Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

Post reply on HN
Print view View original

161–170 of 286 posts

Re: Turkish Citizenship Database Leaked

#161

Post by contingencies »

more_original wrote: post #133
staticelf wrote: post #11

Interesting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.ratsit.se/

Interesting. In Germany this database does not even exist. Each town keeps its own data and they are not connected. I think the reason for this are the evil uses of data bases by the Gestapo during Nazi times.

If you are German and have a passport then you are in a centralized database.

Re: Turkish Citizenship Database Leaked

#162

Post by K0nserv »

fvargas wrote: post #81
vinchuco wrote: post #75

Earlier quoted context omitted.

But you have to remember the answers correctly. How do you keep track ?

The lazy way (which is still arguably better than answering truthfully) is to use the same answer for all the security questions. The better way is to treat each answer as another password and encrypt and store the answers somewhere safe.

https://twitter.com/K0nserv/status/689169965526700032

Re: Turkish Citizenship Database Leaked

#163

Post by usrusr »

ttn wrote: post #136
nacs wrote: post #131

Earlier quoted context omitted.

> With that info, a terrorist can buy a SIM card for my name Well that escalated quickly.. Terrorists wouldn't need this database to supply them with names and addresses as most of that info is public in most countries (white-pages is one place). And I can go to any local shop and get a pre-paid SIM card without any personal info involved. Also, if your country convicts you merely because someone used your name with…

Name and maybe address can be found somehow but identity number absolutely can not be found (should not be from now on). Private companies confirm auth with name, surname, X,Y,Zth number of identity number. You have to provide them name, surname and identity number in order to get a SIM card, in this example. You don't need to be convicted for anything anymore if someone wants you to go to jail :) They get you in and…

How does the private company verify that the identity number is not bogus? Do they have some tamper-proof crypto box that validates a secure hash hidden in the ID or would a case like that only be flagged when the SIM registration is pushed to the government?

In any case, if it is customary to routinely hand the whole number to private companies (I read your description as "full number on registration, some digits on subsequent authentication"), then this leak has made that name/ID tuple only slightly less secret than it was before.

Re: Turkish Citizenship Database Leaked

#164

Post by Someone »

dijit wrote: post #21
staticelf wrote: post #11

Interesting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.ratsit.se/

Difference being that in Sweden there is a different requiremnet for causing harm (IE; national ID card or passport - or linked bank account) simply having a social security number and address is not enough for identity theft to occur. in other countries they treat SSN's as private, thus they are trusted.

But the only way to guarantee they stay as private as they are to begin with is to never use them.

Even if you only share them with people or merchants that you really, really trust, the sharing increases the risk of a leak.

Re: Turkish Citizenship Database Leaked

#165

Post by shitgoose »

shitgoose wrote: post #146
chrisco255 wrote: post #111

Earlier quoted context omitted.

Right, because Clinton...who ran her own private email server and sent classified information from her house...is much more qualified when it comes to data security?

Or Bernie, who lost his email password long time ago...

cmon guys, you are too serious:

https://www.youtube.com/watch?v=7AN76IBkVf4

what is the deal with email, anyways:)

Re: Turkish Citizenship Database Leaked

#166

Post by throwawayturk »

The leak reported to be from YSG [1], organization that manages the election registers.

Software used by them developed by Cybersoft [2]. Cybersoft was part of the system who developed the new identity system in Turkey. The practices used by Cybersoft reported to be horrible. I know someone who worked on that project (about 15 years ago), reportedly they were really bad, playing games on servers where the all identity data of the citizens are stored. I do also know that any employee who was part of the project had access to the query systems, so it was possible to query the database for all citizens of Turkey, not sure how much data it revealed but it revealed the number of people with that name and surname ever born for sure.

Now, I'm not a fan of Erdogan but Cybersoft was developing stuff before Erdogan even got elected. So yes, maybe the government who started to work with Cybersoft was corrupt, maybe the current one is too but let's not just use every single baseless argument to attack Erdogan, it doesn't help anything.

[1] http://www.ysk.gov.tr/ysk/faces/Anasayfa.jspx

[2] http://www.cs.com.tr/TR/

Re: Turkish Citizenship Database Leaked

#167

Post by zo1 »

ponyous wrote: post #19
zo1 wrote: post #17

Earlier quoted context omitted.

What an odd place to put an anti-Trump comment.

I really don't care about US politics. I came across the link on Reddit and found it interesting. Make out of it what you want.

Sorry, didn't mean to imply that you made the comment.

Re: Turkish Citizenship Database Leaked

#168

Post by throwawayturk »

ttn wrote: post #129

TR citizen here, for the last 10 years only those who are really close to AKP got the government contracts including software like this etc. for stupid amounts of money with no know-how. Therefore this is absolutely normal -at least for us-, only thing that surprised me about this leak is this got into front page of HN. Those software "companies" take millions of liras, usually for stupid CRUD stuff, develop it in li…

The leak reported to be from YSG [1], organization that manages the election registers.

Software used by them developed by Cybersoft [2]. Cybersoft was part of the system who developed the new identity system in Turkey. The practices used by Cybersoft reported to be horrible. I know someone who worked on that project (about 15 years ago), reportedly they were really bad, playing games on servers where the all identity data of the citizens are stored. I do also know that any employee who was part of the project had access to the query systems, so it was possible to query the database for all citizens of Turkey, not sure how much data it revealed but it revealed the number of people with that name and surname ever born for sure.

Now, I'm not a fan of Erdogan but Cybersoft was developing stuff before Erdogan even got elected. So yes, maybe the government who started to work with Cybersoft was corrupt, maybe the current one is too but let's not just use every single baseless argument to attack Erdogan, it doesn't help anything.

[1] http://www.ysk.gov.tr/ysk/faces/Anasayfa.jspx

[2] http://www.cs.com.tr/TR/

Re: Turkish Citizenship Database Leaked

#169

Post by shushugah24 »

outworlder wrote: post #158
nacs wrote: post #131

Earlier quoted context omitted.

> With that info, a terrorist can buy a SIM card for my name Well that escalated quickly.. Terrorists wouldn't need this database to supply them with names and addresses as most of that info is public in most countries (white-pages is one place). And I can go to any local shop and get a pre-paid SIM card without any personal info involved. Also, if your country convicts you merely because someone used your name with…

> And I can go to any local shop and get a pre-paid SIM card without any personal info involved. You see, the fact that I could go to any shop and buy a pre-paid SIM card in the US was a surprise to me. Don't expect that to hold true anywhere else. Taking Brazil as an example: you need to provide a photo ID.

Italy as well
Post reply on HN