Where others see a weakness, I see an opportunity: that's how we could send traffic-tickets straight to policemen's door.
Enjoy watching "Rémi GAILLARD vs POLICE"
http://www.youtube.com/watch?v=bJMLS4RDAzk
Turkish Citizenship Database Leaked
91–100 of 286 posts
Re: Turkish Citizenship Database Leaked
#92Why host the dump on an IP instead of a domain? I mean, I suppose skipping a domain means one less company that knows your personal information, but doesn't this mean Voxility[1] can lookup the customer for this IP? [1] koolba's comment: https://news.ycombinator.com/item?id=11420959
There are countries where they "Ban" stuff by just not lookup up the domain name.
I guess that why he did it this way.
Re: Turkish Citizenship Database Leaked
#93Earlier quoted context omitted.
Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.
I've always hated the mother's maiden name security question because my mother kept her maiden name so it's not exactly a hard thing to figure out in my case. I think that one will go away sooner than later though, because taking a husband's name is becoming less common in a lot of societies.
Thank goodness KeePassX remembers my mother's maiden name! I always have a hard time remembering NortOrnEgMeefibrocEu myself.
Re: Turkish Citizenship Database Leaked
#94Earlier quoted context omitted.
Well, Trump was my first thought seeing the headline. He wants to ban Muslims from the US. Turkey is a Muslim country.
I thought Turkey was a secular democracy not an Islamic state. A lot of the population call themselves Muslims though for sure.
I'm not saying their system of government is Muslim. I'm saying that 98% of their population is Muslim.
Re: Turkish Citizenship Database Leaked
#95Does the publisher of this leak really think the other politicians are better off in keeping private citizens' information private? S/he must have not heard the Clinton's own email server leak issue. Yeah, yeah, it's a cliché, but it shows exactly how much they care about security.
Re: Turkish Citizenship Database Leaked
#96Earlier quoted context omitted.
Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is…
Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.
I just tell them my dog's name was Beez6Ich8eeso5uil6Pha4omailai2fu
and store it in my Dropbox-stored KeePass database.
Re: Turkish Citizenship Database Leaked
#97Earlier quoted context omitted.
But you have to remember the answers correctly. How do you keep track ?
The same way as you keep track of any secure password: either with a password manager like 1Password, etc, or else through some Byzantine scheme that you manage yourself.
I use 1Password for this as well, but I recently had a security questions form (can't remember where) that tried to reject random strings because they didn't look like words.
Luckily, 1Password has a 'correct horse battery staple'-generator these days as well.
Re: Turkish Citizenship Database Leaked
#98This is the product of self-righteous activism. You'd have to be pretty deluded and starving for attention to think effectively releasing tens of millions of private individuals' complete identification data is justifiable in some way.
Couldn't you say this about every personal data leak ever? I'd say the problem is companies won't take you seriously if you simply say "you have a security hole here". They'll probably report you, maybe fix an immediate bug that covers the exact issue you found and move on. If they, on the other hand, get thousands of customers complaining and leaving, they'll take security much more seriously in the future. There's…
...but this is a country.
In the immediate, the only thing that can happen, if at all, is for some people to lose their jobs.
I think he is hoping that if the leak is well covered enough by the media, it will be adding oil to the fire of public discontent. Perhaps in a way that would dislodge the current government.
Way I see it though, that's quite a long shot :)
Re: Turkish Citizenship Database Leaked
#99Earlier quoted context omitted.
But you have to remember the answers correctly. How do you keep track ?
The lazy way (which is still arguably better than answering truthfully) is to use the same answer for all the security questions. The better way is to treat each answer as another password and encrypt and store the answers somewhere safe.
Realistically how many people outside (or even inside) HN are going to do that? No matter how you spin it, security questions are a very bad "security pattern" in my opinion and we should get rid of them.
Re: Turkish Citizenship Database Leaked
#100In case it goes offline: #Turkish Citizenship Database Who would have imagined that backwards ideologies, cronyism and rising religious extremism in Turkey would lead to a crumbling and vulnerable technical infrastructure? This leak contains the following information for 49,611,709 Turkish citizens: (IN CLEARTEXT) - National Identifier (TC Kimlik No) - First Name - Last Name - Mother's First Name - Father's First Nam…
Better formatting: https://www.pastery.net/adffrv/