Live data from Hacker News

Hacker wipes Romania's land registry database

news.risky.biz

81–90 of 440 posts

Re: Hacker wipes Romania's land registry database

#81
post #32

[flagged]

So that 50% attack results in someone taking all the land? No thanks.

It is a poor idea to use blockchain for government registries. If you want transparency, simply publish signed daily updates and that's enough. Just use simple DB with backups, and optionally, a printer printing changes on a paper.

Re: Hacker wipes Romania's land registry database

#83
post #55

Earlier quoted context omitted.

"Very old" could mean that they were not up to date. What did they do when the backups didn't match the actual situation at the time of the breach?

Property is not fluid and doesn't change hands very often. Sure, in a large enough market lots of activity happens every day, but any given property is only involved in a transaction once a decade. You can have very old backups and still capture the state of the market to 99%+. Any recent activity will have brokers, buyers, and sellers, who all have current copies of their activity. Also, this sort of event should re…

> as well as their families being bankrupted permanently

No one thinks bills of attainder are a good idea.

Re: Hacker wipes Romania's land registry database

#84
post #5

> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…

I'd bet money the offline copy is far from up-to-date, given the state of the network. It still has potential to be mayhem

If its at least somewhat recent hopefully those affected still have paperwork for any property ownership transfers. Finding proof of property you bought decades ago would be a huge pain.

Re: Hacker wipes Romania's land registry database

#85
post #60

Earlier quoted context omitted.

A blockchain isn't stopping you from doing any of those things, if anything it's facilitating different backup models by different parties. A paper record is so much more susceptible to various kinds of risks, adversarial and otherwise. I recommend to look past the hype or hate at the technology. A blockchain is the logical extreme of where you end up when you think about how to sync backups, and you recognize that i…

> A blockchain is the logical extreme of where you end up when you think about how to sync backups It's not. Blockchains are only eventually consistent among nodes. They're designed for synced backups among adversarial peers. There's no reason for a government agency to use one internally. There are better ways to sync backups when the people with access to make updates are also authorized to do so.

Internally, you don't need it, agreed. But that is centralization risk exemplified in this incident. Which isn't necessary. Every notary could be a node. It would be a lot more resilient, and it would look a lot like a blockchain (not necessarily with a crypto currency though) if you do it properly.

Re: Hacker wipes Romania's land registry database

#86
post #32

[flagged]

So that 50% attack results in someone taking all the land? No thanks. It is a poor idea to use blockchain for government registries. If you want transparency, simply publish signed daily updates and that's enough. Just use simple DB with backups, and optionally, a printer printing changes on a paper.

2/3 attack. Read up on BFT.

Re: Hacker wipes Romania's land registry database

#87

Earlier quoted context omitted.

But you still get fined if you don't wear a helmet In an ideal world, even before you crash your motorcycle and hit your head somewhere, forcing you to start wearing it

I'll never forget this one video. A cyclist riding with a helmet on was doing everything proper -- helmeted, obeying traffic laws, riding in the proper part of the road... Then a city bus passes them far too close. The passenger side mirror of the bus catches the rider's helmet and speeds off...carrying the cyclist off of their bike and dangling by their helmet at speed...

Freak accidents occur everywhere. Helmets save a lot more lives then causee deaths overall.

Re: Hacker wipes Romania's land registry database

#88
> HuggingFace got hacked by an AI. What stuck out to me was the guardrail asymmetry. The attacker had no constraints, but HF's response ran afoul of the abuse guardrails, forcing them into an unplanned switch to local models.

This, to me, is the more interesting bit of the article.

I don't really know what a good solution looks like, but yeah, that's annoying.

Re: Hacker wipes Romania's land registry database

#90
post #65

Romanian friends have told me that this is really due to corruption. Specifically: - government gives IT/data contracts to cronies - cronies don't actually do any real security work to protect the data - things like this happen

Same thing is rampant in other Eastern European countries as well. Tips on how to address this for those of us that are publicly minded?

There is a somewhat valid argument to be made that aggressively trying to hack these insecure government portals could lead to a real reprioritization towards competence.
Post reply on HN