Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

Post reply on HN
Print view View original

111–120 of 286 posts

Re: Turkish Citizenship Database Leaked

#111

Post by chrisco255 »

zo1 wrote: post #17
ponyous wrote: post #2

In case it goes offline: #Turkish Citizenship Database Who would have imagined that backwards ideologies, cronyism and rising religious extremism in Turkey would lead to a crumbling and vulnerable technical infrastructure? This leak contains the following information for 49,611,709 Turkish citizens: (IN CLEARTEXT) - National Identifier (TC Kimlik No) - First Name - Last Name - Mother's First Name - Father's First Nam…

What an odd place to put an anti-Trump comment.

Right, because Clinton...who ran her own private email server and sent classified information from her house...is much more qualified when it comes to data security?

Re: Turkish Citizenship Database Leaked

#112

Post by Matt3o12_ »

amingilani wrote: post #87

Why host the dump on an IP instead of a domain? I mean, I suppose skipping a domain means one less company that knows your personal information, but doesn't this mean Voxility[1] can lookup the customer for this IP? [1] koolba's comment: https://news.ycombinator.com/item?id=11420959

A domain adds another point of failure (we want to take you down, we can just block the domain vs the server). As other have pointed out the abuse report for that hosted is quite terrible, so it might take a while to get taken down.

Also, a domain name costs money, and you get little use of it (just paid $20 for a domain that gets taken offline in a few days). And even if there was a domain name, what should it be? Turkish-citizenship-dump.com? What values does it add if the site only sticks around for a few days?

Re: Turkish Citizenship Database Leaked

#113

Post by afsina »

halukakin wrote: post #55
nsajko wrote: post #32

Earlier quoted context omitted.

It could positively influence bad auth practices.

Hardly so for Turkey. Important positions in Turkish bureaucracy are being filled by people who have close ties to the ruling party. I guess this is somewhat normal in many countries given that you have some appropriate filters, unfortunately such filters are diminishing every year. Just last week the prime minister announced they would hire 750k long term government employees bypassing the regular procedures and by…

This reminded me 2010 KPSS scandal of Gulenists.I guess they want to go other way around..

Re: Turkish Citizenship Database Leaked

#114

Post by julianwachholz »

StavrosK wrote: post #96
MatekCopatek wrote: post #38

Earlier quoted context omitted.

Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.

I just tell them my dog's name was Beez6Ich8eeso5uil6Pha4omailai2fu and store it in my Dropbox-stored KeePass database.

Well we just used to call him old Bee..

Re: Turkish Citizenship Database Leaked

#115

Post by mavdi »

rmc wrote: post #68

You shouldn't share this around. This is going to mess up a lot of innocent people's lives.

It's too late for that. Criminals have access to it already. I would argue we should indeed share it around so that at least average Turkish citizens are aware their data has been stolen.

Re: Turkish Citizenship Database Leaked

#116

Post by callesgg »

rhblake wrote: post #23
marinabercea wrote: post #16

Earlier quoted context omitted.

The data released contains national identification codes that are confidential. I believe the Swedish equivalent is the 'personnummer'. The sites you indicated appear to be regular person search engines, like the US equivalent Whitepages? Can you show a specific search result, pick any Swedish name you want, that would also list the person's personnummer?

The mentioned websites contain at least the full name, birthdate, registered address and marital status of every Swedish resident (at least above the age of ~16?), with the exception of a very small percentage of people with protected identity (which you can only get if you're under a "serious and concrete threat"). They get this data straight from the government - it's all public. Go to e.g. http://www.ratsit.se/ ,…

On http://www.upplysning.se/ you can get the full information. But you do have to register for a free account.

Re: Turkish Citizenship Database Leaked

#117

Post by iam-TJ »

vinchuco wrote: post #75
fvargas wrote: post #71

Earlier quoted context omitted.

Pro tip: You shouldn't be answering those questions truthfully.

But you have to remember the answers correctly. How do you keep track ?

I 'time shift' each number in date of birth so neither the day, month, or year are correct. My secret key is the formula I use.

For other questions I use answers that 'belong' to a friend or relative. My secret key is the formula for figuring out who that is.

Re: Turkish Citizenship Database Leaked

#118

Post by yilugurlu »

gkya wrote: post #48
mathetic wrote: post #6

This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…

Do you know whether Turkish state authorities are aware of this thing?

They seem aware, they just blocked the page that we can not access without Vpn.

Re: Turkish Citizenship Database Leaked

#119

Post by JoeAltmaier »

iam-TJ wrote: post #117
vinchuco wrote: post #75

Earlier quoted context omitted.

But you have to remember the answers correctly. How do you keep track ?

I 'time shift' each number in date of birth so neither the day, month, or year are correct. My secret key is the formula I use. For other questions I use answers that 'belong' to a friend or relative. My secret key is the formula for figuring out who that is.

I wonder how many 'bits' those secret keys have? Maybe one or two? E.g. how long to brute force those answers.

Re: Turkish Citizenship Database Leaked

#120

Post by AimHere »

fabulist wrote: post #29
return0 wrote: post #10

Interesting, but to be fair a typical facebook page has more information.

If you choose to sign up for facebook with real information, sure. You don't have much choice in the data your government loses about you.

You don't have much choice when your friends or relatives post about you on Facebook either, and there, lying to Facebook is out of your hands.

Privacy isn't transactional, it's environmental.

Post reply on HN