23 ms·
Turkish Citizenship Database Leaked
- asimo1945 11y agomernis=# SELECT * FROM citizen WHERE last = 'UÇAR' AND \ first = 'ABDULLAH' AND \ date_of_birth LIKE'%/%/1977';
- asimo1945 11y agomernis=# SELECT * FROM citizen WHERE last = 'UÇAR' AND \ first = 'ABDULLAH' AND \ date_of_birth LIKE '%/%/1977';
- ponyous 11y agoIn case it goes offline: #Turkish Citizenship Database Who would have imagined that backwards ideologies, cronyism and rising religious extremism in Turkey would lead to a crumbling and vulnerable technical infrastructure? This leak contains the following information for 49,611,709 Turkish citizens: (IN CLEARTEXT) - National Identifier (TC Kimlik No) - First Name - Last Name - Mother's First Name - Father's First Name - Gender - City of Birth - Date of Birth - ID Registration City and District - Full Address **Lesson to learn for Turkey:** - Bit shifting isn't encryption. - Index your database. We had to fix your sloppy DB work. - Putting a hardcoded password on the UI hardly does anything for security. - Do something about Erdogan! He is destroying your country beyond recognition. **Lessons for the US?** We really shouldn't elect Trump, that guy sounds like he knows even less about running a country than Erdogan does. [Example Data] [Download URL]
- ZoF 11y agoProbably won't come down anytime soon, this box is hosted by Voxility, they're notoriously terrible for dealing with abuse complaints.
- zo1 11y agoWhat an odd place to put an anti-Trump comment.
- ponyous 11y agoI really don't care about US politics. I came across the link on Reddit and found it interesting. Make out of it what you want.
- odinduty 11y agoI don't think he was accusing you of anything.
- ponyous 11y agoHuh, I get it... I was thinking completely out of context when I read his comment.
- everythingcli 11y agoWhat sub did u find it in?
- ponyous 11y agoLink to Reddit thread: https://www.reddit.com/r/security/comments/4d9f22/turkish_citizenship_database_dumped/ https://www.reddit.com/r/security/comments/4d9f22/turkish_ci...
- everythingcli 11y agothx
- zo1 11y agoSorry, didn't mean to imply that you made the comment.
- deadowl 11y ago
- StavrosK 11y agoBetter formatting: https://www.pastery.net/adffrv/ https://www.pastery.net/adffrv/
- venomsnake 11y agoI am imagining what PKK could do with that info.
- mathetic 11y agoNot much. Not their style of warfare really.
- IndianAstronaut 11y agoSomewhat interesting to think that this very personal information of tens of millions of citizens is just 1.5 gigs in size. Are the implications of the National identifier similar to an SSN in the US?
- mathetic 11y agoNot to the same extent.
- amelius 11y agoDoes it contain the addresses of citizens with a double nationality who now live abroad?
- darkhorn 11y agoIf you were a voter in 2010, as far as I know. But I don't know if it contains foreign home addresses. Some people say that it was fetched from ysk.gov.tr . Normally MERNİS has more detailed database, so they say that it cannot be MERNİS. MERNİS stands for Central Citizenship Administration Center, it contains even pre-Turkish Republic "citizens", like from Ottoman Empire. YSK stands for Supreme Electoral Council. A friend of mine had access to MERNİS, he once said that the leaked data is not directly from MERNİS.
- Havoc 11y agoNo need. They're all in Germany anyway.
- mathetic 11y agoThis data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code).
- xorcist 11y agoLet's hope that leaks like this forces the banks you speak of to care more about authentication.
- eveningcoffee 11y agoMany companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is in its essence public.
- MatekCopatek 11y agoExactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.
- sbarre 11y agoI've always hated the mother's maiden name security question because my mother kept her maiden name so it's not exactly a hard thing to figure out in my case. I think that one will go away sooner than later though, because taking a husband's name is becoming less common in a lot of societies.
- Grue3 11y agoIs this HackerNews or DoxingNews? How is doxing the whole country an acceptable submission?
- StreamBright 11y agoYou think that if it is not getting posted on HN than nobody will notice it? What would you qualify HN worthy submission? I did not read the URL just read the comments but it was quite entertaining, HN is not responsible about the content of the submission URLs but it is a great place to discuss the subject with other people.
- Grue3 11y ago>What would you qualify HN worthy submission? Something that doesn't dox random people, for starters.
- s_dev 11y agoThe problem was the creation of the list and the subsequent negligent protection of the data not it being passed to HN after it's been published to the internet. It's like the Ashely Madison leak - Hacker News discussed it happily as well even though that was a complete dox list of individuals.
- diminish 11y agoNo it is not similar to Ashhley Madison nor panama offshore accounts. It is similar to me dumping all HN users' personal IDs and addresses as well as birth certificates. Or similar to dumping all Irish citizen's driving licenses, addresses and ID info and linking them here on top. I have seen HN crowd being careful for a single person's privacy just to keep his mood up.
- StreamBright 11y agoHN did not do that though. Again, we are talking about the dump not executing it. Just because you are not talking about something bad it still exists. I got the Turkish page at least on 3 different channels, yet got the most meaningful comments on HN.
- return0 11y agoInteresting, but to be fair a typical facebook page has more information.
- deleted 11y ago[deleted]
- fabulist 11y agoIf you choose to sign up for facebook with real information, sure. You don't have much choice in the data your government loses about you.
- reitanqild 11y agoMeta: Interesting how what once was basic know-how (don't use your real name everywhere on the web) is now almost criminal as Facebook does their best to enforce, legally and otherwise, -real accounts, and way to many sites use Facebook as comments system / login etc or otherwise require you to sign with a full name.
- AimHere 11y agoYou don't have much choice when your friends or relatives post about you on Facebook either, and there, lying to Facebook is out of your hands. Privacy isn't transactional, it's environmental.
- macintux 11y agoI do not know, but strongly suspect, that my absence from Facebook means I'm rarely mentioned there. Certainly I'm mentioned less than if I had an account. Even if I am mentioned there, Zuckerberg & friends don't have any account to cross-reference to target me with ads, etc. So, my absence from Facebook is nonetheless a significant enhancement of my privacy.
- fabulist 11y agoIt is worth noting that Facebook maintains "ghost" profiles for people who aren't members, but of whom they are aware. I'm having trouble finding a reference, but I remember it came out that when your friends ("friends") give Facebook their email contacts so that they can locate other people using their service, Facebook remembers contacts which do not yet hold accounts. I speculate this information wouldn't be valuable if they didn't attempt to infer that particular posts mentioned these non-member profiles.
- staticelf 11y agoInteresting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.merinfo.se/ http://www.ratsit.se/ http://www.ratsit.se/
- marinabercea 11y agoThe data released contains national identification codes that are confidential. I believe the Swedish equivalent is the 'personnummer'. The sites you indicated appear to be regular person search engines, like the US equivalent Whitepages? Can you show a specific search result, pick any Swedish name you want, that would also list the person's personnummer?
- tednoob 11y agoThe 'personnummer' is also publicly available, though the sites usually have to limit access in order to comply with Personuppgiftslagen/PuL (Swedish version of the Data Protection Directive).
- rhblake 11y agoThe mentioned websites contain at least the full name, birthdate, registered address and marital status of every Swedish resident (at least above the age of ~16?), with the exception of a very small percentage of people with protected identity (which you can only get if you're under a "serious and concrete threat"). They get this data straight from the government - it's all public. Go to e.g. http://www.ratsit.se/ http://www.ratsit.se/, write "Stockholm" under "Var" and hit "Sök" and click on a name for an example. You won't see the personal identification number ("personnummer") that we use for absolutely everything, however as tednoob mentions you can get access to this by paying for premium access. Or you can call the Swedish Tax Authority. They don't have the right to ask who you are or why you want someone's number.
- bemmu 11y agoIn Finland even salary and capital gains data is released. Newspapers compile high score lists from it each year. There might be some lower limit to how much you need to earn before your data becomes public. Here's some select tidbits from the data in English: http://yle.fi/uutiset/who_are_finlands_top_earners/8427787 http://yle.fi/uutiset/who_are_finlands_top_earners/8427787
- marinabercea 11y agoThis is the product of self-righteous activism. You'd have to be pretty deluded and starving for attention to think effectively releasing tens of millions of private individuals' complete identification data is justifiable in some way.
- nsajko 11y agoIt could positively influence bad auth practices.
- gkya 11y agoAnd losses of millions of turkish liras for a while is a feasible trade-off for that? Whoeves did this is an utter idiot, a profoundly inconsiderate hacktivist, whatever that shall be.
- NetStrikeForce 11y agoI see your point and I might agree with you (didn't make up my mind yet), but how is this different than disclosing someone else's vulnerability with a "hardcoded" date? In some cases, getting from disclosure to a working exploit is trivial. If this data was so easy to get, any state actor probably had it for years now. Also powerful criminal organisations. Wasn't the harm potentially done already and this might trigger a change? Maybe now all those banks will not accept whatever data is in this leak as a way to authenticate a customer. In that scenario we would be in a better situation because of the leak.
- halukakin 11y agoHardly so for Turkey. Important positions in Turkish bureaucracy are being filled by people who have close ties to the ruling party. I guess this is somewhat normal in many countries given that you have some appropriate filters, unfortunately such filters are diminishing every year. Just last week the prime minister announced they would hire 750k long term government employees bypassing the regular procedures and by creating adhoc exams for each position. Regularly Turkey has this nationwide exam called KPSS which you would have to pass to be a government employee, bypassing this exam will even further reduce the government quality. I don't see how people without the necessary qualifications can improve these systems.
- e-sushi 11y agoCryptographers: 1 -- Idiots: 0
- fabulist 11y agoThe winners here are fraudsters and the losers are the Turkish people. Cryptographers never enter into the equation.
- e-sushi 11y agoI definitely agree. If only a single cryptographer would have been part of the equation, no one would have had a reason to write “Bit shifting isn't encryption” . Looking at my comment again again, I guess it was simply too short to be understood as a cinical “read it with a smile” kind of thing. Just to be sure no one gets me wrong: I surely did not want to hype any of the bad guys, nor make fun of the victims… the innocent Turkish citizens involved. Yet, I can’t help to shake my head that a Turkish governmental agency was stupid enough to use a near to “xor-by-one” snakeoil crypto thingy instead of well-vetted and security proven cryptographic algorithms and protocols. If they would have, there wouldn’t be a problem – just a blob of encrypted data. Which is why I said: “cryptographers 1 – Idiots 0”… which was merely meant to be interpreted as “roll your own crypto, eat your own poison – no cryptographer would have stepped into the stupid pitfall of using home-brew toys instead of well-vetted algos & protocols”. Hope that somewhat is able to explain what I meant with my comment. If my cynical comment was misunderstood due to its minimalism – my bad. Downvotes correctly punished me accordingly for my comment being too short to be understood upon first glimpse – next time, I’ll be sure to be clearer.
- deleted 11y ago[deleted]
- koolba 11y agoNote: I wrote this up as a reply but the parent was deleted in the interim so posting at the top level instead. > Which server is this? A Whois lookup returned nothing. The whois command works on domain names, not IP addresses. To get the DNS name associated with an IP address you can try a reverse lookup: $ dig -x 185.100.87.84 Unfortunately that only works if the the reverse record has been set up and it hasn't in this case. You can still see where the server is located via tracepath: $ tracepath 185.100.87.84 [truncated] 12: lon-tel-01c.voxility.net 86.537ms asymm 16 13: buc-ird-01c.voxility.net 147.516ms asymm 17 14: buc-ird-27sw.voxility.net 136.914ms asymm 18 15: buc-ird-46sw.voxility.com 149.699ms asymm 18 16: 185.100.87.84 143.626ms reached So most likely the server is hosted on voxility.com which looks like an IaaS provider.
- eimann 11y agoWhat do you mean by "whois does not work on IP addresses", $ whois 185.100.87.84 Abuse contact info: abuse@flokinet.is inetnum: 185.100.87.0 - 185.100.87.255 netname: FlokiNET-Romania descr: FlokiNET ehf country: RO admin-c: KW2732-RIPE tech-c: KW2732-RIPE status: ASSIGNED PA mnt-by: FlokiNET created: 2015-12-15T13:52:42Z last-modified: 2016-02-05T18:53:56Z source: RIPE person: FlokiNET ehf address: P.O. Box No 4 address: 121 address: Reykjavík address: ICELAND phone: +3544150300 nic-hdl: KW2732-RIPE mnt-by: is-flokinet-1-mnt created: 2015-05-13T15:26:09Z last-modified: 2016-02-01T06:46:24Z source: RIPE route: 185.100.87.0/24 descr: FlokiNET ehf origin: AS200651 mnt-by: FlokiNET created: 2016-02-05T18:52:09Z last-modified: 2016-02-05T18:52:09Z source: RIPE
- koolba 11y agoWow I didn't know you put IPs directly in there. If so, it returns back the ownership info of the IP from ARIN. Not quite the same as getting the contact info for a domain name but still quite nifty. Thanks!
- dmitriid 11y agoQuoting a Turkish friend: ---start quote--- Luckily there’s no really valuable data, other than personnummer. But i am sure with a little bit of digging it would be super easy, during Gezi police had a pwd like 12345 The important thing with the data is national stats, which is super important commercially. And that is for free now. More spam in the mailbox for everyone. Obviously, for stalkers, sickos, or pedophiles this is an open source to attack. That is another security concern, because there was no db as in Sweden where you can access someone’s address this easy ---end quote---
- halukakin 11y agoHow is the address data not valuable? Even dangerous.
- nacs 11y agoI don't know about other countries but in the US, there are things called Whitepages which list names, addresses and phone numbers of the majority of people/businesses. Address data is pretty worthless considering how many places you can get such data.
- fluxquanta 11y agoIt's 2016 -- forget the Whitepages. Most people publicly update all of this information everyday, multiple times per day, through their social media accounts.
- PaulHoule 11y agoseeds!
- diminish 11y agoA criminal thief putting personal data online and giving political lessons, shame on you really. When your true goals are phishing, criminal activities, spamming to robe innocent people, at least be honest and do not make such grandiose statements. /rant
- rmc 11y agoYou shouldn't share this around. This is going to mess up a lot of innocent people's lives.
- insulanian 11y agoExactly!
- mavdi 11y agoIt's too late for that. Criminals have access to it already. I would argue we should indeed share it around so that at least average Turkish citizens are aware their data has been stolen.
- amiraliakbari 11y agoReally right! Even there should be a wiki containing all data leaks, at least the description if not the data.
- sxv 11y agoAnd we shall call it.. WikiLeaks. Oh wait.
- amingilani 11y agoWhy host the dump on an IP instead of a domain? I mean, I suppose skipping a domain means one less company that knows your personal information, but doesn't this mean Voxility[1] can lookup the customer for this IP? [1] koolba's comment: https://news.ycombinator.com/item?id=11420959 https://news.ycombinator.com/item?id=11420959
- zwarag 11y agoThere are countries where they "Ban" stuff by just not lookup up the domain name. I guess that why he did it this way.
- Matt3o12_ 11y agoA domain adds another point of failure (we want to take you down, we can just block the domain vs the server). As other have pointed out the abuse report for that hosted is quite terrible, so it might take a while to get taken down. Also, a domain name costs money, and you get little use of it (just paid $20 for a domain that gets taken offline in a few days). And even if there was a domain name, what should it be? Turkish-citizenship-dump.com? What values does it add if the site only sticks around for a few days?
- darkhorn 11y agoWell, they have blocked the IP within few hours.
- id122015 11y agoWhere others see a weakness, I see an opportunity: that's how we could send traffic-tickets straight to policemen's door. Enjoy watching "Rémi GAILLARD vs POLICE" http://www.youtube.com/watch?v=bJMLS4RDAzk http://www.youtube.com/watch?v=bJMLS4RDAzk
- devy 11y agoDoes the publisher of this leak really think the other politicians are better off in keeping private citizens' information private? S/he must have not heard the Clinton's own email server leak issue. Yeah, yeah, it's a cliché, but it shows exactly how much they care about security.
- jug 11y agoHow do the citizens of Turkey deserve this?
- supremeanger 11y agoIt doesnt seem too reasonable to compare a businessman to someone who supports terrorism and radical islam.
- sspiff 11y agoI wouldn't put it past Trump to encourage radical christian violence, whether that would be terrorism is in the eye of the beholder. Erdohan certainly is using the situation to crack down on national opposition and get as many separatists killed while the rest of the world is focusing on the Syrian civil war and its exports of violence. That's simply realpolitik though, not ideology. That said, the tone and message accompanying this leak is ridiculous.
- whalesalad 11y agoSo the folks who did this complained about a bad DB (needing indexes) but then failed to convert the DOB's to date types.
- yAnonymous 11y agoMaybe it's really stored as text?
- whalesalad 11y agoYeah but a simple query can add a column, copy the data while parsing it into a native date and then drop the original column. It can all be in a transaction too so that if there is a failure nothing is lost. I was mainly referring to the high and mighty attitude about fixing their broken db. If you're gonna fix it, it's all or nothing in my book.
- butler14 11y agoOnly on HN.
- yAnonymous 11y agoTrue. Although showing how unprofessionally the data is kept makes a good point, too.
- ttn 11y agoTR citizen here, for the last 10 years only those who are really close to AKP got the government contracts including software like this etc. for stupid amounts of money with no know-how. Therefore this is absolutely normal -at least for us-, only thing that surprised me about this leak is this got into front page of HN. Those software "companies" take millions of liras, usually for stupid CRUD stuff, develop it in like years and result is goddamn vulnerable, unaesthetic pieces of garbage. I'm on that list as well. With that info, a terrorist can buy a SIM card for my name, use it to proxy-blow up a goddamn bomb aaaaand I'm in jail.
- nacs 11y ago> With that info, a terrorist can buy a SIM card for my name Well that escalated quickly.. Terrorists wouldn't need this database to supply them with names and addresses as most of that info is public in most countries (white-pages is one place). And I can go to any local shop and get a pre-paid SIM card without any personal info involved. Also, if your country convicts you merely because someone used your name with no other evidence to tie you to the crime, you have bigger problems.
- ttn 11y agoName and maybe address can be found somehow but identity number absolutely can not be found (should not be from now on). Private companies confirm auth with name, surname, X,Y,Zth number of identity number. You have to provide them name, surname and identity number in order to get a SIM card, in this example. You don't need to be convicted for anything anymore if someone wants you to go to jail :) They get you in and start writing bill of indictment(?).
- ttn 11y agoTo give a little more context, if you are TR citizen what information you use and should keep private is: 1)Identity Number 2)Your mother's pre-marital surname.
- 11y ago
- ommunist 11y agoIs this the Russian answer to Sukhoi plane incident?
- bediger4000 11y agoIsn't the real lesson here twofold? 1. Governments can't keep this kind of data secure. 2. Massive troves of information that identify individuals are a very tempting target. This sort of breach argues against big centralized (e.g. NSA's "sniff it all") data stores. They're just too easy to get into the wrong hands.
- hbbybhybhb 11y agosasasasasas
- peter303 11y agoOnly a matter of time before the whole US SS/IRS database is dumped into the public domain by political hackers too. Pieces of it have been liberated by sloppy corporations and medical databases. But not the whole thing from the government.
- throwawayturk 11y agoThe leak reported to be from YSG [1], organization that manages the election registers. Software used by them developed by Cybersoft [2]. Cybersoft was part of the system who developed the new identity system in Turkey. The practices used by Cybersoft reported to be horrible. I know someone who worked on that project (about 15 years ago), reportedly they were really bad, playing games on servers where the all identity data of the citizens are stored. I do also know that any employee who was part of the project had access to the query systems, so it was possible to query the database for all citizens of Turkey, not sure how much data it revealed but it revealed the number of people with that name and surname ever born for sure. Now, I'm not a fan of Erdogan but Cybersoft was developing stuff before Erdogan even got elected. So yes, maybe the government who started to work with Cybersoft was corrupt, maybe the current one is too but let's not just use every single baseless argument to attack Erdogan, it doesn't help anything. [1] http://www.ysk.gov.tr/ysk/faces/Anasayfa.jspx http://www.ysk.gov.tr/ysk/faces/Anasayfa.jspx [2] http://www.cs.com.tr/TR/ http://www.cs.com.tr/TR/
- ratbertovich 11y agoI've been working for Cybersoft for the last 20 years, and I know we have not developed that system, whatever system is in question. We never had contracted work for either the NVI - Nufus Vatandaslik Isleri (General Directorate of Civil Registration and Nationality http://www.nvi.gov.tr/English,En_Html.html http://www.nvi.gov.tr/English,En_Html.html), the owner of the data on Turkish citizens, or the YSK - Yuksek Secim Kurulu (Directorate of Elections http://www.ysk.gov.tr/ http://www.ysk.gov.tr/ - they lack content on the English page) the state organizer for elections, and a client of NVI for voter information. As far as I know, development of the NVI system for "Central Population Management System (MERNİS), Identity Share System and Address Registration System" was contracted to and is still maintained by Kale Yazilim (http://www.kaleyazilim.com.tr/EN/Pages/Haberler.aspx http://www.kaleyazilim.com.tr/EN/Pages/Haberler.aspx). Likewise the development of the YSK system was contracted to and still maintained by HAVELSAN (http://www.havelsan.com.tr/ENG/Main/urun/2321/the-supreme-election-council-election-information-system-secsis http://www.havelsan.com.tr/ENG/Main/urun/2321/the-supreme-el...). Both projects were contracted when AKP was ruling, though I'm not sure why we are discussing this aspect. If the software leaked information, it is the usual suspect: the Turkish government awards contracts on price-point and the easy way to build cheap software is to forgo testing and quality assurance. As Murphy's law states: "Never forget that your weapon was made by the lowest bidder." You get what you payed for. As a reference system we developed, check out the General Directorate of Revenues' automation for its 1000+ tax offices and the 2003 ComputerWorld Honors winning Internet Tax Office. Last, we have English content at http://www.cybersoft.com.tr/ENG/?q=node http://www.cybersoft.com.tr/ENG/?q=node, where you can check our references.
- eatsfoobars 11y agoA user named testing123123 wrote about the dump on ##crypto, on Freenode. He claimed to be the one who dumped the database. It happened yesterday, on Sunday. Log: http://pastebin.com/EgKhCj6z http://pastebin.com/EgKhCj6z (Time is EEST, UTC +3)
- hemre 11y agoI guess this data is leaked from inside. Like most others. By the way, why the heck is this in ASCII?
- darkhorn 11y agoIn order to bit shift it?
- deleted 11y ago[deleted]
- deleted 11y ago[deleted]
- georgiev 11y agoHow illegal is it to download this database?
- Biganon 11y agoAbout 4
- darren0 11y agoIf a structural engineer builds a bridge that collapses and kills someone, they are liable in one way or another. What if the same was applied to software engineering. That would sure change how seriously you take PII.
- tomschlick 11y agoNew attack vectors come out every day. The one they used may have not even been related to THE application that someone built for this. If you built something 4 years ago for the gov't to use and they didn't keep the server patched how is that your fault as a software engineer?
- accommodavid 11y agoChecked my girlfriends family. Some of them are army officials and their info is in there as well. With that info you could actually do some serious damage. Also, based on address info we know this dump is 2-6 years old.
- feylikurds 11y agoOn the behalf of all Kurds worldwide, I would like to congratulate the wonderful people who did this hack and released the information. You guys are just like those who opposed Nazi Germany. We Kurds shall be forever grateful to you. To any Turk that may read this: Ne Mutlu Kürdüm Diyene (Happy is he who says I am a Kurd :) https://www.youtube.com/watch?v=VX4y9qUG8is https://www.youtube.com/watch?v=VX4y9qUG8is
- dang 11y agoThis comment doesn't belong here. Please keep nationalist politics off Hacker News.
- deleted 11y ago[deleted]
- Bozkurt 11y agotake your arabs base investbank.ae + full military https://news.ycombinator.com/item?id=11424606 https://news.ycombinator.com/item?id=11424606
- aorth 11y agoIt's interesting that the data doesn't have values with the Turkish dotted or dotless I, ie the one in İstanbul, İbrahim, or Diyarbakır. Seems pretty important to store people's names correctly. https://en.wikipedia.org/wiki/Dotted_and_dotless_I https://en.wikipedia.org/wiki/Dotted_and_dotless_I
- kafkaesq 11y agoThen again -- if they can't figure out how to index their databases... then most likely they probably can't out how to do locales and character sets properly, either.
- aorth 11y agoAh! And this ironically relevant 2008 post from Coding Horror about testing your code in the Turkish locale. https://blog.codinghorror.com/whats-wrong-with-turkey/ https://blog.codinghorror.com/whats-wrong-with-turkey/
- dang 11y agoSome readers have complained about this data being posted here. That's reasonable, but so is the community discussion. So we changed the URL from http://185.100.87.84/ http://185.100.87.84/ to the least bad news article we could google. If someone has a better URL, we can change it again.
- krapp 11y agoWhy bother removing the URL only to post it again in a comment?
- dang 11y agoTaking it out of the story link was the important thing. At that point HN was no longer broadcasting it. Not to include it the comment, especially since we always include the previous url in a comment, would have invited accusations of suppression, which would only call more attention to it.
- dely 11y agosadasdas
- karangoeluw 11y agoWhat are the ethics around analysing the data here in aggregate form (not individual info).
- deleted 11y ago[deleted]
- RussianPazanful 11y agoThank you so much. Downloaded for 15 minutes. File-torrent. Archive 1.5 GB. There is evidence of Erdogan and Ahmet Dobutoglu.
- deleted 11y ago[deleted]
- doomwelcome 11y agoну ахуеть теперь... Guys, tell me, please: If I add this base and create UI for find people to search by Name, birth date, etc. Is it legally?
- leo1187 11y agothat's what I think as well!!!!
- leo1187 11y agoI think that as well!!!
- muratbiskin 11y agoGulenist police provide data to them to take revenge from Erdoğan.I expect more to come since Erdoğan is still alive.Gulen said Erdoğan will be poisened, he must have a spy near Erdoğan.
- 3bbc 11y agonb
- dely 11y agokk
- dely 11y agofdfd
- astral_warrior 11y agoHere is new leak – USA Driver's Licens Database https://news.ycombinator.com/item?id=11454106 https://news.ycombinator.com/item?id=11454106
- ryan-c 11y agoThis is a hoax. I looked at the torrent file, the hash for every part is 7d76d48d64d7ac5411d714a4bb83f37e3e5b8df6, which is the sha1sum of 2MiB of zero bytes. I told Transmission to verify local data, and it now thinks it has the whole file.