Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Source code of Swedish e-government services has been leaked

darkwebinformer.com

Post reply on HN
Print view View original

211–220 of 263 posts

Re: Source code of Swedish e-government services has been leaked

#211

Post by Saline9515 »

einr wrote: post #81
petcat wrote: post #75

Earlier quoted context omitted.

You can get all of that one-by-one? Or can you get the whole database at once?

I cannot trivially get the whole database, no. But I kind of fail to see what a malicious actor would do with a large database of public information that they couldn’t otherwise do. The system is designed such that you can’t really do a lot of malicious stuff with just public data, and the stuff you can do (scam calls, etc) is probably not meaningfully more effective if you have the whole database than if you do manu…

Identity theft and scams are widespread in Sweden and the most increasing crime currently.

https://ocindex.net/assets/downloads/2025/english/ocindex_pr...

Re: Source code of Swedish e-government services has been leaked

#212

Post by SoftTalker »

picafrost wrote: post #72
wayfwdmachine wrote: post #62

Ok, some important context for non-Swedes. Anyone can get access to all Swedish (non-protected but those are a very VERY small subset) personal identification numbers by simply signing an agreement with SPAR[1] (the Swedish national people database). Identification numbers per se are not particularly useful or hard to get, they are effectively public information. Using SPAR you can also get the home (and any addition…

I think this is good to highlight for non-Scandinavians. Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings. Personal identification numbers do not tend to be considered private in the same…

The US used to be more this way. Not brokerage accounts as far as I recall, but whether you own a house, how much you paid for it, your address, phone number, even your SSN didn't used to be considered very private, people had it printed on their personal checks, and schools used it as a student ID number.

Newspapers used to publish hospital admissions and discharges, nothing medical but names and dates. Probably a lot of other stuff I'm forgetting.

Re: Source code of Swedish e-government services has been leaked

#213

Post by SoftTalker »

xorcist wrote: post #139
ivell wrote: post #106

Earlier quoted context omitted.

How do they have handle identity thefts, spams, etc.? There are so many ways to misuse these data. Are the residents not concerned about this?

"Identity theft" is newspeak right up there with "intellectual property". It serves the sole purpose of diminishing real theft. If someone says "we gave all your money to this other guy, but it's not our fault because he had stolen your identity" doesn't make it so. There are cases of mistaken identity, and with criminal intentions, but there is also an enormous majority of not checking identity because someone was l…

"Identity theft" is a term invented to push the responsibility for fraud back on the person who is being impersonated rather than on the person or organization that failed to properly identify the impersonator.

Re: Source code of Swedish e-government services has been leaked

#214

Post by mikkupikku »

lysace wrote: post #185
torginus wrote: post #183

Earlier quoted context omitted.

Hold on, I was sharing an anecdote from a friend living in a foreign country, and somehow you're somehow connecting this to a dastardly geopolitical plot by a league of evil nations? Also may I ask who the heck you are to call my story uninformed? As far as I recall, there's nothing inaccurate about what I said, I might be missing some context or nuance, but there's no disinformation in there, and there's certainly n…

[flagged]

Seek help.

Re: Source code of Swedish e-government services has been leaked

#215

Post by kalleboo »

Saline9515 wrote: post #209
picafrost wrote: post #72

Earlier quoted context omitted.

I think this is good to highlight for non-Scandinavians. Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings. Personal identification numbers do not tend to be considered private in the same…

What's the point of making public how much each person owns? Aside from making you a prime target for kidnappings and targeted advertising?

Tax data is government data. Government data is public data. Instead of asking "what's the reason for making something public" the question is "what's the reason for making a carveout for some specific data to make it secret"

Re: Source code of Swedish e-government services has been leaked

#216

Post by skissane »

kivle wrote: post #164
deepsun wrote: post #151

Earlier quoted context omitted.

I see mostly Java/Kotlin and Maven. Pretty modern stack. I would start a government service using those today.

He is probably talking about this repo: https://github.com/navikt/DSF Description translated: > This system was one of the oldest IT systems in NAV, and ran in production for 51 years, from when the National Insurance Scheme was introduced in 1967. In January 2018, Presys was put into production, which together with Pesys became the successor to DSF. At that point, DSF was also shut down. The system is written in PL/…

Mostly PL/I but a few files of COBOL too, e.g. https://github.com/navikt/DSF/blob/main/src/GML/FO04D1X1.cob...

Re: Source code of Swedish e-government services has been leaked

#217

Post by Saline9515 »

kalleboo wrote: post #215
Saline9515 wrote: post #209

Earlier quoted context omitted.

What's the point of making public how much each person owns? Aside from making you a prime target for kidnappings and targeted advertising?

Tax data is government data. Government data is public data. Instead of asking "what's the reason for making something public" the question is "what's the reason for making a carveout for some specific data to make it secret"

Government data about private individuals can be considered as private, for privacy reasons. If the government knows that I have a mental disability, should everyone know about it, so they can discriminate me accordingly? What kind of dystopian view of the world is this?

Or, if I own crypto, why should the government facilitate the work for criminals?

Re: Source code of Swedish e-government services has been leaked

#218

Post by analyst74 »

Saline9515 wrote: post #209
picafrost wrote: post #72

Earlier quoted context omitted.

I think this is good to highlight for non-Scandinavians. Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings. Personal identification numbers do not tend to be considered private in the same…

What's the point of making public how much each person owns? Aside from making you a prime target for kidnappings and targeted advertising?

People in safe countries generally do not worry about kidnappings.

Re: Source code of Swedish e-government services has been leaked

#219

Post by skissane »

patall wrote: post #191
torginus wrote: post #176

Earlier quoted context omitted.

I have a friend who has moved to Sweden a while ago, and she told me a lot about the Swedish housing situation, and admittedly most if it went over my head, but in short, apparently very few places would even allow you to build even somewhat freely. Apparently she was in a situation where she 'owned' her house, but still paid a monthly maintenance fee to some agency. and she wasn't allowed to repaint the rooms or do…

Probably just didn't really buy the house. Many houses are part of an association (BRF). When you buy one, you practically only buy the right to live in the house plus a share of the entire association. The fee that she paid was towards that association for things like maintainance, managment, trash-fees, internet, parking, likely heating and water, and possibly interest on the associations loan. It's just a differen…

Here in Australia, I’ve seen what we call “strata title” applied to “single family homes” before (American terminology, we’d say “detached houses”) - it is uncommon, much more common with apartment buildings or townhouses/villas/semidetached (you share walls and maybe the roof with your neighbours, but there is no one above or below you)-but not completely unheard of

Re: Source code of Swedish e-government services has been leaked

#220

Post by ExoticPearTree »

vladms wrote: post #140
ExoticPearTree wrote: post #118

Earlier quoted context omitted.

Split giant projects into small ones, award it to better smaller companies, require interoperability via API that is clearly documented and ask for around the clock security monitoring and patching. The last things being the same thing you do at any decent private company. IBM or Accenture or whoever don't need to be the only ones winning tenders.

The total number of people working on the project might remain similar no matter if it's one company or many smaller companies. Writing clear documentation and API, well thought from the start is harder the larger the project. Maybe there would be a benefit from having less layers of management, but multiple small companies or one big could have the same structure.

A smsller company would have a flatter structer and less management.

Waiting for my coffee now, I had a thought: what if you have more than one company providing the same service and for a project “lifetime” of say 5 years, the money is split procentually by what company attracts the more users and you make it so that for the services offered through this you can only use one company, but you can switch at anytime.

Post reply on HN