Telling us you didn't read the article is exactly the kind of unsubstantive comment we don't want on HN. The comments thread is for people who did read the article and have something to say about the content.
This kind of comment breaks the guidelines particularly these ones:
Be kind. Don't be snarky. Converse curiously...
Don't be curmudgeonly. Thoughtful criticism is fine, but please don't be rigidly or generically negative.
Please don't fulminate. Please don't sneer....
Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.
Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something.
Please don't complain that a submission is inappropriate. If a story is spam or off-topic, flag it. Don't feed egregious comments by replying; flag them instead. If you flag, please don't also comment that you did.
Please don't complain about tangential annoyances—e.g. article or website formats, name collisions, or back-button breakage. They're too common to be interesting.
Please take a moment to remind yourself of the guidelines and make an effort to observe them in future.
Finding a former Australian prime minister’s passport number on Instagram (2020) - https://news.ycombinator.com/item?id=34966909 - Feb 2023 (41 comments)
When you browse Instagram and find Tony Abbott's passport number - https://news.ycombinator.com/item?id=24488224 - Sept 2020 (340 comments)
Edit: The blog post also mentions this:
https://mango.pdf.zone/finding-former-australian-prime-minis...
- https://www.myid.gov.au/verifying-your-id-in-myid#myid-Austr...
- https://www.afp.gov.au/sites/default/files/PDF/NPC-100PointC...
- https://www.equifax.com.au/personal/identity-verification-10...
The blog post has more use case examples:
https://mango.pdf.zone/finding-former-australian-prime-minis...
A passport is a primary document (equivalent to a birth certificate) and gives you 60-70 points. It can't be used alone, but in conjunction with another id (forged or stolen) would allow for identify theft.
I will trust his lawyers are right _for Australia only_ (although I have my doubts, and would love to see their reasoning), but in the UK this feels like a clear breach of the Computer Misuse Act[0], and I can't recommend enough that you don't do this.
Bilal_io•3h ago