Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

261–270 of 286 posts

Re: Turkish Citizenship Database Leaked

#261
post #207

It's interesting that the data doesn't have values with the Turkish dotted or dotless I, ie the one in İstanbul, İbrahim, or Diyarbakır. Seems pretty important to store people's names correctly. https://en.wikipedia.org/wiki/Dotted_and_dotless_I

Then again -- if they can't figure out how to index their databases... then most likely they probably can't out how to do locales and character sets properly, either.

Ah! And this ironically relevant 2008 post from Coding Horror about testing your code in the Turkish locale.

https://blog.codinghorror.com/whats-wrong-with-turkey/

Re: Turkish Citizenship Database Leaked

#262

Earlier quoted context omitted.

Maybe it's really stored as text?

Yeah but a simple query can add a column, copy the data while parsing it into a native date and then drop the original column. It can all be in a transaction too so that if there is a failure nothing is lost. I was mainly referring to the high and mighty attitude about fixing their broken db. If you're gonna fix it, it's all or nothing in my book.

True. Although showing how unprofessionally the data is kept makes a good point, too.

Re: Turkish Citizenship Database Leaked

#263

Earlier quoted context omitted.

You don't have much choice when your friends or relatives post about you on Facebook either, and there, lying to Facebook is out of your hands. Privacy isn't transactional, it's environmental.

I do not know, but strongly suspect, that my absence from Facebook means I'm rarely mentioned there. Certainly I'm mentioned less than if I had an account. Even if I am mentioned there, Zuckerberg & friends don't have any account to cross-reference to target me with ads, etc. So, my absence from Facebook is nonetheless a significant enhancement of my privacy.

It is worth noting that Facebook maintains "ghost" profiles for people who aren't members, but of whom they are aware. I'm having trouble finding a reference, but I remember it came out that when your friends ("friends") give Facebook their email contacts so that they can locate other people using their service, Facebook remembers contacts which do not yet hold accounts. I speculate this information wouldn't be valuable if they didn't attempt to infer that particular posts mentioned these non-member profiles.

Re: Turkish Citizenship Database Leaked

#264
post #6

This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…

> The only thing that is missing is mother's maiden name.

It's extremely unsafe for known distribution of last names. E.g. in leaked db most frequent 12 last names correspond to 10% share of population, and most frequent 50 names "explain" 20% of population.

Re: Turkish Citizenship Database Leaked

#267
post #129

TR citizen here, for the last 10 years only those who are really close to AKP got the government contracts including software like this etc. for stupid amounts of money with no know-how. Therefore this is absolutely normal -at least for us-, only thing that surprised me about this leak is this got into front page of HN. Those software "companies" take millions of liras, usually for stupid CRUD stuff, develop it in li…

Not only there, in other countries in Europe too, in Romania they are prosecuting the boss of the biggest software company we have, he has to sell his paintings and artwork for not being arrested(bail). The usual opinion is that they all got rich with state contracts building stupid and expensive things that young kids would do in no time for nothing. As a government agency, of course one would not prefer to hire kid…

That sounds like Pakistan to me.

Re: Turkish Citizenship Database Leaked

#269

Earlier quoted context omitted.

> And I can go to any local shop and get a pre-paid SIM card without any personal info involved. You see, the fact that I could go to any shop and buy a pre-paid SIM card in the US was a surprise to me. Don't expect that to hold true anywhere else. Taking Brazil as an example: you need to provide a photo ID.

In Portugal, Spain, Germany and Belgium (at minimum) you can buy a pre-paid SIM without any hassle.

That is not true for Spain. Since the attacks on 11-M 2014 in Madrid, it is mandatory to provide in the local shop your National ID card or passport to activate any SIM card. But the verification is done by the shop attendant.

Anyway, I do think it is pointless as there are plenty of ways to get a SIM card anonymously: buy it in other country, steal it, buy it from somebody, clone it...

Re: Turkish Citizenship Database Leaked

#270
post #129

TR citizen here, for the last 10 years only those who are really close to AKP got the government contracts including software like this etc. for stupid amounts of money with no know-how. Therefore this is absolutely normal -at least for us-, only thing that surprised me about this leak is this got into front page of HN. Those software "companies" take millions of liras, usually for stupid CRUD stuff, develop it in li…

Not only there, in other countries in Europe too, in Romania they are prosecuting the boss of the biggest software company we have, he has to sell his paintings and artwork for not being arrested(bail). The usual opinion is that they all got rich with state contracts building stupid and expensive things that young kids would do in no time for nothing. As a government agency, of course one would not prefer to hire kid…

That sounds like Spain to me.
Post reply on HN