Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

Post reply on HN
Print view View original

61–70 of 286 posts

Re: Turkish Citizenship Database Leaked

#61

Post by [deleted] »

eveningcoffee wrote: post #28
mathetic wrote: post #6

This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…

Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is…

[deleted]

Re: Turkish Citizenship Database Leaked

#62

Post by rhblake »

icebraining wrote: post #59
staticelf wrote: post #31

Earlier quoted context omitted.

That's not really true. Often you can order stuff from the internet with only knowing the SSN. You can order on invoice with Klarna for example. Of course, for things that really matter, you need an ID.

But are you liable for those purchases? Can the seller accept some form of post-purchase payment mechanism and go after the SSN holder?

You're not, but it's up to you to deal with the administrativia (reporting it to the police, disputing the invoice).

Re: Turkish Citizenship Database Leaked

#63

Post by spacecowboy_lon »

eng_monkey wrote: post #20
staticelf wrote: post #11

Interesting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.ratsit.se/

Amazing. I wonder what the benefit is of having information such as you home address public.

Presumably you can opt out in case an Ex decides to come round and harass /kill you.

I am not joking when I worked for a Telco they used this scenario to empathize whey you should not do favours for friends and lookup peoples address.

Re: Turkish Citizenship Database Leaked

#64

Post by everythingcli »

ponyous wrote: post #19
zo1 wrote: post #17

Earlier quoted context omitted.

What an odd place to put an anti-Trump comment.

I really don't care about US politics. I came across the link on Reddit and found it interesting. Make out of it what you want.

What sub did u find it in?

Re: Turkish Citizenship Database Leaked

#65

Post by diminish »

A criminal thief putting personal data online and giving political lessons, shame on you really.

When your true goals are phishing, criminal activities, spamming to robe innocent people, at least be honest and do not make such grandiose statements. /rant

Re: Turkish Citizenship Database Leaked

#66

Post by kolme »

reitanqild wrote: post #53
dmitriid wrote: post #41

Quoting a Turkish friend: ---start quote--- Luckily there’s no really valuable data, other than personnummer. But i am sure with a little bit of digging it would be super easy, during Gezi police had a pwd like 12345 The important thing with the data is national stats, which is super important commercially. And that is for free now. More spam in the mailbox for everyone. Obviously, for stalkers, sickos, or pedophiles…

personnummer? Sounds very Scandinavian to me and quick googling doesn't yield anything particularly Turkish about that word?

My guess is German (because of the historical links between Germany and Turkey).

Re: Turkish Citizenship Database Leaked

#67

Post by sbarre »

MatekCopatek wrote: post #38
eveningcoffee wrote: post #28

Earlier quoted context omitted.

Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is…

Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.

I've always hated the mother's maiden name security question because my mother kept her maiden name so it's not exactly a hard thing to figure out in my case.

I think that one will go away sooner than later though, because taking a husband's name is becoming less common in a lot of societies.

Re: Turkish Citizenship Database Leaked

#69

Post by [deleted] »

MatekCopatek wrote: post #38
eveningcoffee wrote: post #28

Earlier quoted context omitted.

Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is…

Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.

[deleted]

Re: Turkish Citizenship Database Leaked

#70

Post by ponyous »

everythingcli wrote: post #64
ponyous wrote: post #19

Earlier quoted context omitted.

I really don't care about US politics. I came across the link on Reddit and found it interesting. Make out of it what you want.

What sub did u find it in?

Link to Reddit thread: https://www.reddit.com/r/security/comments/4d9f22/turkish_ci...
Post reply on HN