Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

Post reply on HN
Print view View original

31–40 of 286 posts

Re: Turkish Citizenship Database Leaked

#31

Post by staticelf »

dijit wrote: post #21
staticelf wrote: post #11

Interesting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.ratsit.se/

Difference being that in Sweden there is a different requiremnet for causing harm (IE; national ID card or passport - or linked bank account) simply having a social security number and address is not enough for identity theft to occur. in other countries they treat SSN's as private, thus they are trusted.

That's not really true. Often you can order stuff from the internet with only knowing the SSN. You can order on invoice with Klarna for example.

Of course, for things that really matter, you need an ID.

Re: Turkish Citizenship Database Leaked

#32

Post by nsajko »

marinabercea wrote: post #14

This is the product of self-righteous activism. You'd have to be pretty deluded and starving for attention to think effectively releasing tens of millions of private individuals' complete identification data is justifiable in some way.

It could positively influence bad auth practices.

Re: Turkish Citizenship Database Leaked

#33

Post by staticelf »

eng_monkey wrote: post #20
staticelf wrote: post #11

Interesting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.ratsit.se/

Amazing. I wonder what the benefit is of having information such as you home address public.

I would say there is more issues than gains. But sometimes it's nice, I once found someones wallet and was able to find his phone number with the service. Called the guy, he came and picked up his wallet and gave me 500kr as thanks.

Re: Turkish Citizenship Database Leaked

#35

Post by mediascreen »

marinabercea wrote: post #24
eng_monkey wrote: post #20

Earlier quoted context omitted.

Amazing. I wonder what the benefit is of having information such as you home address public.

I'd argue there is none, because friends and family already know how to reach you. However, both sites display ads.

I'm not saying there aren't drawbacks, but I can think of two benefits:

1. It makes some forms of investigative journalism easier. For example, there has been a lot of discussion about the potential problems of having most of the influential journalists in Sweden living within a very small "hipster" area in Stockholm.

2. E-commerce companies may decide to only ship to the adress where you are officially registered, making it harder to commit e-commerce fraud.

Re: Turkish Citizenship Database Leaked

#36

Post by koolba »

Note: I wrote this up as a reply but the parent was deleted in the interim so posting at the top level instead.

> Which server is this? A Whois lookup returned nothing.

The whois command works on domain names, not IP addresses.

To get the DNS name associated with an IP address you can try a reverse lookup:

    $ dig -x 185.100.87.84
Unfortunately that only works if the the reverse record has been set up and it hasn't in this case.

You can still see where the server is located via tracepath:

   $ tracepath 185.100.87.84
    [truncated]
    12:  lon-tel-01c.voxility.net                             86.537ms asymm 16 
    13:  buc-ird-01c.voxility.net                            147.516ms asymm 17 
    14:  buc-ird-27sw.voxility.net                           136.914ms asymm 18 
    15:  buc-ird-46sw.voxility.com                           149.699ms asymm 18 
    16:  185.100.87.84                                       143.626ms reached
So most likely the server is hosted on voxility.com which looks like an IaaS provider.

Re: Turkish Citizenship Database Leaked

#37

Post by Grue3 »

StreamBright wrote: post #25
Grue3 wrote: post #13

Is this HackerNews or DoxingNews? How is doxing the whole country an acceptable submission?

You think that if it is not getting posted on HN than nobody will notice it? What would you qualify HN worthy submission? I did not read the URL just read the comments but it was quite entertaining, HN is not responsible about the content of the submission URLs but it is a great place to discuss the subject with other people.

>What would you qualify HN worthy submission?

Something that doesn't dox random people, for starters.

Re: Turkish Citizenship Database Leaked

#38

Post by MatekCopatek »

eveningcoffee wrote: post #28
mathetic wrote: post #6

This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…

Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is…

Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.

Re: Turkish Citizenship Database Leaked

#39

Post by eimann »

koolba wrote: post #36

Note: I wrote this up as a reply but the parent was deleted in the interim so posting at the top level instead. > Which server is this? A Whois lookup returned nothing. The whois command works on domain names, not IP addresses. To get the DNS name associated with an IP address you can try a reverse lookup: $ dig -x 185.100.87.84 Unfortunately that only works if the the reverse record has been set up and it hasn't in…

What do you mean by "whois does not work on IP addresses",

$ whois 185.100.87.84

Abuse contact info: abuse@flokinet.is

inetnum: 185.100.87.0 - 185.100.87.255 netname: FlokiNET-Romania descr: FlokiNET ehf country: RO admin-c: KW2732-RIPE tech-c: KW2732-RIPE status: ASSIGNED PA mnt-by: FlokiNET created: 2015-12-15T13:52:42Z last-modified: 2016-02-05T18:53:56Z source: RIPE

person: FlokiNET ehf address: P.O. Box No 4 address: 121 address: Reykjavík address: ICELAND phone: +3544150300 nic-hdl: KW2732-RIPE mnt-by: is-flokinet-1-mnt created: 2015-05-13T15:26:09Z last-modified: 2016-02-01T06:46:24Z source: RIPE

route: 185.100.87.0/24 descr: FlokiNET ehf origin: AS200651 mnt-by: FlokiNET created: 2016-02-05T18:52:09Z last-modified: 2016-02-05T18:52:09Z source: RIPE

Post reply on HN