News for hackers. Stuff that matters.
Re:Turkish citizens' personal data offered online after gove... by mrtksn on Friday June 09, 2023 @03:02PM (#36262487)
Turkey's govt actually has quite a robust IT infrastructure and the Turkish citizens can do pretty much anything through the turkiye.gov.tr portal. It's really useful, you can even cancel subscriptions to services and utilities from there. You can book appointments for documents services or hospitals, see all your medical history or even heritage records.

These leaks keep appearing since many years but their origin is not necessarily a hack of the government infrastructure. The leaks usually occur at election cycles because the address based electorate data is handled and processed by the political parties(which are not exactly IT elites) and gets stolen or leaked.

Then there were high profile hacks of large food delivery services or other e-trade platforms.

All this resulted in people collecting and merging data from multiple leaks and re-selling those.

Edit: At some point, all the lawyers were using this data to track down people relevant to their court cases. They were selling it in CD format back then. Scammers and other criminals probably use this data too.

Re:Turkish citizens' personal data offered online after gove... by mghfreud on Friday June 09, 2023 @03:54PM (#36263269)
Do the data shared with political parties contain real estate deeds?
Re:Turkish citizens' personal data offered online after gove... by mrtksn on Friday June 09, 2023 @04:08PM (#36263468)
I'm not sure what exactly it contains but all those leaks contain Name, Address and your national identity number(something like social security number). It must also contain the birthplace and date because the last elections there was question over how many refugees got citizenship and the opposition said they checked the birthplaces and the number is not too high.

BTW, this data is available for the citizens too during the election cycle so you can check who lives in the same building with you and correct any mistakes. The list of the electorate is also attached at the polls so anyone can check for something fishy.

Then in Turkey there's this obsession with companies about collecting as much as info possible about you, so when the food delivery service is hacked the hackers now can easily add your phone number, update your current address by matching your national identity number because for some reason they need to have that info to deliver some kebab.

Also, this national identity number is generated through some algorithm which gives away your relatives and thanks to this, the hackers can also build your social graph from the leaks. Here is a repo about that algo: https://github.com/kerematam/akrabatcno

AFAIK it’s used in “your grandson had an accident and needs emergency surgery, send this much money ASAP” scams.

Re:Turkish citizens' personal data offered online after gove... by ClumsyPilot on Friday June 09, 2023 @07:47PM (#36265899)
> update your current address by matching your national identity number because for some reason they need to have that info to deliver some kebab

Publuc wifi at O2/millenium dome in london us almost as bad.

We really need to make extraneous data a liability and a risk burdain to business.

Re:Turkish citizens' personal data offered online after gove... by jacquesm on Saturday June 10, 2023 @03:52AM (#36268586)
In the EU this is already the case. You are only allowed to collect what you need for a specific purpose.
Re:Turkish citizens' personal data offered online after gove... by paganel on Saturday June 10, 2023 @01:02AM (#36267744)
> AFAIK it’s used in “your grandson had an accident and needs emergency surgery, send this much money ASAP” scams.

Sad to hear that that scam is also used in Turkey, some very low and despicable people also use it here, in Romania, targeting elderly people, and it’s really vile. I explicitly warned my parents not to fall for it in case someone calls them.

Re:Turkish citizens' personal data offered online after gove... by pmontra on Saturday June 10, 2023 @03:23AM (#36268441)
> this data is available for the citizens too during the election cycle so you can check who lives in the same building with you and correct any mistakes.

Why are they crowdsourcing a task that is a basic bureaucratic process in any state?

I mean, is Turkey a state that doesn't know who its citizens are and where they live?

Re:Turkish citizens' personal data offered online after gove... by mrtksn on Saturday June 10, 2023 @03:40AM (#36268523)
It's primary function is to prevent election fraud claims. In Turkey, elections are a serious business with participation rate above 85% and people are meticulous about the process.

Also, in Turkey the address registration is self declaration based and the government doesn't actually check if you live there. So theoretically, it can be possible for a political party to arrange it's voters distribution in such a way that it is advantageous for them. The idea is that citizens should be able to check against such things.

Re:Turkish citizens' personal data offered online after gove... by pmontra on Saturday June 10, 2023 @03:52AM (#36268587)
I'm from Italy. When I change the place where I live I declare the new address and before they update my data an officer comes and checks that I really live there. They can get in and check that's not an empty house and I'm only pretending to live there, if they want to. The check is usually nothing more than peeking through the door though.

It seems an easy task to perform.

Re:Turkish citizens' personal data offered online after gove... by mrtksn on Saturday June 10, 2023 @04:11AM (#36268665)
Wow that's creepy even for me, who lived for many years in Turkey. In Turkey, the only check is a reference from someone who is already registered in that address. All this can be done online, you declare your new address from turkiye.gov.tr and someone who's registered in that address can approve your declaration.

Do you know that in UK they don't even have such a registry? The government doesn't know where you live(at least officially) and when you need to apply for something that requires proof of address they would use bank statements on your name sent by mail to that address.

I wonder how do you feel about it? Do you think that the Italian approach is better? Why would the government has to know where you live for sure? Is it to prevent benefit frauds?

Re:Turkish citizens' personal data offered online after gove... by pmontra on Saturday June 10, 2023 @06:35AM (#36269331)
No idea, it's been like that since forever AFAIK. At least it solves a lot of problems (you just show your photo id) and basically everybody you have a contract with would know that information anyway, utilities, banks, etc.

Edit: there is a difference between the place you live and the place you are registered into. Example: a student is registered at parents' home and goes to study at a university in another city. He rents a room there. He has a contract there and the landlord must notify that the student lives there (since the terrorism laws in the 70s) but the student is still registered and votes at the city of his parents unless he registers at the other city.

This is common also for workers. Maybe they live for years in a city (and the state knows) but they are still registered on their home one.

Re:Turkish citizens' personal data offered online after gove... by aarong11 on Saturday June 10, 2023 @07:22AM (#36269556)
In the UK we have the electoral register. In order to vote, you need to be registered to it. The government most definitely does use it, as do credit scoring agencies and identitity verification services.

A lot of places do accept bank statements as a backup if you are not on the electoral roll.

Re:Turkish citizens' personal data offered online after gove... by rafram on Saturday June 10, 2023 @09:51AM (#36270463)
That sounds wildly inefficient.
Re:Turkish citizens' personal data offered online after gove... by jimmygrapes on Friday June 09, 2023 @04:01PM (#36263371)
Every time I try to search for a phone number (Bing/ddg) I get pages and pages of clearly auto generated fake names associated with numbers, all hosted on that same Turkish government portal. I don't know why.
Re:Turkish citizens' personal data offered online after gove... by mrtksn on Friday June 09, 2023 @04:27PM (#36263705)
Interesting, Are you sure it’s turkiye.gov.tr?
Re:Turkish citizens' personal data offered online after gove... by jimmygrapes on Friday June 09, 2023 @08:42PM (#36266331)
Not entirely sure, no. Happens on work PC using Chrome (with uBlock Origin and most lists activatsd), but not at all on phone using Firefox, despite identical searches just tested now. I don't know enough about how this works to say much more.
Re:Turkish citizens' personal data offered online after gove... by emmelaich on Friday June 09, 2023 @07:10PM (#36265572)
I get similar -- see my comment. But never gov.tr
Re:Turkish citizens' personal data offered online after gove... by mysterypie on Saturday June 10, 2023 @02:10AM (#36268075)
Does anyone know the purpose served by those reverse phone number search sites that list hundreds of thousands of fake names and fake addresses?
Re:Turkish citizens' personal data offered online after gove... by mrtksn on Saturday June 10, 2023 @02:20AM (#36268128)
The purpose is to serve ads and make money. They can do that because people will search for unknown numbers and names.
Re:Turkish citizens' personal data offered online after gove... by mysterypie on Saturday June 10, 2023 @03:43AM (#36268544)
When these fake name/number sites first appeared about 5-8 years ago, they didn't have any ads or even outgoing links. (I looked without an ad blocker.) Ads might be the explanation for many of them today, but I don't think it's the original or sole reason. Though I suppose it may have begun as a proof of concept without ads to gauge the traffic, then ads got added years later.

I've read speculation that they were started by telephone spammers to poison the utility of those who-called-me websites that highlighted spammers' phone numbers. I don't think that's the real reason either. It sounds too cute and clever for spammers. (As an aside: nowadays those services are useless since spammers can so easily fake the caller-ID.)

I'm still thinking that there is an interesting story for the original purpose.

Re:Turkish citizens' personal data offered online after gove... by hakanderyal on Saturday June 10, 2023 @03:18AM (#36268427)
These are not on a goverment site, just the usual SEO spam.
Re:Turkish citizens' personal data offered online after gove... by RadixDLT on Friday June 09, 2023 @08:30PM (#36266244)
"You can book appointments for documents services or hospitals, see all your medical history or even heritage records"

you must be crazy if you think this is a good idea

Re:Turkish citizens' personal data offered online after gove... by mrtksn on Saturday June 10, 2023 @12:14AM (#36267536)
It’s very convenient, one of the perks of a totalitarian government with sound IT infrastructure.
Re:Turkish citizens' personal data offered online after gove... by can16358p on Saturday June 10, 2023 @12:19AM (#36267565)
I agree that it's very convenient and I use it myself too: much better than going into crowded offices with bureocracy etc.

On the other hand, in case of a breach/hack, it becomes a serious problem.

Re:Turkish citizens' personal data offered online after gove... by aydgn on Saturday June 10, 2023 @01:49AM (#36267971)
why do you think it is a bad idea?
Re:Turkish citizens' personal data offered online after gove... by finnx on Saturday June 10, 2023 @09:47AM (#36270434)
Turkey has an universal healthcare system, government has to have all that info anyways. You have option to hide specific items from your medical history so not even your doctors can see them. Every access to your records by your doctors are also logged and reported.
Re:Turkish citizens' personal data offered online after gove... by dizhn on Saturday June 10, 2023 @07:09AM (#36269491)
It is a bit premature to declare this leak "more of the same" because I am hearing people's medical records are out in this one. That would point to a new, probably wider leak.
Re:Turkish citizens' personal data offered online after gove... by mrtksn on Saturday June 10, 2023 @07:36AM (#36269641)
That would be interesting, any links to reports about wider than the "usual" leaks?
Re:Turkish citizens' personal data offered online after gove... by terminalcommand on Saturday June 10, 2023 @07:49AM (#36269706)
Please read the article linked, they claim they have land registry records as well :/.
Re:Turkish citizens' personal data offered online after gove... by mrtksn on Saturday June 10, 2023 @08:08AM (#36269797)
They claim things but the sources are not of good quality. The screenshots I've seen were the usual data: Name, address and phone number.
Re:Turkish citizens' personal data offered online after gove... by dizhn on Saturday June 10, 2023 @08:59AM (#36270085)
That might be because some interface(s) are supposed to show something like demo data when you enter an ID number. They want a membership for more. But this is speculation. I am sure we'll find out in a few days when it's already forgotten.
Re:Turkish citizens' personal data offered online after gove... by dizhn on Saturday June 10, 2023 @08:56AM (#36270066)
A few anectodal things from ekşisözlük claiming people were able to look up the medicines they are taking. Nothing conclusive and I didn't really have the chance to do a deep dive with my current bandwith. The files are supposed to be around 64GB.
Re:Turkish citizens' personal data offered online after gove... by mrtksn on Saturday June 10, 2023 @09:47AM (#36270436)
Do you have a link to the files? I want to check this out.
Re:Turkish citizens' personal data offered online after gove... by dizhn on Saturday June 10, 2023 @04:45PM (#36274907)
Sorry no. I have to find it too. I can't do anything right now because I am on metered 4G.
Re:Turkish citizens' personal data offered online after gove... by terminalcommand on Saturday June 10, 2023 @07:49AM (#36269705)
They claim they have land registry records as well. Those are not part of the election database that was leaked eons ago.

Your comment is not accurate.

Re:Turkish citizens' personal data offered online after gove... by mrtksn on Saturday June 10, 2023 @08:09AM (#36269803)
They claim things but the screenshots I've seen did not have any of those.

check this: https://eksisozluk1923.com/img/bei0vtuj

It's the usual stuff: id number, name, birthday, address, phone.

Then they have the "relatives", which is deductible from the id number.

Then you have some promotional materials advertising the sale of additional data but I have not seen anyone confirming it.