Live data from Hacker News

Hacker wipes Romania's land registry database

news.risky.biz

101–110 of 440 posts

Re: Hacker wipes Romania's land registry database

#101
post #75
post #54

Earlier quoted context omitted.

Is this the scandal to which you are referring? https://www.bbc.com/news/technology-23588202

Yes, that is what they're referring to. The technical details behind it are kind of cool. It's a "bug" of the JBIG2 compression algorithm. See 1, 2 [1] https://community.apryse.com/t/jbig2-compression-issue/1814 [2] https://en.wikipedia.org/wiki/JBIG2#Character_substitution_e...

All I see is 1, 1

Re: Hacker wipes Romania's land registry database

#102
post #32

[flagged]

So that 50% attack results in someone taking all the land? No thanks. It is a poor idea to use blockchain for government registries. If you want transparency, simply publish signed daily updates and that's enough. Just use simple DB with backups, and optionally, a printer printing changes on a paper.

Yeah, the overwhelming majority of the benefit of blockchain here is just gotten by making the data public and signed.

Now you may argue "that is a blockchain, not every blockchain is associated with a shitcoin" but to be frank that ship has sailed, if you wanted to defend that you'd have had to do a lot more work over the past decade.

Re: Hacker wipes Romania's land registry database

#103
post #32

[flagged]

So that 50% attack results in someone taking all the land? No thanks. It is a poor idea to use blockchain for government registries. If you want transparency, simply publish signed daily updates and that's enough. Just use simple DB with backups, and optionally, a printer printing changes on a paper.

Merkel tree audit log of the data, the poor man's Blockchain, works fine and good enough. Now you have a db and you can claim to use a blockchain for pr reasons.

Re: Hacker wipes Romania's land registry database

#104
post #54

Earlier quoted context omitted.

Remember the xerox-scandal years back, that invalidated officially scanned documents. You already life in a world where "scanned before" means you can legally challenge the validity of a document.

Is this the scandal to which you are referring? https://www.bbc.com/news/technology-23588202

There‘s also a great conference talk [0] on this, with an english translation [1].

[0]: https://youtu.be/7FeqF1-Z1g0

[1]: https://youtu.be/zXXmhxbQ-hk

Re: Hacker wipes Romania's land registry database

#105
post #65

Romanian friends have told me that this is really due to corruption. Specifically: - government gives IT/data contracts to cronies - cronies don't actually do any real security work to protect the data - things like this happen

Same thing is rampant in other Eastern European countries as well. Tips on how to address this for those of us that are publicly minded?

It's no different anywhere. Security isn't valued since it's just an email and a .01% or less income fine.

The amount of times my SSN and correlated info has been leaked and I've been offered a free year or credit monitoring is depressing.

Re: Hacker wipes Romania's land registry database

#106
post #5

> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…

Remember the xerox-scandal years back, that invalidated officially scanned documents. You already life in a world where "scanned before" means you can legally challenge the validity of a document.

I am pretty sure I was bitten by this bug, or a similar bug, on an IRA transfer form that I uploaded to a bank. On the scan that I uploaded, one digit in the account number was a clean "5", but the customer service person said it looked like a good clean "6". I presume their document management system was an outcropping of a system originally set up for dealing with faxes, and used that or a similar compression algorithm.

Re: Hacker wipes Romania's land registry database

#107
post #5

> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…

The sad part is, the whole world worked perfectly fine without anything online, ever, prior to 20 years ago. Even 10 years ago for slow-moving change.

It's literally not a requirement to have it all online. And the cost of developers, plus coding + security updates + platform costs, really just means you replace a few assistants which would process requests by hand, with all that.

Except? It's a lot harder to hack a person to delete all the files in the office, from 10k km away, than via a computer.

So many things simply don't need to be online. So many things simply are better archived by other means. So many things are safer, more secure, and the backup processes (microfiche, etc) are well understood and just work.

Re: Hacker wipes Romania's land registry database

#108
post #86

Earlier quoted context omitted.

2/3 attack. Read up on BFT.

It doesn't matter, it's a dumb idea anyway because there is a central authority managing the land registry and there is no need for anyone else to be involved. Also, SQL database is much more convenient to use, it has query language and indices unlike a blockchain.

You can put an index on your blockchain DB, what are you talking? Every node can manage it as it pleases (within the limits of the consensus algorithm).

Yes, if you have a centralized model you don't need it. Just saying that this incident is the exact risk a blockchain is meant to mitigate through redundancy. You can say you don't care about this risk, but it doesn't change the truth of the statement.

Re: Hacker wipes Romania's land registry database

#109

Earlier quoted context omitted.

"you will own nothing and be happy"..no thank you!

Fair enough. But you do realize that all ownership is a made-up shared fiction that most people believe as real.

Why is this skeptical property anti-realism useful? This argument obviously proves too much.

Re: Hacker wipes Romania's land registry database

#110
post #55

Earlier quoted context omitted.

Property is not fluid and doesn't change hands very often. Sure, in a large enough market lots of activity happens every day, but any given property is only involved in a transaction once a decade. You can have very old backups and still capture the state of the market to 99%+. Any recent activity will have brokers, buyers, and sellers, who all have current copies of their activity. Also, this sort of event should re…

> as well as their families being bankrupted permanently No one thinks bills of attainder are a good idea.

This wouldn't be a bill of attainder, it's simply an infinite assessment against the criminal's estate that can't be discharged in bankruptcy. I don't personally think that people should inherit their predecessor's debts, but I have no problem with debts being able to capture the entirety of a person's wealth including homes, pensions, jewelry, trusts, any accounts from which benefit is drawn, etc.
Post reply on HN