4 ms·

Some states driver's license numbers are deterministically computed with your name, date of birth and gender. If you live in one of those states and your data

by ripply 5y ago

Some states driver's license numbers are deterministically computed with your name, date of birth and gender. If you live in one of those states and your data is already out there (through a previous breach) then your driver's license number is already public knowledge to hackers. According to an online calculator this applies to these states: Florida Illinois Maryland Michigan Minnesota (Prior to December 13, 2004 only) Nevada (Prior to January 1998 only) New Hampshire New Jersey New York (Prior to September 1992 only) Washington Wisconsin http://www.highprogrammer.com/alan/numbers/dl_us_shared.html http://www.highprogrammer.com/alan/numbers/dl_us_shared.html

techsupporter 5y ago
> Washington Not for too much longer for most people. ID cards issued on or after September, 2018 have a random code format instead of the generated one from before: https://custhelp.courts.wa.gov/ci/fattach/get/63481/0/filename/DLN+fact+sheet.pdf https://custhelp.courts.wa.gov/ci/fattach/get/63481/0/filena... All ID cards are being changed as they are renewed.
- pmiller2 5y ago
  > All ID cards are being changed as they are renewed. Well, that's not going to cause anybody any issues.
foolfoolz 5y ago
> to hackers to everyone
andrewmunsell 5y ago
Back in college in Washington, I had a presentation to give in a class about privacy. To illustrate how very little of it we really have, I essentially doxxed the professor in front of everyone (of course, with his permission-- he had final say on what was actually shown to the class in the presentation) and demonstrated how public most people have their social media settings set to and what information was actually in the public record. Apart from things like public Facebook photos and things like public mortgage records and salary info for public school professors, I used the fact the DL number was deterministic to make a really good (and apparently correct) guess as to what the number really was. The professor was a really good sport about it.
SilasX 5y ago
>Some states driver's license numbers are deterministically computed with your name, date of birth and gender. Hm, I thought that couldn't be possible: if that were true, the system would be hosed the moment two people are born that match on all three. (Insert "falsehoods programmers believe about ...") Reading through to the link, it claims that some states do have issues with collisions like that (but doesn't provide enough to confirm independently): >>Looking at this, may become clear that it is possible for two people with similar names to get the exact same driver's license number. ... This is solved with "overflow" numbers, a simple sequential number can be appended to each duplicate number to resolve the confusion. >>...Illinois may have overflow digits, but if they do the information is not on your driver's license. This means that if Joshua William Smith is wanted by police and his driver's license number is flagged as such, Jack Wayne Snoddy may be briefly detained while the police check their records to sort out the shared number. I have been told that Illinois state databases actually include a two or three digit number to distinguish between different people with the same license. One correspondent told me that their friend was pulled over for a minor traffic violation and was arrested as someone else. He sat in the police car for a while while they sorted it out. He and the other person had the exact same number; the other guy was a wanted man, but my correspondent's friend did not.
downrightmike 5y ago
Also, the info can just be bought as most DOTs will see it as a revenue source. This is how companies find you about you're car's extended warranty.
- airstrike 5y ago
  I don't have a car and yet still get that same call daily...

by ripply 5y ago

techsupporter 5y ago

> Washington Not for too much longer for most people. ID cards issued on or after September, 2018 have a random code format instead of the generated one from before: https://custhelp.courts.wa.gov/ci/fattach/get/63481/0/filename/DLN+fact+sheet.pdf https://custhelp.courts.wa.gov/ci/fattach/get/63481/0/filena... All ID cards are being changed as they are renewed.

pmiller2 5y ago
> All ID cards are being changed as they are renewed. Well, that's not going to cause anybody any issues.

foolfoolz 5y ago

> to hackers to everyone

andrewmunsell 5y ago

Back in college in Washington, I had a presentation to give in a class about privacy. To illustrate how very little of it we really have, I essentially doxxed the professor in front of everyone (of course, with his permission-- he had final say on what was actually shown to the class in the presentation) and demonstrated how public most people have their social media settings set to and what information was actually in the public record. Apart from things like public Facebook photos and things like public mortgage records and salary info for public school professors, I used the fact the DL number was deterministic to make a really good (and apparently correct) guess as to what the number really was. The professor was a really good sport about it.

SilasX 5y ago

>Some states driver's license numbers are deterministically computed with your name, date of birth and gender. Hm, I thought that couldn't be possible: if that were true, the system would be hosed the moment two people are born that match on all three. (Insert "falsehoods programmers believe about ...") Reading through to the link, it claims that some states do have issues with collisions like that (but doesn't provide enough to confirm independently): >>Looking at this, may become clear that it is possible for two people with similar names to get the exact same driver's license number. ... This is solved with "overflow" numbers, a simple sequential number can be appended to each duplicate number to resolve the confusion. >>...Illinois may have overflow digits, but if they do the information is not on your driver's license. This means that if Joshua William Smith is wanted by police and his driver's license number is flagged as such, Jack Wayne Snoddy may be briefly detained while the police check their records to sort out the shared number. I have been told that Illinois state databases actually include a two or three digit number to distinguish between different people with the same license. One correspondent told me that their friend was pulled over for a minor traffic violation and was arrested as someone else. He sat in the police car for a while while they sorted it out. He and the other person had the exact same number; the other guy was a wanted man, but my correspondent's friend did not.

downrightmike 5y ago

Also, the info can just be bought as most DOTs will see it as a revenue source. This is how companies find you about you're car's extended warranty.

airstrike 5y ago
I don't have a car and yet still get that same call daily...