Hacker News new | ask | show | jobs
by picafrost 95 days ago
I think this is good to highlight for non-Scandinavians.

Scandinavian countries are extremely open and transparent in a way that might be shocking for Americans. For example, in Norway, I can check nearly anyone's brokerage account holdings, addresses, phone numbers, etc. on public websites. I can in theory look up anyone's tax filings.

Personal identification numbers do not tend to be considered private in the same way that social security numbers in the US are.

10 comments

We're so open, we even leak our government source code _ourselves_ https://github.com/navikt
Uff, COBOL written in Norwegian, talk about a narrow target to hit for hiring :)
I see mostly Java/Kotlin and Maven.

Pretty modern stack. I would start a government service using those today.

He is probably talking about this repo: https://github.com/navikt/DSF

Description translated:

> This system was one of the oldest IT systems in NAV, and ran in production for 51 years, from when the National Insurance Scheme was introduced in 1967. In January 2018, Presys was put into production, which together with Pesys became the successor to DSF. At that point, DSF was also shut down. The system is written in PL/I.

It's like the Apollo 11 code, but for social services.

Mostly PL/I but a few files of COBOL too, e.g. https://github.com/navikt/DSF/blob/main/src/GML/FO04D1X1.cob...
Who needs a Jones Act when you can have processes like these?
I heard a rumor that some people use this to check their neighbour's revenue and sometimes make snark comments if one of them has a high revenue but lives in a "average revenue" part of town.

They'd say that if you earn a lot, you shouldn't take a cheap housing.

Any truth to that?

There used to be a lot more of that, but a system was put in place where you have to identify yourself with electronic ID to access the information, and the information is logged so the other party can see it.

Nowadays I think mostly journalists use it to pull up information about politicians and other people that are in the public spotlight. There are of course the yearly "richest people in Norway" lists in various categories.

> There used to be a lot more of that, but a system was put in place where you have to identify yourself with electronic ID to access the information, and the information is logged so the other party can see it.

Yeah, kind of a fake solution, request it via Ratsit or whatever and all they get to see is that someone used Ratsit, but not who actually requested it.

Same goes for criminal cases, using Krimfup or whatever just leads to the service's name "leaking", while you can use fake details to sign up for both Ratsit and Krimfup.

I don't think there's anything like ratsit in Norway which would let you do this query anonymously.
> They'd say that if you earn a lot, you shouldn't take a cheap housing.

I think a lot of "humbleness" is also enforced this way, in the US seems normal (or even some European countries) to flaunt your wealth, and others seem more or less OK with it, while in Sweden it's much more socially unacceptable to in any sort of way brag about being rich, or showing that off. Humble-richness is OK and tolerated, but flagrantly displaying your wealth among the public is generally frowned upon.

So together with that, living in a average neighborhood but have a house that sticks out as clearly "rich person's house" will gain you evil looks from your neighbors, as you're "supposed to" live in a different neighborhood where neighbors look more equal, otherwise you again stick out, which is cause for friction culturally.

Lots of culture in Sweden is less about "lets correctly solve the problem" and more "lets ensure the gaping holes aren't so visible for everyone, so we can ignore it properly".

I have a friend who has moved to Sweden a while ago, and she told me a lot about the Swedish housing situation, and admittedly most if it went over my head, but in short, apparently very few places would even allow you to build even somewhat freely.

Apparently she was in a situation where she 'owned' her house, but still paid a monthly maintenance fee to some agency. and she wasn't allowed to repaint the rooms or do any sort of repairs, but had to go through some agency, who would do it for her.

Apparently that was a neighborhood thing, but she told me of epic (and apparently fruitless) struggles of her friends' who wanted to repaint their house in a different color and install some circular windows.

Probably just didn't really buy the house. Many houses are part of an association (BRF). When you buy one, you practically only buy the right to live in the house plus a share of the entire association. The fee that she paid was towards that association for things like maintainance, managment, trash-fees, internet, parking, likely heating and water, and possibly interest on the associations loan. It's just a different structure that many countries have for flats in a building, in this case applied to single family houses.
Here in Australia, I’ve seen what we call “strata title” applied to “single family homes” before (American terminology, we’d say “detached houses”) - it is uncommon, much more common with apartment buildings or townhouses/villas/semidetached (you share walls and maybe the roof with your neighbours, but there is no one above or below you)-but not completely unheard of
Making snark comments about that sounds very unlikely. More likely they'd have respect for someone living frugally and not showing off. See https://en.wikipedia.org/wiki/Law_of_Jante
We don't talk to our neighbours.
But about them?
Making snarky comments about it, no, not really. Will some people snoop around? Yes, nosy people can be found everywhere.
Yes and no. You get notified if someone else actually asks for your revenue info and so in practice nobody actually does it.
Is this not trivial to get a random person to check stuff for you in exchange for making requests for them (on people they are interested in)? Or is that illegal?
There's paid services that pull it for you, most charging around 100nok (10eur) per lookup.[1]

Media is also allowed to pull "top" lists like the 100 people with the most income in a city, 100 people with the most wealth in a city, etc.

[1] https://sjekkskatt.no/

You get a notification by post if someone requested your info.
What is the harm in this case? Shit people are shit even without information. They would be snark about something else then.
I think it was covered during a discussion about immigrants that are easily rejected - because they're immigrants.

The points was that it added another layer of issues for immigrants because they didn't understand the neighbourhood they "should be living in" with their revenue.

Why is this not the “shit people do shit things” category? This happens even without being immigrants. Large part of my family lives in a way poorer neighborhood than what we can afford, because we don’t care to move. People who have problem with this had other problems even before we got richer. There is exactly zero difference. The exact same people are snark as before, just for something else now. They were and would be snark even without this.

This seems to me a very bad attempt to hide xenophobia.

Yep, that tracks.

There's also the underlying current of Jantelagen (Law of Jante) https://en.wikipedia.org/wiki/Law_of_Jante

What's the point of making public how much each person owns? Aside from making you a prime target for kidnappings and targeted advertising?
Because tax is not your bill from 'government Corp ', its your contribution to the community, to your tribe. And we have explicit goals for this, besides bringing revenue (like the strongest back should carry the heaviest burden).

When we have communal contributions in other settings, your contribution is usually not a secret.

It is meant to give the tax system more legitimacy, that you don't gave to wonder if people sneak out of their contribution, you can check. It also leads to yearly debates about the tax system as the list of the richest(usually inherited) is published together with what they pay in income tax vs wealth tax.

Previously you could check up anyone anonymous. These days you have to log inn, and they get a notification. But the list of the richest and their tax contribution gets published in the newspaper.

This has also the effect of fueling envy, and allows employers to discriminate you if they see that you have side income (or if you don't). Why make all of this fuss about RGPD if private data is in the open?

And why not include medical data as well? The "tribe" has the right to know how much each one costs, right?

> why not include medical data as well?

It is usually those with little power that suffer when you do that, and those with a lot of power that suffer from financial openness. I ask this in the most naive way possible I think the Pandora Leak was a good thing, do you not agree?

https://en.wikipedia.org/wiki/Pandora_Papers

Richer people have many ways to protect themselves from society, unlike poorer people who have to bear the envy of others and can't escape it. Just ask any homeless person.

A rich man can just (and likely should, given the comments here) leave the Swedish crab basket.

Having society obsessed with watching how their neighbor is doing is a very good way to get everyone to look away, while, in the case of Sweden, a single family owns a large part of the stock exchange.

First, lets me clarrify that I am trying to explain how this practise is justified in Norway, I am not arguing for or against it. Some of the justification is pure cultural traits, which you can try to understand even if you dont agree with them yourself. Also note that this is not completely non-controversal, but it seems like the current setup (where you need to log in to search, in addition to the public lists in the newspaper) has reasonable strong support.

  This has also the effect of fueling envy
Yeah, I guess the same feeling can look like both "envy" and "sense of justice", depending on where you see it from. But we can't protect everyone from their feelings.

  and allows employers to discriminate you if they see that you have side income (or if you don't). 
I have never heard about this, and I don't really see the dynamic here. What definitely IS a effect is that it makes it a bit harder for employers to give employees with equal tasks very different salaries.

  Why make all of this fuss about RGPD if private data is in the open?

Because this is seen as, at least partially, public data.

  And why not include medical data as well? The "tribe" has the right to know how much each one costs, right?
No. And this is where you must just belive me when I say that this is just a truth about the cultue, most people (in Scandinavia) would not agree with argument. Your contribution is public, your weakness is private.

Let me give an example: The local kid socker team is organizing a cup, and the parrents need to help organizing, making and selling cookies, etc. This is organized through an app, where you sign up for tasks, and everyone can see what you are commiting to contribute. The same team also have an arrangement where the(small) membership fee can be waivered if you can't afford it, or you can get help buying equipment(shoes) for your kid. This is handled by you letting the trainer know in private, and he will discretely handle it.

Common citizens aren't supposed to be blockwarts judging who deserves or not their money.

> But we can't protect everyone from their feelings.

We can protect ourselves from the feeling of others by not sharing this data.

> equal tasks very different salaries

Unless you are an unqualified factory worker on a line with quantifiable output, in a service economy "equal tasks" are highly subjective.

> This is handled by you letting the trainer know in private, and he will discretely handle it.

Maybe the poor kid would rather not tell the trainer that he is poor and face paternalistic attitudes? And the rich kid wouldn't be reminded all the time that he is guilty of having richer parents? Add race/migration and you'll quickly tolerate bullying because of "social reasons".

https://nordictimes.com/the-nordics/sweden/bullying-doubled-...

As I said above, I explain the cultural norms making it seen as acceptable. I am not trying to convince you, and I am certainly not interested in a bunch of random tangental discussions.

  Maybe the poor kid would rather not tell the trainer that he is poor and face paternalistic attitudes? And the rich kid wouldn't be reminded all the time that he is guilty of having richer parents? Add race/migration and you'll quickly tolerate bullying because of "social reasons".
It would be the parrent who ask the trainer to have it waived, not the kid. No kid, rich or poor, would know if they received help in paying the bill or buying equipment. The whole point of the example was exactly that while peoples contribution is public, their requirement for support is not, so there would be no cultural acceptance for the arguement "since taxes are open so should healtcare-usage". And again, this is a explanation of the cultural context, it is irrelevant if you feel like that culture is good or bad.
I don't follow. It allows citizenry to identify wage discrimination and other malpractices, people can get paid on the value of their work and not just how good they are at gaming the wage negotiations. Plus most of the civilised world has this thing called a "union" and "workers rights" that generally prevent your imagined scenario from happening.

What has medical data got to do with this? You can't very well go up to a disabled person and say, hey, you cost society more money, maybe you should have been born less disabled, you cost too much, pay more. Societal safety nets exist for a reason, and how much one is compensated for equal labour as your coworker... I don't see how it's related at all to the "make the disabled pay more" eugenics argument.

> It allows citizenry to identify wage discrimination and other malpractices, people can get paid on the value of their work and not just how good they are at gaming the wage negotiations.

Ah yeah, so you are for mob justice. "Value of their work" is a highly subjective topic, which everyone is an expert on, of course.

> Plus most of the civilised world has this thing called a "union" and "workers rights" that generally prevent your imagined scenario from happening.

Worker rights and unions don't prevent employers from setting wages freely with their employees. An employee with 0 revenue has much less negociating power if the employer knows about it.

> you cost too much, pay more

I'm pretty sure people can have envy about the disabled person earning as much as they do while he/she doesn't have to wake up in the morning. Or some disabled person would like to evolve freely in the society without having everyone know about it.

> eugenics argument

Sweden sterilized disabled and socially unfit people for a long time, until 2013, so yeah, I totally see it happening. Incidentally I have seen racial and social mappings made out of the Swedish public data in the past, so it's far from anecdotic.

Tax data is government data. Government data is public data. Instead of asking "what's the reason for making something public" the question is "what's the reason for making a carveout for some specific data to make it secret"
Government data about private individuals can be considered as private, for privacy reasons. If the government knows that I have a mental disability, should everyone know about it, so they can discriminate me accordingly? What kind of dystopian view of the world is this?

Or, if I own crypto, why should the government facilitate the work for criminals?

The Government IS the public. I agree that the public shouldn't necessarily know about your mental disabilities, but then you just shouldn't give this information to the government.
Giving this information to the government is needed to get either financial help, or just a card to justify accommodations. But yeah, let's create second class citizens out of disabled people, great idea, very "scandinavian" indeed. At least they stopped sterilizing them.
> Giving this information to the government is needed to get either financial help, or just a card to justify accommodations.

But maybe that shouldn't be necessary? It could also remain with the doctor, who then just approves that you should be eligible for financial help.

> But yeah, let's create second class citizens out of disabled people, great idea

You are fighting strawmen.

> The Government IS the public.

How can you say this (and seem to believe it)?

The Government is answerable to the public and should serve the public. But conflating the government with the public is simply bizarre, to my way of thinking.

Governments should be transparent as much as possible, yes. But that doesn't mean being necessarily transparent with sensitive information that they know about members of the public. Only with your (bizarre to me) conflation of the public with the government would this make any sense.

People in safe countries generally do not worry about kidnappings.
People thought that in France until a public official started to sell tax data to the mafia. Now there is a kidnapping almost everyday. Things can change faster than what you can imagine, and Sweden is not a safe country anymore by the way.
You will not find any reputable source for those statements, sure maybe as opinions. This is the issue here we are talking about facts. I have been able to look up this information for as long as we had a government in Sweden, and it works.

Financial privacy is a complicated subject, could you perhaps agree that there is a use for transparancy?

Here is a link in french: https://journalducoin.com/actualites/france-employee-fisc-ve...

You can cross-reference this by asking your favorite LLM about it.

Even the international news have started to catch it: https://edition.cnn.com/2026/02/10/europe/crypto-linked-kidn...

The problem is that when you get a high amount migrant from very different ethnicities and cultures than you, it starts to change. Those people do not necessarily want to play the same social game as you, and you risk having structured crime networks arising.

Just like in France where those kidnappings were made by the algerian "DZ" mafia (DZ is a slang for Algeria). Or in Netherlands, with the "mocro" mafia (= Morroccan) who put a price on the royal family's head, forcing the princess sibling to leave the country[0].

In the case of Sweden, this is now the case, although that many Swedish people continue to do as if it wasn't. Don't tell me that such news happens in a "safe" country:

https://swedenherald.com/article/teenagers-in-malmo-charged-...

And I don't see why there should be transparency about how much I own, or earn. I don't want the neighbors to know about it, or feed your voyeurist pulsions. The line is thin between "social justice" and "mob violence", or discrimination, in that aspect. Which is likely to happen in a country that sterilized "socially unfit" people for a long time.

[0]: https://www.thetimes.com/world/article/dutch-princess-fled-c...

[1]:

I am wary to continue this, because you post unrelated tidbits and opinions.

My opinion is that opaque financial markets only benefits people with lots of money and power. Financial privacy is important here in Sweden, but having the net worth and income as public records has worked for us the last 250 years. I do not know where you come from and what society you live in. I do sense fear in your posts and that is usually a personal feeling. It might be different for us since it has been ingrained for so long.

I am talking from experience in our safe society (fact). Which obviously has severe flaws (opinion).

> Financial privacy is a complicated subject, could you perhaps agree that there is a use for transparancy?

No, because I don't believe in income tax or capital gains tax. I do believe in government taxes but they should be made on land holdings (Georgism) and on corporate activities, not on individuals' financial status (their earnings & capital).

The issues are orthogonal, depending on how you define things. I do not trust your system at all, how can you make it observable?
why would anyone kidnap you if they own as much as you ?
Maybe they want to own twice more than they did before?
All email conversations in Swedish public institutions are basically a public act and any citizen can request an extract of them.
The US used to be more this way. Not brokerage accounts as far as I recall, but whether you own a house, how much you paid for it, your address, phone number, even your SSN didn't used to be considered very private, people had it printed on their personal checks, and schools used it as a student ID number.

Newspapers used to publish hospital admissions and discharges, nothing medical but names and dates. Probably a lot of other stuff I'm forgetting.

Let's not forget white pages, those door stopper telephone books containing everyone's name, phone and address that everyone had (along with yellow pages for business listings).
Out of curiosity how do you authenticate yourself with government services and finance companies and such? The reason the SSN is considered private is because it's used for authentication. Usually an SSN + one or two pieces of trivially obtainable information is enough to sign up for just about anything in somebody else's name, unless physical documents are required as in the case of a passport.
In Sweden the most useful and supported way means that you need this.

1. An identification approved by the EU. You get this from the national Police. (A government agency)

2. An SSN which is your birthday and four extea digits. E.g. 1212121212 is a valid "PNR", you get this from the Tax agency

3. A bank account (you need 1 and 2)

4. A patched Android or iPhone.

5. The BankID a app from a company owner by the banks in Sweden.

6. A Certificate downloaded from your bank to you BankID App

7. A PIN to Protect the key in you BankID App.

8. Normal internet connection.

9. A camera on your phone to read QR code on Service Provider webpage for session initionation

When you sign something the app will send lots of metadata to "the Identity Provider" (BankId), e.g. how much root you have on your phone, if you run known malware, your current ip, and your phone HW info. This is used to calculate a score that you as a "service provider" (i.e. banks, government, companies) can choose to ignore (they usually do)

When you as a Customer either sign in or sign you will see a document that you sign maybe "I give you 100SEK", and who you sign that to. You enter you pin or use biometric to aprove.

(Was this better than an LLM.. Yes)

With cryptographic keys, normally stored on a smartphone. BankID[0] is the most common solution, but there are others. I personally use biometric 2fa to log in, and PIN to sign contracts or pay.

[0]: https://en.wikipedia.org/wiki/BankID_(Sweden)

And then there are widespread amounts of identity theft and mapping out of minorities, but you may sleep well as everyone knowing where you do so is an important step in making sure corruption is no more, don't think too much about it.
Just a few years ago this was about to change in Sweden.

But they didn't change it, because "women should be able to look up the men that they date".

Oh yes. I'm Swedish and I do have to admit I have looked up quite a lot of people on these kinds of sites. It's become so normalised to do this even though I also feel like it would be better as a whole if they just did not exist in the first place.

Last update I heard about something being done about it was this:

https://www.regeringen.se/pressmeddelanden/2024/11/utredning...

Not sure what the current status is.

How do they have handle identity thefts, spams, etc.?

There are so many ways to misuse these data. Are the residents not concerned about this?

The root cause of identity theft in USA and some other places is the lack of "proper" national identity and the associated use of various personal "secrets" (not that secret) for identity verification because there are no good easy other ways.

Businesses in Scandinavia and many other countries would not treat someone knowing your personal information as any evidence of identity (because it's not); having all that information is not sufficient to impersonate you there - identity theft does happen but it would require stealing or forging physical documents or actual credentials to things like bank accounts; knowing all of what your mother or spouse would know is not enough to e.g. get credit or get valuable goods in your name.

The US has no single national photo + chip ID card that is available to everybody, for free, including illegal and semi-illegal immigrants and homeless people with no access to their birth certificate and such.

It's completely crazy to me that you can be "out of status" with the USCIS and still get a social security card and a bank account, for example.

It absolutely isn't free here in Norway either, around $86 is what I'd have to pay now to get an id card as an adult (same price as a passport but easier to carry).
"Identity theft" is newspeak right up there with "intellectual property". It serves the sole purpose of diminishing real theft. If someone says "we gave all your money to this other guy, but it's not our fault because he had stolen your identity" doesn't make it so. There are cases of mistaken identity, and with criminal intentions, but there is also an enormous majority of not checking identity because someone was lazy.
Which is what leads to this comedy:

https://www.youtube.com/watch?v=CS9ptA3Ya9E

"Identity theft" is a term invented to push the responsibility for fraud back on the person who is being impersonated rather than on the person or organization that failed to properly identify the impersonator.
This is such an excellent comment (along with SoftTalker's reply) and made me think. I've long rejected the term "intellectual property", along with the delusional/fraudulent term "artificial intelligence" (as opposed to real things like LLMs and machine learning) and "money laundering" but hadn't previously stopped to think about "identity theft". Now I have.

I believe that it's really important to consider the validity of terms that are heavily adopted and pushed around and whether you should use them yourself or call them out as intellectually vapid/dishonest.

Just knowing someone's name, address, and ID number isn't enough to like, open a bank account in their name or such. You'd need a proper ID card or passport for that. Similar thing with most businesses if you try to pay for some product with credit, they won't accept just a few digits and a pinky promise, you'll need to identify yourself properly (the BankID app for instance).
We just change our identity every three years or so.

https://www.youtube.com/watch?v=BK2gKuqbOHo

It's just a unique ID of a person, it's not a password. I don't see how you can be confused by this.
It's also "anyone's brokerage account holdings, addresses, phone numbers" according to the comment that this subthread of the conversation is about.
It only gives read permissions, to make any changes requires a password.
So?
Just knowing the personal number is not enough to do much with. To get access to services, verify who you are on when talking to companies there is a verification step, most commonly with the BankID app.

Visual example: https://images.ctfassets.net/b2dmfxhmyqno/1cD0YDHjd9DGZnWfjH...

Identity theft and spam still happens, just not through knowing the personal number.

Unlike American SSNs, which are secret and wield certain authoritative powers, a Scandinavian "person number" is neither secret nor authoritative. Common misconception.
Of course ID theft happens but I think one thing that differs is that in Sweden it is harder to get a loan without verification that you are who you are (for example by Swedish BankID wish is an electronic id) while in US it seems you can take a loan if you just know someone’s social security number
they don't handle it at all. they let it go on. you for example have hundreds of people falsely registering their place of residence as somebody else's home, which causes massive problems for that home owner or apartment resident, and there is nothing done about it at all.

These types of laws are designed for the 1950s where there were natural barriers to acquiring and disseminating information. There is no attempt whatsoever to update them and to reduce harm caused to the average citizen today.

> How do they handle identity thefts

By just accepting it as a normal fact of life that you will have some random stuff ordered in your name sooner or later with an invoice you'll have to dispute. Happened to a relative of mine, police do not care unless they order things above a certain value, without a police report you cannot get free ID protection, and then you'll have to sit for a long time in phone queues trying to cancel a subscription for a streaming service or whatever they ordered while get thrown around by support reps who go "you SURE you or someone in your family didn't order this?"

I am Swedish and never had this happen to me. Never had random things show up or ordered for me at all. What would the point be, you have to pay or get an invoice? For Klarna they use BankID so only I can order an invoice for myself in reputable shops.

I am in my 30s btw so I was alive before BankID and it was a worse time. Remember my parents paid bills with paper.

The OP didn't claim it had happened to you. What they said is that it is possible to use the information about regular individuals that is publicly available to cause harm, and there are no attempts to stop this.
It is possible but it is not widespread.
Go back and edit your original comment because it is irrelevant and misleading.
There are plenty of reports online about how identity theft is becoming widespread in Sweden. The fact that something didn't happen to you is not evidence.

https://ocindex.net/assets/downloads/2025/english/ocindex_pr...

https://swedenherald.com/article/biometric-data-to-stop-fals...

That is absolutely not a normal fact of Scandinavian life. Gross exaggeration and misrepresentation.
That sounds rather unacceptable.
It basically never happens. I don't know where the GP got their story from.
Yes, I don't think anyone truly wants it to be like this. But it's just what happens.

You of course cannot access and empty out someone's bank account this way, you're safe in that regard. But you need to dispute the invoices as soon as possible to show that it is fradulent, so you don't end up needing to actually pay for it. Or get debt collectors after you.

^ Never had this happen in my 30 years here so YMMW

So don't take this poster by their word.

Not saying it DOES NOT happen as it is a system not made for the internet. But widespread? It is not.

Never happened to anyone I know either.
Is this due to how high-trust societies work, or is it something else?
Not open but stupid, IMHO.