5 ms·
With the frequency of these breaches, it feels like we are moving to a post-security world where SSNs and DOBs are simply public information. Would that really
by nateberkopec 5y ago
With the frequency of these breaches, it feels like we are moving to a post-security world where SSNs and DOBs are simply public information.
Would that really be such a bad thing? Both seem completely replaceable as authentication steps.
- jjtheblunt 5y agoup till late 1990s SSN and DOB were public information, as they were printed on never-secured student IDs in American schools, for instance, and who knows where those unprotected lists went.
- jgillette 5y agomy email address at the university from 2000-2003 had the last 4 of my SSN in it.
- withinboredom 5y agoI had orders in the military listing hundreds of people’s name and SSN. This was ~2007
- x0x0 5y agoMy university used it as the student id, so who knows how many hundreds of places that got copied. Including smeared all over the virtual desktop systems as it was your login identifier.
- astura 5y agoThis practice went on all the way into the mid-2000s at least (I graduated in 2006 and my SSN (which doubled as a student id) was printed on my student ID back then)
- miohtama 5y agoMost European countries have some sort of strong online authentication with two factor, so it is doable.
- stretchwithme 5y agoFor example?
- cryvate1284 5y agoNot sure it's strong, but The Netherlands has DigiD with 2FA?
- withinboredom 5y agoI love DigiD. After coming from the US, it’s beautiful.
- Gwypaas 5y agoBankID in Sweden. Sucks that it is privately owned though. https://en.m.wikipedia.org/wiki/BankID https://en.m.wikipedia.org/wiki/BankID
- stretchwithme 5y agoOf course it's doable. But SSNs aren't even ONE factor. It's time the US government entered the 21st century.
- jvanderbot 5y agoAs always comes up, its not really identity theft, as that information doesnt help you do anything but defraud banks who are not taking time to properly verify who they are lending to. We just call it that so it's not the bank's fault. "Your identity was stolen, we couldn't do anything! " Check a photo ID. Check a public cert. Take a fingerprint.
- lotsofpulp 5y agoI have heard that in some poorer countries, authorities are requiring fingerprints, passport size photos, and even video statements for certain transactions and real estate.
- Buttons840 5y agoThis. A bank you've never heard of fails to identify someone they're giving money to? Your problem, even though you weren't even one of the parties involved. Is a credit agency illegally spreading false information about you? Not their problem, after all, they can't be expected to know they're spreading false information. Also, they advertise that they are in possession of credit monitoring systems capable of detecting this false information. How is this not libel?
- stretchwithme 5y agoCan you imagine a private company giving you an account number that you can use to do things without needing to know a password? Would that situation persist for decades?
- tadfisher 5y agoWhen Social Security was introduced, the government encouraged people to get a tattoo of their SSN so they wouldn't forget it [1]. [1]: https://blog.nyhistory.org/tattoo-as-memory-prompt/ https://blog.nyhistory.org/tattoo-as-memory-prompt/
- jaundermann 5y agoIt seems like it was tattoo artists (not the government) recommending tattoos, as you would expect. It is still interesting, but a bit less sensationalist.