Live data from Hacker News

Source code of Swedish e-government services has been leaked

darkwebinformer.com

151–160 of 263 posts

Re: Source code of Swedish e-government services has been leaked

#151
post #143
post #102

Earlier quoted context omitted.

We're so open, we even leak our government source code _ourselves_ https://github.com/navikt

Uff, COBOL written in Norwegian, talk about a narrow target to hit for hiring :)

I see mostly Java/Kotlin and Maven.

Pretty modern stack. I would start a government service using those today.

Re: Source code of Swedish e-government services has been leaked

#153

Earlier quoted context omitted.

I think this is good to highlight for non-Scandinavians. Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings. Personal identification numbers do not tend to be considered private in the same…

I heard a rumor that some people use this to check their neighbour's revenue and sometimes make snark comments if one of them has a high revenue but lives in a "average revenue" part of town. They'd say that if you earn a lot, you shouldn't take a cheap housing. Any truth to that?

> They'd say that if you earn a lot, you shouldn't take a cheap housing.

I think a lot of "humbleness" is also enforced this way, in the US seems normal (or even some European countries) to flaunt your wealth, and others seem more or less OK with it, while in Sweden it's much more socially unacceptable to in any sort of way brag about being rich, or showing that off. Humble-richness is OK and tolerated, but flagrantly displaying your wealth among the public is generally frowned upon.

So together with that, living in a average neighborhood but have a house that sticks out as clearly "rich person's house" will gain you evil looks from your neighbors, as you're "supposed to" live in a different neighborhood where neighbors look more equal, otherwise you again stick out, which is cause for friction culturally.

Lots of culture in Sweden is less about "lets correctly solve the problem" and more "lets ensure the gaping holes aren't so visible for everyone, so we can ignore it properly".

Re: Source code of Swedish e-government services has been leaked

#154
post #105

Earlier quoted context omitted.

I heard a rumor that some people use this to check their neighbour's revenue and sometimes make snark comments if one of them has a high revenue but lives in a "average revenue" part of town. They'd say that if you earn a lot, you shouldn't take a cheap housing. Any truth to that?

There used to be a lot more of that, but a system was put in place where you have to identify yourself with electronic ID to access the information, and the information is logged so the other party can see it. Nowadays I think mostly journalists use it to pull up information about politicians and other people that are in the public spotlight. There are of course the yearly "richest people in Norway" lists in various…

> There used to be a lot more of that, but a system was put in place where you have to identify yourself with electronic ID to access the information, and the information is logged so the other party can see it.

Yeah, kind of a fake solution, request it via Ratsit or whatever and all they get to see is that someone used Ratsit, but not who actually requested it.

Same goes for criminal cases, using Krimfup or whatever just leads to the service's name "leaking", while you can use fake details to sign up for both Ratsit and Krimfup.

Re: Source code of Swedish e-government services has been leaked

#155
post #4

The source code is the least of it! From the article: > citizen PII databases and electronic signing documents were also collected but are being sold separately

Yeah the source code isn't really such a big deal aside from helping to find vulnerabilities. The PII is a real disgrace.

Seeming by other sources, it wasn't really information considered PII in Sweden (but would in other places), I'm not sure this is as a big deal as people try to make it out to be.

Re: Source code of Swedish e-government services has been leaked

#156
post #150

Earlier quoted context omitted.

[flagged]

> You criticize these websites when they affect minorities, but you use them yourself to look up men. That seems inconsistent. This is very close to the "Yet you participate in society, how curious" mean, especially since they're implying they would vote in favor of a law that changes it so that the data is no longer public in the same manner. But then your comment history reveals enough about your intent.

I live here so I can add my experience, thank you.

Speak clearly, what do you have an issue with exactly in my comment history?

Re: Source code of Swedish e-government services has been leaked

#157
post #99

I see comments about Swedish personal identification numbers. But the article is about source code that's leaked, not a database of numbers, right? I was thinking: should government source code not be open source anyway?

Ideally they should be open.

Re: Source code of Swedish e-government services has been leaked

#158

Earlier quoted context omitted.

That sounds rather unacceptable.

Yes, I don't think anyone truly wants it to be like this. But it's just what happens. You of course cannot access and empty out someone's bank account this way, you're safe in that regard. But you need to dispute the invoices as soon as possible to show that it is fradulent, so you don't end up needing to actually pay for it. Or get debt collectors after you.

^ Never had this happen in my 30 years here so YMMW

So don't take this poster by their word.

Not saying it DOES NOT happen as it is a system not made for the internet. But widespread? It is not.

Re: Source code of Swedish e-government services has been leaked

#160
post #12

Maybe they should go open source from the start, then there's nothing to leak. P.S.: And strangers will sometimes help you find vulnerabilities (and sometimes be very obnoxious but that's not open source's fault).

When I worked for the government in Norway, it slowly changed to all code being developed in the open. 3k repos here now: https://github.com/orgs/navikt/repositories When I started it was a big security theater. Had to develop on thin clients with no external internet access, for instance. Then they got some great people in charge that modernized everything. Only drawback is when you quit, you have to make sure to un…

Very cool! Do they accept external contributions, e.g. from Norwegian citizens? Also, was there any thought given to "digital souvereignty" (wondering because the repos are hosted on a US service)?

I'm also surprised that you were able to (or expected to?) use your private GitHub account for your work.

Post reply on HN