Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

101–110 of 286 posts

Re: Turkish Citizenship Database Leaked

#102
post #6

This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…

How to companies verify mother's maiden name? I've never used my mothers real maiden name when filling out any kind of account application form and no one has ever batted an eye.

Re: Turkish Citizenship Database Leaked

#103

Earlier quoted context omitted.

Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is…

Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.

Recently United Airlines changed their online security policy and added security questions. The answers to which must be chosen from dropdowns.

Re: Turkish Citizenship Database Leaked

#104

Earlier quoted context omitted.

I would say there is more issues than gains. But sometimes it's nice, I once found someones wallet and was able to find his phone number with the service. Called the guy, he came and picked up his wallet and gave me 500kr as thanks.

"Sometimes nice" is not good enough to do this.

It is largely a cultural difference; in Norway they also publish everyone's details along with their tax return data.

In one country giving someone a pair of shoes is seen as a nice present, in another it is considered a grave insult.

What you grow up with as a kid can have a big influence on what you consider acceptable.

In my personal view as long as the rules apply the same to all then that's the largest problem solved.

EDIT: fixed typo

Re: Turkish Citizenship Database Leaked

#106

Interesting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.ratsit.se/

The data released contains national identification codes that are confidential. I believe the Swedish equivalent is the 'personnummer'. The sites you indicated appear to be regular person search engines, like the US equivalent Whitepages? Can you show a specific search result, pick any Swedish name you want, that would also list the person's personnummer?

It will list the "personnummer", but usually not the last 4 digits. This became a big deal a number of years ago, when they did list the complete numbers, and this was changed so that if the complete number is requested, the party you request information about needs to be informed. However, the complete numbers are still public. Just with that caveat nowadays. (unsure if some still sidestep the "new" legislation, there were some more or less shady companies for a while that still informed you of their full numbers)

Re: Turkish Citizenship Database Leaked

#107
post #95

Does the publisher of this leak really think the other politicians are better off in keeping private citizens' information private? S/he must have not heard the Clinton's own email server leak issue. Yeah, yeah, it's a cliché, but it shows exactly how much they care about security.

Clinton's email server didn't leak anything, so far as we know. The emails you've read have been released by the State Department as public government records.

Re: Turkish Citizenship Database Leaked

#108

Earlier quoted context omitted.

Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.

Recently United Airlines changed their online security policy and added security questions. The answers to which must be chosen from dropdowns.

I always mash the keyboard for those

Re: Turkish Citizenship Database Leaked

#109
post #71

Earlier quoted context omitted.

Pro tip: You shouldn't be answering those questions truthfully.

But you have to remember the answers correctly. How do you keep track ?

you only have to remember that for password resets, if you already store your password in 1password you're golden.

Re: Turkish Citizenship Database Leaked

#110
post #37

Earlier quoted context omitted.

You think that if it is not getting posted on HN than nobody will notice it? What would you qualify HN worthy submission? I did not read the URL just read the comments but it was quite entertaining, HN is not responsible about the content of the submission URLs but it is a great place to discuss the subject with other people.

>What would you qualify HN worthy submission? Something that doesn't dox random people, for starters.

The problem was the creation of the list and the subsequent negligent protection of the data not it being passed to HN after it's been published to the internet.

It's like the Ashely Madison leak - Hacker News discussed it happily as well even though that was a complete dox list of individuals.

Post reply on HN