Live data from Hacker News

Source code of Swedish e-government services has been leaked

darkwebinformer.com

181–190 of 263 posts

Re: Source code of Swedish e-government services has been leaked

#181
post #179

Earlier quoted context omitted.

I have a friend who has moved to Sweden a while ago, and she told me a lot about the Swedish housing situation, and admittedly most if it went over my head, but in short, apparently very few places would even allow you to build even somewhat freely. Apparently she was in a situation where she 'owned' her house, but still paid a monthly maintenance fee to some agency. and she wasn't allowed to repaint the rooms or do…

[flagged]

what

Re: Source code of Swedish e-government services has been leaked

#183
post #179

Earlier quoted context omitted.

I have a friend who has moved to Sweden a while ago, and she told me a lot about the Swedish housing situation, and admittedly most if it went over my head, but in short, apparently very few places would even allow you to build even somewhat freely. Apparently she was in a situation where she 'owned' her house, but still paid a monthly maintenance fee to some agency. and she wasn't allowed to repaint the rooms or do…

[flagged]

Hold on, I was sharing an anecdote from a friend living in a foreign country, and somehow you're somehow connecting this to a dastardly geopolitical plot by a league of evil nations?

Also may I ask who the heck you are to call my story uninformed? As far as I recall, there's nothing inaccurate about what I said, I might be missing some context or nuance, but there's no disinformation in there, and there's certainly no hidden motive (what would even that be?) you seem to imply.

Re: Source code of Swedish e-government services has been leaked

#184

Ok, some important context for non-Swedes. Anyone can get access to all Swedish (non-protected but those are a very VERY small subset) personal identification numbers by simply signing an agreement with SPAR[1] (the Swedish national people database). Identification numbers per se are not particularly useful or hard to get, they are effectively public information. Using SPAR you can also get the home (and any addition…

That might be interesting but it’s also completely irrelevant since no PII was actually leaked.

Also, no source code of ”Swedish e-government services” was leaked since that is not a thing:

https://news.ycombinator.com/item?id=47363966

Re: Source code of Swedish e-government services has been leaked

#185
post #179

Earlier quoted context omitted.

[flagged]

Hold on, I was sharing an anecdote from a friend living in a foreign country, and somehow you're somehow connecting this to a dastardly geopolitical plot by a league of evil nations? Also may I ask who the heck you are to call my story uninformed? As far as I recall, there's nothing inaccurate about what I said, I might be missing some context or nuance, but there's no disinformation in there, and there's certainly n…

[flagged]

Re: Source code of Swedish e-government services has been leaked

#186

Earlier quoted context omitted.

[flagged]

Yes, sadly, and a lot of it is MENA migrants. But that should be no surprise if you have any experience of the world and Sweden. I think you are trying to be funny, but I am serious. >“First, before 2015 it was not acceptable to talk about antisemitism which came from immigrant groups from the Middle-East. This made members of the Jewish community feel abandoned. Sweden has now changed and it’s now possible to talk a…

People like you are somewhat amusing. You keep going on and on about how you are Swedish when the right-wing playbook is global, this could easily be a post from any of your ilk anywhere on the European continent or the United States.

Let's even grant you the premise that these statistics are accurate. What do you want to do about it? Deprive people of their rights extrajudicially because of where they come from? Should we treat people from MENA differently before the law? What about a native Swede who is antisemitic? Should they lose some rights? Should we deport people based on place of origin? Is that what the West is based on to you, increasingly arbitrary or national/ethnic access to rights vs a universalist conception of human rights? Or would that be a "third world" degeneration?

What is the West? Are Jewish people synonymous with the West? Was that always the case? You talk about minority protections are Jewish people a majority in Sweden? If not, why do you advocate protections for some minorities and not others? Do you think Jewish people have suffered in the "first world" West? Where does antisemitism come from? Was the Weimar Republic the third world? How about the regime that followed? Should European antisemites be allowed into Sweden? Maybe everyone who enters Sweden should have to pass an ideological test to prove they are sufficiently non antisemitic and appropriately Western? Or maybe you let them in but they have to walk around in special outfits or with a special lapel or label on them so we can be vigilant regarding their whereabouts? Perhaps anyone who commits a crime in Sweden should be deported, as only an anti-western person would exhibit criminal behavior?

What do you want to do about it? Highlighting crime tells us nothing. Every society deals with crime. Most societies have minorities. What separates societies is how they deal with it. So tell us, warden of the West, what you seek to do.

I should know better than to wade into a debate with someone who argues like you. Your comment history does indeed speak for itself. But I will try to debate you in good faith. I look forward to your answers.

Re: Source code of Swedish e-government services has been leaked

#187
post #106

Earlier quoted context omitted.

I think this is good to highlight for non-Scandinavians. Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings. Personal identification numbers do not tend to be considered private in the same…

How do they have handle identity thefts, spams, etc.? There are so many ways to misuse these data. Are the residents not concerned about this?

Of course ID theft happens but I think one thing that differs is that in Sweden it is harder to get a loan without verification that you are who you are (for example by Swedish BankID wish is an electronic id) while in US it seems you can take a loan if you just know someone’s social security number

Re: Source code of Swedish e-government services has been leaked

#188
post #84

Earlier quoted context omitted.

If that is case, then it would have been wrong from the beginning for any government to keep hold of the private keys for the signature on my citizen card. Because in that case they can sign documents on my behalf without my permission. In a court case, it would be near impossible for me to prove that the government gave my private key to someone else and that it wasn't me signing an incriminating document.

I apparently didn't phrase that very well. If what is the case? I was trying to ask which case was the case, not trying to claim that something specific was the case. I'm familiar with electronic signatures, and I know what documents are, but I have never heard the phrase "electronic signing documents" and don't know what that is supposed to mean. What kind of documents? Documents about signing, documents that were s…

Signed documents can be as simple as an ID of the transaction, a statement in text, PII data that identify what you sign, or a store of larger PDF files for download and verification. We do not know. I base this on how signing works technically in Sweden.

CGI is not the only supplier of these services.

Re: Source code of Swedish e-government services has been leaked

#189
post #178

Earlier quoted context omitted.

The private keys in BankID are stored in users phones, not centrally.

Well doesn’t Relying Parties using the BankID API for signatures and authentication have private keys to start the flows for users scanning QR codes etc? Could you, having the right private keys, impersonate some company soliciting a BankID signature? I’m not sure what you can do with that though. You cannot steal some other ongoing signature I guess.

You can start a signing process saying you are who ever owned that certificate. E.g. if you call someone. You can not use those signatures to gain access, and it is rather in phishing.

Re: Source code of Swedish e-government services has been leaked

#190

Ok, some important context for non-Swedes. Anyone can get access to all Swedish (non-protected but those are a very VERY small subset) personal identification numbers by simply signing an agreement with SPAR[1] (the Swedish national people database). Identification numbers per se are not particularly useful or hard to get, they are effectively public information. Using SPAR you can also get the home (and any addition…

I think this is good to highlight for non-Scandinavians. Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings. Personal identification numbers do not tend to be considered private in the same…

All email conversations in Swedish public institutions are basically a public act and any citizen can request an extract of them.
Post reply on HN