Hacker News new | ask | show | jobs
by f3rnando 1637 days ago
In 2011, I blogged this: https://web.archive.org/web/20130501172236/http://www.fernan...

I found the "leak" with a right click in my own data (images), then I changed the params in the URL without being logged in and it worked. Fingerprints, Scanned ID cards, Photos, and Signature, of millions of Argentine citizens. When I changed the ID in the URL, I used the ID (found in public sources) from a guy named like me. When I saw his face, ID card, fingerprint, and signature my jaw dropped. Years later AFIP took over the control on .ar TLDs (NIC.ar) and for strange reasons I could not renew my domain. :) Ten years ago. Its all leaked. Or at least we should asume so.

2 comments

Just yesterday in the discussion of Internet Archive, a user made this comment https://news.ycombinator.com/item?id=29639814 I truly wonder if Internet archive crawls this and recuses to delete it, whats the implication. Since its public now.
A large number of people mistakenly upload identity documents to AirBnB. They aren't hard to find.

I assume those people were trying to provide the documents for account validation, but they end up making them public.