Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

Post reply on HN
Print view View original

41–50 of 286 posts

Re: Turkish Citizenship Database Leaked

#41

Post by dmitriid »

Quoting a Turkish friend:

---start quote---

Luckily there’s no really valuable data, other than personnummer. But i am sure with a little bit of digging it would be super easy, during Gezi police had a pwd like 12345

The important thing with the data is national stats, which is super important commercially. And that is for free now. More spam in the mailbox for everyone.

Obviously, for stalkers, sickos, or pedophiles this is an open source to attack. That is another security concern, because there was no db as in Sweden where you can access someone’s address this easy

---end quote---

Re: Turkish Citizenship Database Leaked

#42

Post by gkya »

nsajko wrote: post #32
marinabercea wrote: post #14

This is the product of self-righteous activism. You'd have to be pretty deluded and starving for attention to think effectively releasing tens of millions of private individuals' complete identification data is justifiable in some way.

It could positively influence bad auth practices.

And losses of millions of turkish liras for a while is a feasible trade-off for that?

Whoeves did this is an utter idiot, a profoundly inconsiderate hacktivist, whatever that shall be.

Re: Turkish Citizenship Database Leaked

#43

Post by MatekCopatek »

marinabercea wrote: post #14

This is the product of self-righteous activism. You'd have to be pretty deluded and starving for attention to think effectively releasing tens of millions of private individuals' complete identification data is justifiable in some way.

Couldn't you say this about every personal data leak ever? I'd say the problem is companies won't take you seriously if you simply say "you have a security hole here". They'll probably report you, maybe fix an immediate bug that covers the exact issue you found and move on.

If they, on the other hand, get thousands of customers complaining and leaving, they'll take security much more seriously in the future. There's also a good chance that affected users will be more careful and proactive about their personal data in the future.

Re: Turkish Citizenship Database Leaked

#44

Post by odinduty »

ponyous wrote: post #19
zo1 wrote: post #17

Earlier quoted context omitted.

What an odd place to put an anti-Trump comment.

I really don't care about US politics. I came across the link on Reddit and found it interesting. Make out of it what you want.

I don't think he was accusing you of anything.

Re: Turkish Citizenship Database Leaked

#45

Post by koolba »

eimann wrote: post #39
koolba wrote: post #36

Note: I wrote this up as a reply but the parent was deleted in the interim so posting at the top level instead. > Which server is this? A Whois lookup returned nothing. The whois command works on domain names, not IP addresses. To get the DNS name associated with an IP address you can try a reverse lookup: $ dig -x 185.100.87.84 Unfortunately that only works if the the reverse record has been set up and it hasn't in…

What do you mean by "whois does not work on IP addresses", $ whois 185.100.87.84 Abuse contact info: abuse@flokinet.is inetnum: 185.100.87.0 - 185.100.87.255 netname: FlokiNET-Romania descr: FlokiNET ehf country: RO admin-c: KW2732-RIPE tech-c: KW2732-RIPE status: ASSIGNED PA mnt-by: FlokiNET created: 2015-12-15T13:52:42Z last-modified: 2016-02-05T18:53:56Z source: RIPE person: FlokiNET ehf address: P.O. Box No 4 add…

Wow I didn't know you put IPs directly in there. If so, it returns back the ownership info of the IP from ARIN. Not quite the same as getting the contact info for a domain name but still quite nifty. Thanks!

Re: Turkish Citizenship Database Leaked

#47

Post by halukakin »

dmitriid wrote: post #41

Quoting a Turkish friend: ---start quote--- Luckily there’s no really valuable data, other than personnummer. But i am sure with a little bit of digging it would be super easy, during Gezi police had a pwd like 12345 The important thing with the data is national stats, which is super important commercially. And that is for free now. More spam in the mailbox for everyone. Obviously, for stalkers, sickos, or pedophiles…

How is the address data not valuable? Even dangerous.

Re: Turkish Citizenship Database Leaked

#48

Post by gkya »

mathetic wrote: post #6

This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…

Do you know whether Turkish state authorities are aware of this thing?

Re: Turkish Citizenship Database Leaked

#49

Post by ponyous »

odinduty wrote: post #44
ponyous wrote: post #19

Earlier quoted context omitted.

I really don't care about US politics. I came across the link on Reddit and found it interesting. Make out of it what you want.

I don't think he was accusing you of anything.

Huh, I get it... I was thinking completely out of context when I read his comment.

Re: Turkish Citizenship Database Leaked

#50

Post by darkhorn »

amelius wrote: post #5

Does it contain the addresses of citizens with a double nationality who now live abroad?

If you were a voter in 2010, as far as I know. But I don't know if it contains foreign home addresses. Some people say that it was fetched from ysk.gov.tr . Normally MERNİS has more detailed database, so they say that it cannot be MERNİS. MERNİS stands for Central Citizenship Administration Center, it contains even pre-Turkish Republic "citizens", like from Ottoman Empire. YSK stands for Supreme Electoral Council. A friend of mine had access to MERNİS, he once said that the leaked data is not directly from MERNİS.
Post reply on HN