[Updated] Wikileaks Leak Of Turkish Emails Reveals Private Details; Raises Ethical Questions; Or Not...

from the whoo-boy dept

Important Update: Michael Best has now come out and said that it was actually he who uploaded the files in question, which he got from the somewhat infamous (i.e., hacked the Hacking Team) hacker Phineas Fisher. Through a somewhat convoluted set of circumstances, it appeared the files were associated with the Wikileaks leak when they were not -- and then basically everyone just started calling each other names:
The files were obtained by Phineas Fisher, who was the source. As far as I can tell, Fisher did not intend to dump all of the files publicly, and Fisher has not indicated that he meant to give any of the files to WikiLeaks to publish. However, they received a partial set of the documents and decided to publish them.

Following the WikiLeaks release of the partial set, Fisher decided to release his set. Since the files came from a known source (Fisher has been responsible for many high profile hacks, including the hack on the Hacking Team), I used the torrent file that the files were released through to create a bittorrent instance on the Internet Archive’s server. The server proceeded to download the torrent and create the item that was linked to by WikiLeaks.

After the personal information was discovered, the AKP files were removed from the Internet Archive’s server.

Although I wasn’t aware that it was included in the release at the time, I accept my responsibility in distributing the personal information. The explanation as to how it happened is not an excuse for the fact that it did happen.
Of course, in the meantime, there's been a lot of nastiness, with Wikileaks and its supporters unfairly claiming that Zeynep Tufekci was an agent for the Erdogan government -- which is insane if you know her at all. As Best notes in his piece, it's entirely reasonable that Tufekci assumed Wikileaks was responsible for the files (even though she only accused them, accurately, of promoting the files, not uploading or hosting them -- and they did, in fact, tweet a link to the files as well as post it to Facebook), and while Wikileaks may be on the defensive about other claims about its leaks, it didn't need to attack her credibility in the process. And it is true that Wikileaks tweeted a link to the files.


Update 2: In response to our update, Zeynep Tufekci has sent over the following quote, noting that she still has concerns about how Wikileaks handled this:
"Wikileaks has never clarified that the emails it hosts are almost entirely mundane emails of ordinary citizens and revealed nothing of public interest after days of intense combing (though there were privacy violations there as well), and it has never apologized for the fact that the databases that it repeatedly, and via multiple channels, pointed to its millions of followers as full data of "our AKP emails" (they weren't) and "more" actually contained private and sensitive information of tens of millions of people in Turkey, including more than 20 million women. I never claimed that they hosted; I was agnostic on that point so none of the substantive discussions revolves around who hosted them. However, I'm glad the person who uploaded them has come forward to apologize, and learn from this. I hope the broader hacker community also reflects on this, and realizes that rushing, jumping on news cycles, dumping data indiscriminately, uploading stuff you do not know, working in a language you do not understand with no local contacts, and then accusing your critics of being government shills without the slightest attempt at research is not okay."
And... original article below.


Last week, we (like many others) reported on the news that Turkey was blocking access to Wikileaks, after the site released approximately 300,000 emails, supposedly from the Turkish government. We've long been defenders of Wikileaks as a media organization, and its right to publish various leaks that it gets. However, Zeynep Tufekci, who has long been a vocal critic of the Turkish government (and deeply engaged in issues involving the internet as a platform for speech) is noting that the leak wasn't quite what Wikileaks claimed it was -- and, in fact appears to have revealed a ton of private info on Turkish citizens.
Yes -- this "leak" actually contains spreadsheets of private, sensitive information of what appears to be every female voter in 79 out of 81 provinces in Turkey, including their home addresses and other private information, sometimes including their cellphone numbers. If these women are members of Erdogan's ruling Justice and Development Party (known as the AKP), the dumped files also contain their Turkish citizenship ID, which increases the risk to them as the ID is used in practicing a range of basic rights and accessing services. I've gone through the files myself. The Istanbul file alone contains more than a million women's private information, and there are 79 files, with most including information of many hundreds of thousands of women.
What's not in the leak, apparently, is anything really about Erdogan's government:
According to the collective searching capacity of long-term activists and journalists in Turkey, none of the "Erdogan emails" appear to be emails actually from Erdogan or his inner circle. Nobody seems to be able to find a smoking gun exposing people in positions of power and responsibility. This doesn't rule out something eventually emerging, but there have been several days of extensive searching.
At the very least, this does raise some ethical questions. In the past, Wikileaks has (contrary to what some believe!) actually been pretty good about redacting and hiding truly sensitive information that isn't particularly newsworthy. It's possible that this is just a slip up. Or it's possible that Wikileaks got lazy. Or it's possible that the organization doesn't care that much to go through what it gets in some cases. [Update: Or, see the update above, where we discover it was a third party that uploaded this data, that then got associated with the Wikileaks data after Wikileaks tweeted].

I still think that the organization has every right to release what it gets, but it should also be open to criticism and people raising ethics questions about what it has chosen to release. The fact that it appears to have failed to consider some of the questions in this case, and then possibly overplayed the story of what was in this release is certainly concerning, and harms Wikileaks' credibility. [Update: so, this was a mistake, though it's unfortunate that Wikileaks then lashed out out Tufekci and others making additionally baseless claims. Yes, it was wrongly accused, but that's no reason to wrongly accuse others as well.]

Reader Comments

Subscribe: RSS

View by: Time | Thread


  • identicon
    SpaceLifeForm, 25 Jul 2016 @ 3:24pm

    Or wikileaks is now pwned

    No more to be said.
    Fill in the blanks.
    Wait for trump leaks.

    reply to this | link to this | view in chronology ]

    • identicon
      OGquaker, 25 Jul 2016 @ 3:39pm

      Re: Or wikileaks is now pwned

      Ditto

      reply to this | link to this | view in chronology ]

    • identicon
      I'd pound the fuck out of them, 26 Jul 2016 @ 8:01am

      Re: Or wikileaks is now pwned

      Wikileaks is akin to some pussy dickheads on the playground who must have been picked on or beat up and grew up crying, "I'm telling." What fucking MORONS for posting these emails. I hope Erdogan goes to war with them at least in a courtroom somewhere on this fucked up planet.

      reply to this | link to this | view in chronology ]

      • icon
        John Fenderson (profile), 26 Jul 2016 @ 9:08am

        Re: Re: Or wikileaks is now pwned

        Wow, from the amount of emotion you're displaying, I have to wonder if one of your own emails wasn't in that batch.

        reply to this | link to this | view in chronology ]

  • icon
    orbitalinsertion (profile), 25 Jul 2016 @ 3:28pm

    Something seriously wrong here. At least one person failed to not operate with reckless disregard, on the most charitable end. More probably failed at not being an @$$#ò13.

    reply to this | link to this | view in chronology ]

    • icon
      orbitalinsertion (profile), 25 Jul 2016 @ 3:56pm

      Re:

      Whether or not they are hosting the actual DB containing this data, which is apparently not the case. They link to it. But it sure seems the emails themselves are just a lot of "average person" emails, also containing personal information. Like if you took some partial dump of some random accounts off gmail and hosted it as a "leak".

      reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 25 Jul 2016 @ 5:25pm

    1. Note that Wikileaks has now threatened Zeynep Tufekci for reporting this.

    2. Note also that Wikileaks has threatened Joy Ann Reid for reporting on the DNC leak.

    3. Note also that the Wikileaks twitter account has spent much of last 48 hours sending and deleting anti-Semitic messages. (Others have captured and posted screenshots.)

    It looks to me like the junior-level people at Wikileaks are simply not good enough to handle themselves appropriately when called on to do so under scrutiny. Not redacting the data discussed here was an appalling, newbie-grade mistake that should result in lifetime bans for whoever is responsible: such inferior people simply cannot be allowed anywhere near important tasks like this.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 25 Jul 2016 @ 7:06pm

    Why the hell aren't people encrypting this information in the first place? S/MIME and PGP have been around for quite a bit, and these emails could have simply been encrypted before sent. Is it so difficult to ask people that send PII to encrypt the emails? If you can't figure it out, than don't send it by email. Hell, faxing is probably better in the long run at least that will only disclose to the Government, TeleCo or Building where they will place a phone tap.

    reply to this | link to this | view in chronology ]

    • identicon
      Anonymous Coward, 26 Jul 2016 @ 9:07pm

      Re:

      LOL. Yes, it is "that difficult". Why don't we ask the engineers that make our software to put easily usable encryption in it by default? There's no reason government bureaucrats need to know *a damn thing* about S/MIME or PGP.

      reply to this | link to this | view in chronology ]

  • icon
    DocGerbil100 (profile), 25 Jul 2016 @ 10:01pm

    I know nothing of Wikileaks, beyond what's made onto the pages of Techdirt, et al.

    So, simple question: is Wikileaks still Wikileaks - and if it isn't, how do we tell?

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 25 Jul 2016 @ 11:30pm

    Remember when Wikileaks claimed they were apol;itical?

    ...that was a long time and a perscution war ago. This is the result. Saddening, that they have forgotten that they originally were designed to hold others to account.

    reply to this | link to this | view in chronology ]

  • icon
    Ed (profile), 26 Jul 2016 @ 5:16am

    Has Wikileaks been taken over by Putin's hackers? Sure seems like they're targeting anyone that's pissed off Putin. At this point, nothing out of Wikileaks can be trusted to be real or unmodified.

    reply to this | link to this | view in chronology ]

  • identicon
    Freedom, 26 Jul 2016 @ 5:29am

    Stuff it

    Look this only give the FREE world more justification to invade Turkey and oust this loser of a leader. If he hurts women or the people of Turkey hurt any women of any race, culture or background is wrong and needs to be stopped. Just try it Turkey and NATO/WEST/RUSSIA/CHINA will ban you from this EARTH!!!

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 26 Jul 2016 @ 10:23am

    Good to see TD defending Google's candidate of choice.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 26 Jul 2016 @ 10:25am

    This isn't actually that surprising, just disappointing. When Wikileaks decided to rush the leak (because of the coup attempt?), they'd also apparently put their source at risk, who was still reportedly downloading at the time.

    If there's a lesson here, it's: Don't rush publishing a leak, or, just publish the stuff you've cleared.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 27 Jul 2016 @ 6:59am

    Put the blame where it belongs

    Hold on, Blaming wikileaks is like blaming a faucet for high lead content in your water. If one hacker got the data, others can as well. So blame the pointy eyed bumpy skinned idiot who put a large database of private information in an unsecured transport channel. Or blame Hillary for the leak from her email server, should bounce right off of her.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 27 Aug 2016 @ 12:34am

    wow libtards with hurt feelings...waaahhh QQ. Wiki leaks wasn't to blame, read the article.Crying in anger that they tweeted about it is going full retard.

    turkey is a Muscum country. The list was probably available to anyone even related to a government official. I friends and clients in turkey, and they aren't ashamed of how they treat women. They think the only problem is the wimpy males in the US....weak and desperate for women's attention.

    I like seeing Trump being brought up at times like this...even if a release on Trump revealed he committed a dozen felonies and was born in Russia....he'd still be FAR better than shillary.

    reply to this | link to this | view in chronology ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Use markdown for basic formatting. HTML is no longer supported.
  Save me a cookie
Follow Techdirt
Techdirt Gear
Show Now: Takedown
Advertisement
Report this ad  |  Hide Techdirt ads
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Chat
Advertisement
Report this ad  |  Hide Techdirt ads
Recent Stories
Advertisement
Report this ad  |  Hide Techdirt ads

Close

Email This

This feature is only available to registered users. Register or sign in to use it.