6 ms·

"To log in, enter your SSN, date of birth, home address, and" <closes tab> No way, no how.

taveras 5y ago
Regardless on if you enter it in this web form, Equifax has already lost your SSN in a data breach.
throwawaygh 5y ago
They already have that info. In fact, they already hired a music major CISO who leaked all that data in a stunning display of executive incompetence.
- tomrod 5y ago
  When?
  - johnnyo 5y ago
    https://en.wikipedia.org/wiki/2017_Equifax_data_breach https://en.wikipedia.org/wiki/2017_Equifax_data_breach
    - fourtrees 5y ago
      She and her co-workers did fuck up badly and were unlucky enough to be under attack from one of the most powerful countries in the world. But to attribute that failure to her having received masters in composing fourteen years before, years she spent as a successful (as far as we know) Security Officer and VP at other financials seems a bit much like scapegoating.
  - ratsmack 5y ago
    It's amazing, but they did: https://www.marketwatch.com/story/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer-2017-09-15 https://www.marketwatch.com/story/equifax-ceo-hired-a-music-...
    - detaro 5y ago
      That alone really doesn't mean much. Security has even more than other areas of IT many people with "odd" backgrounds.
      - throwawaygh 5y ago
        Yes, Equifax's ciso was clearly super competent.
        detaro 5y ago
        I in no way suggested that, please don't pretend I did. We have plenty reason to assume she wasn't.
        throwawaygh 5y ago
        Then I'm not sure what the point of your post was. Software security is a mess in large part because of the phenomenon you describe.
        detaro 5y ago
        > Then I'm not sure what the point of your post was. That "but she has a music degree!" is the least relevant part of evaluating if someone is qualified for such a CISO role or not. Someone with the "wrong" degree but talent and relevant experience would easily beat someone with a fancy "Masters of Information Security" degree that then muddled around in less relevant areas. Focusing on people's degrees is almost always the wrong measure in IT.
        throwawaygh 5y ago
        > Someone with the "wrong" degree but talent and relevant experience would easily beat someone with a fancy "Masters of Information Security" degree that then muddled around in less relevant areas. Sure, totally agreed. > Focusing on people's degrees is almost always the wrong measure in IT. Maybe 20 years ago. (I was there.) Today, asking for exceptional technical depth and a proven track-record of leadership is not a big ask.
- throwawayboise 5y ago
  None of that information should be considered private any longer, if it ever really was.
  - throwawaygh 5y ago
    Well, Equifax still considers it sufficient to claim your identity...
deleted 5y ago
[deleted]
NegativeLatency 5y ago
Might as well do it so you can freeze it, they already have the info
deleted 5y ago
[deleted]
teraflop 5y ago
I dutifully entered everything they asked for, because, you know, they're Equifax and they undoubtedly have it already. Then they said I needed a "verification code" and gave me the option of half a dozen phone numbers and email addresses to choose from... none of which remotely resembled anything I've ever had (the email addresses all contained my surname and appeared to be randomly generated). When I clicked the "none of these work for me" link at the bottom, I was presented with: "Sorry, We are unable to log you in. Your account is temporarily disabled. Accounts may be disabled when you attempt to log in with incorrect information or fail to complete a security challenge."
- myself248 5y ago
  Same here. Great. I wonder what other lies they believe about me. On the one hand, I'm probably glad the data is shit? But on the other hand, folks consuming the data might not understand that.
  - andreyf 5y ago
    Was the email they offered to send the code to f**k@corpdomain.com? I tried this with my current and former employer and got seemingly the same email username "f**k", and seemingly random phone numbers. Another long-time employer had no email at all. Definitely seems they're just making things up.
  - gfody 5y ago
    we ought to be able to "correct" our own data and mislead anything seeking an advantage
- theanti9 5y ago
  This happened to me as well. bunch of random @yahoo addresses (I don't have one of those) and rando phone numbers, none of which were mine. Welp.... who knows wtf they have in there then, I guess.
  - divbzero 5y ago
    Could this indicate past attempts by fraudsters to adopt your identity?

Regardless on if you enter it in this web form, Equifax has already lost your SSN in a data breach.

They already have that info. In fact, they already hired a music major CISO who leaked all that data in a stunning display of executive incompetence.

tomrod 5y ago
When?
- johnnyo 5y ago
  https://en.wikipedia.org/wiki/2017_Equifax_data_breach https://en.wikipedia.org/wiki/2017_Equifax_data_breach
  - fourtrees 5y ago
    She and her co-workers did fuck up badly and were unlucky enough to be under attack from one of the most powerful countries in the world. But to attribute that failure to her having received masters in composing fourteen years before, years she spent as a successful (as far as we know) Security Officer and VP at other financials seems a bit much like scapegoating.
- ratsmack 5y ago
  It's amazing, but they did: https://www.marketwatch.com/story/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer-2017-09-15 https://www.marketwatch.com/story/equifax-ceo-hired-a-music-...
  - detaro 5y ago
    That alone really doesn't mean much. Security has even more than other areas of IT many people with "odd" backgrounds.
    - throwawaygh 5y ago
      Yes, Equifax's ciso was clearly super competent.
      - detaro 5y ago
        I in no way suggested that, please don't pretend I did. We have plenty reason to assume she wasn't.
        throwawaygh 5y ago
        Then I'm not sure what the point of your post was. Software security is a mess in large part because of the phenomenon you describe.
        detaro 5y ago
        > Then I'm not sure what the point of your post was. That "but she has a music degree!" is the least relevant part of evaluating if someone is qualified for such a CISO role or not. Someone with the "wrong" degree but talent and relevant experience would easily beat someone with a fancy "Masters of Information Security" degree that then muddled around in less relevant areas. Focusing on people's degrees is almost always the wrong measure in IT.
        throwawaygh 5y ago
        > Someone with the "wrong" degree but talent and relevant experience would easily beat someone with a fancy "Masters of Information Security" degree that then muddled around in less relevant areas. Sure, totally agreed. > Focusing on people's degrees is almost always the wrong measure in IT. Maybe 20 years ago. (I was there.) Today, asking for exceptional technical depth and a proven track-record of leadership is not a big ask.
throwawayboise 5y ago
None of that information should be considered private any longer, if it ever really was.
- throwawaygh 5y ago
  Well, Equifax still considers it sufficient to claim your identity...

deleted 5y ago

[deleted]

NegativeLatency 5y ago

Might as well do it so you can freeze it, they already have the info

deleted 5y ago

[deleted]

teraflop 5y ago

I dutifully entered everything they asked for, because, you know, they're Equifax and they undoubtedly have it already. Then they said I needed a "verification code" and gave me the option of half a dozen phone numbers and email addresses to choose from... none of which remotely resembled anything I've ever had (the email addresses all contained my surname and appeared to be randomly generated). When I clicked the "none of these work for me" link at the bottom, I was presented with: "Sorry, We are unable to log you in. Your account is temporarily disabled. Accounts may be disabled when you attempt to log in with incorrect information or fail to complete a security challenge."

myself248 5y ago
Same here. Great. I wonder what other lies they believe about me. On the one hand, I'm probably glad the data is shit? But on the other hand, folks consuming the data might not understand that.
- andreyf 5y ago
  Was the email they offered to send the code to f**k@corpdomain.com? I tried this with my current and former employer and got seemingly the same email username "f**k", and seemingly random phone numbers. Another long-time employer had no email at all. Definitely seems they're just making things up.
- gfody 5y ago
  we ought to be able to "correct" our own data and mislead anything seeking an advantage
theanti9 5y ago
This happened to me as well. bunch of random @yahoo addresses (I don't have one of those) and rando phone numbers, none of which were mine. Welp.... who knows wtf they have in there then, I guess.
- divbzero 5y ago
  Could this indicate past attempts by fraudsters to adopt your identity?