Where are all the Nepali IT experts?

[kazi]

About two years ago I was aghast by hackers defacing government websites. And now its the industrial sites. It is unfortunate.

[Ganesha]

I've always thought why is it so simple to deface a website. Any clues?

[kazi]

The most common is social engineering and insider leak. Others may be weak authentication, inadequate hardware/software infrastructure protection, weak configuration, etc. I cannot understand why anybody would even bother with these sites.

[Ganesha]

Thx Kazi. They say social engineering is really a very powerful method...

Yep, why should they bother to deface... perhaps its just some kids.. trying out a few scripts on the net to ogle over himself/herself with friends...

[kazi]

yep, other than finding holes in the system, application or implementation, social engineering seems to be the highest risk, except of course, insider leak. Other causes can be quantitatively minimized or attributed to carelessness.

[Ganesha]

Tell me kazi, what then is the basic premise of security? What are the elements that make a system secure and should be thought of when designing a relatively secure system.

[kazi]

Characteristic of a well thought-out question, the answer lies in the question, I believe. And relative security is the key. The goal is to make the system secure enough that the benefits of breaking the system becomes too expensive.

[Ganesha]

In the age of extremely cheap processing power, what are the methods to make the system expensive to break?

[kazi]

With today's technology, there are many algorithms, for different purposes, that are theoretically improbable to break. Just be careful to choose a implementation with minimum bugs.

[kazi]

Can anybody list some technology initiatives taken by IT experts in Nepal?