What are the implications of this leak? How did leak of this magnitude stay on the internet for an entire year without anyone noticing? How was there no heightened network security measures despite occurance of numerous past leaks in China, especially considering this is the police force for one of the biggest and most developed cities gobally?
Miscellaneous News
- Thread starter bd popeye
- Start date
Can you link the forum where this person is selling it? Wonder if the Chinese MSS would have the ability to track this guy down or if they are even aware?
how damaging to the country is this leak?
I have already linked the seller thread in my initial post response, the thread also contains a sample of 750k datapoints which you can download to check for yourself
From the "seller"
All crime/case details is for shanghai only, so not 1.4 billion, there should also be the basic ID info on all 1.4 Billion Chinese. There are also a lot of misc stuff from people all across China which I still haven't figured out in the sample.
All the Shanghai case details is very damaging. The US already public tracks CPC officials. e.g.,
Cross-reference any party members in Shanghai or anyone in powers of authority, the blackmail potential is enormous.
Isn't 20th Congress coming up looks like political power will go further North
Now that it is exposed, I would think black Mail potential to be lower since it’s already out there. The Chinese MSS must be monitoring the situation, or at least they should know about it otherwise this is pure incompetence And I find it hard to believe they are that incompetent.
Does anyone else have experience with this forum? It seems all the database leaks are from China? Is this some sort of attack on Chinese databases?
I did a quick look around in the forum, and it seems to be not limited to Chinese database only, there's a lot from US and some from Europe like Germany and Sweden. Reading through the replies in that thread, I'm really amused by some of them think the OP committed a heroic act or humiliated the government.
I think the end result would just be some local government officials getting blamed and sacked from this incident, and a greater push by the central government to further control and regulate data collection on big data companies, while Xi's faction can blame this on the corruption of the opposing faction, increasing his influence in the party.
Seems to not have been a software issue but a human issue, that a person posted credentials on a slide or something.
The second human issue is not changing or rotating passwords or credentials keys every 6 months or once a year.
I would say that 90% of leaks happen because of humans, that is why we have something called social engineering.
Social engineering is the art of getting credential information from other humans like help desk workers etc.
Acting as if you're from IT that they need to check their login credentials send them to a password fishing site and get their credentials etc.
Last edited: