linksunten Archiv

thx 2 blog.fefe.de - download everything on http://185.100.87.84/

Turkish Citizenship Database

Who would have imagined that backwards ideologies, cronyism and rising religious extremism in Turkey would lead to a crumbling and vulnerable technical infrastructure?

This leak contains the following information for 49,611,709 Turkish citizens: (IN CLEARTEXT)

• National Identifier (TC Kimlik No)
• First Name
• Last Name
• Mother's First Name
• Father's First Name
• Gender
• City of Birth
• Date of Birth
• ID Registration City and District
• Full Address

Lesson to learn for Turkey:

• Bit shifting isn't encryption.
• Index your database. We had to fix your sloppy DB work.
• Putting a hardcoded password on the UI hardly does anything for security.
• Do something about Erdogan! He is destroying your country beyond recognition.

Lessons for the US?

We really shouldn't elect Trump, that guy sounds like he knows even less about running a country than Erdogan does.

Let's take a look at the data:

mernis=# SELECT * FROM citizen WHERE last = 'ERDOGAN' AND \ first = 'RECEP TAYYIP' AND \ date_of_birth LIKE '%/%/1954'; -[ RECORD 1 ]------------+------------------------- uid | 33693950 national_identifier | 17291716060 first | RECEP TAYYIP last | ERDOGAN mother_first | TENZILE father_first | AHMET gender | E birth_city | ISTANBUL date_of_birth | 26/2/1954 id_registration_city | RIZE id_registration_district | GUNEYSU address_city | ANKARA address_district | KECIOREN address_neighborhood | KAVACIK SUBAYEVLERI MAH. street_address | KUSADASI SOKAK door_or_entrance_number | 26 misc | mernis=# SELECT * FROM citizen WHERE last = 'DAVUTOGLU' AND \ first = 'AHMET' AND \ address_city = 'ISTANBUL' AND \ date_of_birth LIKE '%/1959'; -[ RECORD 1 ]------------+------------------ uid | 12409622 national_identifier | 51541376338 first | AHMET last | DAVUTOGLU mother_first | MEMNUNE father_first | MEHMET DURAN gender | E birth_city | TASKENT date_of_birth | 26/2/1959 id_registration_city | KONYA id_registration_district | TASKENT address_city | ISTANBUL address_district | BAHCELIEVLER address_neighborhood | BAHCELIEVLER MAH. street_address | ISMAILPASA SOKAK door_or_entrance_number | 25 misc | mernis=# SELECT * FROM citizen WHERE last = 'GUL' AND \ first = 'ABDULLAH' AND \ mother_first = 'ADVIYE'; -[ RECORD 1 ]------------+-------------------- uid | 47612408 national_identifier | 21353291242 first | ABDULLAH last | GUL mother_first | ADVIYE father_first | AHMET HAMDI gender | E birth_city | KAYSERI date_of_birth | 29/10/1950 id_registration_city | KAYSERI id_registration_district | KOCASINAN address_city | ANKARA address_district | CANKAYA address_neighborhood | CANKAYA MAH. street_address | SEHIT ERSAN CADDESI door_or_entrance_number | 3 misc |