3 ms·

Barriers to posting SSN-like data would make it difficult for a lot of people to do their job. Software that handles SSN info should have fake data for tests.

Avamander 7y ago
Not to mention the pure absurdity of trying to censor numbers.
- dfcmt 7y ago
  In this digital age, everything (text, images, audio) can be encoded using integers. Does that mean it's absurd to try to make anything secret?
  - deleted 7y ago
    [deleted]
  - Avamander 7y ago
    You're strawmaning. I did not speak about making things secret. I also suggest you check this article out https://en.wikipedia.org/wiki/Free_Speech_Flag https://en.wikipedia.org/wiki/Free_Speech_Flag so you understand the difference between censorship and secrecy.
RijilV 7y ago
Also SSN isn’t that distinctive of a format. nnn nn nnnn. Check bits and reserved prefixes were all removed decades ago when it became clear we’d run out unless we use the whole name space (and even then that buys us to 2100). \d{3}\s?\d{2}\s?\d{4} will match a surprising amount. Detecting SSNs is hard without accepting a high false positive rate. Much harder than phone numbers, credit card numbers, or cloud credentials.
- dfcmt 7y ago
  \w\d{3}[\s\-]?\d{2}[\s\-]?\d{4}\w should not have many wrong results. You can also try to guess is something is a list of SSNs from the context.
  - marcinzm 7y ago
    I'd assume many systems would store SS numbers without spaces or dashes in the backend so that rendering is up to the client. Which means you're looking for 9 digit strings. For example, full zip codes (xxxxx-xxxx) are also 9 digit strings.
    - greggyb 7y ago
      I've posted elsewhere in this thread about this. There's really no reason to expect SSNs as strings for internal use. 32bit integers readily represent the same, as the max SSN is just a 9-digit number. I've seen at least one client store SSNs as INTs in a database and handle left-padding to 9 characters and interposing hyphens in display code. Any 9-digit integers are immediately suspect under this reasonable storage choice.

Avamander 7y ago

Not to mention the pure absurdity of trying to censor numbers.

dfcmt 7y ago
In this digital age, everything (text, images, audio) can be encoded using integers. Does that mean it's absurd to try to make anything secret?
- deleted 7y ago
  [deleted]
- Avamander 7y ago
  You're strawmaning. I did not speak about making things secret. I also suggest you check this article out https://en.wikipedia.org/wiki/Free_Speech_Flag https://en.wikipedia.org/wiki/Free_Speech_Flag so you understand the difference between censorship and secrecy.

RijilV 7y ago

Also SSN isn’t that distinctive of a format. nnn nn nnnn. Check bits and reserved prefixes were all removed decades ago when it became clear we’d run out unless we use the whole name space (and even then that buys us to 2100). \d{3}\s?\d{2}\s?\d{4} will match a surprising amount. Detecting SSNs is hard without accepting a high false positive rate. Much harder than phone numbers, credit card numbers, or cloud credentials.

dfcmt 7y ago
\w\d{3}[\s\-]?\d{2}[\s\-]?\d{4}\w should not have many wrong results. You can also try to guess is something is a list of SSNs from the context.
- marcinzm 7y ago
  I'd assume many systems would store SS numbers without spaces or dashes in the backend so that rendering is up to the client. Which means you're looking for 9 digit strings. For example, full zip codes (xxxxx-xxxx) are also 9 digit strings.
  - greggyb 7y ago
    I've posted elsewhere in this thread about this. There's really no reason to expect SSNs as strings for internal use. 32bit integers readily represent the same, as the max SSN is just a 9-digit number. I've seen at least one client store SSNs as INTs in a database and handle left-padding to 9 characters and interposing hyphens in display code. Any 9-digit integers are immediately suspect under this reasonable storage choice.