Live data from Hacker News

Swedish Government Scrambles to Contain Damage from Data Breach

nytimes.com

111–120 of 140 posts

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#111

Here's a summary of what foreign powers got access to: - identities of undercover operatives - personal identity data of everyone with a driver's licence - people with protected identities - location of all army vehicles - money transport vehicles - classified infrastructure information Even worse: when they realized they'd leaked photos, home addresses and SSNs of protected identities, they sent a clear text email a…

I was with you for the first half, but the second half where you say the russians got stuff is silly and then the rant against 'feminist' government etc is just plain stupid.

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#112
post #108

Earlier quoted context omitted.

How can this be Alliansens fault? It was the current government-assigned general director of the Transport Agency that knowingly broke the law. She was even informed by SÄPO (Swedish equivalent of MI5 or CIA) that what she's trying to do is illegal, but still went through with it. The problem here is not outsourcing, because it is completely legal to do so as long as the company outsourced to goes through with proper…

> SÄPO (Swedish equivalent of MI5 or CIA) Nitpicking: Säpo is not the Swedish equivalent of the CIA. e.g., the single largest expense of Säpo is protection of dignitaries, which is a role held by the USSS, not the CIA.

SÄPO is more equiv to Special Branch than MI5.

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#113

Earlier quoted context omitted.

no its because vested interests want to prove that outsourcing is all rainbows and unicorns.

Ronald Coarse won a Nobel Prize for his work on transaction costs, and how those (usually hidden) costs should be considered when companies externalize business functions. Coase’s writings and teachings lead directly to the idea of accounting for all costs in any business or outsourcing endeavor, or “Total Cost of Ownership.” That's just an example of "vested interests" proving that outsourcing is not all rainbows an…

One thing I've noted is the budget and effort that outsourcers put into killing corporate IT. Not only in the frank effort (as in one outsourcer ringing my CEO and telling him that I was "a problem" luckily my CEO thought this was hugely funny) but also more with more subtlety - sponsoring research that is aimed at undermining incumbent IT. For example, cost metrics derived from peer studies that show that everyone is spending too much - there's money on the table to be had. This generates a cycle of cutting, internal and then when the money is not delivered in full consultants are brought in to "help access the value".

In house has no budget for this, we rely on the public space and academia for validation and fair insight. It's telling that Coarse was active from the 30's to the 70's as was J.K. Galbraith who wrote about the technostructure. Managerial capitalism has been slaughtered, bits of it are flopping around weakly. It seems to me that the neo-liberal replacement has helped billions out of poverty in China, India, Indonesia and so on, but this is an unstable situation. It's not clear that the greater good can continue to be served if the economies of the west cannot be reconstructed to provide far larger numbers of stable, interesting and reasonably well paying jobs. Neo-liberalism has failed in that sense and seems not to have anything to say about it apart from "tough, you lot had it too good for too long and now you have to be as rich or poor as people in India and China." Which implies dictatorship.

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#114
post #90

Earlier quoted context omitted.

>> the snopes link only refutes a specific picture The article provides statistics as recent as 2016. It does more than refute a single picture. >> Syrian refugees - which are probably the more (perhaps only) deserving of "refugee" status Just off the top of my head: Eritrea, Lybia, Western Iraq, Burma. And that's not counting locally displaced refugees who don't reach Western shores (Burundi, Nigeria, Yemen). Regard…

I am on mobile now, can't google efficiently, and the statistics here are lacking either way, but Swedish policy is to accept anyone who claims their are a minor and has no documents to prove otherwise - as a result, young people lose their docs and claim to be less than 18. This was made widely public when a 23-year old who got asylum as a 17-year old killed a social worker at the asylum about a year ago, and invest…

I did not know that (and that was certainly more informative than the other guy's post). Although I understand the duty to assist minor, the lack of checks is disturbing, especially since it's likely to not go well for anyone (having known someone who did work on refugee cases a while ago, having no legal documents can lengthen the procedure significantly, so they'll be stuck in a center for years, and they do check testimonies as much as possible, so they may end up getting kicked out).

I did Google, and Google tells me Sweden wants to introduce age tests to address this issue (I hope they don't outsource it to IBM).

I disagree with your other post regarding the fact that a refugee being 16 or a young adult doesn't change much: what we are discussing here, beside the racist Predatory Brown Men are coming! thing, is the legitimate concern over the necessary cultural integration of refugees in their host country Vs becoming a problem for society. We know that a husband or dad (or a family unit in general) is much less likely to cause any trouble. That would less be the case with a young single adult, who is fully autonomous and has no dependents. A kid, even at 17, is much less autonomous, will have an educator or foster family, will go to school, etc, they are going to be 'enrolled' much more actively into society.

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#115

Earlier quoted context omitted.

I'm sure an overwhelming number of unaccompanied minor refugees are in fact adults claiming to be 17. /s

"but a study using dental tests in Norway revealed that 9 out of 10 underage refugee children were actually older than 18." https://sverigesradio.se/sida/artikel.aspx?programid=2054&ar...

Dude, you are quoting an unsourced study about Norway from an article written in 2010.

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#116

Here's a summary of what foreign powers got access to: - identities of undercover operatives - personal identity data of everyone with a driver's licence - people with protected identities - location of all army vehicles - money transport vehicles - classified infrastructure information Even worse: when they realized they'd leaked photos, home addresses and SSNs of protected identities, they sent a clear text email a…

I was with you for the first half, but the second half where you say the russians got stuff is silly and then the rant against 'feminist' government etc is just plain stupid.

hehe I agree. That poster went kind of bizarre there in the end. None of these things have anything to do with a Data breach. How weird they adopted white nationalist sentiments at the end..

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#117

Here's a summary of what foreign powers got access to: - identities of undercover operatives - personal identity data of everyone with a driver's licence - people with protected identities - location of all army vehicles - money transport vehicles - classified infrastructure information Even worse: when they realized they'd leaked photos, home addresses and SSNs of protected identities, they sent a clear text email a…

That isn't really the full story.

> Here's a summary of what foreign powers got access to:

It's not been established that foreign powers got access to the data. It's considered a leak because confidential information is considered leaked as soon as it's not handled correctly.

> Even worse: when they realized they'd leaked photos, home addresses and SSNs of protected identities, they sent a clear text email asking the contractor to clear them from the database manually.

There were two leaks. One was the information not being handled correctly, the other was the disclosure of people with protected identities in the "car registry" to companies that would use the data to send advertisements to the owners. This wouldn't have included photos or SSNs.

> SÄPO knew about this in 2015, and recommended against it, but the Transport Agency still went through with the deal. How they could even be allowed to do that is beyond me.

They weren't really allowed, which is why the head of the agency was prosecuted.

> Either she knew exactly what she was doing, meaning the Russians paid a meagre $8500 for full access to a database containing top secret information, or (more likely) she was just that stupid, meaning possibly hostile powers got this information for free.

The investigation concluded that she was aware that she was breaking the law but not that the leak was intentional as such, therefor it was "willful negligence".

> Here, Swedes believe that Trump is such a catastrophe, and wonder why Americans could vote for him. We should instead look at our own pathetic "feminist" government, and ask ourselves how and why we got here.

That's silly.

- IT operations used to be run by another government agency called The Transport Administration (vs. The Transport Agency). - The decision to outsource was done under the former government by the the former head of the agency in 2012. - The previous contract on IT operations was already cancelled, the staff was being let go, the facilities cleared and would no longer be available come January 2015. - The former head of the agency retired in February/March 2015, the deal with the IBM was concluded by the new head of the agency in April 2015. - The event is one in a long line of outsourcing and public-private partnership failures. Including the Public Employment Agency, Social Insurance Agency, Karolinska University Hospital etc.

The only reason this outsourcing failure is big news is because the government is weak, "the alliance" in opposition is even weaker and there's an election next year. Anakata of The Pirate Bay fame hacked Logica (another consulting company) in 2012 accessing confidential data from multiple government agencies.

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#118

Earlier quoted context omitted.

The screw-up was initiated by Alliansen (not the current government), by outsourcing this to IBM. I'm not saying current government are free of blame here, but please stop trying to fit this into a "feminist" argument.

How can this be Alliansens fault? It was the current government-assigned general director of the Transport Agency that knowingly broke the law. She was even informed by SÄPO (Swedish equivalent of MI5 or CIA) that what she's trying to do is illegal, but still went through with it. The problem here is not outsourcing, because it is completely legal to do so as long as the company outsourced to goes through with proper…

If SAPO let this happen, after they advised her. Then thats on SAPO.

But then, there is perhaps something she is not telling them. Because to implement this AFTER your main intel service says its not a good idea or legal, is kind of ...odd isnt it?

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#119
post #44
post #16

Earlier quoted context omitted.

I don't know how much blame you can put on IBM here. - The Transport Agency decided to outsource operations, and IBM won the contract (April 2015) - The following month, the head of the agency decided to ignore certain laws about privacy, secrecy, etc., as well as the agency's own requirements about information security - The Swedish Security Service, Säpo (basically our FBI), immediately got wind of this and started…

article paywall

It's a "soft" paywall - the content is still there. Use uBlock Origin or similar, and don't let the site set cookies, and everything will be fine (Firefox: right click -> View Page Info -> Permissions -> set "Set Cookies" to "Block").

Re: Swedish Government Scrambles to Contain Damage from Data Breach

#120

Earlier quoted context omitted.

"but a study using dental tests in Norway revealed that 9 out of 10 underage refugee children were actually older than 18." https://sverigesradio.se/sida/artikel.aspx?programid=2054&ar...

Dude, you are quoting an unsourced study about Norway from an article written in 2010.

Do you really think the profile is different now?

Do you really think people won't lie to get an advantage

Naivete is strong it seems

Post reply on HN