Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

Post reply on HN
Print view View original

71–80 of 286 posts

Re: Turkish Citizenship Database Leaked

#71

Post by fvargas »

sbarre wrote: post #67
MatekCopatek wrote: post #38

Earlier quoted context omitted.

Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.

I've always hated the mother's maiden name security question because my mother kept her maiden name so it's not exactly a hard thing to figure out in my case. I think that one will go away sooner than later though, because taking a husband's name is becoming less common in a lot of societies.

Pro tip: You shouldn't be answering those questions truthfully.

Re: Turkish Citizenship Database Leaked

#73

Post by bemmu »

rhblake wrote: post #23
marinabercea wrote: post #16

Earlier quoted context omitted.

The data released contains national identification codes that are confidential. I believe the Swedish equivalent is the 'personnummer'. The sites you indicated appear to be regular person search engines, like the US equivalent Whitepages? Can you show a specific search result, pick any Swedish name you want, that would also list the person's personnummer?

The mentioned websites contain at least the full name, birthdate, registered address and marital status of every Swedish resident (at least above the age of ~16?), with the exception of a very small percentage of people with protected identity (which you can only get if you're under a "serious and concrete threat"). They get this data straight from the government - it's all public. Go to e.g. http://www.ratsit.se/ ,…

In Finland even salary and capital gains data is released. Newspapers compile high score lists from it each year. There might be some lower limit to how much you need to earn before your data becomes public.

Here's some select tidbits from the data in English: http://yle.fi/uutiset/who_are_finlands_top_earners/8427787

Re: Turkish Citizenship Database Leaked

#74

Post by driverdan »

mathetic wrote: post #6

This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…

> Many companies use date of birth and address for authentication.

Who does? I've seen them used as part of the signup process for some services but never as standalone authentication.

Re: Turkish Citizenship Database Leaked

#75

Post by vinchuco »

fvargas wrote: post #71
sbarre wrote: post #67

Earlier quoted context omitted.

I've always hated the mother's maiden name security question because my mother kept her maiden name so it's not exactly a hard thing to figure out in my case. I think that one will go away sooner than later though, because taking a husband's name is becoming less common in a lot of societies.

Pro tip: You shouldn't be answering those questions truthfully.

But you have to remember the answers correctly. How do you keep track ?

Re: Turkish Citizenship Database Leaked

#77

Post by hobs »

vinchuco wrote: post #75
fvargas wrote: post #71

Earlier quoted context omitted.

Pro tip: You shouldn't be answering those questions truthfully.

But you have to remember the answers correctly. How do you keep track ?

I usually store it as another password field in keepass http://keepass.info/

Re: Turkish Citizenship Database Leaked

#78

Post by petriw »

rhblake wrote: post #54
mediascreen wrote: post #35

Earlier quoted context omitted.

I'm not saying there aren't drawbacks, but I can think of two benefits: 1. It makes some forms of investigative journalism easier. For example, there has been a lot of discussion about the potential problems of having most of the influential journalists in Sweden living within a very small "hipster" area in Stockholm. 2. E-commerce companies may decide to only ship to the adress where you are officially registered, m…

On the other hand it's trivial to change someone's official address. Just send a certain form by mail to the tax agency. (Not sure if they send a confirmation to the old address; but if they do, the perpetrator only has to pick someone who's on vacation; hello Twitter & Facebook.)

If you have registered an email / phone number they will send a message there about your changed address.

I don't know if they've done this yet but a while ago there were articles about them working on a way to disallow changing your address via the mail form:

http://www.dn.se/ekonomi/sa-ska-id-kapningar-forhindras/

Re: Turkish Citizenship Database Leaked

#79

Post by ashitlerferad »

sbarre wrote: post #67
MatekCopatek wrote: post #38

Earlier quoted context omitted.

Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.

I've always hated the mother's maiden name security question because my mother kept her maiden name so it's not exactly a hard thing to figure out in my case. I think that one will go away sooner than later though, because taking a husband's name is becoming less common in a lot of societies.

Think of those fields as secondary password fields and act accordingly.

Diceware can also be useful for when they need to be spoken on the phone. With the right amount of words (7 or more) it has reasonably good entropy too.

Re: Turkish Citizenship Database Leaked

#80

Post by deadowl »

zo1 wrote: post #17
ponyous wrote: post #2

In case it goes offline: #Turkish Citizenship Database Who would have imagined that backwards ideologies, cronyism and rising religious extremism in Turkey would lead to a crumbling and vulnerable technical infrastructure? This leak contains the following information for 49,611,709 Turkish citizens: (IN CLEARTEXT) - National Identifier (TC Kimlik No) - First Name - Last Name - Mother's First Name - Father's First Nam…

What an odd place to put an anti-Trump comment.

Well, Trump was my first thought seeing the headline. He wants to ban Muslims from the US. Turkey is a Muslim country.
Post reply on HN