4 ms·

Can your coworker trace the identity fraud to the Equifax breach? As opposed to all of the identity fraud that happened throughout the years before the breach?

yebyen 8y ago
Are you implying that, when a hurricane strikes, no one drop of water can be responsible for the resulting devastation? (When in this case, to stretch the metaphor, the droplets all had strong profit incentives related to storing and making decisions based on peoples' data, and that they were pretty demonstrably negligent at protecting their charge?) All I'm really saying is, these breaches won't ever stop if the cost of a response remains substantially lower for these companies, than the profitability of being the (ir)responsible ones and maintaining the data in a negligent state.
- g051051 8y ago
  > > Nearly all of the dire predictions made at the time of the breach have been wrong to date. > Tell that to my coworker who spent all day on the phone last week fighting identify fraud with his bank. I'm saying that identity theft happened before the Equifax breach, and the Target breach, and the Yahoo! breach, etc. It will continue to happen. What we need is some sort of reform, like a national ID system with stronger ways to identify people (like fingerprints) and strong penalties for the criminals, not the organizations that get victimized. Note that anything like this will probably result in restricting access to credit or raising the cost of it. People like to blame the CRAs for this, but it's the businesses that don't do due diligence in verifying identity that are at fault.
  - yebyen 8y ago
    > It will continue to happen. I would like, if you are one of the entities with control over this situation, if you bet against this. How much will it cost me to get you, as a service provider, to start betting against this?
    - yebyen 8y ago
      I know this sounds crazy, but ... entities cannot secure their relationship with you if they cannot maintain some detail as private. (Until we all have PKI and use it?)

yebyen 8y ago

Are you implying that, when a hurricane strikes, no one drop of water can be responsible for the resulting devastation? (When in this case, to stretch the metaphor, the droplets all had strong profit incentives related to storing and making decisions based on peoples' data, and that they were pretty demonstrably negligent at protecting their charge?) All I'm really saying is, these breaches won't ever stop if the cost of a response remains substantially lower for these companies, than the profitability of being the (ir)responsible ones and maintaining the data in a negligent state.

g051051 8y ago
> > Nearly all of the dire predictions made at the time of the breach have been wrong to date. > Tell that to my coworker who spent all day on the phone last week fighting identify fraud with his bank. I'm saying that identity theft happened before the Equifax breach, and the Target breach, and the Yahoo! breach, etc. It will continue to happen. What we need is some sort of reform, like a national ID system with stronger ways to identify people (like fingerprints) and strong penalties for the criminals, not the organizations that get victimized. Note that anything like this will probably result in restricting access to credit or raising the cost of it. People like to blame the CRAs for this, but it's the businesses that don't do due diligence in verifying identity that are at fault.
- yebyen 8y ago
  > It will continue to happen. I would like, if you are one of the entities with control over this situation, if you bet against this. How much will it cost me to get you, as a service provider, to start betting against this?
  - yebyen 8y ago
    I know this sounds crazy, but ... entities cannot secure their relationship with you if they cannot maintain some detail as private. (Until we all have PKI and use it?)