News for hackers. Stuff that matters.
Re:Hacker steals government ID database for Argentina's enti... by vadfa on Tuesday October 19, 2021 @07:54AM (#28917110)
Isn't it like this in practically every European country? We have ID cards with every one of those fields printed on them, including thumbprints. All of that information is probably in one big table somewhere.
Re:Hacker steals government ID database for Argentina's enti... by roenxi on Tuesday October 19, 2021 @08:45AM (#28917473)
Everyone does it is not actually a persuasive argument that something is a good idea. It was an uphill struggle back in the day to get everyone washing their hands.

This is a predictable outcome of a government creating then storing long term secrets in a database. Governments are not good at keeping secrets. The data will leak.

Re:Hacker steals government ID database for Argentina's enti... by vadfa on Tuesday October 19, 2021 @12:01PM (#28919631)
I don't remember justifying it. Your comment seems a cheap karma grab.
Re:Hacker steals government ID database for Argentina's enti... by Aeolun on Tuesday October 19, 2021 @08:11AM (#28917227)
To be fair, The security around the digital system in the Netherlands, is almost painful.

Japan is really good in this, they store everything on paper and fax it around.

They’re also starting with a national ID now though.

Re:Hacker steals government ID database for Argentina's enti... by inter_netuser on Tuesday October 19, 2021 @08:08AM (#28917206)
Germany supposedly does not have a central registry, I've been informed.
Re:Hacker steals government ID database for Argentina's enti... by Semaphor on Tuesday October 19, 2021 @08:22AM (#28917300)
Source? Even the Addresses (Melderegister) are centralized.

edit: Looking it up [0] it looks like there is far more data there, all in a central database since at least 2015 (not sure how it worked before).

[0]: https://de.wikipedia.org/wiki/Melderegister#Deutschland

Re:Hacker steals government ID database for Argentina's enti... by inter_netuser on Tuesday October 19, 2021 @08:27AM (#28917344)
It's been a little while, so perhaps things have changed, but I was told that quite a bit of the data exists only on the card itself.

From your link it seems i was not entirely misinformed: "Contrary to popular belief, there is no central administration of resident registration in Germany. The exception is the registration of resident aliens (see Central Register of Foreign Nationals). Registration is organized by 5283 local offices throughout Germany.[18] "

I'm unable to find the part about cards. will edit or reply more if i do find it.

Re:Hacker steals government ID database for Argentina's enti... by Semaphor on Wednesday October 20, 2021 @03:04AM (#28927647)
Looking into it again, it appears the residential registration is indeed decentralized, but most of that data seems to still be saved in a central database thanks to Abgabenordnung § 139b [0].

There is something about sharing that information, but I can’t say I understand the legalese ;)

[0]: https://www.gesetze-im-internet.de/ao_1977/__139b.html

Re:Hacker steals government ID database for Argentina's enti... by germanier on Tuesday October 19, 2021 @12:14PM (#28919828)
There is no central database, even after the changes of 2015. It is still hosted by each individual municipality (which is exactly what your link states).

However, there here is a standard API which allows some entities to query all those decentralized registers. It is designed to make it hard to siphon out all data at once (which hopefully trips audit systems in enough places that someone cares to look into).

The only centralized database of that kind is the one at BZSt, which contains far less data. For the moment access is limited to tax-related issues but it will be soon expanded to a centralized base data registry (Registermodernisierung).

Re:Hacker steals government ID database for Argentina's enti... by inter_netuser on Wednesday October 20, 2021 @10:19PM (#28939510)
What's in the BZSt?
Re:Hacker steals government ID database for Argentina's enti... by MonkeyClub on Tuesday October 19, 2021 @08:13AM (#28917238)
Because of (political) federation I assume, right?

However are the regional governments supposed to develop their own solutions, or are they using a centrally developed database, just with local unconnected instances?

Re:Hacker steals government ID database for Argentina's enti... by inter_netuser on Tuesday October 19, 2021 @08:31AM (#28917367)
"Contrary to popular belief, there is no central administration of resident registration in Germany. The exception is the registration of resident aliens (see Central Register of Foreign Nationals). Registration is organized by 5283 local offices throughout Germany.[18] "

https://en.wikipedia.org/wiki/Resident_registration#Germany

I was also told something on identity cards only lives on the cards, but cannot find the source or details on that.

Re:Hacker steals government ID database for Argentina's enti... by germanier on Tuesday October 19, 2021 @12:18PM (#28919874)
Each municipality is free to choose their own solution to the legal requirements (which includes a standardized API). For the moment, there are eight different software solutions on the market (developed by both public and private entities), see https://www1.osci.de/meldewesen/xmeld/registrierte-herstelle...
Re:Hacker steals government ID database for Argentina's enti... by DoingIsLearning on Tuesday October 19, 2021 @08:07AM (#28917200)
Most EU cards also integrate fiscal id numbers and national healthcare id numbers in the chip but arguably do exclude registered address, so only a city/province of residence is available.
Re:Hacker steals government ID database for Argentina's enti... by vadfa on Tuesday October 19, 2021 @08:08AM (#28917205)
Not sure about the rest but Spanish ID card includes full address.
Re:Hacker steals government ID database for Argentina's enti... by N19PEDL2 on Tuesday October 19, 2021 @09:26AM (#28917819)
Italian ID cards too, as well as the owner's signature, the fiscal code (an unique identification code similar to the SSN in the USA) and the fingerprints (though these latter are stored in the chip only, not printed on the card).

It's very likely that this data is also stored in some government database, which I hope will never get breached.

Re:Hacker steals government ID database for Argentina's enti... by CaciaraAsAServi on Tuesday October 19, 2021 @01:50PM (#28921144)
Nitpick (as you well know) - codice fiscale in Italy differs from USA SSN in that, for once, it has never had AFAIK any semblance of secrecy at all, as you can easily construct it starting from name, surname, place and date of birth [1] Funnily enough, this sometimes results in two individuals computing to the same code [2]

[1] https://en.wikipedia.org/wiki/Italian_fiscal_code

[2] https://it.wikipedia.org/wiki/Omocodia

Re:Hacker steals government ID database for Argentina's enti... by soco on Tuesday October 19, 2021 @08:18AM (#28917270)
Swiss cards not but well Switzerland is not EU...
Re:Hacker steals government ID database for Argentina's enti... by dgellow on Tuesday October 19, 2021 @11:34AM (#28919274)
It’s part of Schengen though. But I confirm, no adresse on our ID cards.
Re:Hacker steals government ID database for Argentina's enti... by ogogmad on Tuesday October 19, 2021 @12:04PM (#28919685)
Not in the UK (which is in Europe but no longer in the EU). Was planned before 2010 and then got scrapped by the subsequent government. What's in the works now?
Re:Hacker steals government ID database for Argentina's enti... by maze-le on Wednesday October 20, 2021 @02:48AM (#28927553)
I think so, but it doesn't mean that it is a good idea... Every bit that creates an official identity should be handled with great care.