3 ms·

Okay, now what about the actual breach? No one gets in trouble for that and nothing changes. If I missed something that did change, or where someone actually di

Okay, now what about the actual breach? No one gets in trouble for that and nothing changes. If I missed something that did change, or where someone actually did get in trouble, please enlighten me. A suggestion to companies: stop using SSN's as usernames/passwords! Get rid of the static numbers and give out encryption certificates or something!

notyourwork 9y ago
Encryption certificates for grandma and grandpa? We need a solution that works for everyone and until technology supports the mass it won't work. I agree we need a new solution but we need one that works for everyone.
- 24gttghh 9y ago
  It doesn't have to be a literal alphanumeric cert in a text file. There could be smart cards distributed, or an app people install on their phones for identity verification. Or even just T/OTP from a phone app to allow credit requests. Whatever happened to one-time Credit Card numbers for use on a per-transaction basis?
  - rmk 9y ago
    They still exist. Capital one provides this functionality that can be easily accessed via a browser plugin.
    - softawre 9y ago
      Most credit cards do this. My daily driver Citi 2% does. In fact Google Pay automatically uses a virtual number by default when used with this card.
  - GFischer 9y ago
    We have those as national identity cards in my country (by the same company that makes a lot of national IDs): https://www.gemalto.com/govt/customer-cases/uruguay-eid https://www.gemalto.com/govt/customer-cases/uruguay-eid
  - saagarjha 9y ago
    > an app people install on their phones for identity verification I believe the consensus in the US that we don't want a form of national ID. Hence the use of Social Security numbers as a proxy for identification.
    - fjsolwmv 9y ago
      So your SSN is your national id card
      - 24gttghh 9y ago
        It is if you want to open a bank account or confirm identity to the IRS or any other of the myriad services that seem dependent on it.
- tzakrajs 9y ago
  And doesn't exclude people at polling locations.
  - 24gttghh 9y ago
    I am strictly referring to bank accounts and the like here. I want no such digital ID for citizenship/residency. Edit: Granted it would end up being something that could be used like that most likely, but perhaps there is a way to limit the scope?

notyourwork 9y ago

Encryption certificates for grandma and grandpa? We need a solution that works for everyone and until technology supports the mass it won't work. I agree we need a new solution but we need one that works for everyone.

24gttghh 9y ago
It doesn't have to be a literal alphanumeric cert in a text file. There could be smart cards distributed, or an app people install on their phones for identity verification. Or even just T/OTP from a phone app to allow credit requests. Whatever happened to one-time Credit Card numbers for use on a per-transaction basis?
- rmk 9y ago
  They still exist. Capital one provides this functionality that can be easily accessed via a browser plugin.
  - softawre 9y ago
    Most credit cards do this. My daily driver Citi 2% does. In fact Google Pay automatically uses a virtual number by default when used with this card.
- GFischer 9y ago
  We have those as national identity cards in my country (by the same company that makes a lot of national IDs): https://www.gemalto.com/govt/customer-cases/uruguay-eid https://www.gemalto.com/govt/customer-cases/uruguay-eid
- saagarjha 9y ago
  > an app people install on their phones for identity verification I believe the consensus in the US that we don't want a form of national ID. Hence the use of Social Security numbers as a proxy for identification.
  - fjsolwmv 9y ago
    So your SSN is your national id card
    - 24gttghh 9y ago
      It is if you want to open a bank account or confirm identity to the IRS or any other of the myriad services that seem dependent on it.
tzakrajs 9y ago
And doesn't exclude people at polling locations.
- 24gttghh 9y ago
  I am strictly referring to bank accounts and the like here. I want no such digital ID for citizenship/residency. Edit: Granted it would end up being something that could be used like that most likely, but perhaps there is a way to limit the scope?