Live data from Hacker News

Hacker wipes Romania's land registry database

news.risky.biz

131–140 of 440 posts

Re: Hacker wipes Romania's land registry database

#131

Earlier quoted context omitted.

Has not digital data always been a secondary source of information, instead of a primary source of information? Paper records cannot be thrown away. And new records are probably recorded digital only but a copy is sent to the parties in the transaction

Paper records burn great and are harder to store in multiple locations

Faxes and photocopiers have existed for nearly a century

Re: Hacker wipes Romania's land registry database

#133

Earlier quoted context omitted.

The problem is that everything will potentially be under dispute, since anyone can claim they purchased a patch of land whose registry was missed in the restoration

Don't know exactly on it works in Romania, but proving you purchased a patch of land is a different question -- for that you have the deed. You then submit the deed to the land registry. So this situation could at most result in the seller being able to sell the land more than once or disputes over the priority of sales over liens and other competing acts subject to registration.

Here in Brazil lots of people deal land by word of mouth. The country is just too big and there isn't enough state present to make every transaction official, so people shake on it, draft an unofficial document and actually living and developing the land over a long period of time is what consistitutes ownership.

Re: Hacker wipes Romania's land registry database

#134

[flagged]

Shooting people in the head because they're not wearing a helmet is still a crime.

You can downvote all you want, but there were actual admin accounts with the password P@ssw0rd. So in your view incompetence should just be ignored because blaming people for lack of common sense will hurt their feelings?

Re: Hacker wipes Romania's land registry database

#135

    Security firm KELA... has doxxed the hacker as Zakaria Mahdjoub, an individual from Oran, Algeria.

If I was an evil hacker, I would only hack countries my country hated or did not have extradition agreements with. Like the Russian hackers do.

Algeria has a extradition treaty with Romania:

https://periodicos.processus.com.br/index.php/egjf/article/v...

Re: Hacker wipes Romania's land registry database

#136
post #3

The same thing happened to Slovakia not that long ago.

Accounts at the time:

"1T+ in assets are frozen as Slovakia's Land Registry faces ransomware attack" https://spectator.sme.sk/politics-and-society/c/news-digest-...> (9 Jan 2025) HN discussion (1 comment): https://news.ycombinator.com/item?id=42650343>

"Ransomware Attack Paralyzes Slovakian Land Registry, Souring Slovakia-Ukraine Relations" https://dailysecurityreview.com/security-spotlight/slovakian...> (January 14, 2025)

"Slovakia Hit by Historic Cyber-Attack on Land Registry " https://www.infosecurity-magazine.com/news/slovakia-hit-by-l...> (10 January 2025)

Apparently tied to Ukraine in this case.

Re: Hacker wipes Romania's land registry database

#137

Earlier quoted context omitted.

I am pretty sure I was bitten by this bug, or a similar bug, on an IRA transfer form that I uploaded to a bank. On the scan that I uploaded, one digit in the account number was a clean "5", but the customer service person said it looked like a good clean "6". I presume their document management system was an outcropping of a system originally set up for dealing with faxes, and used that or a similar compression algor…

Thus - one could assume that all transfers stored by the bank- before the update would not hold up in court.

One should assume the outcome of one's case in court is at least partially, if not heavily, influenced by one's political (influential-ness) standing.

Re: Hacker wipes Romania's land registry database

#138
post #20

[flagged]

Do you know that this system was making fundamental security faux pas or are you assuming the reductive argument where determined enough hackers couldn’t break any system with built and maintained by diligent engineers?

> Do you know that this system was making fundamental security faux pas or are you assuming the reductive argument where determined enough hackers couldn’t break any system with built and maintained by diligent engineers?

You should take a closer look at the screenshots posted by the hacker: entire systems and network devices with the password P@ssw0rd for the admin user. Now you tell me.

Re: Hacker wipes Romania's land registry database

#139
post #5

> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…

This happened in a 50k people town where my father is from in 1982 with a BIG flood that destroyed the town land registry documents (among a lot of the town). Since he's a lawyer, had first hand experience and I was always curious I asked many things about this a while back. Basically, what happened is that they rebuilt it from proof of ownership and testimonies of the people. You can never get to 100% recovery like that, but everyone knows who their neighbor is, at least in a town that is small like this.

So they rebuilt it first from first hand proof, then by testimonies, with a period of counter claims available IIRC. For sure there were some false claims, but given the magnitude of the disaster, this is the best solution within that context.

Post reply on HN