Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

Post reply on HN
Print view View original

131–140 of 286 posts

Re: Turkish Citizenship Database Leaked

#131

Post by nacs »

ttn wrote: post #129

TR citizen here, for the last 10 years only those who are really close to AKP got the government contracts including software like this etc. for stupid amounts of money with no know-how. Therefore this is absolutely normal -at least for us-, only thing that surprised me about this leak is this got into front page of HN. Those software "companies" take millions of liras, usually for stupid CRUD stuff, develop it in li…

> With that info, a terrorist can buy a SIM card for my name

Well that escalated quickly.. Terrorists wouldn't need this database to supply them with names and addresses as most of that info is public in most countries (white-pages is one place). And I can go to any local shop and get a pre-paid SIM card without any personal info involved.

Also, if your country convicts you merely because someone used your name with no other evidence to tie you to the crime, you have bigger problems.

Re: Turkish Citizenship Database Leaked

#132

Post by philipov »

JoeAltmaier wrote: post #128
philipov wrote: post #127

Earlier quoted context omitted.

If it's only 2 bits, you're assuming the attacker already knows that the formula is "Using someone else's information" and that there are only 4 possible people whose information you would use. Even knowing that you're using a formula is a bit of information. The type of formula is potentially thousands of bits of information. An attacker doesn't know whether it's a cipher, or a code, or something more complex, and o…

Pretty sure lots of people use relatives' info. Very, very few use ciphers in their head. Friend used to have a car with a keycode door lock. He just used 5555 or whatever. I suggested he use the address where the car was parked, or some hash of that. Wouldn't have to remember it! And it would vary some at least.

Well, sure, 8 bits of entropy isn't going to help you much if your password is "password". Those bits only provide the opportunity for randomness. At the end of the day you still have to apply that entropy effectively by picking something that can't be guessed easily. The point is that there are opportunities for people savvy enough to recognize them.

Re: Turkish Citizenship Database Leaked

#133

Post by more_original »

staticelf wrote: post #11

Interesting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.ratsit.se/

Interesting. In Germany this database does not even exist. Each town keeps its own data and they are not connected. I think the reason for this are the evil uses of data bases by the Gestapo during Nazi times.

Re: Turkish Citizenship Database Leaked

#134

Post by egeozcan »

kolme wrote: post #66
reitanqild wrote: post #53

Earlier quoted context omitted.

personnummer? Sounds very Scandinavian to me and quick googling doesn't yield anything particularly Turkish about that word?

My guess is German (because of the historical links between Germany and Turkey).

No, personnummer does not mean anything in Turkish. It's TC Kimlik No.

Re: Turkish Citizenship Database Leaked

#136

Post by ttn »

nacs wrote: post #131
ttn wrote: post #129

TR citizen here, for the last 10 years only those who are really close to AKP got the government contracts including software like this etc. for stupid amounts of money with no know-how. Therefore this is absolutely normal -at least for us-, only thing that surprised me about this leak is this got into front page of HN. Those software "companies" take millions of liras, usually for stupid CRUD stuff, develop it in li…

> With that info, a terrorist can buy a SIM card for my name Well that escalated quickly.. Terrorists wouldn't need this database to supply them with names and addresses as most of that info is public in most countries (white-pages is one place). And I can go to any local shop and get a pre-paid SIM card without any personal info involved. Also, if your country convicts you merely because someone used your name with…

Name and maybe address can be found somehow but identity number absolutely can not be found (should not be from now on). Private companies confirm auth with name, surname, X,Y,Zth number of identity number.

You have to provide them name, surname and identity number in order to get a SIM card, in this example.

You don't need to be convicted for anything anymore if someone wants you to go to jail :) They get you in and start writing bill of indictment(?).

Re: Turkish Citizenship Database Leaked

#137

Post by whalesalad »

yAnonymous wrote: post #135
whalesalad wrote: post #126

So the folks who did this complained about a bad DB (needing indexes) but then failed to convert the DOB's to date types.

Maybe it's really stored as text?

Yeah but a simple query can add a column, copy the data while parsing it into a native date and then drop the original column. It can all be in a transaction too so that if there is a failure nothing is lost.

I was mainly referring to the high and mighty attitude about fixing their broken db. If you're gonna fix it, it's all or nothing in my book.

Re: Turkish Citizenship Database Leaked

#138

Post by nacs »

halukakin wrote: post #47
dmitriid wrote: post #41

Quoting a Turkish friend: ---start quote--- Luckily there’s no really valuable data, other than personnummer. But i am sure with a little bit of digging it would be super easy, during Gezi police had a pwd like 12345 The important thing with the data is national stats, which is super important commercially. And that is for free now. More spam in the mailbox for everyone. Obviously, for stalkers, sickos, or pedophiles…

How is the address data not valuable? Even dangerous.

I don't know about other countries but in the US, there are things called Whitepages which list names, addresses and phone numbers of the majority of people/businesses.

Address data is pretty worthless considering how many places you can get such data.

Re: Turkish Citizenship Database Leaked

#139

Post by ttn »

ttn wrote: post #136
nacs wrote: post #131

Earlier quoted context omitted.

> With that info, a terrorist can buy a SIM card for my name Well that escalated quickly.. Terrorists wouldn't need this database to supply them with names and addresses as most of that info is public in most countries (white-pages is one place). And I can go to any local shop and get a pre-paid SIM card without any personal info involved. Also, if your country convicts you merely because someone used your name with…

Name and maybe address can be found somehow but identity number absolutely can not be found (should not be from now on). Private companies confirm auth with name, surname, X,Y,Zth number of identity number. You have to provide them name, surname and identity number in order to get a SIM card, in this example. You don't need to be convicted for anything anymore if someone wants you to go to jail :) They get you in and…

To give a little more context, if you are TR citizen what information you use and should keep private is: 1)Identity Number 2)Your mother's pre-marital surname.

Re: Turkish Citizenship Database Leaked

#140

Post by nroets »

julianwachholz wrote: post #114
StavrosK wrote: post #96

Earlier quoted context omitted.

I just tell them my dog's name was Beez6Ich8eeso5uil6Pha4omailai2fu and store it in my Dropbox-stored KeePass database.

Well we just used to call him old Bee..

Thank you for answering the security question Mr. Stavros. I'll accept "Bee" as your dog's name. To which offshore bank did you say you wanted to transfer the money ?
Post reply on HN