- Joined
- Jun 13, 2020
- Messages
- 7,903
- Reaction score
- 942
- Points
- 212
- Awards
- 2
On the evening of July 9, the database of passports of participants in the blockchain voting on amendments to the Constitution of the Russian Federation became available at one of the forums. The archive is also distributed via Telegram channels.
According to the Telegram channel “Information Leaks”, the db.sqlite file contains SHA-256 hashes taken from the series and passport numbers, which can be decrypted by enumerating values in the range from 0000000000 to 9999999999 (4 digits for the series and 6 for the passport number).
The authors of the channel noted that the series and number of the passport without the name and other personal data “does not constitute anything other than a simple set of numbers.”
The Ministry of Communications called the database “encrypted” that got into the network and excluded the possibility of leaks.
The Office emphasized that the database was distributed “through closed links”, and passwords from it were transmitted through “secure transmission channels”.
However, it was not difficult for Internet users to crack the archive with a simple password.
Since the archive went beyond the circle of “authorized persons to use the service”, the Ministry of Communications considers it necessary to conduct an investigation.
Recall, the Meduza journalists said that an archive with the passport data of more than a million residents of Moscow and the Nizhny Novgorod region could be freely downloaded by anyone for several hours on July 1 .
Later, the Moscow government denied this information, arguing that access to the program "was only available to members of territorial and precinct election commissions."
__________________
According to the Telegram channel “Information Leaks”, the db.sqlite file contains SHA-256 hashes taken from the series and passport numbers, which can be decrypted by enumerating values in the range from 0000000000 to 9999999999 (4 digits for the series and 6 for the passport number).
The authors of the channel noted that the series and number of the passport without the name and other personal data “does not constitute anything other than a simple set of numbers.”
| “There is no sense in such a database separately. The only use for this data is the enrichment of other databases containing personal data (including passport data) with the sign “registered for participation in electronic voting” , said the “Leaks”. |
| “Hash amounts are not personal data. Publication of such a random set of characters cannot harm citizens, ”the ministry said. |
However, it was not difficult for Internet users to crack the archive with a simple password.
Since the archive went beyond the circle of “authorized persons to use the service”, the Ministry of Communications considers it necessary to conduct an investigation.
Recall, the Meduza journalists said that an archive with the passport data of more than a million residents of Moscow and the Nizhny Novgorod region could be freely downloaded by anyone for several hours on July 1 .
Later, the Moscow government denied this information, arguing that access to the program "was only available to members of territorial and precinct election commissions."
__________________