5 ms·

How would you vet that someone is not going to sell your private information on the illicit market?

williamscales 9y ago
Well, I guess I was assuming they were tackling that problem or had some way of addressing it. That assumption was based on trust, evidently misplaced. It does seem like a hard problem to truly solve. The difficulty of doing the crime is so low compared to the difficulty of excluding anyone who might feel slightly inclined to commit it that it seems inevitable that removing humans is the only viable solution at scale going forward.
x0x0 9y ago
You figure out a way to remove the name / identifying info and just have someone classify the transaction.
- williamscales 9y ago
  That sounds suspiciously like a strategy that could, eventually, lead to automation of the whole process...but it will be costly in the short term so it's better to just turk it until you make it for now! /s
eps 9y ago
What "illicit market" could possibly be interested in a pile of random receipts? Receipts would have any value if all of them are from the same person and can be used to reconstruct that person's activity. And even then it'd be pretty damn tricky to sell that "file" as it still has no exploitable value.
- semerda 9y ago
  Ever looked at your health insurance bills? Medical records are a gold mine for social engineering. Standard restaurant receipts have everything from payment type, last 4 digits of your credit card, transaction history... great for social engineering. Oh and Uber receipts have your home address too ;-) Whoops.
- corobo 9y ago
  Hey bank I forgot my password.. no sorry I don't have that.. no I'm not at home I don't have that either.. I can tell you a few of my recent purchases and the amounts though would that do it? Human error is always the easiest way in
scott00 9y ago
You have a controlled environment for the workers, who do their work on locked down software and hardware. Basically, employees don't get to bring any personal possessions into the room where they do the work, the software through which they do the work does not allow them to copy or export any data, the OS that hosts the software doesn't allow them to do anything but run the software.
- albertgoeswoof 9y ago
  sounds expensive

Well, I guess I was assuming they were tackling that problem or had some way of addressing it. That assumption was based on trust, evidently misplaced. It does seem like a hard problem to truly solve. The difficulty of doing the crime is so low compared to the difficulty of excluding anyone who might feel slightly inclined to commit it that it seems inevitable that removing humans is the only viable solution at scale going forward.

x0x0 9y ago

You figure out a way to remove the name / identifying info and just have someone classify the transaction.

williamscales 9y ago
That sounds suspiciously like a strategy that could, eventually, lead to automation of the whole process...but it will be costly in the short term so it's better to just turk it until you make it for now! /s

eps 9y ago

What "illicit market" could possibly be interested in a pile of random receipts? Receipts would have any value if all of them are from the same person and can be used to reconstruct that person's activity. And even then it'd be pretty damn tricky to sell that "file" as it still has no exploitable value.

semerda 9y ago
Ever looked at your health insurance bills? Medical records are a gold mine for social engineering. Standard restaurant receipts have everything from payment type, last 4 digits of your credit card, transaction history... great for social engineering. Oh and Uber receipts have your home address too ;-) Whoops.
corobo 9y ago
Hey bank I forgot my password.. no sorry I don't have that.. no I'm not at home I don't have that either.. I can tell you a few of my recent purchases and the amounts though would that do it? Human error is always the easiest way in

scott00 9y ago

You have a controlled environment for the workers, who do their work on locked down software and hardware. Basically, employees don't get to bring any personal possessions into the room where they do the work, the software through which they do the work does not allow them to copy or export any data, the OS that hosts the software doesn't allow them to do anything but run the software.

albertgoeswoof 9y ago
sounds expensive