Presentation on Network Security and Vulnerabilities

Yesterday I decided to share with the team an overview of a Wired and Wireless Network and how certain loopholes in them can pose a threat to our data and confidential information. Due to lack of time I could not cover, “How to secure the network from such vulnerabilities” Which I hope to cover another time along with Web Server Security.

Below are the topics that were covered during the presentation.

Network Analyzer and Sniffers:
An overview of Wired and Wireless Networks & key distinctions between them.
Wired Equivalent Privacy (WEP) on wireless networks.
Gateways and Routers.
Address Resolution Protocol (ARP) and how ARP requests could be re-routed to a specific MAC.
Mac Cloning, Ip Spoofing.
Creation of fake RSA certification for a MITM (Man in the middle) attack.
MITM attack with ARP poisoning and Denial of Service (DOS).
Decryption SSL dumps.

DEMO given on the above, to read captured passwords from a live ssl session over Wired/Wireless Network.

Remote administration tools:
DLL injection.
Firewall bypassing methods even over NAT.
Browser Hi-jacker.
Anti-virus bypassing methods with the use of Compilers, Packers and Compressors.
Anti-virus Signatures.

Demo given with a Yahoo IM Trojan with DLL injection capabilities and how confidential information could be retrieved without the user knowing off it.

Later had a feedback from the guys, that they had thoroughly enjoyed the presentation and were looking forward to more of such stuff in the future.

Load/Stress testing web server with Apache JMeter and Apache Benchmark.

Stress testing a web/application server is never an easy task. Having never done any intensive server testing before I got into load testing our e-library server with some obvious but important questions in my mind. What kind of tools are available? What kind of tests can i perform? Will I be able to make sense of the data from the result? and Will it actually apply to real scenario–will my server behave exactly the way it would during the test?

These are simple questions for an experienced administrator, but for someone just getting into performing such test, it seemed a fairly daunting task. So lets start with the things we want to test and the server side applications to test.

The e-library is an online library system that run on Ubuntu 7.10 desktop (I am planning to change this to Ubuntu 8.04 server–mainly because I don’t want the desktop applications to take up valuable
memory away from the server applications). The e-library uses fedora commons as its library engine, and has Fez as its GUI. Fedora commons also uses Tomcat a Java application that talks to apache, but can also act a server on its own. More on “e-pustakalaya” or e-library later.

So the things that we really want to test are.
1. Avaliablity of the web-server: One of the main thing (among others) that we want to make sure that apache does or does not– depending on the way you look at it– is the way it handles max client and the keeepalive time for clients connected. It is a good practice to set the max clients to a high number ( = total memeory/5Mb), and keep alive time to as low as possible(=2). Take a look at this virtualthread blogpost for a good overview of how these parameters effects your server.

2. Resource Utilization: One thing i have noticed is that my server had a huge overhead on CPU and my memory was down to 12Mb free, which caused the server to crash. This happened when i simulated a 100 user connection making one new connection every 10 sec….fetching a 1.4 Mb pdf file. So hardware really matters, and it is really a good idea to optimize apache and any application service for your hardware specs. Reading memory usage and CPU load is a tricky thing. I found out that the memory information that say $top gives for a process is not actually correct view of what that process is doing. Similarly, making sense of load average and CPU% requires a little more knowledge of the Linux system.

Load average = Is the CPU load. It gives information on the number of processes waiting to run + the number of processes executing. It is not about CPU utilization but the total queue length.
This article from Linux journal gives a nice idea about load average.


3.Response time test, Throughput test and Error rate test: These are probably the main areas to focus while performing a load test. To do these one should look into one or all of the following.
a)User-based testing: Where you get many users to use your server and monitor the performance.
b)Standard benchmarking: I used Apache benchmarking tool for this. Apache benchmark can give you an idea of how many request per second your apache server can handle.

For example:
$ ab -n 10 -c 10
Will have 10 concurrent users and 10 request of get index.html on your web server.


$ab -t 60 -c 10
Will have 10 concurrent users for 60 secs with as many hits as possible, by default when you
don’t use the -n option, ab sets to default 50,000.

You can also use a -g option to get the output on a txt file to use for gnuplot.
$ab -n 10 -c 10 -g test.txt

Apache JMeter
From Apache website:
Apache JMeter may be used to test performance both on static and dynamic resources (files, Servlets, Perl scripts, Java Objects, Data Bases and Queries, FTP Servers and more). It can be used to simulate a heavy load on a server, network or object to test its strength or to analyze overall performance under different load types. You can use it to make a graphical analysis of performance or to test your server/script/object behavior under heavy concurrent load.”

So lets take a look at some of the thing we can do with JMeter. After the installation of JMeter, run it under a Linux system with /path to your jmeter/bin/ ./jmeter
A JMeter window will open, which looks something like this:


Use the Options->Expand All option to see your full tree.
Now set up a test scenario (refer to JMeter user page). After you run the test you will see (if you use the output graph result as one of the listener) something like this (Two pictures for two different run with same number of users and loop).


So when I am doing stress test, I am mostly paying attention to the throughput and average output results for now. Needless to say you want your server to handle as many request per minute with less error rate (you can check this by adding a summary report to your listener)and high KB/sec throughput, but you also want to see consistency. If you look the two runs it shows a similar result. Thats exactly what we want to see. We want to see a consistent pattern for load, memory and other things. Any erratic behavior should indicate a poor performing server. I would say its a good idea to check both load with $top or $uptime and memory and cpu usage while performing these tests. This will give you an idea about your server’s threshold before it overloads. JMeter is pretty cool because you can run different kinds of test on your server. Once again check out the JMeter page for more information.

Other tools for performance and functional testing can be found at opensourcetesting.
For Load Balancing:
1. mod_backhand is used to redirect requests from one server to another. Is used for cluster load balancing.
2. Load balancing with cluster apache setup with Round Robin DNS.

Say you setup two machines with ip and
Now on the DNS server have two entries for your server: A A
The DNS will distribute incomming requests between these two.

Any corrections to these or new ideas and methods for server load/stress testing is welcome.

School Network Update

Over the last few of weeks the networking team has been working hard in getting together a concrete plan, to connect the pilot schools. The network had to be both cost effective as well scalable. So, with all the options available it was decided to connect the schools and the relays over Wireless with cheap point to point Wi-Fi radios from the Kathmandu Valley.

First we conducted field visits to the schools and the Dept of Education (DOE) in the valley and the surrounding area to collect GPS data. Which helped us a great deal with the network design and also chart out the various relay points we could use in places where we didn’t have direct line of sight with other network nodes.

We are using Deliberant brand of radios for the point-to-point connection to the Department of Education. The radio have an effective bandwidth 8 Mbps in the 802.11b standard. The radios from the schools are transmitting at an air distance of 4 km to the DOE located in the valley, which is right next to the international airport, so we’d figured we would be having interferences.

DOE relaying to schools

We are using 12 dbi omni-directional antennas from Deliberant Networks, on-site at both schools, powere by a DLB2701 radio. We decided not use the Active Antennas, as they didn’t quite perform upto our expectations. The 250 mw radio is the access point for the XO’s. It costs roughly 150 USD and has a range of 12 km in ideal conditions. We also do not intend to use VSAT for any of Nepal’s pilot schools. Though installation is not terribly expensive but monthly bandwidth charges are prohibitively expensive when compared with the cost of long-range wifi networks, as pioneered by Nepal Wireless Project.

School network

Below is the connectivity diagram between OLE-DOE and the pilot schools. DOE is connected to Ratobangla School in the valley over Canopy radios. And further relays to both schools with a 19dbi Deliberant radio. The radio at DOE is being used as a point to multi-point radio, as it connects to both schools simultaneously. Since both schools do not have a direct line of sight with DOE, we are using relay centres about 100 meters away from the school buildings. OLE is connected to Ratabangla school over a VLAN network installed by Subisu Network, connected at 1/1 Mbps intranet and 256/160 Kbps internet access shared with both schools.

The school servers would be installed on-site at both schools, while we have a proxy and the E-library setup at DOE. We would also be setting a cache server at DOE to save on the bandwidth and plan to monitor usage from OLE across the network while also uploading new educational material as and when ready.

OLE Network

Below are some of the daily notes taken down while setting up the network.

[15th March 08 Update]
We got an 16dbi Deliberant installed at DOE. Being a hazy day, the hills where the schools were located were pretty much next to not being visible. So getting the angles right was all the more challenging, as this relay needs to be broadcasting to both schools simultaneously. And unlike a Canopy a Deliberant radio can broadcast to different relays within an angle of 60-70 degrees. So let’s hope we’ve got it right, which we’d know once at Bashuki.

[19th March 08 Update]
We installed an 19dbi Deliberant at DOE and removed the 16dbi radio. We’re now connected to the school at 70 dbm Rssi and 0% packet loss, which is just what we needed.

Right on the hill-top there is an army base which is about a 100 yards away from the School. The army base has direct line-of-sight with the Department of Education, in a range of 3-4 km air distance.

We plan to mount a Point-to-Point radio for Bashuki School either at the adjacent Military Post or on a tree situated on a high hilltop. The radio located near Bashuki will connect to a multi-point radio located at the Department of Education, 8 km (by road) east of the school and in direct line of sight.

[25th March 08 Update]

Rabi n Mahabir clamping Cat6

We were back to the school to complete this end of the networking. Which required us to fix a relay from DOE at the Army outpost and get it connected to the school and also setup an omni antenna as an AP for the XOs. After half an hour of diplomatic talk with the Army officer in-charge of the barrack, we were finally allowed to setup it up. Since we could not use power from the barrack. We decided to run a cat5 cable across to the school about 100 mtrs away to power up the radio over POE from the switch at the school. For certain reasons the 16di radio refused to power up, and we had to use the 19dbi radio instead as the relay which gave connectivity at 72 dbm rssi 0% packet loss. That was the highlight of the day, as the omni radio too refused to power up, so we didn’t get to install it.

Seting Radio at the Army camp

Prior to leaving we did install a battery and an UPS with the XS connected to the switch, though it all needs to be thoroughly tested. Maybe in a couple of days, when I get there next to install the omni radio.

The school itself is a bad location for our long range antenna as it is nestled into the hillside. It does not have line-of-sight with the Department of Education. Instead we are using a house located on the hill opposite the school as a Relay site.

The owner of this house has generously agreed to let us mount our network equipment on his house. We will place the Point-to-Point antenna in the topmost window, which has a line-of-sight view with our Multi-point radio at the Department of Education. We will place our omni-directional antenna on the lower part of the roof facing towards the school. This house is roughly 100 meters from the school. We will have to test the signal strength within the classrooms. If it is too weak, we will run a Cat 6 cable down to the school. We also like putting the antenna in the house because the antenna will less likely be stolen.

Relay house at Biswamitra

[16th March 08 Update]
We headed off to Bishwamitra School, this time we were accompanied by Mahabir Pun, Rabi & Sulochan. Mahabir had been approached by a TV company, who needed some shots of him working on site for an ad campaign. So we decided to to club in and take the crew to Jyamirkot as we needed to install a couple of radios there for the school.

It was an hours ride to the base of the hill and a 15 mins trek up with all the equipment. We were welcomed by the school authorities, who got busy right away arranging for electricity for the house where we’d decided to get the radios installed. Believe this house had not been inhabited in quite a while and was completely empty.

We had a jolly good time unpacking and getting the radios fixed up while the film crew was busy shooting us at it and with our brilliant acting skills, the crew needed no retakes! Once they had their shots we got to some serious work.

Mahabir fixing the radio

The 16dbi radio got fixed at the window looking out to the valley below, where DOE is located. Once installed we were able to connect to the other radio at DOE which had just been fixed the previous day. Though it needed a lot of tweaking to improve the signal and at best we got connectivity at 84 dbm rssi with 10% packet loss. So we decided that the radio at DOE needed a bit more tweaking or we might have to be change it to a 19dbi Deliberant radio. As Kathmandu International Airport happens to be right next to DOE, we’re assuming it might be causing a lot of interference and hence the packet loss.

Rabi n Sulo fixin omni

Rabi and Sulo got the Omni antenna fixed by the side of house facing the school. This 12dbi antenna is attached to a DLB2701 access point, which is a 250 mw radio. Sulo had taken a XO with him to test the AP range and was satisfied with the signal around the school and the village. If required we would also enhance the signal by adding a reflector to the omni facing the school to make it work as a sectoral antenna.

With the omni working out to our expectations, we’re glad that we didn’t have to use the CAT6 cables that we had taken along with us. As it would have been a herculean task having to connect it all the way to the school from the relay.

How to (hack) customize a built for XO.

The problem we faced: We needed a customized built for all our XOs that would have the default language set to Nepali, the default jabber server set to a local server, a set of activities to match the grade level of students, and some other stuff. We’ve been harassing OLPC developers to get a script that would do all this on install time so that we didn’t have to manually do this on every machine. Also, we wanted to make sure that a teacher with limited technical knowledge should be comfortable in re-flashing the XO if/when needed.

The solution: After playing with it for a little bit and with some help from Ties, I figured out a really easy way to achieve this custom built (provided that you can get into the firmware). Well, not really a custom built—but will do the job just fine.

Here is how:

Get a XO and install the activities you want and change the language and jabber server to match you needs.

  1. You can use the USB method or use sugar command to install activities.

  2. To change your jabber server by editing the default sugar profile

  3. Change the language to your language by either editing the .i18n file or by using sugar-control-panel -s language <your language> command.

Now, go to /home/olpc/.sugar/default directory, and delete a file named config . The reason to do this is so that next time you use this image on other XO s they can put in their own nickname and not have to use your name. This is the file that will be checked by sugar to see if a user named is configured, if this file is not present, it will prompt you to give your XO a name and choose color etc.

Next reboot the XO , press the x button and get into the firmware.

Now make a nand image of this machine on a USB stick with the save-nand command. It will create a img and a crc file associate with the image.

Wa la …we got what we wanted. An image that can be installed on our XO with the language, activities and server we wanted. All we have to do is just install this image on all other XO s to get the exact same settings. This simplified the process, and is pretty easy for everyone to do. We are using 698 built as a base so we still had to go the firmware and do a copy-nand to install the image. It will be great if someone can make a for this built so that the whole process of installing goes back to pressing four game keys.

What are the drawbacks of doing this? I don’t know :)!! If anyone does leave a comment.

Let me know what you guys think.

Nepal: ICT in Education and OLPC

Huge disparities in quality of education and access to education characterize the Nepali school system. Schools in rural areas, mostly government run, compare poorly to schools in the cities. These government schools not only suffer because of the digital divide, but also lack the quality in teaching and tools to enhance the learning process. In fact, forget the “Digital Divide.” The “Quality Divide” between “school-haves” and “school have-nots” is far more pressing. As the majority of students at primary and secondary level attend government schools, these discrepancies translate to poor outcome, and low quality of education. Thus, it is important to introduce reforms that aim to not only provide equal opportunity of education, but also to improve the overall quality of education for all. But how to achieve this goal? It is a daunting task, especially for a developing nation like Nepal to consider radical changes to its educational policies. I believe that Nepal can use Information and Communication Technology (ICT) to improve the quality of education, and expand access to education. OLPC, along with e-libraries, open-courseware, and other initiatives can radically enhance the quality of education in Nepal.

What we know

A major indicator—although, it can be argued that it is a poor one—of the status of education up to secondary level (grade 10) in Nepal, is the School Leaving Certificate (SLC). Students take the SLC exam at the end of grade 10 to mark the completion of requirements set by the government, that a student has successfully completed at least 10 years of primary schooling. The data compiled over the last decade shows that on average a meager 38 percent of the total examinees pass the test. Among those who appear for the exam about 80 percent come from public institutions, of which only about 41 percent succeed. The 20 percent that come from private schools have around 88 percent pass rate, and on average score 18 points higher compared to those from public school. What it shows is the lack of quality, and disparity in education among schools in Nepal. Equally deterring is the lack of use of technology—chiefly computers—in public schools. While most private and some public schools in the cities boast a meaningful incorporation of computer courses in their curriculum, it comes as no surprise that most others claim to have never seen one. The answer, to how to improve the quality, and narrow the digital divide in education is not simple, but ICT seem to have answers to some of the problems plaguing the education system of Nepal.

The value of ICT in education lies in their capacity to deliver educational material that induces a self-learning process that simulates creative and innovative thinking. It is generally agreed upon that it induces a collaborative, and self learning environment that teacher-centered and whole class lecture methods lack. Indeed, examples are abound in American, and European institutions where this method is already preferred. Teachers simply act as facilitators rather than instructors. The idea is not to curb the need of a teacher, but to let students learn through discovery.

It is important to understand that the role played by ICT in the educational system of a developing nation like Nepal. It would be naive to think that by simply providing a technological tool to some kid in rural Nepal will actually improve his learning ability and outcome. In fact research already shows that “educational materials in electronic form are most useful when it is directly linked to curriculum”. It becomes more relevant to teachers, and students when it has components of curriculum in it. The growing popularity of the use of ICT in e-libraries, e-learning, and distance learning are good examples.

There is no statistical evidence, however, that proves a positive impact of ICT on the quality of education, or on the learning outcomes. However, it is no reason to conclude that it can not. Only a few decades ago the notion that the internet would change the way do business, interact and communicate among other things would have been a laughable proposition. For most the internet has now become ubiquitous.

Technology has the ability to bring change, and for developing nations it can become a cost effective, and accessible tool to improve the quality of education. Many countries are already focusing on implementing ICT in education. A majority of educational projects funded by UNESCO, World Bank and other private organization [some resources] contains an ICT component. It is done with a belief that ICT is a viable option that has the potential to improve both education and lives of many in these developing countries.

One Laptop per Child in Nepal

The OLPC initiative can play a vital role to make ICT-based education sustainable in Nepal by becoming a cost-effective, and affordable means to reach population in rural areas. More importantly it has a large open source base, that enables localization, and modification, which adds a sense of ownership. But the challenge is more than to simply give laptops to children, it is to understand how it can enhance the teaching and learning process. The laptop by itself is a great tool for learning. It is durable, and child friendly, and is all about collaborative learning, sharing and communicating. But the best thing about it is that it empowers local groups like OLE Nepal to make this project our own Nepali, Thai, or Nigerian project.

So whats going on with the OLPC project in Nepal?
OLE Nepal and the Department of Education of Nepal along with other local organizations are working on various aspects of the OLPC project. OLE Nepal is implementing the OLPC pilot (read about the schools) in April 2008, and is steadfastly working with various sectors of the community to take the project forward. The Danish IT Society have supported OLE Nepal’s efforts by signing a MoU with OLE Inc., to raise funds for laptops for Nepal. The Danish government through its embassy in Nepal is funding the pilot. The Ministry of Education along with its partners is also actively involved in build infrastructure required for the project. A few remoteMakwanpur districts are is already connected to the Department of Education through wireless technology, and work is in progress to connect more.

OLE Nepal is also putting major focus in developing learning activities—that are linked to the national curriculum—to be used with the laptops. Constructionist Education does not mean giving children a blank slate and expecting them to invent the calculus. So teachers and curriculum experts are guiding the development of these activities. In fact OLE Nepal is partnering with the Department of Education of Nepal, to develop such activities. The two signed a memorandum of understanding (MoU) to work together to create these activities that meets the learning objective specified in the curriculum while allowing the students to use their abilities to learn by their own.

The activities are interactive in nature, and can be modified by teachers even with minimal programming knowledge. This gives the teachers the ability to change things according to their needs, enhancing the teaching process. One can easily find the similarity between these activities and the actual text book, only now it is more fun to learn. Not only does this help to convince the government, the teaching community, and the parents who would otherwise find few if any reason to spend the already stretched budget on OLPC, it more importantly promises to students a chance to better education and creative endeavor.

The OLPC project has received a positive reaction from different sectors of the community. Teachers like the potential the project promises, students who have the used the activities like what they see, and the government seems enthusiastic about implementing it. One point that critics usually raise about the OLPC project is its lack of attention to actual educational activities in the laptop. But the OLPC is looking to put its laptop on hands of population around the world, and creating educational material that addresses global population is not best done by an organization based in a wealthy western city. This work is best done by local organizations. The work done by OLE Nepal can be taken as an example, and similar work can be collaborated for localized use with the laptop.

The initiative taken by the Ministry of Education to integrate the OLPC project into the national system has already taken some steps forward. But much more needs to be done to actually see the results. Network infrastructure, internet access, long term financing, human capital, the general awareness about modern technology are a few things that needs immediate attention. Training teachers to effectively utilize the technology is equally important. We need more people to come to Nepal to work for projects like this, especially young Nepalese living abroad. I give example of all our volunteers who have the vision, and the commitment to make a difference.

Four Villages One Goal: ICT4D

I just came back from a six day trip to four villages in Kaski district. These villages are in the mountainous region outside Pokhara. My mission was to add educational resources like school wikipedia, e-books, and the learning activities, among other things, to the schools in these villages, and to show students and teachers how to use and utilize them to enhance learning. In the process I leaned a lot about what information technology means for these villages, and how it is being used for education and development.


A little information about these villages and schools:

Village name: Chandrakotnetworkmap.jpg
School : Sangam Secondary school
Number of students (approx): 300
Number of teachers: 12
Number of computers: 5

Village Name: Magh Jaun
School : Tanchok Primary School
Number of students (approx): 150
Number of teachers: 6
Number of computers: 2

Village Name: Bhichuk
School: Bhichuk Primary School
Number of students (approx): 100village.JPG
Number of computers: 2

Village Name: Tolka
School : Himalaya Secondary School
Number of students (approx): 400
Number of teachers: 12
Number of computers: 2

All four schools have internet access, and are connected to each other and to a larger network of many other villages through the efforts of the Nepal Wireless project. So what does it really mean for these schools to have computers, and internet? “It means that our kids wont be like us,” says Heetman, a teacher at Himalayan Secondary School in Tolka. “I had only heard about computers until we got one a while back.” Its not about a bigger change. For the villagers it is more about being able to do smaller thing, like reading todays news online, and being able to type a letter. However, we should not expect any positive outcome in education in these schools because of these computers. As a matter of fact, most of the students i talked to complained that, they do not get to use the computers too often. Why? I asked the people in-charge. “We do not have enough people to who know computers to conduct classes,” they said.

What is striking is that the villagers agree that these computers, and the VoIP service will gear them towards development. The value of the technology is understood, at least in parts, that they believe that it is concomitant to development. “We want the information and communication technology to make a positive impact on the village.” But is it? My focus were school kids, the next generation of villagers who would actually be able to make any impact in the village, and sadly young generation here are still far behind when it comes to using technology.
Its not all gloomy though. It is already amazing that these villages have internet and VoIP services. It is only a matter of time before they can really start using it for development. All four villages do have the right idea; use information and communication technology for development.

We’re Looking for a Super SysAdmin

The Problem

Over the course of 2008, OLE Nepal will implement OLPC at a number of schools in Nepal. Some important technical aspects of deployment are the updating the XO’s, back up of student data, maintaining mesh network, and web caching. Much work remains to be done in the general area of the School Server. The School Server is currently under active development and will likely be so throughout 2008. OLPC recently made a great decision in hiring Martin Langhoff to serve as the School Server Architect. Here in Nepal, we need a rockin’ sysadmin that can work with our Kathmandu-based team and with OLPC to implement a school server solution that meets the needs of kids and teachers in Nepal.

We need this person to can commit 5 months full-time here in Nepal. You need to be local because working remotely won’t expose you to the real requirements of schools in Nepal. This is a volunteer position. We operate on a shoestring and volunteers already do a good portion of our organization’s work.

Your Skills

  • You dream in Bash
  • IPv4, IPv6, Wireless Mesh networking? No problem! You know linux networking inside and out
  • Extensive knowledge of BIND, DHCPD, Squid, Apache, security, etc.
  • Experience working with Moodle would be most excellent
  • Adept with Python scripting or could learn it quickly. OLPC has standardized on Python for scripting
  • You look to implement a practical solution that less skilled sysadmins can easily maintain over a cooler but more complicated solution.
  • You play well with others. You don’t alienate collaborators with rude e-mails that assert your technical superiority (even though you are)
  • Your primary concern is meeting the educational needs of kids and teachers. Your rate technical awesomeness a distant second to meeting those critical needs.

What you Would Do

  • Work with our deployment team to set up and maintain School Servers, customized XO builds, and the Active Antenna
  • Collaborate closely with Martin Langhoff and John Watlington of OLPC to enhance the mainline School Server distribution, move our local additions into the main distribution, and communicate Nepal’s requirements to OLPC
  • Over the course of your stay, work to make the School Server as stable and easy to maintain as possible
  • Document our configurations for our own reference and the use of other OLPC deployments

Your immediate colleagues would be

Dev “Where’s the Party Yaar?” Mohanty, in charge of connecting the schools to the Internet

Sulochan Acharya (me), general troubleshooting of all technical problems at the schools

Bryan Berry, leads the deployment team, does planning, budgeting, and basic system administration among other duties

Who Should Not Apply

If you are looking for a vacation in an exotic locale, go to Thailand. We work hard, very hard. We have a lot of fun too.

You are only interested in OLPC’s technology and have little interest in its educational goals. As Nicholas Negroponte frequently repeats, this is an education project not a laptop project. If you are not genuinely interested in meeting the needs of kids and teachers, please do not apply. This is worth repeating. If you are not genuinely interested in meeting the needs of kids and teachers, please do not apply.

You are not able to commit to a 5-month stay in Nepal.

What we can offer you

A fantastic opportunity to work on a really important project. A chance to radically enhance the quality of education in Nepal. A contribution to a larger global initiative. I could go on forever . . .

Now, we would love to pay you but as mentioned earlier our operation runs on a financial shoestring. This is a volunteer position. We can put you up in the OLE Nepal house together with Ties, Dev, and Dev’s lovely lady friend Manisha. Living costs in Nepal are __quite__ low. You can consult our current volunteers Ties, Dev, and Bryan about their expenses.

The Outcome

You walk away from Nepal having implemented a turn-key school server solution that helps kids and teachers collaborate, discover important ideas, and create things that matter to them. Your work will be replicated across OLPC deployments.

If you are interested please send an e-mail to info at olenepal dot org