upvote
These services were just the natural extension of the phonebook. At the exact same time as the phonebooks stopped being circulated, these services popped up online.

And since everyone's name, address and phone number was in the phone book (At least for their city) people didn't find it weird when it popped up online. Sure, to do the same thing for the whole country you'd need dozens of phonebooks for different areas, but it was just the same information.

Which makes me wonder: weren't there phonebooks in US cities and in other countries before? Were they incomplete/opt-in?

The key thing about the Swedish phonebooks were that they were opt-out, so people were basically all in the phone book. So even before the internet, it was just very natural that your name, address and phone number was public. "Getting someone's number" as in moves and TV wasn't a thing. You could just call anyone if you knew their name.

reply
Yes, we had phone books. And it was useful. But they didn't generally include personal information such as birthdates, salary, etc. And it was easy to opt out. Additionally there were not a bunch of online services with financial impacts that used phone numbers are primary keys.

And, importantly, they were physical in a time when it was hard to collect and collate the data in all of them. In 1990, there were about 5,000 distinct "white pages" phone books in the US. And OCR was pretty crappy.

Also, in all the places that I lived, mobile numbers didn't end up in the phone books, only residential landlines did. I don't know if that was universal.

reply
Right. It was harder to spoof my bank (since banking was an in-person affair), and steal all my money back then. Now, this information is available to anyone in the world, and there aren’t good protections. I don’t know the solution, but the world is a different place than it was in the days of white-pages.
reply
In the UK, you could always choose to go 'ex-directory'. More and more people did over time I think and the personal part of the phone directory got slimmer and slimmer, basically just leaving the business part.
reply
Are there no murderers, crazy ex-boy/girlfriends, targeted harrassment and spam calls in Sweden?

Not that any other country does much better in this regard. Still it sounds a little wild to me that you can get this information without even needing to hit a shady forum and download some csv. Maybe lowers the bar too much.

reply
I've been told back in the day it was quite normal get a physical, dead-tree book with similar information sent out to you every year, until people decided that was a waste of paper.
reply
It used to be illegal here to reverse look up a name matching to a phone number, since it was "owned" by the state telephone company and they didn't want that happening. But you were allowed to reverse look up the address of a number and then look up the person and match it to the number. So that magic happened under the hood. The trick was getting the residential information but since that wasn't a problem in the '90s I'm sure it is even less of an issue now.
reply
When I was a kid there were reverse phone books that were indexed by number. Not common, and I think they were pretty expensive, but the IIRC the local public library had them.
reply
When I was a kid in Sweden that was just part of the local phone book.
reply
But that was optional, you weren’t forced to reveal your location to the person who raped you
reply
Who was talking about rape?
reply
When I lived Norway, my gf at the time would look up the license plates of cars that annoyed her and could see how much debt they had on the car to make fun of them. Scandinavians are oddly very open with this type of personal info.
reply
In Sweden I have looked up someone's phone number through the info I got from the license plate to notify the owner of a BMW M5 that their 20 years old son was often speeding down the 30km/h street close by my house where kids would cross coming from the metro or a bus stop nearby.

The owner just thanked me, and said was going to have a chat with the driver. Never saw that car speeding nearby again.

reply
When you do this the owner of the car is notified. And there is an audit trail because you do it by sending a text to a premium number.

The debt information is there so that when the owner sells the car the buyer can check to see if they actually really do own it outright.

reply
I don't even see salary or what your debt is as "personal information" (am Swede not in Sweden), personal information is stuff that no one else would need to know. What people earn affects not just people around you and others in the workplace but also society at large, makes a ton of sense for that stuff to be public.

Especially great that you can see what employees at competitors earn, what your peers at your workplace earn and what your boss earns. Become a hell of lot easier to ensure you're not exploited. Helps that Sweden has a really strong union-culture as well.

reply
> I don't even see salary or what your debt is as "personal information" (am Swede not in Sweden), personal information is stuff that no one else would need to know. What people earn affects not just people around you and others in the workplace but also society at large, makes a ton of sense for that stuff to be public.

In a high trust culture I get this. But what about if you're in a low trust culture with quite some "not so orderly behavior" (if you will).

reply
Perhaps one of the steps to a high trust culture is actually trusting people.
reply
> In a high trust culture I get this.

Wait, aren't Sweden like literally the world leader by rapes count?

reply
Our definition of rape is VERY broad by international standards, so comparisons are complicated.
reply
Declared or actual?

There is a huge difference in most countries.

Sweden may well be one of the few countries where being raped isn't shameful/your fault for dressing too lightly/punishable by death.

reply
Yep, and this applies to several other types of crimes too. Countries with the very lowest rate of reported rape, domestic violence and so on tend to be horrible for women, because the reason for low rate is that they are too afraid to report the crimes.
reply
your brain is cooked if you think sweden is leading the world in rape count
reply
He's also trying to infer something about migrants here, he's just not willing to say it outright.

Sounds like someone who needs to lay off the X/twitter feed.

reply
I think it's the opposite, the mismatch of information availability between employer and employee makes that a low trust culture, which is addressed by making that information public instead. If it was a high trust culture, employees would trust their employer pay them fairly, but they don't, hence this information deserves to be public.
reply
I learned this (public info) about Sweden a few years ago and as an American it really pissed me off.

In the US you can get the exact same info and probably more by simply paying a private corporation/middle man (background check services).

It seems like a huge trend in many sectors. We have the same setup as other countries, but shittier for consumers because there are lifeless leaches as middle men to make a quick buck.

reply
Yes, it is possible to have a protected identity.
reply
It seems that you can have a protected address in Denmark as well. Apparently, the protected address is even a field in the current leak.
reply
According to their announcement, the names and addresses of people with protected address, were not leaked.
reply
I worked on systems that has this, it would be funny if it wasn't putting people at risk. You can see the address, and then as you say there is a field that indicated that this is a protected address, so don't leak it,... unlike the others with you're then completely fine to leak?
reply
Ah, so the “open” system is actually a two-tier system where everyone’s information is equally open except for those who are more equal than the rest.
reply
> Are there no murderers, crazy ex-boy/girlfriends, targeted harrassment and spam calls in Sweden?

Of course, contrary to popular belief, Sweden is not a perfect country without violence and shit people!

It seems to be somewhat respected overall though, but I'm sure it'll eventually disappear. For the people who are stalked and what not, it's relatively easy to apply and get "protected identity" if you're affected by those things, and then eventually all those 3rd party websites remove the stale data.

Personally I solved this problem for myself by moving away from the country.

reply
> Personally I solved this problem for myself by moving away from the country.

Quite drastic to move away from a country for just this. Did you only do it for just this? Or was this simply one of the factors why you moved away?

reply
There are. You can get a protected identity if you have that issue.

The current system has been in place around 1770. There's some pushback against it the last few years.

reply
Talk about creating our own problems lol. We’ve made a total mess of things. No onset normal people hate us technologists.
reply
I have been advocating for Denmark to do the same for 15+ years. The fact that your social security number can be used for anything on it's own is a disaster. Mostly it can't anymore, because you have to do electronic signing with MitID, but it's still considered secret. If you own a home in Denmark, address information is already public, but a little hard to lookup.

The problem with this leak mostly going to be those with hidden addresses or secret phone numbers. Last time something similar happened was when it was shown that you could pretty much just guess a persons social CPR number if you had their birthday. Normally you could narrow it down to 6 or 8 possible numbers then use the phone companies websites, pretend to create a new account, enter the CPR number and check if you guessed correctly. Because the demo was done with politicians, then phone companies no longer ask for CPR upfront.

reply
>Because the demo was done with politicians

I feel like this should be the default. Responsible disclosure to the affected company, followed immediately by disclosure to every politician in the dataset. Once we start collecting high profile cases this way instead of waiting X days for a faceless corporation to release a fix, companies will think twice about their security and the data they collect if that could make them end up on the shit list of the local government.

reply
>I feel like this should be the default.

The autorities do not, and the guy who "leaked" the CPR number of Mette Frederiksen was thrown in jail.

On an unrelated note, I recently read about voyage of the Mayflower across the Atlantic. It's a captivating piece of history.

reply

  The review conducted shows that the unauthorized access does not include the names and addresses of individuals who have chosen to register with name and address protection.
From the source
reply
I was actually surprised when I heard about this for the first time. Also I've heard that even the salaries of people are publically available. That's really cool.
reply
This probably improves economic efficiency a lot. Want to build something and remember meeting a relevant expert 3 years ago at a party? Easy to find that person and start doing business...
reply
Yes, it's great for businesses, you can search for the cheapest labor, and helps you avoid paying someone much more than they previously earned.
reply
That's more of an American thing, wages in places like Denmark are much more set by the job classification and maybe seniority, not individually based on one's background and what one previously earned.
reply
Really? What about the experience or specific domain knowledge one brings without seniority? Isn’t their specialised knowledge or talent not rewarded?
reply
the real reward is the equality of dignity we earned along the way.

it's a real cost, and a real benefit. I guess values vary on which is more important.

reply
That's crazy, so in Denmark people work for dignity and not money? Like do you pay for groceries or rent or any other expense with dignity?
reply
And private individuals as well, as you can see what your colleagues earn without having to ask anyone, and can even see what your boss earns, or what the competitor to your current workplace earns! I have to say salary negotiations are a lot more straightforward (and fun) in Sweden as an employee than other places I've worked.

Overall the benefits for employees seems way broader than the benefits for the companies.

reply
FWIW, wage transparency has been studied quite a bit in economics literature. The short version is that while it does reduce wage variance i.e. wide differences in pay for the same job, it also consistently reduces average wages.

On a purely economic basis, wage transparency primarily benefits employers because it reduces how much they need to pay based on actual performance in practice.

reply
> On a purely economic basis, wage transparency primarily benefits employers because it reduces how much they need to pay based on actual performance in practice.

Why would transparency reduce how much employers have to pay? Usually capitalists would make the opposite claim, by keeping salaries opaque, it's much easier for employers to underpay people, but you seemingly are making the opposite claim.

If I can see how much my employer pay others, doesn't that help me ensure I too get fairly compensated from the employer? How could the employer leverage this situation to pay me less than I already know I'm worth?

reply
It follows from the wages being allocated from a relatively fixed pool of available money. What people think they are worth can be significantly different than what they are empirically worth, both high and low. There is some price discovery that needs to happen at the individual level.

When wages are opaque, an employee only needs to justify their worth to the employer. Employers pay for value net of wages, so they are often happy to pay someone much more if the individual value generated justifies it. When wages are transparent, an employee needs to justify their worth to everyone else because a higher wage is tacitly reducing their wage. This creates social pressure separate from the economic argument.

Other employees are incentivized to maximize their own wages regardless if it maximizes value for the employer. And there are many more average employees than high performers. Employers can leverage this social pressure to cram down the wages of anyone who wants to be paid above average because they no longer have to defend a lower wage on a purely economic basis. Empirically, this is what happens.

Anecdotally, I've seen this play out countless times at companies.

reply
> If I can see how much my employer pay others

Then your salary will be decided by lowest common denominator. Employer does not leverage this situation, employer reacts to the incentives this situation creating.

reply
> Then your salary will be decided by lowest common denominator.

Why would it? That's not what happens in practice, and you have raw data to point at, with things like "Person A is half a fast as me, and earns X, that's why I deserve X+N", not sure why you think there would be another outcome here, and it's clear you've never experienced this sort of environment yourself.

reply
You do have to request them and the person you requested them for will know you did so
reply
It will be registered if you ask Skatteverket directly, but if you go via a company (i.e.: Eniro), the subject does not get to know it.
reply
I think this is the worst part about it. Some company making a profit selling my data should be illegal.
reply
> my data

You haven't sufficiently manage to enter the mindset of a Swede. Your salary information isn't "your data" in the first place, it's public information. The company is selling public information if you have this mindset, does it still make sense to make it illegal then?

I think what you want to argue for, is for salary information to not be public data anymore. Selling people's private data without authorization (or even handling it incorrectly) is already illegal and actively punished today when it happens, via the long and slow arm of the law.

reply
Any data that personally identifies information about an individual is personal data.

That is not an opinion. That is a fact. It's not public information, and anyone arguing that is categorically, provably, wrong.

The entire country of Sweden can collectively come together and decide that 1+1=3, and I would give that about as much thought as these semantic games around private and personal data.

reply
It is considered personal data by the likes of the EU, the issue however a pesky little thing called the Swedish Constitution, specifically chapter 2 of the "Freedom of the Press Act" which basically states, in very simple terms:

1. Everyone(1) shall be entitled to have free access to official documents.

2. Official documents are all(2) documents held and produced by the authorities.

(1)=Everyone includes everyone in the world, you do not have to live in Sweden or be a citizen and you do not have to identify yourself.

(2)=Some restrictions apply (natsec, medical, etc).

In short, most government databases are databases of "official documents", including the citizenship registry maintained by the tax authorities.

Downside: All the mundane information about you is public property; address, birthdate, tax records, school grades, drivers license, passport photograph, martial status, court cases and pretty much everything else you can't think of.

Upside: Applies to all politicians as well.

reply
I didn’t know that is enshrined in the Swedish constitution. I’m staring to like Sweden even more
reply
Disturbing. Serious lack of respect for the rights of the citizenry of the country to privacy.
reply
Yeah, you can either assume your worldview is the only one that exists, then seemingly not understand why certain decisions are made or how things work elsewhere, and everything looks stupid and doesn't make sense to you. Or you can try to understand things from other perspectives, and maybe actually understand the reasoning behind it and what it means.

What is and isn't personal data is subjective, regardless what "truth" you believe you're sitting on. I won't claim you're right/wrong as there is no such concept for subjective things, I suggest if you want to understand instead of wave your hands around or whatever you're doing, you'd try to see things from another's perspective and forgo dogmas.

reply
> What is and isn't personal data is subjective, regardless what "truth" you believe you're sitting on

Ontological games are just that - games. Personal and public data is not an opinion, and it's not subjective.

I legitimately think that it's harder to have a coherent definition of a chair than to define personally-identifying vs anonymous data, and pretending otherwise is stupid.

reply
Yeah, Offentlighetsprincipen is quite Swedish, isn’t it? I like it. Not sure it was made for the 21st century though.
reply
Personal numbers are not available from hitta.se.
reply
Not in full as it doesn't have the last 4 partly random digits, though personal numbers aren't that useful even if it was the full one.
reply
If you login with an account (which you can create for free), you can also see the personnumber. See someone elses salary without them knowing about it for 39/49SEK, which is around 3-4$
reply
Not on hitta.se though. Other websites like ratsit have this, but you can also call skatteverket for free.
reply