fuss-about.html
http://back2mangalman.blogspot.com/2008/03/general-knowledge-about-dsl-and-adsl-in.html

हामी मध्ये धेरै घरबाट इन्टरनेट प्रयोग गर्नेहरु कम्प्युटरमा रहेको मोडेम मार्फत टेलिफोन बाट इन्टरनेट सेवा प्रदायकले दिएको नंबरमा डायल गरी यो सेवा लिने गर्दछौं। यसरी गरीने इन्टरनेट प्रयोगलाई हामी डायल अप इन्टरनेटको नामले चिन्दछौं। यस प्रविधीलाई इन्टरनेट सेवा प्राप्‍तीको सबै भन्दा सरल विकल्पको रुपमा लिइन्छ।

सुचना प्रविधीको तीब्र विकास सँगै इन्टरनेटमा ठूलो परीणाममा डाटा,भ्वाइसको साथै भिडियो आदानप्रदान हुन थालेको छ। तर यी कुराहरुको लागि इन्टरनेट सेवा द्रुत हुनु आवश्यक हुन्छ। जुन कुरा डायल अप इन्टरनेट मार्फत सम्भव छैन। डायल अप इन्टरनेटबाट हामीले बढिमा ५६ kbps सम्मको गतिमा इन्टरनेट चलाऊन सक्छौं। kbps इन्टरनेटको गति नाप्न प्रयोग गरिने एकाई हो जसको पुरा रुप किलोबिट्स प्रति सेकेन्ड भन्ने हुन्छ। त्यसैले हामीले यस प्रविधी मार्फत इन्टरनेट चलाउँदा सामान्य वेबपेज हेर्न बाहेक अन्य काम गर्न ज्यादै ढिलो हुन्छ। झट्ट हेर्दा सस्तो देखिए पनि डायल अप इन्टरनेट यसमा जोडिने टेलिफोन खर्चको कारणले महँगो पर्न जान्छ। हुनत हामी कहाँ नेपाल टेलिकमले इन्टरनेट सेवा प्रदायकले दिएको ५ अङ्कको टेलिफोन नंबरमा इन्टरनेट कनेक्सनको लागि कल गर्दा अरु बेला ४ मिनेटको एक कल र राति १० बजे पछि ८ मिनेटको एक कल रजिस्टर हुने व्यवस्था मिलाएको छ। हालको दिनमा यसलाई बढाएर ६ र १० बनाउने तर्फ नेपाल टेलिकमले गृहकार्य गरी रहेको कुरा विभिन्न पत्रपत्रिका मार्फत बाहिर आएको छ। तर यसले पनि डायल अप इन्टरनेट सेवालाई त्यति सस्तो बनाउने देखिदैन। देशमा सुचना प्रबिधिको विकासका लागि इन्टरनेट सेवाको स्तर र पहुँच दुबैलाई बढाउनै पर्छ।

इन्टरनेट सेवाको स्तर र पहुँच बढाउनका लागि बिश्‍वमा प्रयोग भईरहेका प्रविधी मध्येको एक डि यस एल (DSL)प्रविधीको हामी चर्चा गर्न जाँदै छौं। DSL प्रविधीलाई हामी साधारण टेलिफोनको तार मार्फत डिजिटल डाटा आदानप्रदान गर्न सकिने प्रविधीका रुपमा बुझ्‍छौं।DSL को पु्रा रुप digital subscriber line or loop भन्ने हुन्छ। साधारण टेलिफोन लाईनमा एक जोडा तामाको तार हुने कुरा त हामीले देख्दै आइरहेका छौं। यिनै तार मार्फत हामीले बोलेका कुराहरु एक ठाउँबाट आर्को ठाउँ सम्म पुग्ने गर्दछ। यस तारमा हाम्रो आवाजका अतिरीक्त डाटा तथा भिडियो पनि आदानप्रदान हुन सक्दछ। DSL प्रविधीले साधारण टेलिफोनको यसै बिशेषताको उपयोग गरेर काम गर्छ। साधारण टेलिफोनलाई POTS (plain old telephone service) को नामले पनि चिनिन्छ। POTS मा ० देखि ३,४०० hertz को फ्रिक्वेन्सीको उपयोग आवाज आदानप्रदानको लागि हुन्छ। यसलाई मानिसले स्पष्‍ट सुन्न सक्ने आवाज को फ्रिक्वेन्सी ठानिन्छ। तर तामाको तारमा यो भन्दा धेरै बढि फ्रिक्वेन्सी प्रयोग बिहिनरुपमा रहिरहेको हुन्छ। पहिले टेलिफोन कम्पनीहरुले ती फ्रिक्वेन्सी प्रयोग नगर्नुको मुख्य कारण प्रविधीको महँगो हुनु थियो। प्रविधीमा भएको विकासको कारण यी समस्याको समाधान निस्किसकेको छ।DSL प्रविधी प्रयोग गरि इन्टरनेट चलाउँदा टेलिफोन कल महसुल लाग्दैन मात्र टेलिफोन कम्पनिले तोकेको मासिक महसुल तिरे पुग्छ।DSL प्रविधीका लागि प्रयोग कर्ताको कम्प्युटर DSL modem मार्फत टेलिफोन कम्पनिको कार्यलयको DSLAM (Digital Subscriber Line Access Multiplexer) सँग जोडिएको हुनु पर्छ। DSL modem ले डायल अप मोडेमले जस्तो modulation/demodulation सिग्नललाई डिजिटलबाट एनालग र एनालगबाट डिजिटल मा लग्ने काम गर्देन यसले कनेक्सनको लागि DSLAM सँग काम गर्छ। त्यसैले पनि DSL modem लाई टेलिफोन कम्पनिका ईन्जिनियरहरुले ATU-R(ADSL Transceiver Unit - Remote) को नामले चिन्दछन्। DSL को प्रयोग गरि इन्टरनेट चलाउन तथा टेलिफोन पनि रिसिभ गर्नको लागि splitter अथवा filter को प्रयोग गर्नु पर्दछ। यिनको काम आवाजको फ्रिक्वेन्सीलाई अन्यबाट छ्ट्याउनु हुन्छ। यसो नगरे DSL को स्तर कम हुनुको साथै टेलिफोन रिसिभ पनि गर्न सकिदैन। DSL को कनेक्सन स्पिड १२८ kbps देखि लिएर २४ mbps सम्मको हुन्छ।

DSL प्रविधीको सुरूवात विशेषत अमेरिकामा केबल इन्टरनेटको प्रतिस्पर्धीको रुपमा भएको पाइन्छ। केबल इन्टरनेटमा जस्तो प्रयोगकर्ता थपिदैं जाँदा DSL प्रविधी को इन्टरनेटको गति कम हुदैन। त्यसैले पनि DSL प्रविधीको लोकप्रियता बढ्दै गएको हो। तर DSL प्रविधीको नकारात्मक पक्ष पनि छ। DSL प्रविधीको इन्टरनेट गति DSLAM देखि DSL modem सम्मको दूरीमा भर पर्छ। अर्थात यो दूरी बढ्दै जाँदा गति घट्दै जान्छ।

DSL प्रविधीका पनि विभिन्न प्रकारहरु छन्। ती मध्य मुख्य निम्न छन्।

1)HDSL(high data rate DSL)

2)ADSL(Asymmetric DSL)

3)SDSL(Symmetric DSL)

4)VDSL(Very high bit rate DSL)

HDSL र SDSL प्रविधी हाल त्यति धेरै प्रचलनमा नभएको कारण यहाँ ADSL र VDSL प्रबिधिको मात्र चर्चा गर्ने जमर्को गर्दैछु।

ADSL:-
ADSL को पुरा रुप Asymmetric digital subscriber line भन्ने हुन्छ। यस खालको DSL को download speed upload speed भन्दा धेरै हुन्छ। यस प्रविधी बाट आवाज,डाटा र भिडियो सबै आदानप्रदान गर्न सकिन्छ। हालका दिनमा ADSL प्रविधीको लोकप्रियता संसार भर बढ्दै गएको पाइन्छ। ब्रिटेनको टेलिफोन कम्पनी BT ,भारतको टेलिफोन कम्पनी BSNL यस प्रविधी को प्रयोग गर्ने कम्पनीका उदाहरण हुन्।छिमेकी देश भारतमा Data One को नामले २ mbps गतिको इन्टरनेट ४०० नेपाली रुपैंया प्रति महिनाको दरमा उपलब्ध हुन थालेको छ। हालका दिनमा ADSL प्रबिधीमा पनि अझै बिकाशको हुदै यसको गति र कभर गर्न सक्ने दूरी दूबै मा बृद्धि भएको छ। जसलाई ADSL2+ को नामले चिनिन्छ। ADSL2+ भने ADSL कै बिकसित रुप हो। गुणात्मक हिसाबले हेर्ने हो भने ADSL2+ ADSL भन्दा ३ गुणा छिटो हुन्छ र यसले धेरै दुरी सम्म काम दिन्छ।

हालका दिनमा नेपाल टेलिकमले पनि ADSL2+ प्रविधीको प्रयोग गरी देश भर broadband internet इन्टरनेट सुबिधा पुर्‍याउन लागेको कुरा बाहिर आएको छ। साधारणतया२५६ kbps भन्दा माथिको कनेक्सन स्पिडको इन्टरनेटलाई broadband internet भनिन्छ। ADSL modem को मुल्य भने त्यति सस्तो छैन। बिकल्पका रुपमा टेलिकमले ग्राहकहरुलाई modem भाडामा उपल्ब्ध गराउन सक्ने देखिन्छ।

VDSL:-

VDSL फाइबर अप्‍टिक्समा आधारित DSL प्रविधी हो।फाइबर अप्‍टिक्स केबुलको मुल्यमा आएको कमी र यसका विशेषताहरुका कारणले गर्दा विश्‍व कतिपय देशका टेलिफोन कम्पनिहरु तामाको तारलाई बिस्तारै फाइबर अप्‍टिक्सले फेर्‍दैछन्। ADSL मा प्रयोग हुने उपकरणहरुले फाइबर अप्‍टिक्समा काम गर्न सक्दैन्न। त्यसैले यो नयाँ प्रविधीको खाँचो आइपरेको हो। यो प्रबिधी मा १६ mbps सम्म upload र ५४ mbps सम्म download हुन्छ।

भिडियो अनडिमान्ड जस्तो सुबिधा उपयोगका लागि चहिने इन्टरनेटको गति यो प्रबिधीबाट सजिलै पाउँन सकिन्छ। यो प्रविधी हाल सम्म महँगो भएका कारणले केहि सिमित ठाँमा मात्र यसको उपयोग भइरहेको हामी पाउँछौं।

(also published in yuvamanch few months ago re-published here with some edit)

Black hats and White hats that is how hackers are differentiated from crackers in the internet community. The good vs. the bad. Setting up a website in Nepal is catching on these days it seems. But web developers/administrators are not putting extra effort by researching about the security part. I don't really blame it to them though. Ask a science bachelor student in his third year in Nepal's TU and you will get an idea about Research in Nepal. The biggest joke about "research" for him/her is that the only way of passing it as a subject is to completely get the whole book in his/her mind word by word sentence by sentence paragraph by paragraph. Oh what an irony!!!. What a mockery of the word "Research".

They seem to be turning blind eyes over growing the trend of hostile website takeovers around the world. And not holding their diapers properly as put by Bipin from nepsecure. This has many implications. For example companies like Nepal Telecom may lose in millions of rupees in revenue if their insecure server systems are somehow taken over by the bad guys. Several penetration tests done by various internet security people have already indicated that this is within the realm of possibility.

Well I seriously think that all the so called government service providers be it Drinking water corperation or Electricity authority or Telecom for that matter are dacoits looting the poor Nepali people And The Grand Leader of This Clan is undoubtedly Nepal Telecom. (डाँकुको सरदार). I am itching to write few words in Nepali here.

नेपाल टेलिकमले क्यान इन्फोटेक २००८ मा आजकल दुई कुरा बाँड्दै छ।

१) नेपाल टेलिकम लेखिएको डटपेन

२) र संबिधान सभाको निर्बाचनको मिति सरे जस्तै lunching date सरी रहने ADSL2+ internet को खोक्रो आश्‍वासन ।

३ दिन अघि सम्म फेब्रवरी मध्य सम्ममा त पक्का भन्दै गरेको टेलिकमले त्यसलाई बढाएर अप्रिल फूलको दिन पुर्‍याएको छ।

coming back to the point

Case studies Black Hats Vs. White ones in nepali context

1)http://www.nepalgov.gov.np/ (Nepal government's web site hacked (defaced))

see it here http://www.meroguff.com/2007/12/nepalese-government-site-hacked-by.html

2) http://www.nepalpost.gov.np/ Nepal post offices web site hacked (defaced)

see it here http://calima.serapis.net/blogs/index.php?/archives/143-Department-of-Postal-service-in-nepal-Defaced.html

What we have seen in recent months in the above mentioned site are the perfect example of work by Black hat hackers doing damage. Imagine what would happen to NTC if this happens to them. Well in the worst case scenario communication lines across all Nepal would come in Stand still. Or redirection of landline calls combined with the spoofing of caller id number can damage anybodies personal life. I don't think NTC engineers would even accept that serious holes in the system exist let alone fixing them. Oh and hiding your error message or the version or apache installation page is not equal to securing a server.

Now about some penetration testing done by some Afnai Bari ko(आफ्नै बारीको) White Hat Internet Security enthusiast com pen tester com Hacker.

Some dorks included

1) http://web.ird.gov.np/ (Gov of Nepal Inland Revenue Department security breached)

2) http://websms.ntc.net.np/websmss/login.jsp (Nepal Telecoms web sms service password brute forced)

3) http://ksl.edu.np/ (Kathmandu School Of Law Website sql injected )

4) http://www.cybersansar.com/ (One Of the most popular web entertainment portal of Nepal's xss vulnerability )

5) http://www.kec.edu.np/ (Kantipur engineering college sql injection )

.The main diffenence between this guy and Iranian Hackers is that he is doing it for good. Informing the site admins about these issues.Read this guy here

http://hamrosecurity.blogspot.com/

Thanks to Bipin from nepsecure for making me aware.

I have a small suggestion for this guy though

plz change this "यो बल्ग मा नेपाली websites हरूमा रहेको सेक्युरितिका बारेमा लाखिने छन्। " to this "यो ब्लगमा नेपाली websites हरुमा रहेका सेक्युरीटि issues का बारेमा लेखिने छ।

It takes a little bit of getting used with this Unicode thing I must admit। Just trying to help . Don't take it otherwise.

some update: looks like another site http://www.thikthak.com too is
vulnerable to XSS thing

click Here to see for yourself this will fire up an alert box.

This will load back2mangalman inside thikthak website

And finally This will redirect you to this blog.

Well i did not find it by myself this was from some baabal forum

Well I was not writing because I was busy these days. Oh what a lame excuse for my laziness. Sorry but too late for me to change I guess. Two of the biggest news events hitting media these days were the launch of so called people's car by Tata motor of India dubbed "the cheapest car in the world" and death of Sir Edmund Hillary conqueror of Everest "Highest peak of the world". Two independent events surly they are but we in Nepal can't escape the ramifications.

Let me write about this Edmund guy first. Little bit of Encarta exploring reveals Edmund Percival Hillary born in 1919 at Auckland scaled Everest in May of 1953. He along with Tenzing Norgay had to do it with primitive of tools. Modern day pseudo climbers are literally carried to the top of Everest on Sherpa's back. They won't admit it coz it's bitter but it is the truth. Ask them about Ice doctors if you really want to find out. After finishing his exploration work in Antarctica he returned back to the mountains which had given him such name and fame it was in the early 1960s. From then on he began raising money to build a school for the children of Khumjung, the home village for many of the Sherpas who had accompanied him on the Everest ascent. He later established the Himalayan Trust, which, since its inception, has funded more than 30 schools in Nepal, as well as hospitals, medical clinics, and airstrips. He was granted honorary citizenship of Nepal during celebrations held in 2003 to mark the 50th anniversary of the ascent.

Well I regard this guy as a true Nepali who spent his life promoting Nepal and helping Nepali people. Unlike so many of expats these days who vomit poison about Nepal everywhere in internet and yet claim they are Nepali. Nepal Ama le Auta Sacha Choro Gumayin. My commiserations.

Now Tata's Nano the IC 1 lakh car. After much of hype finally it was revealed in Auto Expo in New Delhi. I think this car is going to be the next big thing. Given the publicity and its price means it is going to sell like a hot cake once it hits the showrooms that is from late 2008. Well more cars mean more traffic jam and more importantly more pollution. I think Tata should have named their car "Global warming". Nano they have called it but all these Nano combined would make them Mega. Problem of Mega scale. Sooner rather than later this is going to come to Nepal too. But add 175% of tax and you will get the price you would have to pay for it here.

Desperately trying to find a connection between these two events I come with this. Mountain peaks and the surrounding environment which Edmund so revered is on the decline already and the addition of the cheap car in the roads only means acceleration.

कार्तिकलाई बिस्तारै जाडोले च्याप्दै जाँदा
जिमखानाको सिकारु पहलमानले रिङ्को तौल बढाए जस्तै
म पनि दबिँदै जान्छु सिरकको भारले शनै शनै

कार्बन र निकोटिनको कक्‍टेलले फोक्सो भर्दे
अन्नपुर्णालाई दाहिने पारेर
कहिले काहिँ छिरिदिन्छु महाबौद्दका बेनामे चाईनिज गल्लि तिर
चटामरिको पाश्‍चात्य भर्सन, उहि पिज्जाले रसनाको उत्तेजना शान्त बनाउन

त्यतै तिर जता गोरु जत्रा डुगुरेहरु
बीर अस्पताल लासघरमा नाक कान को नास्ता पछि
गुच्चा टोलको हल्लामा चढेर
बर्गरको डेज्जर्ट खान प्बालको बाटो छिर्ने गर्छन् रे म सँग सँगै

(२०६४ कार्तिक २०,पकनाजोल )

Slowly as the month of kartik is engulfed by the chill. I cover myself with the blanket gradually increasing its thickness. Like a newbie slowly increasing weight he can lift in a gym.
Filling my lungs with cocktail of carbon and nicotine .I enter the nameless Chinese galli at Mahabauddha to tranquilize my demanding tongue with western version of Chattamari -Italian pizza.
aha you guessed it right same place where the ox sized rodents after supper of human nose and ears at Bir Hospital Morgue come ridding mouth to mouth from guccha tole to get burger on dessert. We both see each other and ignore.

गाई सुधो नेपाली भीडमा भेडो बन्छ। भीरमा गोरु बन्छ।इनारको भ्यागुतो नेपाली आकाश छुन उफ्रन्छ । मच्चिन्छ चाचाहुईमा लिंगे पिङ्‍ अनि रोटे पिङ्‍मा। अनि प्रत्येक पटक जस्तै यस पटक पनि थच्चिन्छ नराम्ररी। साथी पृथ्बी साच्चै गोलो छ। मंगलमान यहि नेपाली जनताको प्रतिनिधिपात्र हो। मंगलमान प्रयोगशालाको त्यो प्राणी हो जस माथी हर समय असफल प्रयोगहरु लादिइन्छ।म चाहन्छु मेरा केहि प्रयासहरु त्यो मंगलमानलाई नबिर्सनुमा केन्द्रित रहोस्।