Live data from Hacker News

Turkish Citizenship Database Leaked

ibtimes.co.uk

51–60 of 286 posts

Re: Turkish Citizenship Database Leaked

#51

Earlier quoted context omitted.

Amazing. I wonder what the benefit is of having information such as you home address public.

I would say there is more issues than gains. But sometimes it's nice, I once found someones wallet and was able to find his phone number with the service. Called the guy, he came and picked up his wallet and gave me 500kr as thanks.

"Sometimes nice" is not good enough to do this.

Re: Turkish Citizenship Database Leaked

#52
post #10

Interesting, but to be fair a typical facebook page has more information.

If you choose to sign up for facebook with real information, sure. You don't have much choice in the data your government loses about you.

Meta:

Interesting how what once was basic know-how (don't use your real name everywhere on the web) is now almost criminal as Facebook does their best to enforce, legally and otherwise, -real accounts, and way to many sites use Facebook as comments system / login etc or otherwise require you to sign with a full name.

Re: Turkish Citizenship Database Leaked

#53

Quoting a Turkish friend: ---start quote--- Luckily there’s no really valuable data, other than personnummer. But i am sure with a little bit of digging it would be super easy, during Gezi police had a pwd like 12345 The important thing with the data is national stats, which is super important commercially. And that is for free now. More spam in the mailbox for everyone. Obviously, for stalkers, sickos, or pedophiles…

personnummer? Sounds very Scandinavian to me and quick googling doesn't yield anything particularly Turkish about that word?

Re: Turkish Citizenship Database Leaked

#54

Earlier quoted context omitted.

I'd argue there is none, because friends and family already know how to reach you. However, both sites display ads.

I'm not saying there aren't drawbacks, but I can think of two benefits: 1. It makes some forms of investigative journalism easier. For example, there has been a lot of discussion about the potential problems of having most of the influential journalists in Sweden living within a very small "hipster" area in Stockholm. 2. E-commerce companies may decide to only ship to the adress where you are officially registered, m…

On the other hand it's trivial to change someone's official address. Just send a certain form by mail to the tax agency. (Not sure if they send a confirmation to the old address; but if they do, the perpetrator only has to pick someone who's on vacation; hello Twitter & Facebook.)

Re: Turkish Citizenship Database Leaked

#55
post #32

This is the product of self-righteous activism. You'd have to be pretty deluded and starving for attention to think effectively releasing tens of millions of private individuals' complete identification data is justifiable in some way.

It could positively influence bad auth practices.

Hardly so for Turkey. Important positions in Turkish bureaucracy are being filled by people who have close ties to the ruling party. I guess this is somewhat normal in many countries given that you have some appropriate filters, unfortunately such filters are diminishing every year. Just last week the prime minister announced they would hire 750k long term government employees bypassing the regular procedures and by creating adhoc exams for each position. Regularly Turkey has this nationwide exam called KPSS which you would have to pass to be a government employee, bypassing this exam will even further reduce the government quality. I don't see how people without the necessary qualifications can improve these systems.

Re: Turkish Citizenship Database Leaked

#56
post #21

Earlier quoted context omitted.

Difference being that in Sweden there is a different requiremnet for causing harm (IE; national ID card or passport - or linked bank account) simply having a social security number and address is not enough for identity theft to occur. in other countries they treat SSN's as private, thus they are trusted.

That's not really true. Often you can order stuff from the internet with only knowing the SSN. You can order on invoice with Klarna for example. Of course, for things that really matter, you need an ID.

[deleted]

Re: Turkish Citizenship Database Leaked

#57

Quoting a Turkish friend: ---start quote--- Luckily there’s no really valuable data, other than personnummer. But i am sure with a little bit of digging it would be super easy, during Gezi police had a pwd like 12345 The important thing with the data is national stats, which is super important commercially. And that is for free now. More spam in the mailbox for everyone. Obviously, for stalkers, sickos, or pedophiles…

personnummer? Sounds very Scandinavian to me and quick googling doesn't yield anything particularly Turkish about that word?

In Turkish it is called "tc kimlik numarasi", that would translate to "Turkish Republic ID Number"

Re: Turkish Citizenship Database Leaked

#58
post #42
post #32

Earlier quoted context omitted.

It could positively influence bad auth practices.

And losses of millions of turkish liras for a while is a feasible trade-off for that? Whoeves did this is an utter idiot, a profoundly inconsiderate hacktivist , whatever that shall be.

I see your point and I might agree with you (didn't make up my mind yet), but how is this different than disclosing someone else's vulnerability with a "hardcoded" date? In some cases, getting from disclosure to a working exploit is trivial.

If this data was so easy to get, any state actor probably had it for years now. Also powerful criminal organisations.

Wasn't the harm potentially done already and this might trigger a change? Maybe now all those banks will not accept whatever data is in this leak as a way to authenticate a customer. In that scenario we would be in a better situation because of the leak.

Re: Turkish Citizenship Database Leaked

#59
post #21

Earlier quoted context omitted.

Difference being that in Sweden there is a different requiremnet for causing harm (IE; national ID card or passport - or linked bank account) simply having a social security number and address is not enough for identity theft to occur. in other countries they treat SSN's as private, thus they are trusted.

That's not really true. Often you can order stuff from the internet with only knowing the SSN. You can order on invoice with Klarna for example. Of course, for things that really matter, you need an ID.

But are you liable for those purchases? Can the seller accept some form of post-purchase payment mechanism and go after the SSN holder?

Re: Turkish Citizenship Database Leaked

#60
post #21

Earlier quoted context omitted.

Difference being that in Sweden there is a different requiremnet for causing harm (IE; national ID card or passport - or linked bank account) simply having a social security number and address is not enough for identity theft to occur. in other countries they treat SSN's as private, thus they are trusted.

That's not really true. Often you can order stuff from the internet with only knowing the SSN. You can order on invoice with Klarna for example. Of course, for things that really matter, you need an ID.

You are not liable but you can't ignore it either, if you do nothing you are going to go to court in the end.
Post reply on HN