Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hacker wipes Romania's land registry database

news.risky.biz

Post reply on HN
Print view View original

261–270 of 440 posts

Re: Hacker wipes Romania's land registry database

#261

Post by brookst »

ponector wrote: post #246
alexpotato wrote: post #230

Earlier quoted context omitted.

> Basically, what happened is that they rebuilt it from proof of ownership and testimonies of the people In a similar vein, I was once curious how you would prove your identity if ALL of your relevant documents (passport, driver's license, birth certificate etc) were lost in some kind of cataclysm e.g. a house fire pre-digital etc Turns out there is actually a mechanism for this: - get multiple people to sign sworn a…

At least you can restore it. Imagine all your devices are lost in a massive fire, is there a way to get back your apple account?

Phone number and email access, if you can regain access to them.

It is definitely a good idea to plan in advance and set up a recovery contact: https://support.apple.com/en-us/102641

Re: Hacker wipes Romania's land registry database

#262

Post by nly »

nashashmi wrote: post #94
skinfaxi wrote: post #5

> Since the hack, officials restored their website and posted a message announcing they are rebuilding the agency's entire network from scratch. Even if the hacker claims they deleted backups, the agency appears to have had an offline copy, otherwise things would have gotten really messy over the coming months in Romania. So it seems not all has been lost. I was worried about the societal implications of being unable…

Has not digital data always been a secondary source of information, instead of a primary source of information? Paper records cannot be thrown away. And new records are probably recorded digital only but a copy is sent to the parties in the transaction

In the UK deeds no longer really exist and do not take precedence over the land registry.

Property that isn't registered can remain unregistered but must be registered before it is sold.

Re: Hacker wipes Romania's land registry database

#263

Post by hinkley »

dredmorbius wrote: post #256

Poor password practice and policy, and likely a lack of 2FA / physical token security, seem to have contributed to this breach. Posts and screenshots apparently by the alleged attacker show "P@ssw0rd" and other well-known / readily-guessable passwords from the hacked systems: https://spear.cx/Thread-Selling-RO-Thy-arss-shall-be-spanked... > https://drive.google.com/file/d/1iZc93XfViOk7izusgIG1ni7Kmsx... > Originally…

For me the first 2FA devices I’d had were for work but for my friends it was for a world of Warcraft. And it was years until my bank offered 2FA. I still think about that every time there is a breach.

Blizzard gave hardware tokens out to the entire convention one year. Smart phones became a variable not long after and then they didn’t make them mandatory but game guilds almost universally did. Especially for officers.

Re: Hacker wipes Romania's land registry database

#264

Post by Tangurena2 »

RandomLensman wrote: post #30

What's wrong with an old fashioned paper registry then?

It isn't fast enough for mortgage backed securities. Each transfer of ownership of the mortgage requires a separate transfer fee paid to the registry.

Moving from a paper registry at each county clerk (in the US) was a part of the 2008 financial meltdown.

Re: Hacker wipes Romania's land registry database

#265

Post by iepathos »

alexpotato wrote: post #230
franciscop wrote: post #139

Earlier quoted context omitted.

This happened in a 50k people town where my father is from in 1982 with a BIG flood that destroyed the town land registry documents (among a lot of the town). Since he's a lawyer, had first hand experience and I was always curious I asked many things about this a while back. Basically, what happened is that they rebuilt it from proof of ownership and testimonies of the people. You can never get to 100% recovery like…

> Basically, what happened is that they rebuilt it from proof of ownership and testimonies of the people In a similar vein, I was once curious how you would prove your identity if ALL of your relevant documents (passport, driver's license, birth certificate etc) were lost in some kind of cataclysm e.g. a house fire pre-digital etc Turns out there is actually a mechanism for this: - get multiple people to sign sworn a…

Do the people who sign sworn affidavits already have to have proven identities? If so, then they're unable to recover from a situation where they lost everyone's identity.

Re: Hacker wipes Romania's land registry database

#266

Post by hinkley »

cbg0 wrote: post #38

An update from the land registry (the truthfulness of this remains to be seen depending on how fast this comes back online): ANCPI announced that it had begun migrating its applications to Romania’s Government Cloud. The operation is being coordinated by the Special Telecommunications Service (STS) and is expected to be completed on Wednesday, July 22. After the migration, authorized institutions will inspect the app…

My ex was late from work once a week because the company did commercial real estate logistics (sort of similar domain here) and she had the job of going to the secure data center and grabbing a backup disk out of the cage and transferring it to a safety deposit box.

The dumb thing was the bank was two blocks from the data center and less than eight (six?) from the office so catastrophic events might have hit both or all three. The owner kept a second copy at his house, and that was the only geographically separated copy.

Re: Hacker wipes Romania's land registry database

#268

Post by Tangurena2 »

charcircuit wrote: post #197

Why is deleting the whole database a valid operation? The system should make that impossible.

Hackers would do it from the operating system level - stop the database executable, then delete the files used to store the database. Likewise, many organizations store the backups on a network share, where a hacker could delete the files.

Permissions inside the database should be segregated. The credential used by the webserver should not have enough permissions to DROP DATABASE. Just the appropriate selects/updates/inserts.

Likewise, if you are storing backups on the same network (as opposed to a tape backup), network permissions should allow writes/creates but not deletes.

Re: Hacker wipes Romania's land registry database

#269

Post by halJordan »

SoftTalker wrote: post #259
alexpotato wrote: post #230

Earlier quoted context omitted.

> Basically, what happened is that they rebuilt it from proof of ownership and testimonies of the people In a similar vein, I was once curious how you would prove your identity if ALL of your relevant documents (passport, driver's license, birth certificate etc) were lost in some kind of cataclysm e.g. a house fire pre-digital etc Turns out there is actually a mechanism for this: - get multiple people to sign sworn a…

Yeah it's actually not that bad, because for example the BMV will likely upon request send you a duplicate driver's license to your address of record. Same for getting replacement credit cards. If you had utility services at that address in your name that's additional documentation. Also historical tax returns, bank accounts, etc.

"why's he asking for a new dl? "

"Oh volcano exploded, his home is under 5 ft of ash."

"Gotcha, mail him the copy"

Re: Hacker wipes Romania's land registry database

#270

Post by olau »

iepathos wrote: post #265
alexpotato wrote: post #230

Earlier quoted context omitted.

> Basically, what happened is that they rebuilt it from proof of ownership and testimonies of the people In a similar vein, I was once curious how you would prove your identity if ALL of your relevant documents (passport, driver's license, birth certificate etc) were lost in some kind of cataclysm e.g. a house fire pre-digital etc Turns out there is actually a mechanism for this: - get multiple people to sign sworn a…

Do the people who sign sworn affidavits already have to have proven identities? If so, then they're unable to recover from a situation where they lost everyone's identity.

You start with the queen. Everyone knows who she is.
Post reply on HN