Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Source code of Swedish e-government services has been leaked

darkwebinformer.com

Post reply on HN
Print view View original

91–100 of 263 posts

Re: Source code of Swedish e-government services has been leaked

#91

Post by Batman8675309 »

ROllerozxa wrote: post #89
picafrost wrote: post #72

Earlier quoted context omitted.

I think this is good to highlight for non-Scandinavians. Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings. Personal identification numbers do not tend to be considered private in the same…

And then there are widespread amounts of identity theft and mapping out of minorities, but you may sleep well as everyone knowing where you do so is an important step in making sure corruption is no more, don't think too much about it.

Just a few years ago this was about to change in Sweden.

But they didn't change it, because "women should be able to look up the men that they date".

Re: Source code of Swedish e-government services has been leaked

#92

Post by whizzter »

nunobrito wrote: post #49
ptx wrote: post #32

Earlier quoted context omitted.

What does "electronic signing documents" mean? Keys used for signing? Or merely some documents that were signed with electronic signing?

If that is case, then it would have been wrong from the beginning for any government to keep hold of the private keys for the signature on my citizen card. Because in that case they can sign documents on my behalf without my permission. In a court case, it would be near impossible for me to prove that the government gave my private key to someone else and that it wasn't me signing an incriminating document.

We might've lucked out here, there is some signature data on ID cards today and official _plans_ to make a government backed signing service, but practically _nobody_ uses them in practice to just revoking all those keys will be a minor issue.

Currently most Swede's use a private bank consortisum controlled ID solution for most logins and signatures.

Re: Source code of Swedish e-government services has been leaked

#93

Post by latexr »

xorcist wrote: post #54
vladms wrote: post #33

Earlier quoted context omitted.

> Unfortunately, the public tender process encourages awarding contracts to these giants that repeatedly fail to deliver on even basic opsec and still believe in security-by-obscurity So what you think would be the solution ? From what I see (both public tender or not), I would claim that "any large IT project/company will suffer from security issues", so not sure what is the added value to single out a process (the…

I have (the start of a) solution, but it's a boring one: You have to have people who care about this stuff. If you don't care, the rest does not matter. It does not matter if, when and how you outsource if you don't care about the outcome. You can't just pay someone a salary, nor a consulting bill, check the box and say you've done your part. And the other way around: These huge consulting conglomerates would get ver…

> You have to have people who care about this stuff.

What?! Preposterous! How could you even make money out of that? No no no, that will not do. You will ask your AI agent some vague question, commit the result without review and push it to the client. And you’ll like it. If there’s any trouble, call Timothy, he’ll be on vacation with his family in Thailand. Some resort, “Lotus” something or other.

Re: Source code of Swedish e-government services has been leaked

#94

Post by internet_points »

whynotmaybe wrote: post #82
picafrost wrote: post #72

Earlier quoted context omitted.

I think this is good to highlight for non-Scandinavians. Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings. Personal identification numbers do not tend to be considered private in the same…

I heard a rumor that some people use this to check their neighbour's revenue and sometimes make snark comments if one of them has a high revenue but lives in a "average revenue" part of town. They'd say that if you earn a lot, you shouldn't take a cheap housing. Any truth to that?

Making snark comments about that sounds very unlikely. More likely they'd have respect for someone living frugally and not showing off. See https://en.wikipedia.org/wiki/Law_of_Jante

Re: Source code of Swedish e-government services has been leaked

#95

Post by noosphr »

latexr wrote: post #21
noosphr wrote: post #15

I like paper documents for this very reason. It's very hard to steal everyone's documents when they weight about the same as a train.

But it’s also very easy to lose all of them in a fire or flood. Different tradeoffs.

This is a feature not a bug.

Re: Source code of Swedish e-government services has been leaked

#96

Post by lysace »

JensRantil wrote: post #17

I am a Swedish citizen. Lived here for almost 40 years. It is a bit unclear to be what the "the Swedish e-government platform" is. Would have been great if they at least could have published which domain name the service has.

There is no such thing according to Peder Sjölander, IT Director at the Swedish Tax Agency:

https://www.svt.se/nyheter/inrikes/uppgift-statlig-it-inform...

– Neither our data nor our users' data has been leaked. It is a service we use for e-signatures that has been affected, but there is no data from us or our users there, says

The information that source code was leaked from a joint government e-platform is not true, according to Peder Sjölander.

– There is no such platform. I think the perpetrators in this want people to feel insecure. We feel confident that our data is safe and we have the situation under control before the tax return period opens next week.

Re: Source code of Swedish e-government services has been leaked

#97

Post by xorcist »

dns_snek wrote: post #68
xorcist wrote: post #54

Earlier quoted context omitted.

I have (the start of a) solution, but it's a boring one: You have to have people who care about this stuff. If you don't care, the rest does not matter. It does not matter if, when and how you outsource if you don't care about the outcome. You can't just pay someone a salary, nor a consulting bill, check the box and say you've done your part. And the other way around: These huge consulting conglomerates would get ver…

I don't think that's a particularly novel idea, the question is how do you get people who care in an organization that has hundreds of thousands of employees (the public sector)?

You may not like the trivial answer: The same way as we do everything else. How do we get people to show up for work? How do we get people to respect data security boundaries? None of these are questions of technology. The answer is culture. We need to create a strong shared culture of caring, by hiring people that care and putting them in an environment where caring is appreciated.

Re: Source code of Swedish e-government services has been leaked

#98

Post by ROllerozxa »

Batman8675309 wrote: post #91
ROllerozxa wrote: post #89

Earlier quoted context omitted.

And then there are widespread amounts of identity theft and mapping out of minorities, but you may sleep well as everyone knowing where you do so is an important step in making sure corruption is no more, don't think too much about it.

Just a few years ago this was about to change in Sweden. But they didn't change it, because "women should be able to look up the men that they date".

Oh yes. I'm Swedish and I do have to admit I have looked up quite a lot of people on these kinds of sites. It's become so normalised to do this even though I also feel like it would be better as a whole if they just did not exist in the first place.

Last update I heard about something being done about it was this:

https://www.regeringen.se/pressmeddelanden/2024/11/utredning...

Not sure what the current status is.

Re: Source code of Swedish e-government services has been leaked

#100

Post by latexr »

noosphr wrote: post #95
latexr wrote: post #21

Earlier quoted context omitted.

But it’s also very easy to lose all of them in a fire or flood. Different tradeoffs.

This is a feature not a bug.

That depends entirely on what the records hold and who is interpreting the event.
Post reply on HN