4 ms·

With all the information exposed probably 60-70% of all people have been exposed. We need to stop the ability of anyone to do anything useful with this data. Wh

With all the information exposed probably 60-70% of all people have been exposed. We need to stop the ability of anyone to do anything useful with this data. Which means forcing banks to improve their security standards... rather than calling it identity theft and forgetting about it.

ziddoap 7y ago
I think it might be too late to put the genie back in the bottle without a multi-industry, multi-system overhaul. I agree banks need to improve security standards (along with just about every other major and minor company). But banks being more secure doesn't get to the root of the issue any more than just forgetting about it (after all, it's generally not the bank having their innards on display). There is no silver bullet.
- SkyBelow 7y ago
  We need to shift identity theft back onto the businesses being the ones to bear the costs. This would be hard to do, but would be far simpler than trying to force all businesses to use a new identity system (that just ends up being leaked with two years). It creates an incentive for the businesses to care about actually verifying one's id.
- blackflame7000 7y ago
  How about 2 forms of government ID to open an account just like you need to get a passport. Identity theft is so easily facilitated by just having to enter a social security number online and the banks are responsible because they are trying to make it as easy as possible for anyone to sign up.
  - ziddoap 7y ago
    This doesn't address credential stuffing, spear-phishing, propaganda, or many of the other issues that come along with data breaches. Identity theft is a piece of the puzzle, but no where near the whole thing. Your idea might cut down on identity theft - I'm not sure. But it doesn't speak to the root issue. (Not to say it isn't worth pursuing, just that it doesn't do anything if I shared a password between my email, bank, and MoviePass)
    - devoply 7y ago
      Sign all communication with a private key. Have mail clients verify it. Make that government mandated.
      - notyourday 7y ago
        How are you doing to deal with 11-30 million of people who are here illegally/visa overstays/etc? What about people who are in SF but were born in Maine and need a birth certificate from the county court house to get that "government issued key"? (The Maine court house would need that key to issue a certificate though ). If we are claiming that it is too difficult for people especially poor people to get a current state photo ID ( which is why we do not want to mandate it for voting ) what are we going to do with 20-30% of the US population that won't have a key?

ziddoap 7y ago

I think it might be too late to put the genie back in the bottle without a multi-industry, multi-system overhaul. I agree banks need to improve security standards (along with just about every other major and minor company). But banks being more secure doesn't get to the root of the issue any more than just forgetting about it (after all, it's generally not the bank having their innards on display). There is no silver bullet.

SkyBelow 7y ago
We need to shift identity theft back onto the businesses being the ones to bear the costs. This would be hard to do, but would be far simpler than trying to force all businesses to use a new identity system (that just ends up being leaked with two years). It creates an incentive for the businesses to care about actually verifying one's id.
blackflame7000 7y ago
How about 2 forms of government ID to open an account just like you need to get a passport. Identity theft is so easily facilitated by just having to enter a social security number online and the banks are responsible because they are trying to make it as easy as possible for anyone to sign up.
- ziddoap 7y ago
  This doesn't address credential stuffing, spear-phishing, propaganda, or many of the other issues that come along with data breaches. Identity theft is a piece of the puzzle, but no where near the whole thing. Your idea might cut down on identity theft - I'm not sure. But it doesn't speak to the root issue. (Not to say it isn't worth pursuing, just that it doesn't do anything if I shared a password between my email, bank, and MoviePass)
  - devoply 7y ago
    Sign all communication with a private key. Have mail clients verify it. Make that government mandated.
    - notyourday 7y ago
      How are you doing to deal with 11-30 million of people who are here illegally/visa overstays/etc? What about people who are in SF but were born in Maine and need a birth certificate from the county court house to get that "government issued key"? (The Maine court house would need that key to issue a certificate though ). If we are claiming that it is too difficult for people especially poor people to get a current state photo ID ( which is why we do not want to mandate it for voting ) what are we going to do with 20-30% of the US population that won't have a key?